@turnkey/http 0.17.0 → 0.18.0

package/dist/__generated__/services/coordinator/public/v1/public_api.swagger.json

@@ -708,6 +708,59 @@
                 }
             }
         },
+        "/public/v1/submit/create_authenticators": {
+            "post": {
+                "summary": "Create Authenticators",
+                "description": "Create Authenticators to authenticate requests to Turnkey",
+                "operationId": "PublicApiService_CreateAuthenticators",
+                "responses": {
+                    "200": {
+                        "description": "A successful response.",
+                        "schema": {
+                            "$ref": "#/definitions/v1ActivityResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Returned when the user does not have permission to access the resource.",
+                        "schema": {}
+                    },
+                    "404": {
+                        "description": "Returned when the resource does not exist.",
+                        "schema": {
+                            "type": "string",
+                            "format": "string"
+                        }
+                    },
+                    "default": {
+                        "description": "An unexpected error response.",
+                        "schema": {
+                            "$ref": "#/definitions/rpcStatus"
+                        }
+                    }
+                },
+                "parameters": [
+                    {
+                        "name": "body",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/v1CreateAuthenticatorsRequest"
+                        }
+                    }
+                ],
+                "tags": ["Authenticators"],
+                "x-readme": {
+                    "code-samples": [
+                        {
+                            "code": "turnkey request --host coordinator-beta.turnkey.io --path /public/v1/submit/create_authenticators --body '{\n\t\"type\": \"ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2\",\n\t\"timestampMs\": \"'\"$(date +%s)\"'000\",\n\t\"organizationId\": \"'\"$ORGANIZATION_ID\"'\",\n\t\"parameters\": {\n\t\t\"userId\": \"\",\n\t\t\"authenticators\": [\n\t\t\t{\n\t\t\t\t\"authenticatorName\": \"\",\n\t\t\t\t\"challenge\": \"\",\n\t\t\t\t\"attestation\": {\n\t\t\t\t\t\"credentialId\": \"\",\n\t\t\t\t\t\"clientDataJson\": \"\",\n\t\t\t\t\t\"attestationObject\": \"\",\n\t\t\t\t\t\"transports\": []\n\t\t\t\t}\n\t\t\t}\n\t\t]\n\t}\n}\n'",
+                            "install": "brew tap tkhq/tap \u0026\u0026 brew install turnkey",
+                            "language": "curl",
+                            "name": "Turnkey CLI"
+                        }
+                    ]
+                }
+            }
+        },
         "/public/v1/submit/create_invitations": {
             "post": {
                 "summary": "Create Invitations",
@@ -867,6 +920,59 @@
                 }
             }
         },
+        "/public/v1/submit/create_sub_organization": {
+            "post": {
+                "summary": "Create Sub-Organization",
+                "description": "Create a new Sub-Organization",
+                "operationId": "PublicApiService_CreateSubOrganization",
+                "responses": {
+                    "200": {
+                        "description": "A successful response.",
+                        "schema": {
+                            "$ref": "#/definitions/v1ActivityResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Returned when the user does not have permission to access the resource.",
+                        "schema": {}
+                    },
+                    "404": {
+                        "description": "Returned when the resource does not exist.",
+                        "schema": {
+                            "type": "string",
+                            "format": "string"
+                        }
+                    },
+                    "default": {
+                        "description": "An unexpected error response.",
+                        "schema": {
+                            "$ref": "#/definitions/rpcStatus"
+                        }
+                    }
+                },
+                "parameters": [
+                    {
+                        "name": "body",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/v1CreateSubOrganizationRequest"
+                        }
+                    }
+                ],
+                "tags": ["Organizations"],
+                "x-readme": {
+                    "code-samples": [
+                        {
+                            "code": "turnkey request --host coordinator-beta.turnkey.io --path /public/v1/submit/create_sub_organization --body '{\n\t\"timestampMs\": \"'\"$(date +%s)\"'000\",\n\t\"type\": \"ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION\",\n\t\"organizationId\": \"'\"$ORGANIZATION_ID\"'\",\n\t\"parameters\": {\n\t\t\"name\": \"\",\n\t\t\"rootAuthenticator\": {\n\t\t\t\"authenticatorName\": \"\",\n\t\t\t\"challenge\":\"\",\n\t\t\t\"attestation\":{\n\t\t\t\t\"credentialId\":\"\",\n\t\t\t\t\"clientDataJson\":\"\",\n\t\t\t\t\"attestationObject\":\"\",\n\t\t\t\t\"transports\":[],\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}'",
+                            "install": "brew tap tkhq/tap \u0026\u0026 brew install turnkey",
+                            "language": "curl",
+                            "name": "Turnkey CLI"
+                        }
+                    ]
+                }
+            }
+        },
         "/public/v1/submit/create_users": {
             "post": {
                 "summary": "Create Users",
@@ -1292,6 +1398,59 @@
                 }
             }
         },
+        "/public/v1/submit/update_root_quorum": {
+            "post": {
+                "summary": "Set the root quorum",
+                "description": "Set the threshold and members of the root quorum. This must be approved by the current root quorum.",
+                "operationId": "PublicApiService_UpdateRootQuorum",
+                "responses": {
+                    "200": {
+                        "description": "A successful response.",
+                        "schema": {
+                            "$ref": "#/definitions/v1ActivityResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Returned when the user does not have permission to access the resource.",
+                        "schema": {}
+                    },
+                    "404": {
+                        "description": "Returned when the resource does not exist.",
+                        "schema": {
+                            "type": "string",
+                            "format": "string"
+                        }
+                    },
+                    "default": {
+                        "description": "An unexpected error response.",
+                        "schema": {
+                            "$ref": "#/definitions/rpcStatus"
+                        }
+                    }
+                },
+                "parameters": [
+                    {
+                        "name": "body",
+                        "in": "body",
+                        "required": true,
+                        "schema": {
+                            "$ref": "#/definitions/v1UpdateRootQuorumRequest"
+                        }
+                    }
+                ],
+                "tags": ["Root Quorum"],
+                "x-readme": {
+                    "code-samples": [
+                        {
+                            "code": "turnkey request --host coordinator-beta.turnkey.io --path /public/v1/submit/update_root_quorum --body '{\n\t\"timestampMs\": \"'\"$(date +%s)\"'000\",\n\t\"type\": \"UPDATE_ROOT_QUORUM\",\n\t\"organizationId\": \"'\"$ORGANIZATION_ID\"'\",\n\t\"parameters\": {\n\t\t\"userIds\": \"'\"$USER_IDS\"'\",\n\t\t\"threshold\": $THRESHOLD,\n\t\t\"type\": \"\"\n\t}\n}'",
+                            "install": "brew tap tkhq/tap \u0026\u0026 brew install turnkey",
+                            "language": "curl",
+                            "name": "Turnkey CLI"
+                        }
+                    ]
+                }
+            }
+        },
         "/public/v1/submit/update_user_tag": {
             "post": {
                 "summary": "Update User Tag",
@@ -1345,6 +1504,38 @@
                 }
             }
         },
+        "/tkhq/api/v1/noop-codegen-anchor": {
+            "post": {
+                "summary": "This route does nothing and does not need an implementation, but please don't remove it.\nIt's used at compile time for generating extra OpenAPI/TypeScript types\nthat are not directly referenced in requests.",
+                "operationId": "PublicApiService_NOOPCodegenAnchor",
+                "responses": {
+                    "200": {
+                        "description": "A successful response.",
+                        "schema": {
+                            "$ref": "#/definitions/v1NOOPCodegenAnchorResponse"
+                        }
+                    },
+                    "403": {
+                        "description": "Returned when the user does not have permission to access the resource.",
+                        "schema": {}
+                    },
+                    "404": {
+                        "description": "Returned when the resource does not exist.",
+                        "schema": {
+                            "type": "string",
+                            "format": "string"
+                        }
+                    },
+                    "default": {
+                        "description": "An unexpected error response.",
+                        "schema": {
+                            "$ref": "#/definitions/rpcStatus"
+                        }
+                    }
+                },
+                "tags": ["PublicApiService"]
+            }
+        },
         "/tkhq/public/v1/query/get_private_key": {
             "post": {
                 "summary": "Get Private Key",
@@ -1617,6 +1808,25 @@
             },
             "required": ["invitationId", "userId", "authenticator"]
         },
+        "v1AcceptInvitationIntentV2": {
+            "type": "object",
+            "properties": {
+                "invitationId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given Invitation object.",
+                    "title": "@inject_tag: validate:\"required,uuid\""
+                },
+                "userId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given User.",
+                    "title": "@inject_tag: validate:\"required,uuid\""
+                },
+                "authenticator": {
+                    "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                }
+            },
+            "required": ["invitationId", "userId", "authenticator"]
+        },
         "v1AcceptInvitationResult": {
             "type": "object",
             "properties": {
@@ -1770,7 +1980,13 @@
                 "ACTIVITY_TYPE_CREATE_API_ONLY_USERS",
                 "ACTIVITY_TYPE_UPDATE_ROOT_QUORUM",
                 "ACTIVITY_TYPE_UPDATE_USER_TAG",
-                "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG"
+                "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG",
+                "ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2",
+                "ACTIVITY_TYPE_CREATE_ORGANIZATION_V2",
+                "ACTIVITY_TYPE_CREATE_USERS_V2",
+                "ACTIVITY_TYPE_ACCEPT_INVITATION_V2",
+                "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION",
+                "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2"
             ],
             "description": "Type of Activity, such as Add User, or Sign Transaction."
         },
@@ -1883,6 +2099,39 @@
             },
             "required": ["type", "timestampMs", "organizationId", "parameters"]
         },
+        "v1Attestation": {
+            "type": "object",
+            "properties": {
+                "credentialId": {
+                    "type": "string",
+                    "description": "The cbor encoded then base64 url encoded id of the credential.",
+                    "title": "@inject_tag: validate:\"required,max=256\""
+                },
+                "clientDataJson": {
+                    "type": "string",
+                    "description": "A base64 url encoded payload containing metadata about the signing context and the challenge.",
+                    "title": "@inject_tag: validate:\"required\""
+                },
+                "attestationObject": {
+                    "type": "string",
+                    "description": "A base64 url encoded payload containing authenticator data and any attestation the webauthn provider chooses.",
+                    "title": "@inject_tag: validate:\"required\""
+                },
+                "transports": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/immutablewebauthnv1AuthenticatorTransport"
+                    },
+                    "description": "The type of authenticator transports."
+                }
+            },
+            "required": [
+                "credentialId",
+                "clientDataJson",
+                "attestationObject",
+                "transports"
+            ]
+        },
         "v1Authenticator": {
             "type": "object",
             "properties": {
@@ -1900,10 +2149,6 @@
                     "type": "string",
                     "description": "Identifier indicating the type of the Security Key."
                 },
-                "userId": {
-                    "type": "string",
-                    "description": "Unique identifier for a given User."
-                },
                 "credentialId": {
                     "type": "string",
                     "description": "Unique identifier for a WebAuthn credential."
@@ -1934,7 +2179,6 @@
                 "transports",
                 "attestationType",
                 "aaguid",
-                "userId",
                 "credentialId",
                 "model",
                 "credential",
@@ -1993,6 +2237,25 @@
             },
             "required": ["authenticatorName", "userId", "attestation", "challenge"]
         },
+        "v1AuthenticatorParamsV2": {
+            "type": "object",
+            "properties": {
+                "authenticatorName": {
+                    "type": "string",
+                    "description": "Human-readable name for an Authenticator.",
+                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                },
+                "challenge": {
+                    "type": "string",
+                    "description": "Challenge presented for authentication purposes.",
+                    "title": "@inject_tag: validate:\"required,max=256\""
+                },
+                "attestation": {
+                    "$ref": "#/definitions/v1Attestation"
+                }
+            },
+            "required": ["authenticatorName", "challenge", "attestation"]
+        },
         "v1CreateApiKeysIntent": {
             "type": "object",
             "properties": {
@@ -2113,6 +2376,46 @@
             },
             "required": ["authenticators", "userId"]
         },
+        "v1CreateAuthenticatorsIntentV2": {
+            "type": "object",
+            "properties": {
+                "authenticators": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                    },
+                    "description": "A list of Authenticators.",
+                    "title": "@inject_tag: validate:\"dive,required\""
+                },
+                "userId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given User.",
+                    "title": "@inject_tag: validate:\"required,uuid\""
+                }
+            },
+            "required": ["authenticators", "userId"]
+        },
+        "v1CreateAuthenticatorsRequest": {
+            "type": "object",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "enum": ["ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2"]
+                },
+                "timestampMs": {
+                    "type": "string",
+                    "description": "Timestamp (in milliseconds) of the request, used to verify liveness of user requests."
+                },
+                "organizationId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given Organization."
+                },
+                "parameters": {
+                    "$ref": "#/definitions/v1CreateAuthenticatorsIntentV2"
+                }
+            },
+            "required": ["type", "timestampMs", "organizationId", "parameters"]
+        },
         "v1CreateAuthenticatorsResult": {
             "type": "object",
             "properties": {
@@ -2198,6 +2501,30 @@
             },
             "required": ["organizationName", "rootEmail", "rootAuthenticator"]
         },
+        "v1CreateOrganizationIntentV2": {
+            "type": "object",
+            "properties": {
+                "organizationName": {
+                    "type": "string",
+                    "description": "Human-readable name for an Organization.",
+                    "title": "@inject_tag: validate:\"required,tk_label_length\""
+                },
+                "rootEmail": {
+                    "type": "string",
+                    "description": "The root user's email address.",
+                    "title": "@inject_tag: validate:\"required,email,tk_email\""
+                },
+                "rootAuthenticator": {
+                    "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                },
+                "rootUserId": {
+                    "type": "string",
+                    "description": "Unique identifier for the root user object.",
+                    "title": "@inject_tag: validate:\"uuid\""
+                }
+            },
+            "required": ["organizationName", "rootEmail", "rootAuthenticator"]
+        },
         "v1CreateOrganizationResult": {
             "type": "object",
             "properties": {
@@ -2398,6 +2725,75 @@
             },
             "required": ["privateKeyIds"]
         },
+        "v1CreateSubOrganizationIntent": {
+            "type": "object",
+            "properties": {
+                "name": {
+                    "type": "string",
+                    "description": "Name for this sub-organization",
+                    "title": "@inject_tag: validate:\"omitempty,tk_label,tk_label_length\""
+                },
+                "rootAuthenticator": {
+                    "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                }
+            },
+            "required": ["name", "rootAuthenticator"]
+        },
+        "v1CreateSubOrganizationIntentV2": {
+            "type": "object",
+            "properties": {
+                "subOrganizationName": {
+                    "type": "string",
+                    "description": "Name for this sub-organization",
+                    "title": "@inject_tag: validate:\"omitempty,tk_label,tk_label_length\""
+                },
+                "rootUsers": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/v1RootUserParams"
+                    },
+                    "description": "Root users to create within this sub-organization",
+                    "title": "@inject_tag: validate:\"required\""
+                },
+                "rootQuorumThreshold": {
+                    "type": "integer",
+                    "format": "int32",
+                    "description": "The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users",
+                    "title": "@inject_tag: validate:\"required\""
+                }
+            },
+            "required": ["subOrganizationName", "rootUsers", "rootQuorumThreshold"]
+        },
+        "v1CreateSubOrganizationRequest": {
+            "type": "object",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "enum": ["ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2"]
+                },
+                "timestampMs": {
+                    "type": "string",
+                    "description": "Timestamp (in milliseconds) of the request, used to verify liveness of user requests."
+                },
+                "organizationId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given Organization."
+                },
+                "parameters": {
+                    "$ref": "#/definitions/v1CreateSubOrganizationIntentV2"
+                }
+            },
+            "required": ["type", "timestampMs", "organizationId", "parameters"]
+        },
+        "v1CreateSubOrganizationResult": {
+            "type": "object",
+            "properties": {
+                "subOrganizationId": {
+                    "type": "string"
+                }
+            },
+            "required": ["subOrganizationId"]
+        },
         "v1CreateUserTagIntent": {
             "type": "object",
             "properties": {
@@ -2448,12 +2844,26 @@
             },
             "required": ["users"]
         },
+        "v1CreateUsersIntentV2": {
+            "type": "object",
+            "properties": {
+                "users": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/v1UserParamsV2"
+                    },
+                    "description": "A list of Users.",
+                    "title": "@inject_tag: validate:\"required,dive,required\""
+                }
+            },
+            "required": ["users"]
+        },
         "v1CreateUsersRequest": {
             "type": "object",
             "properties": {
                 "type": {
                     "type": "string",
-                    "enum": ["ACTIVITY_TYPE_CREATE_USERS"]
+                    "enum": ["ACTIVITY_TYPE_CREATE_USERS_V2"]
                 },
                 "timestampMs": {
                     "type": "string",
@@ -2464,7 +2874,7 @@
                     "description": "Unique identifier for a given Organization."
                 },
                 "parameters": {
-                    "$ref": "#/definitions/v1CreateUsersIntent"
+                    "$ref": "#/definitions/v1CreateUsersIntentV2"
                 }
             },
             "required": ["type", "timestampMs", "organizationId", "parameters"]
@@ -3181,6 +3591,24 @@
                 },
                 "updatePrivateKeyTagIntent": {
                     "$ref": "#/definitions/v1UpdatePrivateKeyTagIntent"
+                },
+                "createAuthenticatorsIntentV2": {
+                    "$ref": "#/definitions/v1CreateAuthenticatorsIntentV2"
+                },
+                "acceptInvitationIntentV2": {
+                    "$ref": "#/definitions/v1AcceptInvitationIntentV2"
+                },
+                "createOrganizationIntentV2": {
+                    "$ref": "#/definitions/v1CreateOrganizationIntentV2"
+                },
+                "createUsersIntentV2": {
+                    "$ref": "#/definitions/v1CreateUsersIntentV2"
+                },
+                "createSubOrganizationIntent": {
+                    "$ref": "#/definitions/v1CreateSubOrganizationIntent"
+                },
+                "createSubOrganizationIntentV2": {
+                    "$ref": "#/definitions/v1CreateSubOrganizationIntentV2"
                 }
             },
             "description": "Intent object crafted by Turnkey based on the user request, used to assess the permissibility of an action.",
@@ -3283,6 +3711,15 @@
                 "INVITATION_STATUS_REVOKED"
             ]
         },
+        "v1NOOPCodegenAnchorResponse": {
+            "type": "object",
+            "properties": {
+                "stamp": {
+                    "$ref": "#/definitions/v1WebAuthnStamp"
+                }
+            },
+            "required": ["stamp"]
+        },
         "v1OrganizationData": {
             "type": "object",
             "properties": {
@@ -3322,47 +3759,14 @@
                         "$ref": "#/definitions/datav1Tag"
                     }
                 },
-                "deletedUsers": {
-                    "type": "array",
-                    "items": {
-                        "$ref": "#/definitions/v1User"
-                    }
-                },
-                "deletedPolicies": {
-                    "type": "array",
-                    "items": {
-                        "$ref": "#/definitions/v1Policy"
-                    }
-                },
                 "disabledPrivateKeys": {
                     "type": "array",
                     "items": {
                         "$ref": "#/definitions/v1PrivateKey"
                     }
                 },
-                "deletedInvitations": {
-                    "type": "array",
-                    "items": {
-                        "$ref": "#/definitions/v1Invitation"
-                    }
-                },
-                "deletedApiKeys": {
-                    "type": "array",
-                    "items": {
-                        "$ref": "#/definitions/v1ApiKey"
-                    }
-                },
-                "deletedAuthenticators": {
-                    "type": "array",
-                    "items": {
-                        "$ref": "#/definitions/v1Authenticator"
-                    }
-                },
-                "deletedTags": {
-                    "type": "array",
-                    "items": {
-                        "$ref": "#/definitions/datav1Tag"
-                    }
+                "rootQuorum": {
+                    "$ref": "#/definitions/v1Quorum"
                 }
             },
             "description": "This proto definition is used in our external-facing APIs.\nIt's important to leverage annotations because they're used in our external interfaces."
@@ -3552,6 +3956,24 @@
             },
             "required": ["id", "type", "rawId", "response", "clientExtensionResults"]
         },
+        "v1Quorum": {
+            "type": "object",
+            "properties": {
+                "threshold": {
+                    "type": "integer",
+                    "format": "int32",
+                    "description": "Count of unique approvals required to meet quorum."
+                },
+                "userIds": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    },
+                    "description": "Unique identifiers of quorum set members."
+                }
+            },
+            "required": ["threshold", "userIds"]
+        },
         "v1RejectActivityIntent": {
             "type": "object",
             "properties": {
@@ -3670,10 +4092,45 @@
                 },
                 "updatePrivateKeyTagResult": {
                     "$ref": "#/definitions/v1UpdatePrivateKeyTagResult"
+                },
+                "createSubOrganizationResult": {
+                    "$ref": "#/definitions/v1CreateSubOrganizationResult"
                 }
             },
             "description": "Result of the intended action."
         },
+        "v1RootUserParams": {
+            "type": "object",
+            "properties": {
+                "userName": {
+                    "type": "string",
+                    "description": "Human-readable name for a User.",
+                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                },
+                "userEmail": {
+                    "type": "string",
+                    "description": "The user's email address.",
+                    "title": "@inject_tag: validate:\"omitempty,email,tk_email\""
+                },
+                "apiKeys": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/v1ApiKeyParams"
+                    },
+                    "description": "A list of API Key parameters.",
+                    "title": "@inject_tag: validate:\"dive\""
+                },
+                "authenticators": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                    },
+                    "description": "A list of Authenticator parameters.",
+                    "title": "@inject_tag: validate:\"dive\""
+                }
+            },
+            "required": ["userName", "apiKeys", "authenticators"]
+        },
         "v1SelectorV2": {
             "type": "object",
             "properties": {
@@ -3970,11 +4427,32 @@
                         "type": "string"
                     },
                     "description": "The unique identifiers of users who comprise the quorum set.",
-                    "title": "@inject_tag: validate:\"required,uuid\""
+                    "title": "@inject_tag: validate:\"dive,uuid\""
                 }
             },
             "required": ["threshold", "userIds"]
         },
+        "v1UpdateRootQuorumRequest": {
+            "type": "object",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "enum": ["ACTIVITY_TYPE_UPDATE_ROOT_QUORUM"]
+                },
+                "timestampMs": {
+                    "type": "string",
+                    "description": "Timestamp (in milliseconds) of the request, used to verify liveness of user requests."
+                },
+                "organizationId": {
+                    "type": "string",
+                    "description": "Unique identifier for a given Organization."
+                },
+                "parameters": {
+                    "$ref": "#/definitions/v1UpdateRootQuorumIntent"
+                }
+            },
+            "required": ["type", "timestampMs", "organizationId", "parameters"]
+        },
         "v1UpdateRootQuorumResult": {
             "type": "object"
         },
@@ -4148,6 +4626,55 @@
                 "userTags"
             ]
         },
+        "v1UserParamsV2": {
+            "type": "object",
+            "properties": {
+                "userName": {
+                    "type": "string",
+                    "description": "Human-readable name for a User.",
+                    "title": "@inject_tag: validate:\"required,tk_label_length,tk_label\""
+                },
+                "userEmail": {
+                    "type": "string",
+                    "description": "The user's email address.",
+                    "title": "@inject_tag: validate:\"omitempty,email,tk_email\""
+                },
+                "accessType": {
+                    "$ref": "#/definitions/immutableactivityv1AccessType"
+                },
+                "apiKeys": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/v1ApiKeyParams"
+                    },
+                    "description": "A list of API Key parameters.",
+                    "title": "@inject_tag: validate:\"dive,uuid\""
+                },
+                "authenticators": {
+                    "type": "array",
+                    "items": {
+                        "$ref": "#/definitions/v1AuthenticatorParamsV2"
+                    },
+                    "description": "A list of Authenticator parameters.",
+                    "title": "@inject_tag: validate:\"dive\""
+                },
+                "userTags": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    },
+                    "description": "A list of User Tag IDs.",
+                    "title": "@inject_tag: validate:\"dive,uuid\""
+                }
+            },
+            "required": [
+                "userName",
+                "accessType",
+                "apiKeys",
+                "authenticators",
+                "userTags"
+            ]
+        },
         "v1Vote": {
             "type": "object",
             "properties": {
@@ -4203,6 +4730,34 @@
                 "scheme",
                 "createdAt"
             ]
+        },
+        "v1WebAuthnStamp": {
+            "type": "object",
+            "properties": {
+                "credentialId": {
+                    "type": "string",
+                    "description": "A base64 url encoded Unique identifier for a given credential."
+                },
+                "clientDataJson": {
+                    "type": "string",
+                    "description": "A base64 encoded payload containing metadata about the signing context and the challenge."
+                },
+                "authenticatorData": {
+                    "type": "string",
+                    "description": "A base64 encoded payload containing metadata about the authenticator."
+                },
+                "signature": {
+                    "type": "string",
+                    "description": "The base64 url encoded signature bytes contained within the WebAuthn assertion response."
+                }
+            },
+            "title": "We expect this to be passed in as a JSON-encoded, then base64-encoded string within a X-Stamp-Webauthn header",
+            "required": [
+                "credentialId",
+                "clientDataJson",
+                "authenticatorData",
+                "signature"
+            ]
         }
     },
     "securityDefinitions": {