@turnkey/http 2.10.0 → 2.12.0

package/dist/__generated__/services/coordinator/public/v1/public_api.types.d.ts

@@ -15,6 +15,10 @@ export type paths = {
         /** Get details about API keys for a user */
         post: operations["PublicApiService_GetApiKeys"];
     };
+    "/public/v1/query/get_attestation": {
+        /** Get the attestation document corresponding to an enclave. */
+        post: operations["PublicApiService_GetAttestationDocument"];
+    };
     "/public/v1/query/get_authenticator": {
         /** Get details about an authenticator */
         post: operations["PublicApiService_GetAuthenticator"];
@@ -23,10 +27,18 @@ export type paths = {
         /** Get details about authenticators for a user */
         post: operations["PublicApiService_GetAuthenticators"];
     };
+    "/public/v1/query/get_oauth_providers": {
+        /** Get details about Oauth providers for a user */
+        post: operations["PublicApiService_GetOauthProviders"];
+    };
     "/public/v1/query/get_organization": {
         /** Get details about an Organization */
         post: operations["PublicApiService_GetOrganization"];
     };
+    "/public/v1/query/get_organization_configs": {
+        /** Get quorum settings and features for an organization */
+        post: operations["PublicApiService_GetOrganizationConfigs"];
+    };
     "/public/v1/query/get_policy": {
         /** Get details about a Policy */
         post: operations["PublicApiService_GetPolicy"];
@@ -103,6 +115,10 @@ export type paths = {
         /** Create Invitations to join an existing Organization */
         post: operations["PublicApiService_CreateInvitations"];
     };
+    "/public/v1/submit/create_oauth_providers": {
+        /** Creates Oauth providers for a specified user - BETA */
+        post: operations["PublicApiService_CreateOauthProviders"];
+    };
     "/public/v1/submit/create_policies": {
         /** Create new Policies */
         post: operations["PublicApiService_CreatePolicies"];
@@ -119,6 +135,14 @@ export type paths = {
         /** Create new Private Keys */
         post: operations["PublicApiService_CreatePrivateKeys"];
     };
+    "/public/v1/submit/create_read_only_session": {
+        /** Create a read only session for a user (valid for 1 hour) */
+        post: operations["PublicApiService_CreateReadOnlySession"];
+    };
+    "/public/v1/submit/create_read_write_session": {
+        /** Create a read write session for a user */
+        post: operations["PublicApiService_CreateReadWriteSession"];
+    };
     "/public/v1/submit/create_sub_organization": {
         /** Create a new Sub-Organization */
         post: operations["PublicApiService_CreateSubOrganization"];
@@ -151,6 +175,10 @@ export type paths = {
         /** Delete an existing Invitation */
         post: operations["PublicApiService_DeleteInvitation"];
     };
+    "/public/v1/submit/delete_oauth_providers": {
+        /** Removes Oauth providers for a specified user - BETA */
+        post: operations["PublicApiService_DeleteOauthProviders"];
+    };
     "/public/v1/submit/delete_policy": {
         /** Delete an existing Policy */
         post: operations["PublicApiService_DeletePolicy"];
@@ -203,6 +231,10 @@ export type paths = {
         /** Initializes a new email recovery */
         post: operations["PublicApiService_InitUserEmailRecovery"];
     };
+    "/public/v1/submit/oauth": {
+        /** Authenticate a user with an Oidc token (Oauth) - BETA */
+        post: operations["PublicApiService_Oauth"];
+    };
     "/public/v1/submit/recover_user": {
         /** Completes the process of recovering a user by adding an authenticator */
         post: operations["PublicApiService_RecoverUser"];
@@ -355,6 +387,8 @@ export type definitions = {
         canReject: boolean;
         createdAt: definitions["externaldatav1Timestamp"];
         updatedAt: definitions["externaldatav1Timestamp"];
+        /** @description Failure reason of the intended action. */
+        failure?: definitions["rpcStatus"];
     };
     v1ActivityResponse: {
         /** @description An action that can that can be taken within the Turnkey infrastructure. */
@@ -363,7 +397,7 @@ export type definitions = {
     /** @enum {string} */
     v1ActivityStatus: "ACTIVITY_STATUS_CREATED" | "ACTIVITY_STATUS_PENDING" | "ACTIVITY_STATUS_COMPLETED" | "ACTIVITY_STATUS_FAILED" | "ACTIVITY_STATUS_CONSENSUS_NEEDED" | "ACTIVITY_STATUS_REJECTED";
     /** @enum {string} */
-    v1ActivityType: "ACTIVITY_TYPE_CREATE_API_KEYS" | "ACTIVITY_TYPE_CREATE_USERS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD" | "ACTIVITY_TYPE_CREATE_INVITATIONS" | "ACTIVITY_TYPE_ACCEPT_INVITATION" | "ACTIVITY_TYPE_CREATE_POLICY" | "ACTIVITY_TYPE_DISABLE_PRIVATE_KEY" | "ACTIVITY_TYPE_DELETE_USERS" | "ACTIVITY_TYPE_DELETE_API_KEYS" | "ACTIVITY_TYPE_DELETE_INVITATION" | "ACTIVITY_TYPE_DELETE_ORGANIZATION" | "ACTIVITY_TYPE_DELETE_POLICY" | "ACTIVITY_TYPE_CREATE_USER_TAG" | "ACTIVITY_TYPE_DELETE_USER_TAGS" | "ACTIVITY_TYPE_CREATE_ORGANIZATION" | "ACTIVITY_TYPE_SIGN_TRANSACTION" | "ACTIVITY_TYPE_APPROVE_ACTIVITY" | "ACTIVITY_TYPE_REJECT_ACTIVITY" | "ACTIVITY_TYPE_DELETE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEY_TAGS" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD" | "ACTIVITY_TYPE_ACTIVATE_BILLING_TIER" | "ACTIVITY_TYPE_DELETE_PAYMENT_METHOD" | "ACTIVITY_TYPE_CREATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_POLICY_V3" | "ACTIVITY_TYPE_CREATE_API_ONLY_USERS" | "ACTIVITY_TYPE_UPDATE_ROOT_QUORUM" | "ACTIVITY_TYPE_UPDATE_USER_TAG" | "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2" | "ACTIVITY_TYPE_CREATE_ORGANIZATION_V2" | "ACTIVITY_TYPE_CREATE_USERS_V2" | "ACTIVITY_TYPE_ACCEPT_INVITATION_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2" | "ACTIVITY_TYPE_UPDATE_ALLOWED_ORIGINS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS_V2" | "ACTIVITY_TYPE_UPDATE_USER" | "ACTIVITY_TYPE_UPDATE_POLICY" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V3" | "ACTIVITY_TYPE_CREATE_WALLET" | "ACTIVITY_TYPE_CREATE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY" | "ACTIVITY_TYPE_RECOVER_USER" | "ACTIVITY_TYPE_SET_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_REMOVE_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2" | "ACTIVITY_TYPE_SIGN_TRANSACTION_V2" | "ACTIVITY_TYPE_EXPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_EXPORT_WALLET" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V4" | "ACTIVITY_TYPE_EMAIL_AUTH" | "ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT" | "ACTIVITY_TYPE_INIT_IMPORT_WALLET" | "ACTIVITY_TYPE_IMPORT_WALLET" | "ACTIVITY_TYPE_INIT_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_CREATE_POLICIES" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOADS";
+    v1ActivityType: "ACTIVITY_TYPE_CREATE_API_KEYS" | "ACTIVITY_TYPE_CREATE_USERS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD" | "ACTIVITY_TYPE_CREATE_INVITATIONS" | "ACTIVITY_TYPE_ACCEPT_INVITATION" | "ACTIVITY_TYPE_CREATE_POLICY" | "ACTIVITY_TYPE_DISABLE_PRIVATE_KEY" | "ACTIVITY_TYPE_DELETE_USERS" | "ACTIVITY_TYPE_DELETE_API_KEYS" | "ACTIVITY_TYPE_DELETE_INVITATION" | "ACTIVITY_TYPE_DELETE_ORGANIZATION" | "ACTIVITY_TYPE_DELETE_POLICY" | "ACTIVITY_TYPE_CREATE_USER_TAG" | "ACTIVITY_TYPE_DELETE_USER_TAGS" | "ACTIVITY_TYPE_CREATE_ORGANIZATION" | "ACTIVITY_TYPE_SIGN_TRANSACTION" | "ACTIVITY_TYPE_APPROVE_ACTIVITY" | "ACTIVITY_TYPE_REJECT_ACTIVITY" | "ACTIVITY_TYPE_DELETE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEY_TAGS" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD" | "ACTIVITY_TYPE_ACTIVATE_BILLING_TIER" | "ACTIVITY_TYPE_DELETE_PAYMENT_METHOD" | "ACTIVITY_TYPE_CREATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_POLICY_V3" | "ACTIVITY_TYPE_CREATE_API_ONLY_USERS" | "ACTIVITY_TYPE_UPDATE_ROOT_QUORUM" | "ACTIVITY_TYPE_UPDATE_USER_TAG" | "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2" | "ACTIVITY_TYPE_CREATE_ORGANIZATION_V2" | "ACTIVITY_TYPE_CREATE_USERS_V2" | "ACTIVITY_TYPE_ACCEPT_INVITATION_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2" | "ACTIVITY_TYPE_UPDATE_ALLOWED_ORIGINS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS_V2" | "ACTIVITY_TYPE_UPDATE_USER" | "ACTIVITY_TYPE_UPDATE_POLICY" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V3" | "ACTIVITY_TYPE_CREATE_WALLET" | "ACTIVITY_TYPE_CREATE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY" | "ACTIVITY_TYPE_RECOVER_USER" | "ACTIVITY_TYPE_SET_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_REMOVE_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2" | "ACTIVITY_TYPE_SIGN_TRANSACTION_V2" | "ACTIVITY_TYPE_EXPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_EXPORT_WALLET" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V4" | "ACTIVITY_TYPE_EMAIL_AUTH" | "ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT" | "ACTIVITY_TYPE_INIT_IMPORT_WALLET" | "ACTIVITY_TYPE_IMPORT_WALLET" | "ACTIVITY_TYPE_INIT_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_CREATE_POLICIES" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOADS" | "ACTIVITY_TYPE_CREATE_READ_ONLY_SESSION" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_DELETE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V5" | "ACTIVITY_TYPE_OAUTH" | "ACTIVITY_TYPE_CREATE_API_KEYS_V2" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION" | "ACTIVITY_TYPE_EMAIL_AUTH_V2";
     /** @enum {string} */
     v1AddressFormat: "ADDRESS_FORMAT_UNCOMPRESSED" | "ADDRESS_FORMAT_COMPRESSED" | "ADDRESS_FORMAT_ETHEREUM" | "ADDRESS_FORMAT_SOLANA" | "ADDRESS_FORMAT_COSMOS" | "ADDRESS_FORMAT_TRON";
     v1ApiKey: {
@@ -381,6 +415,8 @@ export type definitions = {
          */
         expirationSeconds?: string;
     };
+    /** @enum {string} */
+    v1ApiKeyCurve: "API_KEY_CURVE_P256" | "API_KEY_CURVE_SECP256K1";
     v1ApiKeyParams: {
         /** @description Human-readable name for an API Key. */
         apiKeyName: string;
@@ -389,6 +425,16 @@ export type definitions = {
         /** @description Optional window (in seconds) indicating how long the API Key should last. */
         expirationSeconds?: string;
     };
+    v1ApiKeyParamsV2: {
+        /** @description Human-readable name for an API Key. */
+        apiKeyName: string;
+        /** @description The public component of a cryptographic key pair used to sign messages and transactions. */
+        publicKey: string;
+        /** @description The curve type to be used for processing API key signatures. */
+        curveType: definitions["v1ApiKeyCurve"];
+        /** @description Optional window (in seconds) indicating how long the API Key should last. */
+        expirationSeconds?: string;
+    };
     v1ApiOnlyUserParams: {
         /** @description The name of the new API-only User. */
         userName: string;
@@ -467,20 +513,30 @@ export type definitions = {
     };
     /** @enum {string} */
     v1AuthenticatorTransport: "AUTHENTICATOR_TRANSPORT_BLE" | "AUTHENTICATOR_TRANSPORT_INTERNAL" | "AUTHENTICATOR_TRANSPORT_NFC" | "AUTHENTICATOR_TRANSPORT_USB" | "AUTHENTICATOR_TRANSPORT_HYBRID";
+    v1Config: {
+        features?: definitions["v1Feature"][];
+        quorum?: definitions["externaldatav1Quorum"];
+    };
     v1CreateApiKeysIntent: {
         /** @description A list of API Keys. */
         apiKeys: definitions["v1ApiKeyParams"][];
         /** @description Unique identifier for a given User. */
         userId: string;
     };
+    v1CreateApiKeysIntentV2: {
+        /** @description A list of API Keys. */
+        apiKeys: definitions["v1ApiKeyParamsV2"][];
+        /** @description Unique identifier for a given User. */
+        userId: string;
+    };
     v1CreateApiKeysRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_CREATE_API_KEYS";
+        type: "ACTIVITY_TYPE_CREATE_API_KEYS_V2";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1CreateApiKeysIntent"];
+        parameters: definitions["v1CreateApiKeysIntentV2"];
     };
     v1CreateApiKeysResult: {
         /** @description A list of API Key IDs. */
@@ -545,6 +601,25 @@ export type definitions = {
         /** @description A list of Invitation IDs */
         invitationIds: string[];
     };
+    v1CreateOauthProvidersIntent: {
+        /** @description The ID of the User to add an Oauth provider to */
+        userId: string;
+        /** @description A list of Oauth providers. */
+        oauthProviders: definitions["v1OauthProviderParams"][];
+    };
+    v1CreateOauthProvidersRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1CreateOauthProvidersIntent"];
+    };
+    v1CreateOauthProvidersResult: {
+        /** @description A list of unique identifiers for Oauth Providers */
+        providerIds: string[];
+    };
     v1CreateOrganizationIntent: {
         /** @description Human-readable name for an Organization. */
         organizationName: string;
@@ -674,6 +749,68 @@ export type definitions = {
         /** @description A list of Private Key IDs and addresses. */
         privateKeys: definitions["v1PrivateKeyResult"][];
     };
+    v1CreateReadOnlySessionIntent: {
+        [key: string]: unknown;
+    };
+    v1CreateReadOnlySessionRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_CREATE_READ_ONLY_SESSION";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1CreateReadOnlySessionIntent"];
+    };
+    v1CreateReadOnlySessionResult: {
+        /** @description Unique identifier for a given Organization. If the request is being made by a user and their Sub-Organization ID is unknown, this can be the Parent Organization ID. However, using the Sub-Organization ID is preferred due to performance reasons. */
+        organizationId: string;
+        /** @description Human-readable name for an Organization. */
+        organizationName: string;
+        /** @description Unique identifier for a given User. */
+        userId: string;
+        /** @description Human-readable name for a User. */
+        username: string;
+        /** @description String representing a read only session */
+        session: string;
+        /**
+         * Format: uint64
+         * @description UTC timestamp in seconds representing the expiry time for the read only session.
+         */
+        sessionExpiry: string;
+    };
+    v1CreateReadWriteSessionIntent: {
+        /** @description Client-side public key generated by the user, to which the read write session bundle (credentials) will be encrypted. */
+        targetPublicKey: string;
+        /** @description Email of the user to create a read write session for */
+        email: string;
+        /** @description Optional human-readable name for an API Key. If none provided, default to Read Write Session - <Timestamp> */
+        apiKeyName?: string;
+        /** @description Expiration window (in seconds) indicating how long the API key is valid. If not provided, a default of 15 minutes will be used. */
+        expirationSeconds?: string;
+    };
+    v1CreateReadWriteSessionRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1CreateReadWriteSessionIntent"];
+    };
+    v1CreateReadWriteSessionResult: {
+        /** @description Unique identifier for a given Organization. If the request is being made by a user and their Sub-Organization ID is unknown, this can be the Parent Organization ID. However, using the Sub-Organization ID is preferred due to performance reasons. */
+        organizationId: string;
+        /** @description Human-readable name for an Organization. */
+        organizationName: string;
+        /** @description Unique identifier for a given User. */
+        userId: string;
+        /** @description Human-readable name for a User. */
+        username: string;
+        /** @description Unique identifier for the created API key. */
+        apiKeyId: string;
+        /** @description HPKE encrypted credential bundle */
+        credentialBundle: string;
+    };
     v1CreateSubOrganizationIntent: {
         /** @description Name for this sub-organization */
         name: string;
@@ -721,14 +858,31 @@ export type definitions = {
         /** @description Disable email auth for the sub-organization */
         disableEmailAuth?: boolean;
     };
+    v1CreateSubOrganizationIntentV5: {
+        /** @description Name for this sub-organization */
+        subOrganizationName: string;
+        /** @description Root users to create within this sub-organization */
+        rootUsers: definitions["v1RootUserParamsV2"][];
+        /**
+         * Format: int32
+         * @description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users
+         */
+        rootQuorumThreshold: number;
+        /** @description The wallet to create for the sub-organization */
+        wallet?: definitions["v1WalletParams"];
+        /** @description Disable email recovery for the sub-organization */
+        disableEmailRecovery?: boolean;
+        /** @description Disable email auth for the sub-organization */
+        disableEmailAuth?: boolean;
+    };
     v1CreateSubOrganizationRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V4";
+        type: "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V5";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1CreateSubOrganizationIntentV4"];
+        parameters: definitions["v1CreateSubOrganizationIntentV5"];
     };
     v1CreateSubOrganizationResult: {
         subOrganizationId: string;
@@ -745,6 +899,11 @@ export type definitions = {
         wallet?: definitions["v1WalletResult"];
         rootUserIds?: string[];
     };
+    v1CreateSubOrganizationResultV5: {
+        subOrganizationId: string;
+        wallet?: definitions["v1WalletResult"];
+        rootUserIds?: string[];
+    };
     v1CreateUserTagIntent: {
         /** @description Human-readable name for a User Tag. */
         userTagName: string;
@@ -836,7 +995,7 @@ export type definitions = {
         rk: boolean;
     };
     /** @enum {string} */
-    v1CredentialType: "CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR" | "CREDENTIAL_TYPE_API_KEY_P256" | "CREDENTIAL_TYPE_RECOVER_USER_KEY_P256";
+    v1CredentialType: "CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR" | "CREDENTIAL_TYPE_API_KEY_P256" | "CREDENTIAL_TYPE_RECOVER_USER_KEY_P256" | "CREDENTIAL_TYPE_API_KEY_SECP256K1" | "CREDENTIAL_TYPE_EMAIL_AUTH_KEY_P256";
     /** @enum {string} */
     v1Curve: "CURVE_SECP256K1" | "CURVE_ED25519";
     v1DeleteApiKeysIntent: {
@@ -894,6 +1053,25 @@ export type definitions = {
         /** @description Unique identifier for a given Invitation. */
         invitationId: string;
     };
+    v1DeleteOauthProvidersIntent: {
+        /** @description The ID of the User to remove an Oauth provider from */
+        userId: string;
+        /** @description Unique identifier for a given Provider. */
+        providerIds: string[];
+    };
+    v1DeleteOauthProvidersRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_DELETE_OAUTH_PROVIDERS";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1DeleteOauthProvidersIntent"];
+    };
+    v1DeleteOauthProvidersResult: {
+        /** @description A list of unique identifiers for Oauth Providers */
+        providerIds: string[];
+    };
     v1DeleteOrganizationIntent: {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
@@ -1003,15 +1181,31 @@ export type definitions = {
         expirationSeconds?: string;
         /** @description Optional parameters for customizing emails. If not provided, the default email will be used. */
         emailCustomization?: definitions["v1EmailCustomizationParams"];
+        /** @description Invalidate all other previously generated Email Auth API keys */
+        invalidateExisting?: boolean;
+    };
+    v1EmailAuthIntentV2: {
+        /** @description Email of the authenticating user. */
+        email: string;
+        /** @description Client-side public key generated by the user, to which the email auth bundle (credentials) will be encrypted. */
+        targetPublicKey: string;
+        /** @description Optional human-readable name for an API Key. If none provided, default to Email Auth - <Timestamp> */
+        apiKeyName?: string;
+        /** @description Expiration window (in seconds) indicating how long the API key is valid. If not provided, a default of 15 minutes will be used. */
+        expirationSeconds?: string;
+        /** @description Optional parameters for customizing emails. If not provided, the default email will be used. */
+        emailCustomization?: definitions["v1EmailCustomizationParams"];
+        /** @description Invalidate all other previously generated Email Auth API keys */
+        invalidateExisting?: boolean;
     };
     v1EmailAuthRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_EMAIL_AUTH";
+        type: "ACTIVITY_TYPE_EMAIL_AUTH_V2";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1EmailAuthIntent"];
+        parameters: definitions["v1EmailAuthIntentV2"];
     };
     v1EmailAuthResult: {
         /** @description Unique identifier for the authenticating User. */
@@ -1142,6 +1336,19 @@ export type definitions = {
         /** @description A list of API keys. */
         apiKeys: definitions["v1ApiKey"][];
     };
+    v1GetAttestationDocumentRequest: {
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        /** @description The enclave type, one of: ump, notarizer, signer, evm-parser */
+        enclaveType: string;
+    };
+    v1GetAttestationDocumentResponse: {
+        /**
+         * Format: byte
+         * @description Raw (CBOR-encoded) attestation document
+         */
+        attestationDocument: string;
+    };
     v1GetAuthenticatorRequest: {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
@@ -1162,6 +1369,24 @@ export type definitions = {
         /** @description A list of authenticators. */
         authenticators: definitions["v1Authenticator"][];
     };
+    v1GetOauthProvidersRequest: {
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        /** @description Unique identifier for a given User. */
+        userId?: string;
+    };
+    v1GetOauthProvidersResponse: {
+        /** @description A list of Oauth Providers */
+        oauthProviders: definitions["v1OauthProvider"][];
+    };
+    v1GetOrganizationConfigsRequest: {
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+    };
+    v1GetOrganizationConfigsResponse: {
+        /** @description Organization configs including quorum settings and organization features */
+        configs: definitions["v1Config"];
+    };
     v1GetOrganizationRequest: {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
@@ -1209,7 +1434,7 @@ export type definitions = {
     v1GetSubOrgIdsRequest: {
         /** @description Unique identifier for the parent Organization. This is used to find sub-organizations within it. */
         organizationId: string;
-        /** @description Specifies the type of filter to apply, i.e 'CREDENTIAL_ID', 'NAME', 'USERNAME', 'EMAIL' or 'PUBLIC_KEY' */
+        /** @description Specifies the type of filter to apply, i.e 'CREDENTIAL_ID', 'NAME', 'USERNAME', 'EMAIL', 'OIDC_TOKEN' or 'PUBLIC_KEY' */
         filterType?: string;
         /** @description The value of the filter to apply for the specified type. For example, a specific email or name string. */
         filterValue?: string;
@@ -1394,7 +1619,7 @@ export type definitions = {
         userId: string;
     };
     v1Intent: {
-        createOrganizationIntent: definitions["v1CreateOrganizationIntent"];
+        createOrganizationIntent?: definitions["v1CreateOrganizationIntent"];
         createAuthenticatorsIntent?: definitions["v1CreateAuthenticatorsIntent"];
         createUsersIntent?: definitions["v1CreateUsersIntent"];
         createPrivateKeysIntent?: definitions["v1CreatePrivateKeysIntent"];
@@ -1457,6 +1682,14 @@ export type definitions = {
         importPrivateKeyIntent?: definitions["v1ImportPrivateKeyIntent"];
         createPoliciesIntent?: definitions["v1CreatePoliciesIntent"];
         signRawPayloadsIntent?: definitions["v1SignRawPayloadsIntent"];
+        createReadOnlySessionIntent?: definitions["v1CreateReadOnlySessionIntent"];
+        createOauthProvidersIntent?: definitions["v1CreateOauthProvidersIntent"];
+        deleteOauthProvidersIntent?: definitions["v1DeleteOauthProvidersIntent"];
+        createSubOrganizationIntentV5?: definitions["v1CreateSubOrganizationIntentV5"];
+        oauthIntent?: definitions["v1OauthIntent"];
+        createApiKeysIntentV2?: definitions["v1CreateApiKeysIntentV2"];
+        createReadWriteSessionIntent?: definitions["v1CreateReadWriteSessionIntent"];
+        emailAuthIntentV2?: definitions["v1EmailAuthIntentV2"];
     };
     v1Invitation: {
         /** @description Unique identifier for a given Invitation object. */
@@ -1511,6 +1744,55 @@ export type definitions = {
     v1NOOPCodegenAnchorResponse: {
         stamp: definitions["v1WebAuthnStamp"];
     };
+    v1OauthIntent: {
+        /** @description Base64 encoded OIDC token */
+        oidcToken: string;
+        /** @description Client-side public key generated by the user, to which the oauth bundle (credentials) will be encrypted. */
+        targetPublicKey: string;
+        /** @description Optional human-readable name for an API Key. If none provided, default to Oauth - <Timestamp> */
+        apiKeyName?: string;
+        /** @description Expiration window (in seconds) indicating how long the API key is valid. If not provided, a default of 15 minutes will be used. */
+        expirationSeconds?: string;
+    };
+    v1OauthProvider: {
+        /** @description Unique identifier for an OAuth Provider */
+        providerId: string;
+        /** @description Human-readable name to identify a Provider. */
+        providerName: string;
+        /** @description The URL at which to fetch the OIDC token signers */
+        jwksUri: string;
+        /** @description Expected audience ('aud' attribute of the signed token) which represents the app ID */
+        audience: string;
+        /** @description Expected subject ('sub' attribute of the signed token) which represents the user ID */
+        subject: string;
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+    };
+    v1OauthProviderParams: {
+        /** @description Human-readable name to identify a Provider. */
+        providerName: string;
+        /** @description The URL at which to fetch the OIDC token signers */
+        jwksUri: string;
+        /** @description Base64 encoded OIDC token */
+        oidcToken: string;
+    };
+    v1OauthRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_OAUTH";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1OauthIntent"];
+    };
+    v1OauthResult: {
+        /** @description Unique identifier for the authenticating User. */
+        userId: string;
+        /** @description Unique identifier for the created API key. */
+        apiKeyId: string;
+        /** @description HPKE encrypted credential bundle */
+        credentialBundle: string;
+    };
     /** @enum {string} */
     v1Operator: "OPERATOR_EQUAL" | "OPERATOR_MORE_THAN" | "OPERATOR_MORE_THAN_OR_EQUAL" | "OPERATOR_LESS_THAN" | "OPERATOR_LESS_THAN_OR_EQUAL" | "OPERATOR_CONTAINS" | "OPERATOR_NOT_EQUAL" | "OPERATOR_IN" | "OPERATOR_NOT_IN" | "OPERATOR_CONTAINS_ONE" | "OPERATOR_CONTAINS_ALL";
     v1OrganizationData: {
@@ -1698,6 +1980,12 @@ export type definitions = {
         importPrivateKeyResult?: definitions["v1ImportPrivateKeyResult"];
         createPoliciesResult?: definitions["v1CreatePoliciesResult"];
         signRawPayloadsResult?: definitions["v1SignRawPayloadsResult"];
+        createReadOnlySessionResult?: definitions["v1CreateReadOnlySessionResult"];
+        createOauthProvidersResult?: definitions["v1CreateOauthProvidersResult"];
+        deleteOauthProvidersResult?: definitions["v1DeleteOauthProvidersResult"];
+        createSubOrganizationResultV5?: definitions["v1CreateSubOrganizationResultV5"];
+        oauthResult?: definitions["v1OauthResult"];
+        createReadWriteSessionResult?: definitions["v1CreateReadWriteSessionResult"];
     };
     v1RootUserParams: {
         /** @description Human-readable name for a User. */
@@ -1709,6 +1997,18 @@ export type definitions = {
         /** @description A list of Authenticator parameters. */
         authenticators: definitions["v1AuthenticatorParamsV2"][];
     };
+    v1RootUserParamsV2: {
+        /** @description Human-readable name for a User. */
+        userName: string;
+        /** @description The user's email address. */
+        userEmail?: string;
+        /** @description A list of API Key parameters. */
+        apiKeys: definitions["v1ApiKeyParams"][];
+        /** @description A list of Authenticator parameters. */
+        authenticators: definitions["v1AuthenticatorParamsV2"][];
+        /** @description A list of Oauth providers. */
+        oauthProviders: definitions["v1OauthProviderParams"][];
+    };
     v1Selector: {
         subject?: string;
         operator?: definitions["v1Operator"];
@@ -1999,6 +2299,8 @@ export type definitions = {
         apiKeys: definitions["v1ApiKey"][];
         /** @description A list of User Tag IDs. */
         userTags: string[];
+        /** @description A list of Oauth Providers. */
+        oauthProviders: definitions["v1OauthProvider"][];
         createdAt: definitions["externaldatav1Timestamp"];
         updatedAt: definitions["externaldatav1Timestamp"];
     };
@@ -2171,6 +2473,24 @@ export type operations = {
             };
         };
     };
+    /** Get the attestation document corresponding to an enclave. */
+    PublicApiService_GetAttestationDocument: {
+        parameters: {
+            body: {
+                body: definitions["v1GetAttestationDocumentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetAttestationDocumentResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Get details about an authenticator */
     PublicApiService_GetAuthenticator: {
         parameters: {
@@ -2207,6 +2527,24 @@ export type operations = {
             };
         };
     };
+    /** Get details about Oauth providers for a user */
+    PublicApiService_GetOauthProviders: {
+        parameters: {
+            body: {
+                body: definitions["v1GetOauthProvidersRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetOauthProvidersResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Get details about an Organization */
     PublicApiService_GetOrganization: {
         parameters: {
@@ -2225,6 +2563,24 @@ export type operations = {
             };
         };
     };
+    /** Get quorum settings and features for an organization */
+    PublicApiService_GetOrganizationConfigs: {
+        parameters: {
+            body: {
+                body: definitions["v1GetOrganizationConfigsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetOrganizationConfigsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Get details about a Policy */
     PublicApiService_GetPolicy: {
         parameters: {
@@ -2567,6 +2923,24 @@ export type operations = {
             };
         };
     };
+    /** Creates Oauth providers for a specified user - BETA */
+    PublicApiService_CreateOauthProviders: {
+        parameters: {
+            body: {
+                body: definitions["v1CreateOauthProvidersRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Create new Policies */
     PublicApiService_CreatePolicies: {
         parameters: {
@@ -2639,6 +3013,42 @@ export type operations = {
             };
         };
     };
+    /** Create a read only session for a user (valid for 1 hour) */
+    PublicApiService_CreateReadOnlySession: {
+        parameters: {
+            body: {
+                body: definitions["v1CreateReadOnlySessionRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Create a read write session for a user */
+    PublicApiService_CreateReadWriteSession: {
+        parameters: {
+            body: {
+                body: definitions["v1CreateReadWriteSessionRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Create a new Sub-Organization */
     PublicApiService_CreateSubOrganization: {
         parameters: {
@@ -2783,6 +3193,24 @@ export type operations = {
             };
         };
     };
+    /** Removes Oauth providers for a specified user - BETA */
+    PublicApiService_DeleteOauthProviders: {
+        parameters: {
+            body: {
+                body: definitions["v1DeleteOauthProvidersRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Delete an existing Policy */
     PublicApiService_DeletePolicy: {
         parameters: {
@@ -3017,6 +3445,24 @@ export type operations = {
             };
         };
     };
+    /** Authenticate a user with an Oidc token (Oauth) - BETA */
+    PublicApiService_Oauth: {
+        parameters: {
+            body: {
+                body: definitions["v1OauthRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Completes the process of recovering a user by adding an authenticator */
     PublicApiService_RecoverUser: {
         parameters: {