@turnkey/http 3.18.0 → 4.0.0

package/CHANGELOG.md

@@ -1,5 +1,219 @@
 # @turnkey/http
 
+## 4.0.0
+
+### Major Changes
+
+- [#1250](https://github.com/tkhq/sdk/pull/1250) [`6128132`](https://github.com/tkhq/sdk/commit/6128132d910f658cdf83ecc1dec6598eb20c008a) Author [@moeodeh3](https://github.com/moeodeh3) - ### `INIT_OTP`
+
+  `ACTIVITY_TYPE_INIT_OTP_V2` → `ACTIVITY_TYPE_INIT_OTP_V3`
+
+  **What changed:** Added required `otpEncryptionTargetBundle` to the result.
+
+  ```ts
+  // before — v1InitOtpResult
+  {
+    otpId: string;
+  }
+
+  // after — v1InitOtpResultV2
+  {
+    otpId: string;
+    otpEncryptionTargetBundle: string; // new
+  }
+  ```
+
+  ***
+
+  ### `VERIFY_OTP`
+
+  `ACTIVITY_TYPE_VERIFY_OTP` → `ACTIVITY_TYPE_VERIFY_OTP_V2`
+
+  **What changed:** Replaced plaintext `otpCode` + `publicKey` with a single `encryptedOtpBundle`.
+
+  Instead of sending the OTP code in plaintext, you now HPKE-encrypt it (along with your public key) to Turnkey's enclave using the `otpEncryptionTargetBundle` returned by `initOtp`. This ensures the OTP code never leaves the client in plaintext.
+
+  Use `encryptOtpCodeToBundle` from `@turnkey/crypto` to build the bundle:
+
+  ```ts
+  import { encryptOtpCodeToBundle } from "@turnkey/crypto";
+
+  const { otpId, otpEncryptionTargetBundle } = await client.initOtp({ ... });
+
+  // After the user enters their OTP code:
+  const encryptedOtpBundle = await encryptOtpCodeToBundle(
+    otpCode,                    // the code the user entered
+    otpEncryptionTargetBundle,  // from the initOtp response
+    publicKey,                  // your target public key
+  );
+
+  await client.verifyOtp({
+    otpId,
+    encryptedOtpBundle,
+  });
+  ```
+
+  ```ts
+  // before — v1VerifyOtpIntent
+  {
+    otpId: string;
+    otpCode: string;           // removed
+    expirationSeconds?: string;
+    publicKey?: string;         // removed
+  }
+
+  // after — v1VerifyOtpIntentV2
+  {
+    otpId: string;
+    encryptedOtpBundle: string; // new — replaces otpCode + publicKey
+    expirationSeconds?: string;
+  }
+  ```
+
+  ***
+
+  ### `OTP_LOGIN`
+
+  `ACTIVITY_TYPE_OTP_LOGIN` → `ACTIVITY_TYPE_OTP_LOGIN_V2`
+
+  **What changed:** `clientSignature` promoted from optional to required.
+
+  ```ts
+  // before — v1OtpLoginIntent
+  {
+    verificationToken: string;
+    publicKey: string;
+    expirationSeconds?: string;
+    invalidateExisting?: boolean;
+    clientSignature?: v1ClientSignature; // optional
+  }
+
+  // after — v1OtpLoginIntentV2
+  {
+    verificationToken: string;
+    publicKey: string;
+    expirationSeconds?: string;
+    invalidateExisting?: boolean;
+    clientSignature: v1ClientSignature;  // now required
+  }
+  ```
+
+  ***
+
+  ### `CREATE_OAUTH_PROVIDERS`
+
+  `ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS` → `ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2`
+
+  **What changed:** Added `oidcClaims` as a new option alongside `oidcToken`; you must provide exactly one. This updated type feeds into the `CREATE_SUB_ORGANIZATION` and `CREATE_USERS` changes below.
+
+  ```ts
+  // before — v1OauthProviderParams
+  {
+    providerName: string;
+    oidcToken: string;
+  }
+
+  // after — v1OauthProviderParamsV2
+  {
+    providerName: string;
+  } & (
+    | { oidcToken: string }
+    | { oidcClaims: { iss: string; sub: string; aud: string } }
+  )
+  ```
+
+  ***
+
+  ### `CREATE_SUB_ORGANIZATION`
+
+  `ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V7` → `ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V8`
+
+  **What changed:** `rootUsers` items updated from `v1RootUserParamsV4` → `v1RootUserParamsV5`, which updates `oauthProviders` from `v1OauthProviderParams` → `v1OauthProviderParamsV2`.
+
+  ```ts
+  // before — v1RootUserParamsV4
+  {
+    userName: string;
+    userEmail?: string;
+    userPhoneNumber?: string;
+    apiKeys: v1ApiKeyParamsV2[];
+    authenticators: v1AuthenticatorParamsV2[];
+    oauthProviders: {              // v1OauthProviderParams
+      providerName: string;
+      oidcToken: string;           // was required
+    }[];
+  }
+
+  // after — v1RootUserParamsV5
+  {
+    userName: string;
+    userEmail?: string;
+    userPhoneNumber?: string;
+    apiKeys: v1ApiKeyParamsV2[];
+    authenticators: v1AuthenticatorParamsV2[];
+    oauthProviders: ({             // v1OauthProviderParamsV2
+      providerName: string;
+    } & (
+      | { oidcToken: string }
+      | { oidcClaims: { iss: string; sub: string; aud: string } }
+    ))[];
+  }
+  ```
+
+  ***
+
+  ### `CREATE_USERS`
+
+  `ACTIVITY_TYPE_CREATE_USERS_V3` → `ACTIVITY_TYPE_CREATE_USERS_V4`
+
+  **What changed:** `users` items updated from `v1UserParamsV3` → `v1UserParamsV4`, which updates `oauthProviders` from `v1OauthProviderParams` → `v1OauthProviderParamsV2`.
+
+  ```ts
+  // before — v1UserParamsV3
+  {
+    userName: string;
+    userEmail?: string;
+    userPhoneNumber?: string;
+    apiKeys: v1ApiKeyParamsV2[];
+    authenticators: v1AuthenticatorParamsV2[];
+    oauthProviders: {              // v1OauthProviderParams
+      providerName: string;
+      oidcToken: string;           // was required
+    }[];
+    userTags: string[];
+  }
+
+  // after — v1UserParamsV4
+  {
+    userName: string;
+    userEmail?: string;
+    userPhoneNumber?: string;
+    apiKeys: v1ApiKeyParamsV2[];
+    authenticators: v1AuthenticatorParamsV2[];
+    oauthProviders: ({             // v1OauthProviderParamsV2
+      providerName: string;
+    } & (
+      | { oidcToken: string }
+      | { oidcClaims: { iss: string; sub: string; aud: string } }
+    ))[];
+    userTags: string[];
+  }
+  ```
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @turnkey/api-key-stamper@0.6.6
+
+## 3.18.1
+
+### Patch Changes
+
+- [#1269](https://github.com/tkhq/sdk/pull/1269) [`ef66673`](https://github.com/tkhq/sdk/commit/ef6667325d210c8aa0ea4c1d11d834ff28ddb66c) Author [@ethankonk](https://github.com/ethankonk) - Sync with v2026.4.5 of mono
+
+- Updated dependencies []:
+  - @turnkey/api-key-stamper@0.6.5
+
 ## 3.18.0
 
 ### Minor Changes
@@ -71,7 +285,7 @@
 
   The following activity types have been versioned:
   - `ACTIVITY_TYPE_INIT_OTP` → `ACTIVITY_TYPE_INIT_OTP_V2`
-  - `ACTIVITY_TYPE_INIT_OTP_AUTH_V2` → `ACTIVITY_TYPE_INIT_OTP_V3`
+  - `ACTIVITY_TYPE_INIT_OTP_AUTH_V2` → `ACTIVITY_TYPE_INIT_OTP_AUTH_V3`
   - `ACTIVITY_TYPE_EMAIL_AUTH_V2` → `ACTIVITY_TYPE_EMAIL_AUTH_V3`
   - `ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY` -> `ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY_V2`
 

package/dist/__generated__/services/coordinator/public/v1/public_api.client.d.ts

@@ -7,17 +7,21 @@ import type { TGetAuthenticatorBody, TGetAuthenticatorResponse } from "./public_
 import type { TGetAuthenticatorsBody, TGetAuthenticatorsResponse } from "./public_api.fetcher";
 import type { TGetBootProofBody, TGetBootProofResponse } from "./public_api.fetcher";
 import type { TGetGasUsageBody, TGetGasUsageResponse } from "./public_api.fetcher";
+import type { TGetIpAllowlistBody, TGetIpAllowlistResponse } from "./public_api.fetcher";
 import type { TGetLatestBootProofBody, TGetLatestBootProofResponse } from "./public_api.fetcher";
 import type { TGetNoncesBody, TGetNoncesResponse } from "./public_api.fetcher";
 import type { TGetOauth2CredentialBody, TGetOauth2CredentialResponse } from "./public_api.fetcher";
 import type { TGetOauthProvidersBody, TGetOauthProvidersResponse } from "./public_api.fetcher";
 import type { TGetOnRampTransactionStatusBody, TGetOnRampTransactionStatusResponse } from "./public_api.fetcher";
+import type { TGetOrganizationBody, TGetOrganizationResponse } from "./public_api.fetcher";
 import type { TGetOrganizationConfigsBody, TGetOrganizationConfigsResponse } from "./public_api.fetcher";
 import type { TGetPolicyBody, TGetPolicyResponse } from "./public_api.fetcher";
 import type { TGetPolicyEvaluationsBody, TGetPolicyEvaluationsResponse } from "./public_api.fetcher";
 import type { TGetPrivateKeyBody, TGetPrivateKeyResponse } from "./public_api.fetcher";
 import type { TGetSendTransactionStatusBody, TGetSendTransactionStatusResponse } from "./public_api.fetcher";
 import type { TGetSmartContractInterfaceBody, TGetSmartContractInterfaceResponse } from "./public_api.fetcher";
+import type { TGetTvcAppBody, TGetTvcAppResponse } from "./public_api.fetcher";
+import type { TGetTvcDeploymentBody, TGetTvcDeploymentResponse } from "./public_api.fetcher";
 import type { TGetUserBody, TGetUserResponse } from "./public_api.fetcher";
 import type { TGetWalletBody, TGetWalletResponse } from "./public_api.fetcher";
 import type { TGetWalletAccountBody, TGetWalletAccountResponse } from "./public_api.fetcher";
@@ -32,12 +36,15 @@ import type { TGetPrivateKeysBody, TGetPrivateKeysResponse } from "./public_api.
 import type { TGetSmartContractInterfacesBody, TGetSmartContractInterfacesResponse } from "./public_api.fetcher";
 import type { TGetSubOrgIdsBody, TGetSubOrgIdsResponse } from "./public_api.fetcher";
 import type { TListSupportedAssetsBody, TListSupportedAssetsResponse } from "./public_api.fetcher";
+import type { TGetTvcAppDeploymentsBody, TGetTvcAppDeploymentsResponse } from "./public_api.fetcher";
+import type { TGetTvcAppsBody, TGetTvcAppsResponse } from "./public_api.fetcher";
 import type { TListUserTagsBody, TListUserTagsResponse } from "./public_api.fetcher";
 import type { TGetUsersBody, TGetUsersResponse } from "./public_api.fetcher";
 import type { TGetVerifiedSubOrgIdsBody, TGetVerifiedSubOrgIdsResponse } from "./public_api.fetcher";
 import type { TGetWalletAccountsBody, TGetWalletAccountsResponse } from "./public_api.fetcher";
 import type { TGetWalletsBody, TGetWalletsResponse } from "./public_api.fetcher";
 import type { TListWebhookEndpointsBody, TListWebhookEndpointsResponse } from "./public_api.fetcher";
+import type { TValidateTvcImageBody, TValidateTvcImageResponse } from "./public_api.fetcher";
 import type { TGetWhoamiBody, TGetWhoamiResponse } from "./public_api.fetcher";
 import type { TApproveActivityBody, TApproveActivityResponse } from "./public_api.fetcher";
 import type { TCreateApiKeysBody, TCreateApiKeysResponse } from "./public_api.fetcher";
@@ -55,6 +62,9 @@ import type { TCreateReadOnlySessionBody, TCreateReadOnlySessionResponse } from
 import type { TCreateReadWriteSessionBody, TCreateReadWriteSessionResponse } from "./public_api.fetcher";
 import type { TCreateSmartContractInterfaceBody, TCreateSmartContractInterfaceResponse } from "./public_api.fetcher";
 import type { TCreateSubOrganizationBody, TCreateSubOrganizationResponse } from "./public_api.fetcher";
+import type { TCreateTvcAppBody, TCreateTvcAppResponse } from "./public_api.fetcher";
+import type { TCreateTvcDeploymentBody, TCreateTvcDeploymentResponse } from "./public_api.fetcher";
+import type { TCreateTvcManifestApprovalsBody, TCreateTvcManifestApprovalsResponse } from "./public_api.fetcher";
 import type { TCreateUserTagBody, TCreateUserTagResponse } from "./public_api.fetcher";
 import type { TCreateUsersBody, TCreateUsersResponse } from "./public_api.fetcher";
 import type { TCreateWalletBody, TCreateWalletResponse } from "./public_api.fetcher";
@@ -78,6 +88,7 @@ import type { TDeleteWalletAccountsBody, TDeleteWalletAccountsResponse } from ".
 import type { TDeleteWalletsBody, TDeleteWalletsResponse } from "./public_api.fetcher";
 import type { TDeleteWebhookEndpointBody, TDeleteWebhookEndpointResponse } from "./public_api.fetcher";
 import type { TEmailAuthBody, TEmailAuthResponse } from "./public_api.fetcher";
+import type { TEthSendRawTransactionBody, TEthSendRawTransactionResponse } from "./public_api.fetcher";
 import type { TEthSendTransactionBody, TEthSendTransactionResponse } from "./public_api.fetcher";
 import type { TExportPrivateKeyBody, TExportPrivateKeyResponse } from "./public_api.fetcher";
 import type { TExportWalletBody, TExportWalletResponse } from "./public_api.fetcher";
@@ -97,7 +108,9 @@ import type { TOtpAuthBody, TOtpAuthResponse } from "./public_api.fetcher";
 import type { TOtpLoginBody, TOtpLoginResponse } from "./public_api.fetcher";
 import type { TRecoverUserBody, TRecoverUserResponse } from "./public_api.fetcher";
 import type { TRejectActivityBody, TRejectActivityResponse } from "./public_api.fetcher";
+import type { TRemoveIpAllowlistBody, TRemoveIpAllowlistResponse } from "./public_api.fetcher";
 import type { TRemoveOrganizationFeatureBody, TRemoveOrganizationFeatureResponse } from "./public_api.fetcher";
+import type { TSetIpAllowlistBody, TSetIpAllowlistResponse } from "./public_api.fetcher";
 import type { TSetOrganizationFeatureBody, TSetOrganizationFeatureResponse } from "./public_api.fetcher";
 import type { TSignRawPayloadBody, TSignRawPayloadResponse } from "./public_api.fetcher";
 import type { TSignRawPayloadsBody, TSignRawPayloadsResponse } from "./public_api.fetcher";
@@ -118,6 +131,8 @@ import type { TUpdateUserTagBody, TUpdateUserTagResponse } from "./public_api.fe
 import type { TUpdateWalletBody, TUpdateWalletResponse } from "./public_api.fetcher";
 import type { TUpdateWebhookEndpointBody, TUpdateWebhookEndpointResponse } from "./public_api.fetcher";
 import type { TVerifyOtpBody, TVerifyOtpResponse } from "./public_api.fetcher";
+import type { TRefreshFeatureFlagsBody, TRefreshFeatureFlagsResponse } from "./public_api.fetcher";
+import type { TTestRateLimitsBody, TTestRateLimitsResponse } from "./public_api.fetcher";
 export declare class TurnkeyClient {
     config: THttpConfig;
     stamper: TStamper;
@@ -236,6 +251,20 @@ export declare class TurnkeyClient {
      * See also {@link GetGasUsage}.
      */
     stampGetGasUsage: (input: TGetGasUsageBody) => Promise<TSignedRequest>;
+    /**
+     * Get IP allowlist and rules for an organization.
+     *
+     * Sign the provided `TGetIpAllowlistBody` with the client's `stamp` function, and submit the request (POST /public/v1/query/get_ip_allowlist).
+     *
+     * See also {@link stampGetIpAllowlist}.
+     */
+    getIpAllowlist: (input: TGetIpAllowlistBody) => Promise<TGetIpAllowlistResponse>;
+    /**
+     * Produce a `SignedRequest` from `TGetIpAllowlistBody` by using the client's `stamp` function.
+     *
+     * See also {@link GetIpAllowlist}.
+     */
+    stampGetIpAllowlist: (input: TGetIpAllowlistBody) => Promise<TSignedRequest>;
     /**
      * Get the latest boot proof for a given enclave app name.
      *
@@ -306,6 +335,20 @@ export declare class TurnkeyClient {
      * See also {@link GetOnRampTransactionStatus}.
      */
     stampGetOnRampTransactionStatus: (input: TGetOnRampTransactionStatusBody) => Promise<TSignedRequest>;
+    /**
+     * Get details about an organization.
+     *
+     * Sign the provided `TGetOrganizationBody` with the client's `stamp` function, and submit the request (POST /public/v1/query/get_organization).
+     *
+     * See also {@link stampGetOrganization}.
+     */
+    getOrganization: (input: TGetOrganizationBody) => Promise<TGetOrganizationResponse>;
+    /**
+     * Produce a `SignedRequest` from `TGetOrganizationBody` by using the client's `stamp` function.
+     *
+     * See also {@link GetOrganization}.
+     */
+    stampGetOrganization: (input: TGetOrganizationBody) => Promise<TSignedRequest>;
     /**
      * Get quorum settings and features for an organization.
      *
@@ -390,6 +433,34 @@ export declare class TurnkeyClient {
      * See also {@link GetSmartContractInterface}.
      */
     stampGetSmartContractInterface: (input: TGetSmartContractInterfaceBody) => Promise<TSignedRequest>;
+    /**
+     * Get details about a single TVC App
+     *
+     * Sign the provided `TGetTvcAppBody` with the client's `stamp` function, and submit the request (POST /public/v1/query/get_tvc_app).
+     *
+     * See also {@link stampGetTvcApp}.
+     */
+    getTvcApp: (input: TGetTvcAppBody) => Promise<TGetTvcAppResponse>;
+    /**
+     * Produce a `SignedRequest` from `TGetTvcAppBody` by using the client's `stamp` function.
+     *
+     * See also {@link GetTvcApp}.
+     */
+    stampGetTvcApp: (input: TGetTvcAppBody) => Promise<TSignedRequest>;
+    /**
+     * Get details about a single TVC Deployment
+     *
+     * Sign the provided `TGetTvcDeploymentBody` with the client's `stamp` function, and submit the request (POST /public/v1/query/get_tvc_deployment).
+     *
+     * See also {@link stampGetTvcDeployment}.
+     */
+    getTvcDeployment: (input: TGetTvcDeploymentBody) => Promise<TGetTvcDeploymentResponse>;
+    /**
+     * Produce a `SignedRequest` from `TGetTvcDeploymentBody` by using the client's `stamp` function.
+     *
+     * See also {@link GetTvcDeployment}.
+     */
+    stampGetTvcDeployment: (input: TGetTvcDeploymentBody) => Promise<TSignedRequest>;
     /**
      * Get details about a user.
      *
@@ -586,6 +657,34 @@ export declare class TurnkeyClient {
      * See also {@link ListSupportedAssets}.
      */
     stampListSupportedAssets: (input: TListSupportedAssetsBody) => Promise<TSignedRequest>;
+    /**
+     * List all deployments for a given TVC App
+     *
+     * Sign the provided `TGetTvcAppDeploymentsBody` with the client's `stamp` function, and submit the request (POST /public/v1/query/list_tvc_app_deployments).
+     *
+     * See also {@link stampGetTvcAppDeployments}.
+     */
+    getTvcAppDeployments: (input: TGetTvcAppDeploymentsBody) => Promise<TGetTvcAppDeploymentsResponse>;
+    /**
+     * Produce a `SignedRequest` from `TGetTvcAppDeploymentsBody` by using the client's `stamp` function.
+     *
+     * See also {@link GetTvcAppDeployments}.
+     */
+    stampGetTvcAppDeployments: (input: TGetTvcAppDeploymentsBody) => Promise<TSignedRequest>;
+    /**
+     * List all TVC Apps within an organization.
+     *
+     * Sign the provided `TGetTvcAppsBody` with the client's `stamp` function, and submit the request (POST /public/v1/query/list_tvc_apps).
+     *
+     * See also {@link stampGetTvcApps}.
+     */
+    getTvcApps: (input: TGetTvcAppsBody) => Promise<TGetTvcAppsResponse>;
+    /**
+     * Produce a `SignedRequest` from `TGetTvcAppsBody` by using the client's `stamp` function.
+     *
+     * See also {@link GetTvcApps}.
+     */
+    stampGetTvcApps: (input: TGetTvcAppsBody) => Promise<TSignedRequest>;
     /**
      * List all user tags within an organization.
      *
@@ -670,6 +769,20 @@ export declare class TurnkeyClient {
      * See also {@link ListWebhookEndpoints}.
      */
     stampListWebhookEndpoints: (input: TListWebhookEndpointsBody) => Promise<TSignedRequest>;
+    /**
+     * Validate a container image URL and pull secret for TVC deployment
+     *
+     * Sign the provided `TValidateTvcImageBody` with the client's `stamp` function, and submit the request (POST /public/v1/query/validate_tvc_image).
+     *
+     * See also {@link stampValidateTvcImage}.
+     */
+    validateTvcImage: (input: TValidateTvcImageBody) => Promise<TValidateTvcImageResponse>;
+    /**
+     * Produce a `SignedRequest` from `TValidateTvcImageBody` by using the client's `stamp` function.
+     *
+     * See also {@link ValidateTvcImage}.
+     */
+    stampValidateTvcImage: (input: TValidateTvcImageBody) => Promise<TSignedRequest>;
     /**
      * Get basic information about your current API or WebAuthN user and their organization. Affords sub-organization look ups via parent organization for WebAuthN or API key users.
      *
@@ -908,6 +1021,48 @@ export declare class TurnkeyClient {
      * See also {@link CreateSubOrganization}.
      */
     stampCreateSubOrganization: (input: TCreateSubOrganizationBody) => Promise<TSignedRequest>;
+    /**
+     * Create a new TVC application
+     *
+     * Sign the provided `TCreateTvcAppBody` with the client's `stamp` function, and submit the request (POST /public/v1/submit/create_tvc_app).
+     *
+     * See also {@link stampCreateTvcApp}.
+     */
+    createTvcApp: (input: TCreateTvcAppBody) => Promise<TCreateTvcAppResponse>;
+    /**
+     * Produce a `SignedRequest` from `TCreateTvcAppBody` by using the client's `stamp` function.
+     *
+     * See also {@link CreateTvcApp}.
+     */
+    stampCreateTvcApp: (input: TCreateTvcAppBody) => Promise<TSignedRequest>;
+    /**
+     * Create a new TVC Deployment
+     *
+     * Sign the provided `TCreateTvcDeploymentBody` with the client's `stamp` function, and submit the request (POST /public/v1/submit/create_tvc_deployment).
+     *
+     * See also {@link stampCreateTvcDeployment}.
+     */
+    createTvcDeployment: (input: TCreateTvcDeploymentBody) => Promise<TCreateTvcDeploymentResponse>;
+    /**
+     * Produce a `SignedRequest` from `TCreateTvcDeploymentBody` by using the client's `stamp` function.
+     *
+     * See also {@link CreateTvcDeployment}.
+     */
+    stampCreateTvcDeployment: (input: TCreateTvcDeploymentBody) => Promise<TSignedRequest>;
+    /**
+     * Post one or more manifest approvals for a TVC Manifest
+     *
+     * Sign the provided `TCreateTvcManifestApprovalsBody` with the client's `stamp` function, and submit the request (POST /public/v1/submit/create_tvc_manifest_approvals).
+     *
+     * See also {@link stampCreateTvcManifestApprovals}.
+     */
+    createTvcManifestApprovals: (input: TCreateTvcManifestApprovalsBody) => Promise<TCreateTvcManifestApprovalsResponse>;
+    /**
+     * Produce a `SignedRequest` from `TCreateTvcManifestApprovalsBody` by using the client's `stamp` function.
+     *
+     * See also {@link CreateTvcManifestApprovals}.
+     */
+    stampCreateTvcManifestApprovals: (input: TCreateTvcManifestApprovalsBody) => Promise<TSignedRequest>;
     /**
      * Create a user tag and add it to users.
      *
@@ -1230,6 +1385,20 @@ export declare class TurnkeyClient {
      * See also {@link EmailAuth}.
      */
     stampEmailAuth: (input: TEmailAuthBody) => Promise<TSignedRequest>;
+    /**
+     * Submit a raw transaction (serialized and signed) for broadcasting to the network.
+     *
+     * Sign the provided `TEthSendRawTransactionBody` with the client's `stamp` function, and submit the request (POST /public/v1/submit/eth_send_raw_transaction).
+     *
+     * See also {@link stampEthSendRawTransaction}.
+     */
+    ethSendRawTransaction: (input: TEthSendRawTransactionBody) => Promise<TEthSendRawTransactionResponse>;
+    /**
+     * Produce a `SignedRequest` from `TEthSendRawTransactionBody` by using the client's `stamp` function.
+     *
+     * See also {@link EthSendRawTransaction}.
+     */
+    stampEthSendRawTransaction: (input: TEthSendRawTransactionBody) => Promise<TSignedRequest>;
     /**
      * Submit a transaction intent describing an EVM transaction you would like to broadcast.
      *
@@ -1496,6 +1665,20 @@ export declare class TurnkeyClient {
      * See also {@link RejectActivity}.
      */
     stampRejectActivity: (input: TRejectActivityBody) => Promise<TSignedRequest>;
+    /**
+     * Delete IP allowlist and all associated rules for organization or API key. After removal, access will be determined by organization-level allowlist (for API keys) or allowed from all IPs (for organizations).
+     *
+     * Sign the provided `TRemoveIpAllowlistBody` with the client's `stamp` function, and submit the request (POST /public/v1/submit/remove_ip_allowlist).
+     *
+     * See also {@link stampRemoveIpAllowlist}.
+     */
+    removeIpAllowlist: (input: TRemoveIpAllowlistBody) => Promise<TRemoveIpAllowlistResponse>;
+    /**
+     * Produce a `SignedRequest` from `TRemoveIpAllowlistBody` by using the client's `stamp` function.
+     *
+     * See also {@link RemoveIpAllowlist}.
+     */
+    stampRemoveIpAllowlist: (input: TRemoveIpAllowlistBody) => Promise<TSignedRequest>;
     /**
      * Remove an organization feature. This activity must be approved by the current root quorum.
      *
@@ -1510,6 +1693,20 @@ export declare class TurnkeyClient {
      * See also {@link RemoveOrganizationFeature}.
      */
     stampRemoveOrganizationFeature: (input: TRemoveOrganizationFeatureBody) => Promise<TSignedRequest>;
+    /**
+     * Create or update IP allowlist and rules for organization or API key. The IP allowlist restricts API access to specific CIDR blocks. Organization-level allowlists apply to all API keys unless overridden by a key-specific allowlist.
+     *
+     * Sign the provided `TSetIpAllowlistBody` with the client's `stamp` function, and submit the request (POST /public/v1/submit/set_ip_allowlist).
+     *
+     * See also {@link stampSetIpAllowlist}.
+     */
+    setIpAllowlist: (input: TSetIpAllowlistBody) => Promise<TSetIpAllowlistResponse>;
+    /**
+     * Produce a `SignedRequest` from `TSetIpAllowlistBody` by using the client's `stamp` function.
+     *
+     * See also {@link SetIpAllowlist}.
+     */
+    stampSetIpAllowlist: (input: TSetIpAllowlistBody) => Promise<TSignedRequest>;
     /**
      * Set an organization feature. This activity must be approved by the current root quorum.
      *
@@ -1790,5 +1987,33 @@ export declare class TurnkeyClient {
      * See also {@link VerifyOtp}.
      */
     stampVerifyOtp: (input: TVerifyOtpBody) => Promise<TSignedRequest>;
+    /**
+     * Refresh feature flags by triggering a DB read to flush the in-memory cache.
+     *
+     * Sign the provided `TRefreshFeatureFlagsBody` with the client's `stamp` function, and submit the request (POST /tkhq/api/v1/refresh_feature_flags).
+     *
+     * See also {@link stampRefreshFeatureFlags}.
+     */
+    refreshFeatureFlags: (input: TRefreshFeatureFlagsBody) => Promise<TRefreshFeatureFlagsResponse>;
+    /**
+     * Produce a `SignedRequest` from `TRefreshFeatureFlagsBody` by using the client's `stamp` function.
+     *
+     * See also {@link RefreshFeatureFlags}.
+     */
+    stampRefreshFeatureFlags: (input: TRefreshFeatureFlagsBody) => Promise<TSignedRequest>;
+    /**
+     * Set a rate local rate limit just on the current endpoint, for purposes of testing with Vivosuite.
+     *
+     * Sign the provided `TTestRateLimitsBody` with the client's `stamp` function, and submit the request (POST /tkhq/api/v1/test_rate_limits).
+     *
+     * See also {@link stampTestRateLimits}.
+     */
+    testRateLimits: (input: TTestRateLimitsBody) => Promise<TTestRateLimitsResponse>;
+    /**
+     * Produce a `SignedRequest` from `TTestRateLimitsBody` by using the client's `stamp` function.
+     *
+     * See also {@link TestRateLimits}.
+     */
+    stampTestRateLimits: (input: TTestRateLimitsBody) => Promise<TSignedRequest>;
 }
 //# sourceMappingURL=public_api.client.d.ts.map