@turnkey/http 3.18.1 → 4.1.0

package/dist/__generated__/services/coordinator/public/v1/public_api.types.d.ts

@@ -35,6 +35,10 @@ export type paths = {
         /** Get gas usage and gas limits for either the parent organization or a sub-organization. */
         post: operations["PublicApiService_GetGasUsage"];
     };
+    "/public/v1/query/get_ip_allowlist": {
+        /** Get IP allowlist and rules for an organization. */
+        post: operations["PublicApiService_GetIpAllowlist"];
+    };
     "/public/v1/query/get_latest_boot_proof": {
         /** Get the latest boot proof for a given enclave app name. */
         post: operations["PublicApiService_GetLatestBootProof"];
@@ -55,6 +59,10 @@ export type paths = {
         /** Get the status of an on ramp transaction. */
         post: operations["PublicApiService_GetOnRampTransactionStatus"];
     };
+    "/public/v1/query/get_organization": {
+        /** Get details about an organization. */
+        post: operations["PublicApiService_GetOrganization"];
+    };
     "/public/v1/query/get_organization_configs": {
         /** Get quorum settings and features for an organization. */
         post: operations["PublicApiService_GetOrganizationConfigs"];
@@ -79,6 +87,18 @@ export type paths = {
         /** Get details about a smart contract interface. */
         post: operations["PublicApiService_GetSmartContractInterface"];
     };
+    "/public/v1/query/get_tvc_app": {
+        /** Get details about a single TVC App */
+        post: operations["PublicApiService_GetTvcApp"];
+    };
+    "/public/v1/query/get_tvc_deployment": {
+        /** Get details about a single TVC Deployment */
+        post: operations["PublicApiService_GetTvcDeployment"];
+    };
+    "/public/v1/query/get_tvc_deployment_provisioning_details": {
+        /** Get the attestation document and manifest envelope of the provisioning enclave for a TVC deployment */
+        post: operations["PublicApiService_GetTvcDeploymentProvisioningDetails"];
+    };
     "/public/v1/query/get_user": {
         /** Get details about a user. */
         post: operations["PublicApiService_GetUser"];
@@ -135,6 +155,14 @@ export type paths = {
         /** List supported assets for the specified network. This feature is in beta - please contact support for access. */
         post: operations["PublicApiService_ListSupportedAssets"];
     };
+    "/public/v1/query/list_tvc_app_deployments": {
+        /** List all deployments for a given TVC App */
+        post: operations["PublicApiService_GetTvcAppDeployments"];
+    };
+    "/public/v1/query/list_tvc_apps": {
+        /** List all TVC Apps within an organization. */
+        post: operations["PublicApiService_GetTvcApps"];
+    };
     "/public/v1/query/list_user_tags": {
         /** List all user tags within an organization. */
         post: operations["PublicApiService_ListUserTags"];
@@ -159,6 +187,10 @@ export type paths = {
         /** List webhook endpoints within an organization. */
         post: operations["PublicApiService_ListWebhookEndpoints"];
     };
+    "/public/v1/query/validate_tvc_image": {
+        /** Validate a container image URL and pull secret for TVC deployment */
+        post: operations["PublicApiService_ValidateTvcImage"];
+    };
     "/public/v1/query/whoami": {
         /** Get basic information about your current API or WebAuthN user and their organization. Affords sub-organization look ups via parent organization for WebAuthN or API key users. */
         post: operations["PublicApiService_GetWhoami"];
@@ -227,6 +259,18 @@ export type paths = {
         /** Create a new sub-organization. */
         post: operations["PublicApiService_CreateSubOrganization"];
     };
+    "/public/v1/submit/create_tvc_app": {
+        /** Create a new TVC application */
+        post: operations["PublicApiService_CreateTvcApp"];
+    };
+    "/public/v1/submit/create_tvc_deployment": {
+        /** Create a new TVC Deployment */
+        post: operations["PublicApiService_CreateTvcDeployment"];
+    };
+    "/public/v1/submit/create_tvc_manifest_approvals": {
+        /** Post one or more manifest approvals for a TVC Manifest */
+        post: operations["PublicApiService_CreateTvcManifestApprovals"];
+    };
     "/public/v1/submit/create_user_tag": {
         /** Create a user tag and add it to users. */
         post: operations["PublicApiService_CreateUserTag"];
@@ -295,6 +339,14 @@ export type paths = {
         /** Delete a sub-organization. */
         post: operations["PublicApiService_DeleteSubOrganization"];
     };
+    "/public/v1/submit/delete_tvc_app_and_deployments": {
+        /** Delete a TVC App and all of its deployments */
+        post: operations["PublicApiService_DeleteTvcAppAndDeployments"];
+    };
+    "/public/v1/submit/delete_tvc_deployment": {
+        /** Delete a TVC Deployment */
+        post: operations["PublicApiService_DeleteTvcDeployment"];
+    };
     "/public/v1/submit/delete_user_tags": {
         /** Delete user tags within an organization. */
         post: operations["PublicApiService_DeleteUserTags"];
@@ -319,6 +371,10 @@ export type paths = {
         /** Authenticate a user via email. */
         post: operations["PublicApiService_EmailAuth"];
     };
+    "/public/v1/submit/eth_send_raw_transaction": {
+        /** Submit a raw transaction (serialized and signed) for broadcasting to the network. */
+        post: operations["PublicApiService_EthSendRawTransaction"];
+    };
     "/public/v1/submit/eth_send_transaction": {
         /** Submit a transaction intent describing an EVM transaction you would like to broadcast. */
         post: operations["PublicApiService_EthSendTransaction"];
@@ -387,6 +443,10 @@ export type paths = {
         /** Create an OTP session for a user. */
         post: operations["PublicApiService_OtpLogin"];
     };
+    "/public/v1/submit/post_tvc_quorum_key_share": {
+        /** Post re-encrypted quorum key share for a TVC deployment. */
+        post: operations["PublicApiService_PostTvcQuorumKeyShare"];
+    };
     "/public/v1/submit/recover_user": {
         /** Complete the process of recovering a user by adding an authenticator. */
         post: operations["PublicApiService_RecoverUser"];
@@ -395,14 +455,30 @@ export type paths = {
         /** Reject an activity. */
         post: operations["PublicApiService_RejectActivity"];
     };
+    "/public/v1/submit/remove_ip_allowlist": {
+        /** Delete IP allowlist and all associated rules for organization or API key. After removal, access will be determined by organization-level allowlist (for API keys) or allowed from all IPs (for organizations). */
+        post: operations["PublicApiService_RemoveIpAllowlist"];
+    };
     "/public/v1/submit/remove_organization_feature": {
         /** Remove an organization feature. This activity must be approved by the current root quorum. */
         post: operations["PublicApiService_RemoveOrganizationFeature"];
     };
+    "/public/v1/submit/restore_tvc_deployment": {
+        /** Restore a deleted TVC Deployment */
+        post: operations["PublicApiService_RestoreTvcDeployment"];
+    };
+    "/public/v1/submit/set_ip_allowlist": {
+        /** Create or update IP allowlist and rules for organization or API key. The IP allowlist restricts API access to specific CIDR blocks. Organization-level allowlists apply to all API keys unless overridden by a key-specific allowlist. */
+        post: operations["PublicApiService_SetIpAllowlist"];
+    };
     "/public/v1/submit/set_organization_feature": {
         /** Set an organization feature. This activity must be approved by the current root quorum. */
         post: operations["PublicApiService_SetOrganizationFeature"];
     };
+    "/public/v1/submit/set_tvc_app_live_deployment": {
+        /** Set the live deployment for a TVC App */
+        post: operations["PublicApiService_UpdateTvcAppLiveDeployment"];
+    };
     "/public/v1/submit/sign_raw_payload": {
         /** Sign a raw payload. */
         post: operations["PublicApiService_SignRawPayload"];
@@ -419,6 +495,22 @@ export type paths = {
         /** Submit a transaction intent describing an SVM transaction you would like to broadcast. */
         post: operations["PublicApiService_SolSendTransaction"];
     };
+    "/public/v1/submit/spark_claim_transfer": {
+        /** Construct receiver-side encrypted operator packages to claim a Spark transfer. Does not perform FROST signing. */
+        post: operations["PublicApiService_SparkClaimTransfer"];
+    };
+    "/public/v1/submit/spark_prepare_lightning_receive": {
+        /** Generate a Lightning preimage and distribute Feldman shares to operators for a Spark Lightning receive. Does not perform FROST signing. */
+        post: operations["PublicApiService_SparkPrepareLightningReceive"];
+    };
+    "/public/v1/submit/spark_prepare_transfer": {
+        /** Construct sender-side encrypted operator packages for a Spark BTC transfer. Does not perform FROST signing. */
+        post: operations["PublicApiService_SparkPrepareTransfer"];
+    };
+    "/public/v1/submit/spark_sign_frost": {
+        /** Perform pure FROST partial signing for a Spark wallet. Produces partial signatures without constructing operator packages. */
+        post: operations["PublicApiService_SparkSignFrost"];
+    };
     "/public/v1/submit/stamp_login": {
         /** Create a session for a user through stamping client side (API key, wallet client, or passkey client). */
         post: operations["PublicApiService_StampLogin"];
@@ -482,6 +574,14 @@ export type paths = {
     "/tkhq/api/v1/noop-codegen-anchor": {
         post: operations["PublicApiService_NOOPCodegenAnchor"];
     };
+    "/tkhq/api/v1/refresh_feature_flags": {
+        /** Refresh feature flags by triggering a DB read to flush the in-memory cache. */
+        post: operations["PublicApiService_RefreshFeatureFlags"];
+    };
+    "/tkhq/api/v1/test_rate_limits": {
+        /** Set a rate local rate limit just on the current endpoint, for purposes of testing with Vivosuite. */
+        post: operations["PublicApiService_TestRateLimits"];
+    };
 };
 export type definitions = {
     apiApiKeyParams: {
@@ -495,6 +595,7 @@ export type definitions = {
     billingActivateBillingTierIntent: {
         /** @description The product that the customer wants to subscribe to. */
         productId: string;
+        orbPlanId?: string;
     };
     billingActivateBillingTierResult: {
         /** @description The id of the product being subscribed to. */
@@ -678,9 +779,9 @@ export type definitions = {
     /** @enum {string} */
     v1ActivityStatus: "ACTIVITY_STATUS_CREATED" | "ACTIVITY_STATUS_PENDING" | "ACTIVITY_STATUS_COMPLETED" | "ACTIVITY_STATUS_FAILED" | "ACTIVITY_STATUS_CONSENSUS_NEEDED" | "ACTIVITY_STATUS_REJECTED";
     /** @enum {string} */
-    v1ActivityType: "ACTIVITY_TYPE_CREATE_API_KEYS" | "ACTIVITY_TYPE_CREATE_USERS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD" | "ACTIVITY_TYPE_CREATE_INVITATIONS" | "ACTIVITY_TYPE_ACCEPT_INVITATION" | "ACTIVITY_TYPE_CREATE_POLICY" | "ACTIVITY_TYPE_DISABLE_PRIVATE_KEY" | "ACTIVITY_TYPE_DELETE_USERS" | "ACTIVITY_TYPE_DELETE_API_KEYS" | "ACTIVITY_TYPE_DELETE_INVITATION" | "ACTIVITY_TYPE_DELETE_ORGANIZATION" | "ACTIVITY_TYPE_DELETE_POLICY" | "ACTIVITY_TYPE_CREATE_USER_TAG" | "ACTIVITY_TYPE_DELETE_USER_TAGS" | "ACTIVITY_TYPE_CREATE_ORGANIZATION" | "ACTIVITY_TYPE_SIGN_TRANSACTION" | "ACTIVITY_TYPE_APPROVE_ACTIVITY" | "ACTIVITY_TYPE_REJECT_ACTIVITY" | "ACTIVITY_TYPE_DELETE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEY_TAGS" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD" | "ACTIVITY_TYPE_ACTIVATE_BILLING_TIER" | "ACTIVITY_TYPE_DELETE_PAYMENT_METHOD" | "ACTIVITY_TYPE_CREATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_POLICY_V3" | "ACTIVITY_TYPE_CREATE_API_ONLY_USERS" | "ACTIVITY_TYPE_UPDATE_ROOT_QUORUM" | "ACTIVITY_TYPE_UPDATE_USER_TAG" | "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2" | "ACTIVITY_TYPE_CREATE_ORGANIZATION_V2" | "ACTIVITY_TYPE_CREATE_USERS_V2" | "ACTIVITY_TYPE_ACCEPT_INVITATION_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2" | "ACTIVITY_TYPE_UPDATE_ALLOWED_ORIGINS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS_V2" | "ACTIVITY_TYPE_UPDATE_USER" | "ACTIVITY_TYPE_UPDATE_POLICY" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V3" | "ACTIVITY_TYPE_CREATE_WALLET" | "ACTIVITY_TYPE_CREATE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY" | "ACTIVITY_TYPE_RECOVER_USER" | "ACTIVITY_TYPE_SET_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_REMOVE_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2" | "ACTIVITY_TYPE_SIGN_TRANSACTION_V2" | "ACTIVITY_TYPE_EXPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_EXPORT_WALLET" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V4" | "ACTIVITY_TYPE_EMAIL_AUTH" | "ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT" | "ACTIVITY_TYPE_INIT_IMPORT_WALLET" | "ACTIVITY_TYPE_IMPORT_WALLET" | "ACTIVITY_TYPE_INIT_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_CREATE_POLICIES" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOADS" | "ACTIVITY_TYPE_CREATE_READ_ONLY_SESSION" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_DELETE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V5" | "ACTIVITY_TYPE_OAUTH" | "ACTIVITY_TYPE_CREATE_API_KEYS_V2" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION" | "ACTIVITY_TYPE_EMAIL_AUTH_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V6" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEYS" | "ACTIVITY_TYPE_DELETE_WALLETS" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION_V2" | "ACTIVITY_TYPE_DELETE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_INIT_OTP_AUTH" | "ACTIVITY_TYPE_OTP_AUTH" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V7" | "ACTIVITY_TYPE_UPDATE_WALLET" | "ACTIVITY_TYPE_UPDATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_USERS_V3" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V2" | "ACTIVITY_TYPE_INIT_OTP" | "ACTIVITY_TYPE_VERIFY_OTP" | "ACTIVITY_TYPE_OTP_LOGIN" | "ACTIVITY_TYPE_STAMP_LOGIN" | "ACTIVITY_TYPE_OAUTH_LOGIN" | "ACTIVITY_TYPE_UPDATE_USER_NAME" | "ACTIVITY_TYPE_UPDATE_USER_EMAIL" | "ACTIVITY_TYPE_UPDATE_USER_PHONE_NUMBER" | "ACTIVITY_TYPE_INIT_FIAT_ON_RAMP" | "ACTIVITY_TYPE_CREATE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_DELETE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_ENABLE_AUTH_PROXY" | "ACTIVITY_TYPE_DISABLE_AUTH_PROXY" | "ACTIVITY_TYPE_UPDATE_AUTH_PROXY_CONFIG" | "ACTIVITY_TYPE_CREATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_OAUTH2_AUTHENTICATE" | "ACTIVITY_TYPE_DELETE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_DELETE_POLICIES" | "ACTIVITY_TYPE_ETH_SEND_RAW_TRANSACTION" | "ACTIVITY_TYPE_ETH_SEND_TRANSACTION" | "ACTIVITY_TYPE_CREATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_EMAIL_AUTH_V3" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY_V2" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V3" | "ACTIVITY_TYPE_INIT_OTP_V2" | "ACTIVITY_TYPE_UPSERT_GAS_USAGE_CONFIG" | "ACTIVITY_TYPE_CREATE_TVC_APP" | "ACTIVITY_TYPE_CREATE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_CREATE_TVC_MANIFEST_APPROVALS" | "ACTIVITY_TYPE_SOL_SEND_TRANSACTION" | "ACTIVITY_TYPE_UPDATE_ORGANIZATION_NAME" | "ACTIVITY_TYPE_CREATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_UPDATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_DELETE_WEBHOOK_ENDPOINT";
+    v1ActivityType: "ACTIVITY_TYPE_CREATE_API_KEYS" | "ACTIVITY_TYPE_CREATE_USERS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD" | "ACTIVITY_TYPE_CREATE_INVITATIONS" | "ACTIVITY_TYPE_ACCEPT_INVITATION" | "ACTIVITY_TYPE_CREATE_POLICY" | "ACTIVITY_TYPE_DISABLE_PRIVATE_KEY" | "ACTIVITY_TYPE_DELETE_USERS" | "ACTIVITY_TYPE_DELETE_API_KEYS" | "ACTIVITY_TYPE_DELETE_INVITATION" | "ACTIVITY_TYPE_DELETE_ORGANIZATION" | "ACTIVITY_TYPE_DELETE_POLICY" | "ACTIVITY_TYPE_CREATE_USER_TAG" | "ACTIVITY_TYPE_DELETE_USER_TAGS" | "ACTIVITY_TYPE_CREATE_ORGANIZATION" | "ACTIVITY_TYPE_SIGN_TRANSACTION" | "ACTIVITY_TYPE_APPROVE_ACTIVITY" | "ACTIVITY_TYPE_REJECT_ACTIVITY" | "ACTIVITY_TYPE_DELETE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEY_TAGS" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD" | "ACTIVITY_TYPE_ACTIVATE_BILLING_TIER" | "ACTIVITY_TYPE_DELETE_PAYMENT_METHOD" | "ACTIVITY_TYPE_CREATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_POLICY_V3" | "ACTIVITY_TYPE_CREATE_API_ONLY_USERS" | "ACTIVITY_TYPE_UPDATE_ROOT_QUORUM" | "ACTIVITY_TYPE_UPDATE_USER_TAG" | "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2" | "ACTIVITY_TYPE_CREATE_ORGANIZATION_V2" | "ACTIVITY_TYPE_CREATE_USERS_V2" | "ACTIVITY_TYPE_ACCEPT_INVITATION_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2" | "ACTIVITY_TYPE_UPDATE_ALLOWED_ORIGINS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS_V2" | "ACTIVITY_TYPE_UPDATE_USER" | "ACTIVITY_TYPE_UPDATE_POLICY" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V3" | "ACTIVITY_TYPE_CREATE_WALLET" | "ACTIVITY_TYPE_CREATE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY" | "ACTIVITY_TYPE_RECOVER_USER" | "ACTIVITY_TYPE_SET_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_REMOVE_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2" | "ACTIVITY_TYPE_SIGN_TRANSACTION_V2" | "ACTIVITY_TYPE_EXPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_EXPORT_WALLET" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V4" | "ACTIVITY_TYPE_EMAIL_AUTH" | "ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT" | "ACTIVITY_TYPE_INIT_IMPORT_WALLET" | "ACTIVITY_TYPE_IMPORT_WALLET" | "ACTIVITY_TYPE_INIT_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_CREATE_POLICIES" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOADS" | "ACTIVITY_TYPE_CREATE_READ_ONLY_SESSION" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_DELETE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V5" | "ACTIVITY_TYPE_OAUTH" | "ACTIVITY_TYPE_CREATE_API_KEYS_V2" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION" | "ACTIVITY_TYPE_EMAIL_AUTH_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V6" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEYS" | "ACTIVITY_TYPE_DELETE_WALLETS" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION_V2" | "ACTIVITY_TYPE_DELETE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_INIT_OTP_AUTH" | "ACTIVITY_TYPE_OTP_AUTH" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V7" | "ACTIVITY_TYPE_UPDATE_WALLET" | "ACTIVITY_TYPE_UPDATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_USERS_V3" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V2" | "ACTIVITY_TYPE_INIT_OTP" | "ACTIVITY_TYPE_VERIFY_OTP" | "ACTIVITY_TYPE_OTP_LOGIN" | "ACTIVITY_TYPE_STAMP_LOGIN" | "ACTIVITY_TYPE_OAUTH_LOGIN" | "ACTIVITY_TYPE_UPDATE_USER_NAME" | "ACTIVITY_TYPE_UPDATE_USER_EMAIL" | "ACTIVITY_TYPE_UPDATE_USER_PHONE_NUMBER" | "ACTIVITY_TYPE_INIT_FIAT_ON_RAMP" | "ACTIVITY_TYPE_CREATE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_DELETE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_ENABLE_AUTH_PROXY" | "ACTIVITY_TYPE_DISABLE_AUTH_PROXY" | "ACTIVITY_TYPE_UPDATE_AUTH_PROXY_CONFIG" | "ACTIVITY_TYPE_CREATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_OAUTH2_AUTHENTICATE" | "ACTIVITY_TYPE_DELETE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_DELETE_POLICIES" | "ACTIVITY_TYPE_ETH_SEND_RAW_TRANSACTION" | "ACTIVITY_TYPE_ETH_SEND_TRANSACTION" | "ACTIVITY_TYPE_CREATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_EMAIL_AUTH_V3" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY_V2" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V3" | "ACTIVITY_TYPE_INIT_OTP_V2" | "ACTIVITY_TYPE_UPSERT_GAS_USAGE_CONFIG" | "ACTIVITY_TYPE_CREATE_TVC_APP" | "ACTIVITY_TYPE_CREATE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_CREATE_TVC_MANIFEST_APPROVALS" | "ACTIVITY_TYPE_SOL_SEND_TRANSACTION" | "ACTIVITY_TYPE_INIT_OTP_V3" | "ACTIVITY_TYPE_VERIFY_OTP_V2" | "ACTIVITY_TYPE_OTP_LOGIN_V2" | "ACTIVITY_TYPE_UPDATE_ORGANIZATION_NAME" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V8" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2" | "ACTIVITY_TYPE_CREATE_USERS_V4" | "ACTIVITY_TYPE_CREATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_UPDATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_DELETE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_SET_IP_ALLOWLIST" | "ACTIVITY_TYPE_REMOVE_IP_ALLOWLIST" | "ACTIVITY_TYPE_UPDATE_TVC_APP_LIVE_DEPLOYMENT" | "ACTIVITY_TYPE_DELETE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_DELETE_TVC_APP_AND_DEPLOYMENTS" | "ACTIVITY_TYPE_RESTORE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_SPARK_SIGN_FROST" | "ACTIVITY_TYPE_SPARK_PREPARE_TRANSFER" | "ACTIVITY_TYPE_SPARK_CLAIM_TRANSFER" | "ACTIVITY_TYPE_SPARK_PREPARE_LIGHTNING_RECEIVE" | "ACTIVITY_TYPE_POST_TVC_QUORUM_KEY_SHARE";
     /** @enum {string} */
-    v1AddressFormat: "ADDRESS_FORMAT_UNCOMPRESSED" | "ADDRESS_FORMAT_COMPRESSED" | "ADDRESS_FORMAT_ETHEREUM" | "ADDRESS_FORMAT_SOLANA" | "ADDRESS_FORMAT_COSMOS" | "ADDRESS_FORMAT_TRON" | "ADDRESS_FORMAT_SUI" | "ADDRESS_FORMAT_APTOS" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2PKH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2SH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2WSH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2TR" | "ADDRESS_FORMAT_SEI" | "ADDRESS_FORMAT_XLM" | "ADDRESS_FORMAT_DOGE_MAINNET" | "ADDRESS_FORMAT_DOGE_TESTNET" | "ADDRESS_FORMAT_TON_V3R2" | "ADDRESS_FORMAT_TON_V4R2" | "ADDRESS_FORMAT_TON_V5R1" | "ADDRESS_FORMAT_XRP";
+    v1AddressFormat: "ADDRESS_FORMAT_UNCOMPRESSED" | "ADDRESS_FORMAT_COMPRESSED" | "ADDRESS_FORMAT_ETHEREUM" | "ADDRESS_FORMAT_SOLANA" | "ADDRESS_FORMAT_COSMOS" | "ADDRESS_FORMAT_TRON" | "ADDRESS_FORMAT_SUI" | "ADDRESS_FORMAT_APTOS" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2PKH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2SH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2WSH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2TR" | "ADDRESS_FORMAT_SEI" | "ADDRESS_FORMAT_XLM" | "ADDRESS_FORMAT_DOGE_MAINNET" | "ADDRESS_FORMAT_DOGE_TESTNET" | "ADDRESS_FORMAT_TON_V3R2" | "ADDRESS_FORMAT_TON_V4R2" | "ADDRESS_FORMAT_TON_V5R1" | "ADDRESS_FORMAT_XRP" | "ADDRESS_FORMAT_SPARK_MAINNET" | "ADDRESS_FORMAT_SPARK_REGTEST";
     v1ApiKey: {
         /** @description A User credential that can be used to authenticate to Turnkey. */
         credential: definitions["externaldatav1Credential"];
@@ -1023,20 +1124,30 @@ export type definitions = {
         /** @description A list of Oauth providers. */
         oauthProviders: definitions["v1OauthProviderParams"][];
     };
+    v1CreateOauthProvidersIntentV2: {
+        /** @description The ID of the User to add an Oauth provider to */
+        userId: string;
+        /** @description A list of Oauth providers. */
+        oauthProviders: definitions["v1OauthProviderParamsV2"][];
+    };
     v1CreateOauthProvidersRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS";
+        type: "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1CreateOauthProvidersIntent"];
+        parameters: definitions["v1CreateOauthProvidersIntentV2"];
         generateAppProofs?: boolean;
     };
     v1CreateOauthProvidersResult: {
         /** @description A list of unique identifiers for Oauth Providers */
         providerIds: string[];
     };
+    v1CreateOauthProvidersResultV2: {
+        /** @description A list of unique identifiers for Oauth Providers */
+        providerIds: string[];
+    };
     v1CreateOrganizationIntent: {
         /** @description Human-readable name for an Organization. */
         organizationName: string;
@@ -1214,7 +1325,7 @@ export type definitions = {
     v1CreateReadWriteSessionIntentV2: {
         /** @description Client-side public key generated by the user, to which the read write session bundle (credentials) will be encrypted. */
         targetPublicKey: string;
-        /** @description Unique identifier for a given User. */
+        /** @description Optional unique identifier for a given User. If none provided, the read write session will be created for the user who is making the request. */
         userId?: string;
         /** @description Optional human-readable name for an API Key. If none provided, default to Read Write Session - <Timestamp> */
         apiKeyName?: string;
@@ -1392,14 +1503,39 @@ export type definitions = {
         /** @description Optional signature proving authorization for this sub-organization creation. The signature is over the verification token ID and the root user parameters for the root user associated with the verification token. Only required if a public key was provided during the verification step. */
         clientSignature?: definitions["v1ClientSignature"];
     };
+    v1CreateSubOrganizationIntentV8: {
+        /** @description Name for this sub-organization */
+        subOrganizationName: string;
+        /** @description Root users to create within this sub-organization */
+        rootUsers: definitions["v1RootUserParamsV5"][];
+        /**
+         * Format: int32
+         * @description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users
+         */
+        rootQuorumThreshold: number;
+        /** @description The wallet to create for the sub-organization */
+        wallet?: definitions["v1WalletParams"];
+        /** @description Disable email recovery for the sub-organization */
+        disableEmailRecovery?: boolean;
+        /** @description Disable email auth for the sub-organization */
+        disableEmailAuth?: boolean;
+        /** @description Disable OTP SMS auth for the sub-organization */
+        disableSmsAuth?: boolean;
+        /** @description Disable OTP email auth for the sub-organization */
+        disableOtpEmailAuth?: boolean;
+        /** @description Signed JWT containing a unique id, expiry, verification type, contact */
+        verificationToken?: string;
+        /** @description Optional signature proving authorization for this sub-organization creation. The signature is over the verification token ID and the root user parameters for the root user associated with the verification token. Only required if a public key was provided during the verification step. */
+        clientSignature?: definitions["v1ClientSignature"];
+    };
     v1CreateSubOrganizationRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V7";
+        type: "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V8";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1CreateSubOrganizationIntentV7"];
+        parameters: definitions["v1CreateSubOrganizationIntentV8"];
         generateAppProofs?: boolean;
     };
     v1CreateSubOrganizationResult: {
@@ -1432,6 +1568,11 @@ export type definitions = {
         wallet?: definitions["v1WalletResult"];
         rootUserIds?: string[];
     };
+    v1CreateSubOrganizationResultV8: {
+        subOrganizationId: string;
+        wallet?: definitions["v1WalletResult"];
+        rootUserIds?: string[];
+    };
     v1CreateTvcAppIntent: {
         /** @description The name of the new TVC application */
         name: string;
@@ -1448,6 +1589,15 @@ export type definitions = {
         /** @description Enables network egress for this TVC app. Default if not provided: false. */
         enableEgress?: boolean;
     };
+    v1CreateTvcAppRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_CREATE_TVC_APP";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1CreateTvcAppIntent"];
+    };
     v1CreateTvcAppResult: {
         /** @description The unique identifier for the TVC application */
         appId: string;
@@ -1483,7 +1633,7 @@ export type definitions = {
         pivotContainerEncryptedPullSecret?: string;
         /** @description Optional flag to indicate whether to deploy the TVC app in debug mode, which includes additional logging and debugging tools. Default is false. */
         debugMode?: boolean;
-        /** @description Heath check type (TVC_HEALTH_CHECK_TYPE_HTTP or TVC_HEALTH_CHECK_TYPE_GRPC). HTTP health checks are made with a GET request on /health, and gRPC health checks follow the standard gRPC health checking protocol. */
+        /** @description Health check type (TVC_HEALTH_CHECK_TYPE_HTTP or TVC_HEALTH_CHECK_TYPE_GRPC). HTTP health checks are made with a GET request on /health, and gRPC health checks follow the standard gRPC health checking protocol. */
         healthCheckType: definitions["v1TvcHealthCheckType"];
         /**
          * Format: int64
@@ -1496,6 +1646,15 @@ export type definitions = {
          */
         publicIngressPort: number;
     };
+    v1CreateTvcDeploymentRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_CREATE_TVC_DEPLOYMENT";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1CreateTvcDeploymentIntent"];
+    };
     v1CreateTvcDeploymentResult: {
         /** @description The unique identifier for the TVC deployment */
         deploymentId: string;
@@ -1508,6 +1667,15 @@ export type definitions = {
         /** @description List of manifest approvals */
         approvals: definitions["v1TvcManifestApproval"][];
     };
+    v1CreateTvcManifestApprovalsRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_CREATE_TVC_MANIFEST_APPROVALS";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1CreateTvcManifestApprovalsIntent"];
+    };
     v1CreateTvcManifestApprovalsResult: {
         /** @description The unique identifier(s) for the manifest approvals */
         approvalIds: string[];
@@ -1546,14 +1714,18 @@ export type definitions = {
         /** @description A list of Users. */
         users: definitions["v1UserParamsV3"][];
     };
+    v1CreateUsersIntentV4: {
+        /** @description A list of Users. */
+        users: definitions["v1UserParamsV4"][];
+    };
     v1CreateUsersRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_CREATE_USERS_V3";
+        type: "ACTIVITY_TYPE_CREATE_USERS_V4";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1CreateUsersIntentV3"];
+        parameters: definitions["v1CreateUsersIntentV4"];
         generateAppProofs?: boolean;
     };
     v1CreateUsersResult: {
@@ -1880,6 +2052,42 @@ export type definitions = {
         /** @description Unique identifier of the sub organization that was removed */
         subOrganizationUuid: string;
     };
+    v1DeleteTvcAppAndDeploymentsIntent: {
+        /** @description The unique identifier of the TVC app to delete. The app and all associated deployments will be removed. */
+        appId: string;
+    };
+    v1DeleteTvcAppAndDeploymentsRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_DELETE_TVC_APP_AND_DEPLOYMENTS";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1DeleteTvcAppAndDeploymentsIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1DeleteTvcAppAndDeploymentsResult: {
+        /** @description The unique identifier of the deleted TVC app. */
+        appId: string;
+    };
+    v1DeleteTvcDeploymentIntent: {
+        /** @description The unique identifier of the TVC deployment to delete. */
+        deploymentId: string;
+    };
+    v1DeleteTvcDeploymentRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_DELETE_TVC_DEPLOYMENT";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1DeleteTvcDeploymentIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1DeleteTvcDeploymentResult: {
+        /** @description The unique identifier of the deleted TVC deployment. */
+        deploymentId: string;
+    };
     v1DeleteUserTagsIntent: {
         /** @description A list of User Tag IDs. */
         userTagIds: string[];
@@ -2138,6 +2346,16 @@ export type definitions = {
          */
         caip2: "eip155:1" | "eip155:11155111" | "eip155:8453" | "eip155:84532" | "eip155:137" | "eip155:80002";
     };
+    v1EthSendRawTransactionRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_ETH_SEND_RAW_TRANSACTION";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1EthSendRawTransactionIntent"];
+        generateAppProofs?: boolean;
+    };
     v1EthSendRawTransactionResult: {
         /** @description The transaction hash of the sent transaction */
         transactionHash: string;
@@ -2166,6 +2384,8 @@ export type definitions = {
         maxFeePerGas?: string;
         /** @description Maximum priority fee (tip) per gas unit in wei. Required for non-sponsored (EIP-1559) transactions. Not used for sponsored transactions. */
         maxPriorityFeePerGas?: string;
+        /** @description Unix timestamp in seconds for EIP-712 execution deadline. Only used when sponsor=true. */
+        deadline?: string;
         /** @description The gas station delegate contract nonce. Only used when sponsor=true. Include this if you want maximal security posture. */
         gasStationNonce?: string;
     };
@@ -2391,6 +2611,15 @@ export type definitions = {
         /** @description The total gas usage (in USD) of all sponsored transactions processed over the last `window_duration_minutes` */
         usageUsd: string;
     };
+    v1GetIpAllowlistRequest: {
+        /** @description Unique identifier for a given organization. */
+        organizationId: string;
+        /** @description If provided, return only the allowlist for this specific API key. */
+        publicKey?: string;
+    };
+    v1GetIpAllowlistResponse: {
+        allowlist: definitions["v1IpAllowlist"];
+    };
     v1GetLatestBootProofRequest: {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
@@ -2463,6 +2692,14 @@ export type definitions = {
         /** @description Organization configs including quorum settings and organization features. */
         configs: definitions["v1Config"];
     };
+    v1GetOrganizationRequest: {
+        /** @description Unique identifier for a given organization. */
+        organizationId: string;
+    };
+    v1GetOrganizationResponse: {
+        /** @description Object representing the full current and deleted / disabled collection of users, policies, private keys, and invitations attributable to a particular organization. */
+        organizationData: definitions["v1OrganizationData"];
+    };
     v1GetPoliciesRequest: {
         /** @description Unique identifier for a given organization. */
         organizationId: string;
@@ -2558,6 +2795,62 @@ export type definitions = {
         /** @description List of unique identifiers for the matching sub-organizations. */
         organizationIds: string[];
     };
+    v1GetTvcAppDeploymentsRequest: {
+        /** @description Unique identifier for a given organization. */
+        organizationId: string;
+        /** @description Unique identifier for a given TVC App. */
+        appId: string;
+    };
+    v1GetTvcAppDeploymentsResponse: {
+        /** @description List of deployments for this TVC App */
+        tvcDeployments: definitions["v1TvcDeployment"][];
+    };
+    v1GetTvcAppRequest: {
+        /** @description Unique identifier for a given organization. */
+        organizationId: string;
+        /** @description Unique identifier for a given TVC App. */
+        tvcAppId: string;
+    };
+    v1GetTvcAppResponse: {
+        /** @description Details about a single TVC App */
+        tvcApp: definitions["v1TvcApp"];
+    };
+    v1GetTvcAppsRequest: {
+        /** @description Unique identifier for a given organization. */
+        organizationId: string;
+    };
+    v1GetTvcAppsResponse: {
+        /** @description A list of TVC Apps. */
+        tvcApps: definitions["v1TvcApp"][];
+    };
+    v1GetTvcDeploymentProvisioningDetailsRequest: {
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        /** @description Unique identifier for a given TVC Deployment. */
+        deploymentId: string;
+    };
+    v1GetTvcDeploymentProvisioningDetailsResponse: {
+        /**
+         * Format: byte
+         * @description The attestation document of the provisioning enclave in a TVC deployment.
+         */
+        attestationDocument: string;
+        /**
+         * Format: byte
+         * @description The manifest envelope containing the TVC deployment's manifest and signatures.
+         */
+        manifestEnvelope: string;
+    };
+    v1GetTvcDeploymentRequest: {
+        /** @description Unique identifier for a given organization. */
+        organizationId: string;
+        /** @description Unique identifier for a given TVC Deployment. */
+        deploymentId: string;
+    };
+    v1GetTvcDeploymentResponse: {
+        /** @description Details about a single TVC Deployment */
+        tvcDeployment: definitions["v1TvcDeployment"];
+    };
     v1GetUserRequest: {
         /** @description Unique identifier for a given organization. */
         organizationId: string;
@@ -2621,7 +2914,7 @@ export type definitions = {
     v1GetWalletAddressBalancesRequest: {
         /** @description Unique identifier for a given organization. */
         organizationId: string;
-        /** @description Address corresponding to a wallet account. */
+        /** @description Address corresponding to a wallet account. Private key addresses are not supported. */
         address: string;
         /**
          * @description CAIP-2 chain ID (e.g., 'eip155:1' for Ethereum mainnet or 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp' for Solana mainnet). Human-readable Solana aliases ('solana:mainnet', 'solana:devnet') are also accepted and normalized to canonical CAIP-2 values.
@@ -2945,20 +3238,55 @@ export type definitions = {
         /** @description Optional custom email address to use as reply-to */
         replyToEmailAddress?: string;
     };
+    v1InitOtpIntentV3: {
+        /** @description Whether to send OTP via SMS or email. Possible values: OTP_TYPE_SMS, OTP_TYPE_EMAIL */
+        otpType: string;
+        /** @description Email or phone number to send the OTP code to */
+        contact: string;
+        /** @description The name of the application. */
+        appName: string;
+        /**
+         * Format: int32
+         * @description Optional length of the OTP code. Default = 9
+         */
+        otpLength?: number;
+        /** @description Optional parameters for customizing emails. If not provided, the default email will be used. */
+        emailCustomization?: definitions["v1EmailCustomizationParamsV2"];
+        /** @description Optional parameters for customizing SMS message. If not provided, the default sms message will be used. */
+        smsCustomization?: definitions["v1SmsCustomizationParams"];
+        /** @description Optional client-generated user identifier to enable per-user rate limiting for SMS auth. We recommend using a hash of the client-side IP address. */
+        userIdentifier?: string;
+        /** @description Optional custom email address from which to send the OTP email */
+        sendFromEmailAddress?: string;
+        /** @description Optional flag to specify if the OTP code should be alphanumeric (Crockford’s Base32). If set to false, OTP code will only be numeric. Default = true */
+        alphanumeric?: boolean;
+        /** @description Optional custom sender name for use with sendFromEmailAddress; if left empty, will default to 'Notifications' */
+        sendFromEmailSenderName?: string;
+        /** @description Expiration window (in seconds) indicating how long the OTP is valid for. If not provided, a default of 5 minutes will be used. Maximum value is 600 seconds (10 minutes) */
+        expirationSeconds?: string;
+        /** @description Optional custom email address to use as reply-to */
+        replyToEmailAddress?: string;
+    };
     v1InitOtpRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_INIT_OTP_V2";
+        type: "ACTIVITY_TYPE_INIT_OTP_V3";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1InitOtpIntentV2"];
+        parameters: definitions["v1InitOtpIntentV3"];
         generateAppProofs?: boolean;
     };
     v1InitOtpResult: {
         /** @description Unique identifier for an OTP authentication */
         otpId: string;
     };
+    v1InitOtpResultV2: {
+        /** @description Unique identifier for an OTP flow */
+        otpId: string;
+        /** @description Signed bundle containing a target encryption key to use when submitting OTP codes. */
+        otpEncryptionTargetBundle: string;
+    };
     v1InitUserEmailRecoveryIntent: {
         /** @description Email of the user starting recovery */
         email: string;
@@ -3123,10 +3451,45 @@ export type definitions = {
         createTvcDeploymentIntent?: definitions["v1CreateTvcDeploymentIntent"];
         createTvcManifestApprovalsIntent?: definitions["v1CreateTvcManifestApprovalsIntent"];
         solSendTransactionIntent?: definitions["v1SolSendTransactionIntent"];
+        initOtpIntentV3?: definitions["v1InitOtpIntentV3"];
+        verifyOtpIntentV2?: definitions["v1VerifyOtpIntentV2"];
+        otpLoginIntentV2?: definitions["v1OtpLoginIntentV2"];
         updateOrganizationNameIntent?: definitions["v1UpdateOrganizationNameIntent"];
+        createSubOrganizationIntentV8?: definitions["v1CreateSubOrganizationIntentV8"];
+        createOauthProvidersIntentV2?: definitions["v1CreateOauthProvidersIntentV2"];
+        createUsersIntentV4?: definitions["v1CreateUsersIntentV4"];
         createWebhookEndpointIntent?: definitions["v1CreateWebhookEndpointIntent"];
         updateWebhookEndpointIntent?: definitions["v1UpdateWebhookEndpointIntent"];
         deleteWebhookEndpointIntent?: definitions["v1DeleteWebhookEndpointIntent"];
+        setIpAllowlistIntent?: definitions["v1SetIpAllowlistIntent"];
+        removeIpAllowlistIntent?: definitions["v1RemoveIpAllowlistIntent"];
+        updateTvcAppLiveDeploymentIntent?: definitions["v1UpdateTvcAppLiveDeploymentIntent"];
+        deleteTvcDeploymentIntent?: definitions["v1DeleteTvcDeploymentIntent"];
+        deleteTvcAppAndDeploymentsIntent?: definitions["v1DeleteTvcAppAndDeploymentsIntent"];
+        restoreTvcDeploymentIntent?: definitions["v1RestoreTvcDeploymentIntent"];
+        sparkSignFrostIntent?: definitions["v1SparkSignFrostIntent"];
+        sparkPrepareTransferIntent?: definitions["v1SparkPrepareTransferIntent"];
+        sparkClaimTransferIntent?: definitions["v1SparkClaimTransferIntent"];
+        sparkPrepareLightningReceiveIntent?: definitions["v1SparkPrepareLightningReceiveIntent"];
+        postTvcQuorumKeyShareIntent?: definitions["v1PostTvcQuorumKeyShareIntent"];
+    };
+    v1Invitation: {
+        /** @description Unique identifier for a given Invitation object. */
+        invitationId: string;
+        /** @description The name of the intended Invitation recipient. */
+        receiverUserName: string;
+        /** @description The email address of the intended Invitation recipient. */
+        receiverEmail: string;
+        /** @description A list of tags assigned to the Invitation recipient. */
+        receiverUserTags: string[];
+        /** @description The User's permissible access method(s). */
+        accessType: definitions["v1AccessType"];
+        /** @description The current processing status of a specified Invitation. */
+        status: definitions["v1InvitationStatus"];
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+        /** @description Unique identifier for the Sender of an Invitation. */
+        senderUserId: string;
     };
     v1InvitationParams: {
         /** @description The name of the intended Invitation recipient. */
@@ -3140,6 +3503,34 @@ export type definitions = {
         /** @description Unique identifier for the Sender of an Invitation. */
         senderUserId: string;
     };
+    /** @enum {string} */
+    v1InvitationStatus: "INVITATION_STATUS_CREATED" | "INVITATION_STATUS_ACCEPTED" | "INVITATION_STATUS_REVOKED";
+    v1IpAllowlist: {
+        /** @description Unique identifier for the organization this allowlist belongs to. */
+        organizationId: string;
+        /** @description List of IP allowlist rules with their metadata. */
+        rules: definitions["v1IpAllowlistRule"][];
+        /** @description Public key of the API key this allowlist applies to. Null means the allowlist applies to the entire organization. */
+        publicKey?: string;
+        /** @description Whether the IP allowlist is enabled. Only present for organization-level allowlists. Null for API key-level allowlists (presence of the allowlist implies enablement). */
+        enabled?: boolean;
+        /** @description Behavior when an error occurs during IP allowlist evaluation. Valid values: ALLOW, DENY. Defaults to DENY. */
+        onEvaluationError?: string;
+    };
+    v1IpAllowlistIntentRule: {
+        /** @description CIDR block (e.g., '192.168.1.0/24', '2001:db8::/32'). */
+        cidr: string;
+        /** @description Optional human-readable label for this rule (e.g., 'Office VPN'). */
+        label?: string;
+    };
+    v1IpAllowlistRule: {
+        /** @description CIDR block (e.g., '192.168.1.0/24'). */
+        cidr: string;
+        /** @description Optional human-readable label for this rule. */
+        label?: string;
+        /** @description Creation timestamp as millisecond epoch string. */
+        createdAt?: string;
+    };
     v1ListFiatOnRampCredentialsRequest: {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
@@ -3220,8 +3611,8 @@ export type definitions = {
         redirectUri: string;
         /** @description The code verifier used by OAuth 2.0 PKCE providers */
         codeVerifier: string;
-        /** @description An optional nonce used by the client to prevent replay/substitution of an ID token */
-        nonce?: string;
+        /** @description A nonce value set to sha256(publicKey), used to bind the OIDC token to a specific public key */
+        nonce: string;
         /** @description An optional P256 public key to which, if provided, the bearer token will be encrypted and returned via the `encrypted_bearer_token` claim of the OIDC Token */
         bearerTokenTargetPublicKey?: string;
     };
@@ -3311,6 +3702,14 @@ export type definitions = {
         /** @description Base64 encoded OIDC token */
         oidcToken: string;
     };
+    v1OauthProviderParamsV2: {
+        /** @description Human-readable name to identify a Provider. */
+        providerName: string;
+        /** @description Base64 encoded OIDC token */
+        oidcToken?: string;
+        /** @description OIDC claims (iss, sub, aud) to uniquely identify the user */
+        oidcClaims?: definitions["v1OidcClaims"];
+    };
     v1OauthRequest: {
         /** @enum {string} */
         type: "ACTIVITY_TYPE_OAUTH";
@@ -3329,8 +3728,29 @@ export type definitions = {
         /** @description HPKE encrypted credential bundle */
         credentialBundle: string;
     };
+    v1OidcClaims: {
+        /** @description The issuer identifier from the OIDC token (iss claim) */
+        iss: string;
+        /** @description The subject identifier from the OIDC token (sub claim) */
+        sub: string;
+        /** @description The audience from the OIDC token (aud claim) */
+        aud: string;
+    };
     /** @enum {string} */
     v1Operator: "OPERATOR_EQUAL" | "OPERATOR_MORE_THAN" | "OPERATOR_MORE_THAN_OR_EQUAL" | "OPERATOR_LESS_THAN" | "OPERATOR_LESS_THAN_OR_EQUAL" | "OPERATOR_CONTAINS" | "OPERATOR_NOT_EQUAL" | "OPERATOR_IN" | "OPERATOR_NOT_IN" | "OPERATOR_CONTAINS_ONE" | "OPERATOR_CONTAINS_ALL";
+    v1OrganizationData: {
+        organizationId?: string;
+        name?: string;
+        users?: definitions["v1User"][];
+        policies?: definitions["v1Policy"][];
+        privateKeys?: definitions["v1PrivateKey"][];
+        invitations?: definitions["v1Invitation"][];
+        tags?: definitions["datav1Tag"][];
+        rootQuorum?: definitions["externaldatav1Quorum"];
+        features?: definitions["v1Feature"][];
+        wallets?: definitions["v1Wallet"][];
+        smartContractInterfaceReferences?: definitions["v1SmartContractInterfaceReference"][];
+    };
     v1OtpAuthIntent: {
         /** @description ID representing the result of an init OTP activity. */
         otpId: string;
@@ -3375,14 +3795,26 @@ export type definitions = {
         /** @description Optional signature proving authorization for this login. The signature is over the verification token ID and the public key. Only required if a public key was provided during the verification step. */
         clientSignature?: definitions["v1ClientSignature"];
     };
+    v1OtpLoginIntentV2: {
+        /** @description Signed Verification Token containing a unique id, expiry, verification type, contact */
+        verificationToken: string;
+        /** @description Client-side public key generated by the user, used as the session public key upon successful login */
+        publicKey: string;
+        /** @description Required signature proving authorization for this login. The signature is over the verification token ID and the public key. Required for secure OTP login process. */
+        clientSignature: definitions["v1ClientSignature"];
+        /** @description Expiration window (in seconds) indicating how long the Session is valid for. If not provided, a default of 15 minutes will be used. */
+        expirationSeconds?: string;
+        /** @description Invalidate all other previously generated Login sessions */
+        invalidateExisting?: boolean;
+    };
     v1OtpLoginRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_OTP_LOGIN";
+        type: "ACTIVITY_TYPE_OTP_LOGIN_V2";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1OtpLoginIntent"];
+        parameters: definitions["v1OtpLoginIntentV2"];
         generateAppProofs?: boolean;
     };
     v1OtpLoginResult: {
@@ -3419,6 +3851,27 @@ export type definitions = {
         /** @description A condition expression that evalutes to true or false. */
         condition: string;
     };
+    v1PostTvcQuorumKeyShareIntent: {
+        /** @description Unique identifier of the TVC deployment receiving quorum key share */
+        deploymentId: string;
+        /** @description Hex-encoded ephemeral public key used to encrypt the quorum key share */
+        ephemeralPublicKeyHex: string;
+        /** @description Re-encrypted quorum key share and approval */
+        shareApprovalBundle: definitions["v1QuorumKeyShareApprovalBundle"];
+    };
+    v1PostTvcQuorumKeyShareRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_POST_TVC_QUORUM_KEY_SHARE";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1PostTvcQuorumKeyShareIntent"];
+    };
+    v1PostTvcQuorumKeyShareResult: {
+        /** @description The unique identifier for the provisioning quorum key share */
+        provisioningShareId: string;
+    };
     v1PrivateKey: {
         /** @description Unique identifier for a given Private Key. */
         privateKeyId: string;
@@ -3463,6 +3916,14 @@ export type definitions = {
         response: definitions["v1AuthenticatorAttestationResponse"];
         clientExtensionResults: definitions["v1SimpleClientExtensionResults"];
     };
+    v1QuorumKeyShareApprovalBundle: {
+        /** @description Unique identifier of the operator providing this quorum key share */
+        operatorId: string;
+        /** @description Hex-encoded re-encrypted quorum key share */
+        reEncryptedShareHex: string;
+        /** @description Signature from the share set operator approving the manifest */
+        signature: string;
+    };
     v1RecoverUserIntent: {
         /** @description The new authenticator to register. */
         authenticator: definitions["v1AuthenticatorParamsV2"];
@@ -3483,6 +3944,12 @@ export type definitions = {
         /** @description ID of the authenticator created. */
         authenticatorId: string[];
     };
+    v1RefreshFeatureFlagsRequest: {
+        [key: string]: unknown;
+    };
+    v1RefreshFeatureFlagsResponse: {
+        [key: string]: unknown;
+    };
     v1RejectActivityIntent: {
         /** @description An artifact verifying a User's action. */
         fingerprint: string;
@@ -3497,6 +3964,23 @@ export type definitions = {
         parameters: definitions["v1RejectActivityIntent"];
         generateAppProofs?: boolean;
     };
+    v1RemoveIpAllowlistIntent: {
+        /** @description The public component of an API key. If null, removes the organization-level IP allowlist. If set, removes the IP allowlist for this specific API key. */
+        publicKey?: string;
+    };
+    v1RemoveIpAllowlistRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_REMOVE_IP_ALLOWLIST";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1RemoveIpAllowlistIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1RemoveIpAllowlistResult: {
+        [key: string]: unknown;
+    };
     v1RemoveOrganizationFeatureIntent: {
         /** @description Name of the feature to remove */
         name: definitions["v1FeatureName"];
@@ -3515,6 +3999,24 @@ export type definitions = {
         /** @description Resulting list of organization features. */
         features: definitions["v1Feature"][];
     };
+    v1RestoreTvcDeploymentIntent: {
+        /** @description The unique identifier of the TVC deployment to restore. */
+        deploymentId: string;
+    };
+    v1RestoreTvcDeploymentRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_RESTORE_TVC_DEPLOYMENT";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1RestoreTvcDeploymentIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1RestoreTvcDeploymentResult: {
+        /** @description The unique identifier of the restored TVC deployment. */
+        deploymentId: string;
+    };
     v1Result: {
         createOrganizationResult?: definitions["v1CreateOrganizationResult"];
         createAuthenticatorsResult?: definitions["v1CreateAuthenticatorsResult"];
@@ -3614,10 +4116,24 @@ export type definitions = {
         createTvcDeploymentResult?: definitions["v1CreateTvcDeploymentResult"];
         createTvcManifestApprovalsResult?: definitions["v1CreateTvcManifestApprovalsResult"];
         solSendTransactionResult?: definitions["v1SolSendTransactionResult"];
+        initOtpResultV2?: definitions["v1InitOtpResultV2"];
         updateOrganizationNameResult?: definitions["v1UpdateOrganizationNameResult"];
+        createSubOrganizationResultV8?: definitions["v1CreateSubOrganizationResultV8"];
+        createOauthProvidersResultV2?: definitions["v1CreateOauthProvidersResultV2"];
         createWebhookEndpointResult?: definitions["v1CreateWebhookEndpointResult"];
         updateWebhookEndpointResult?: definitions["v1UpdateWebhookEndpointResult"];
         deleteWebhookEndpointResult?: definitions["v1DeleteWebhookEndpointResult"];
+        setIpAllowlistResult?: definitions["v1SetIpAllowlistResult"];
+        removeIpAllowlistResult?: definitions["v1RemoveIpAllowlistResult"];
+        updateTvcAppLiveDeploymentResult?: definitions["v1UpdateTvcAppLiveDeploymentResult"];
+        deleteTvcDeploymentResult?: definitions["v1DeleteTvcDeploymentResult"];
+        deleteTvcAppAndDeploymentsResult?: definitions["v1DeleteTvcAppAndDeploymentsResult"];
+        restoreTvcDeploymentResult?: definitions["v1RestoreTvcDeploymentResult"];
+        sparkSignFrostResult?: definitions["v1SparkSignFrostResult"];
+        sparkPrepareTransferResult?: definitions["v1SparkPrepareTransferResult"];
+        sparkClaimTransferResult?: definitions["v1SparkClaimTransferResult"];
+        sparkPrepareLightningReceiveResult?: definitions["v1SparkPrepareLightningReceiveResult"];
+        postTvcQuorumKeyShareResult?: definitions["v1PostTvcQuorumKeyShareResult"];
     };
     v1RevertChainEntry: {
         /** @description The contract address where the revert occurred. */
@@ -3681,16 +4197,53 @@ export type definitions = {
         /** @description A list of Oauth providers. This field, if not needed, should be an empty array in your request body. */
         oauthProviders: definitions["v1OauthProviderParams"][];
     };
-    v1Selector: {
-        subject?: string;
-        operator?: definitions["v1Operator"];
-        target?: string;
-    };
-    v1SelectorV2: {
-        subject?: string;
-        operator?: definitions["v1Operator"];
+    v1RootUserParamsV5: {
+        /** @description Human-readable name for a User. */
+        userName: string;
+        /** @description The user's email address. */
+        userEmail?: string;
+        /** @description The user's phone number in E.164 format e.g. +13214567890 */
+        userPhoneNumber?: string;
+        /** @description A list of API Key parameters. This field, if not needed, should be an empty array in your request body. */
+        apiKeys: definitions["v1ApiKeyParamsV2"][];
+        /** @description A list of Authenticator parameters. This field, if not needed, should be an empty array in your request body. */
+        authenticators: definitions["v1AuthenticatorParamsV2"][];
+        /** @description A list of Oauth providers. This field, if not needed, should be an empty array in your request body. */
+        oauthProviders: definitions["v1OauthProviderParamsV2"][];
+    };
+    v1Selector: {
+        subject?: string;
+        operator?: definitions["v1Operator"];
+        target?: string;
+    };
+    v1SelectorV2: {
+        subject?: string;
+        operator?: definitions["v1Operator"];
         targets?: string[];
     };
+    v1SetIpAllowlistIntent: {
+        /** @description The public component of an API key. If null, the IP allowlist applies at the organization level. If set, it applies only to this specific API key. */
+        publicKey?: string;
+        /** @description Whether the IP allowlist is enabled. Only meaningful for organization-level allowlists. Omit for API key-level allowlists. */
+        enabled?: boolean;
+        /** @description List of IP allowlist rules with CIDR blocks and optional labels. */
+        rules?: definitions["v1IpAllowlistIntentRule"][];
+        /** @description Behavior when an error occurs during IP allowlist evaluation. Valid values: ALLOW, DENY. Defaults to DENY. */
+        onEvaluationError?: string;
+    };
+    v1SetIpAllowlistRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SET_IP_ALLOWLIST";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SetIpAllowlistIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1SetIpAllowlistResult: {
+        [key: string]: unknown;
+    };
     v1SetOrganizationFeatureIntent: {
         /** @description Name of the feature to set */
         name: definitions["v1FeatureName"];
@@ -3806,11 +4359,23 @@ export type definitions = {
         authenticators?: definitions["v1AuthenticatorParamsV2"][];
         oauthProviders?: definitions["v1OauthProviderParams"][];
     };
+    v1SignupUsageV2: {
+        email?: string;
+        phoneNumber?: string;
+        apiKeys?: definitions["v1ApiKeyParamsV2"][];
+        authenticators?: definitions["v1AuthenticatorParamsV2"][];
+        oauthProviders?: definitions["v1OauthProviderParamsV2"][];
+    };
     v1SimpleClientExtensionResults: {
         appid?: boolean;
         appidExclude?: boolean;
         credProps?: definitions["v1CredPropsAuthenticationExtensionsClientOutputs"];
     };
+    v1SmartContractInterfaceReference: {
+        smartContractInterfaceId?: string;
+        smartContractAddress?: string;
+        digest?: string;
+    };
     /** @enum {string} */
     v1SmartContractInterfaceType: "SMART_CONTRACT_INTERFACE_TYPE_ETHEREUM" | "SMART_CONTRACT_INTERFACE_TYPE_SOLANA";
     v1SmsCustomizationParams: {
@@ -3825,10 +4390,10 @@ export type definitions = {
         /** @description Whether to sponsor this transaction via Gas Station. */
         sponsor?: boolean;
         /**
-         * @description CAIP-2 chain ID (e.g., 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp' for Solana mainnet).
+         * @description CAIP-2 chain ID (e.g., 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp' for Solana mainnet). Human-readable Solana aliases ('solana:mainnet', 'solana:devnet') are also accepted and normalized to canonical CAIP-2 values.
          * @enum {string}
          */
-        caip2: "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" | "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1wcaWoxPkrZBG" | "solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3zQawwpjk2NsNY";
+        caip2: "solana:mainnet" | "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" | "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d" | "solana:devnet" | "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1" | "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1wcaWoxPkrZBG";
         /** @description user-provided blockhash for replay protection / deadline control. If omitted and sponsor=true, we fetch a fresh blockhash during execution */
         recentBlockhash?: string;
     };
@@ -3876,6 +4441,229 @@ export type definitions = {
         /** @description The Solana transaction signature, if available. */
         signature?: string;
     };
+    v1SparkClaimLeaf: {
+        /** @description Leaf identifier (UUID). */
+        leafId: string;
+        /** @description ECIES ciphertext (hex-encoded) containing the inbound transfer secret. Decrypted inside the enclave using the wallet's Identity key. */
+        ciphertext: string;
+        /** @description Hex-encoded 64-byte compact ECDSA signature binding (leaf_id, transfer_id, ciphertext) to the sender's identity key. Verified inside the enclave before decryption. */
+        senderSignature: string;
+    };
+    v1SparkClaimPackage: {
+        /** @description Leaves being claimed. */
+        leaves: definitions["v1SparkClaimLeaf"][];
+        /**
+         * Format: int64
+         * @description Shamir threshold for reconstructing the per-leaf claim secret.
+         */
+        threshold: number;
+        /** @description Operators that will receive Shamir shares. */
+        operatorRecipients: definitions["v1SparkOperatorRecipient"][];
+        /** @description Spark transfer identifier (UUID). Used together with each leaf's sender_signature to verify the sender bound this ciphertext to this transfer. */
+        transferId: string;
+        /** @description Sender's compressed secp256k1 identity public key (hex-encoded, 33 bytes). Used to verify the per-leaf sender_signature fields. */
+        senderIdentityPublicKey: string;
+    };
+    v1SparkClaimTransferIntent: {
+        /** @description A Spark wallet account address identifying the wallet. */
+        signWith: string;
+        /** @description Claim package parameters. */
+        claim: definitions["v1SparkClaimPackage"];
+    };
+    v1SparkClaimTransferRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_CLAIM_TRANSFER";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkClaimTransferIntent"];
+    };
+    v1SparkClaimTransferResult: {
+        /** @description Per-operator ECIES-encrypted packages. */
+        operatorPackages: definitions["v1SparkEncryptedOperatorPackage"][];
+        /** @description Newly-derived SigningLeaf public keys, one per leaf, in input order. */
+        newLeafPublicKeys: definitions["v1SparkLeafPublicKey"][];
+    };
+    v1SparkDepositDerivation: {
+        [key: string]: unknown;
+    };
+    v1SparkEncryptedOperatorPackage: {
+        /** @description Spark operator identifier (UUID). */
+        operatorId: string;
+        /** @description ECIES ciphertext (hex-encoded) opaque to Turnkey after emission. */
+        encryptedPackage: string;
+    };
+    v1SparkFrostCommitment: {
+        /** @description FROST participant identifier, hex-encoded (32-byte scalar). */
+        id: string;
+        /** @description Hiding commitment D, hex-encoded compressed secp256k1 point. */
+        hiding: string;
+        /** @description Binding commitment E, hex-encoded compressed secp256k1 point. */
+        binding: string;
+    };
+    v1SparkHtlcPreimageDerivation: {
+        [key: string]: unknown;
+    };
+    v1SparkIdentityDerivation: {
+        [key: string]: unknown;
+    };
+    v1SparkKeyDerivation: {
+        /** @description Spark identity key derivation. */
+        identity?: definitions["v1SparkIdentityDerivation"];
+        /** @description Spark signing leaf key derivation, identified by leaf ID. */
+        signingLeaf?: definitions["v1SparkSigningLeafDerivation"];
+        /** @description Spark deposit key derivation. */
+        deposit?: definitions["v1SparkDepositDerivation"];
+        /** @description Spark static deposit key derivation, identified by index. */
+        staticDeposit?: definitions["v1SparkStaticDepositDerivation"];
+        /** @description Spark HTLC preimage key derivation. */
+        htlcPreimage?: definitions["v1SparkHtlcPreimageDerivation"];
+    };
+    v1SparkLeafPublicKey: {
+        /** @description The Spark leaf_id this public key was derived for. */
+        leafId: string;
+        /** @description Hex-encoded compressed secp256k1 point (33 bytes) for the SigningLeaf derivation at leaf_id. */
+        publicKey: string;
+    };
+    v1SparkLightningReceivePackage: {
+        /**
+         * Format: int64
+         * @description Feldman VSS threshold for reconstructing the preimage.
+         */
+        threshold: number;
+        /** @description Operators that will receive Feldman shares of the preimage. Order must match the operators' numeric IDs in the Spark operator config - share index is the 1-based position in this list. */
+        operatorRecipients: definitions["v1SparkOperatorRecipient"][];
+    };
+    v1SparkOperatorRecipient: {
+        /** @description Spark operator identifier (UUID). */
+        operatorId: string;
+        /** @description Operator's ECIES encryption pubkey (hex-encoded compressed secp256k1 point). */
+        encryptionPublicKey: string;
+    };
+    v1SparkPartialSignature: {
+        /** @description Hex-encoded FROST partial signature. */
+        signatureShare: string;
+        /** @description Turnkey's hiding commitment D (hex-encoded compressed secp256k1 point). Forward to the Spark Operator. */
+        hiding: string;
+        /** @description Turnkey's binding commitment E (hex-encoded compressed secp256k1 point). Forward to the Spark Operator. */
+        binding: string;
+    };
+    v1SparkPrepareLightningReceiveIntent: {
+        /** @description A Spark wallet account address identifying the wallet. */
+        signWith: string;
+        /** @description Lightning receive package parameters: threshold and operator recipients. */
+        lightningReceive: definitions["v1SparkLightningReceivePackage"];
+    };
+    v1SparkPrepareLightningReceiveRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_PREPARE_LIGHTNING_RECEIVE";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkPrepareLightningReceiveIntent"];
+    };
+    v1SparkPrepareLightningReceiveResult: {
+        /** @description Per-operator ECIES-encrypted Feldman share packages. */
+        operatorPackages: definitions["v1SparkEncryptedOperatorPackage"][];
+        /** @description Hex-encoded SHA256(preimage). Forward to the Lightning node. */
+        paymentHash: string;
+    };
+    v1SparkPrepareTransferIntent: {
+        /** @description A Spark wallet account address identifying the wallet. */
+        signWith: string;
+        /** @description Transfer package parameters for HD key tweak splitting. */
+        transfer: definitions["v1SparkTransferPackage"];
+    };
+    v1SparkPrepareTransferRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_PREPARE_TRANSFER";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkPrepareTransferIntent"];
+    };
+    v1SparkPrepareTransferResult: {
+        /** @description Per-operator ECIES-encrypted packages. */
+        operatorPackages: definitions["v1SparkEncryptedOperatorPackage"][];
+        /** @description Hex-encoded ECDSA-DER signature of the TransferPackage signing payload, signed with the wallet's IDENTITY key. */
+        transferUserSignature: string;
+        /** @description Newly-derived SigningLeaf public keys, one per leaf, in input order. */
+        newLeafPublicKeys: definitions["v1SparkLeafPublicKey"][];
+    };
+    v1SparkSignFrostIntent: {
+        /** @description A Spark wallet account address identifying the wallet to sign with. */
+        signWith: string;
+        /** @description Batched sign requests. Each produces a partial signature plus Turnkey's public commitments. */
+        signatures: definitions["v1SparkSignatureRequest"][];
+    };
+    v1SparkSignFrostRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_SIGN_FROST";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkSignFrostIntent"];
+    };
+    v1SparkSignFrostResult: {
+        /** @description Partial signatures plus Turnkey commitments, one per request, in order. */
+        signatures: definitions["v1SparkPartialSignature"][];
+    };
+    v1SparkSignatureRequest: {
+        /** @description Which key to sign with. */
+        derivation: definitions["v1SparkKeyDerivation"];
+        /** @description Hex-encoded 32-byte sighash to sign. */
+        message: string;
+        /** @description Aggregate group verifying key (hex-encoded compressed secp256k1 point), computed as P_ops + P_user. Bound into the nonce HMAC. */
+        verifyingKey: string;
+        /** @description Commitments for every non-Turnkey participant. MUST NOT include an entry under Turnkey's identifier. Bound into the nonce HMAC. */
+        operatorCommitments: definitions["v1SparkFrostCommitment"][];
+        /** @description Optional adaptor point T (hex-encoded 33-byte compressed secp256k1 pubkey). When set, Turnkey produces a Schnorr adaptor pre-signature with the FROST challenge bound to `R+T` (where `R` is the aggregate group nonce commitment from FROST). The party holding the discrete log `t` completes the pre-sig to a valid BIP-340 signature by adding `t` (or `-t`, for parity) to the signature scalar `s`. This is primarily used by Spark leaves-swap and other adaptor-bound flows; absent or empty leads to plain FROST signing (the typical case). */
+        adaptorPublicKey?: string;
+    };
+    v1SparkSigningLeafDerivation: {
+        /** @description Unique identifier for the Spark signing leaf. */
+        leafId: string;
+    };
+    v1SparkStaticDepositDerivation: {
+        /**
+         * Format: int64
+         * @description Index used to derive the static deposit key.
+         */
+        index: number;
+    };
+    v1SparkTransferLeaf: {
+        /** @description Leaf identifier (UUID). */
+        leafId: string;
+        /** @description Derivation for the existing (pre-transfer) leaf key. Always a SigningLeaf derivation. */
+        oldLeafDerivation: definitions["v1SparkKeyDerivation"];
+        /** @description Derivation for the new (post-transfer) leaf key. Always a SigningLeaf derivation. The enclave ECIES-encrypts this private key to receiver_public_key as the per-leaf secret_cipher; HD-derived rather than random so the sender can re-derive on retry (Turnkey's enclave is stateless). */
+        newLeafDerivation: definitions["v1SparkKeyDerivation"];
+        /** @description Client-produced CPFP refund signature (hex-encoded), passed through verbatim into the per-operator SendLeafKeyTweak. Empty omits the field from the operator package. */
+        refundSignature?: string;
+        /** @description Client-produced direct refund signature (hex-encoded). Passed through verbatim. */
+        directRefundSignature?: string;
+        /** @description Client-produced direct-from-CPFP refund signature (hex-encoded). Passed through verbatim. */
+        directFromCpfpRefundSignature?: string;
+    };
+    v1SparkTransferPackage: {
+        /** @description Spark transfer identifier (UUID). */
+        transferId: string;
+        /** @description Leaves being transferred. */
+        leaves: definitions["v1SparkTransferLeaf"][];
+        /**
+         * Format: int64
+         * @description Feldman VSS threshold for reconstructing the per-leaf tweak scalar.
+         */
+        threshold: number;
+        /** @description Operators that will receive Feldman shares of the per-leaf tweak. Order must match the operators' numeric IDs in the Spark operator config - share index is the 1-based position in this list. */
+        operatorRecipients: definitions["v1SparkOperatorRecipient"][];
+        /** @description Recipient's identity pubkey (hex-encoded compressed secp256k1 point). Each leaf's new_priv is ECIES-encrypted to this key and embedded in the per-operator package for claim-time delivery. */
+        receiverPublicKey: string;
+    };
     v1StampLoginIntent: {
         /** @description Client-side public key generated by the user, which will be conditionally added to org data based on the passkey stamp associated with this request */
         publicKey: string;
@@ -3900,6 +4688,20 @@ export type definitions = {
     };
     /** @enum {string} */
     v1TagType: "TAG_TYPE_USER" | "TAG_TYPE_PRIVATE_KEY";
+    v1TestRateLimitsRequest: {
+        /** @description Unique identifier for a given organization. If the request is being made by a WebAuthN user and their sub-organization ID is unknown, this can be the parent organization ID; using the sub-organization ID when possible is preferred due to performance reasons. */
+        organizationId: string;
+        /** @description Whether or not to set a limit on this request. */
+        isSetLimit: boolean;
+        /**
+         * Format: int64
+         * @description Rate limit to set for org, if is_set_limit is set to true.
+         */
+        limit: number;
+    };
+    v1TestRateLimitsResponse: {
+        [key: string]: unknown;
+    };
     v1TokenUsage: {
         /** @description Type of token usage */
         type: definitions["v1UsageType"];
@@ -3907,23 +4709,145 @@ export type definitions = {
         tokenId: string;
         signup?: definitions["v1SignupUsage"];
         login?: definitions["v1LoginUsage"];
+        signupV2?: definitions["v1SignupUsageV2"];
     };
     /** @enum {string} */
     v1TransactionType: "TRANSACTION_TYPE_ETHEREUM" | "TRANSACTION_TYPE_SOLANA" | "TRANSACTION_TYPE_TRON" | "TRANSACTION_TYPE_BITCOIN" | "TRANSACTION_TYPE_TEMPO";
+    v1TvcApp: {
+        /** @description Unique Identifier for this TVC App. */
+        id: string;
+        /** @description Unique Identifier of the Organization for this TVC App */
+        organizationId: string;
+        /** @description Name for this TVC App. */
+        name: string;
+        /** @description Public key for the Quorum Key associated with this TVC App */
+        quorumPublicKey: string;
+        /** @description Manifest Set (people who can approve manifests) */
+        manifestSet: definitions["v1TvcOperatorSet"];
+        /** @description Share Set (people who have a share of the Quorum Key) */
+        shareSet: definitions["v1TvcOperatorSet"];
+        /** @description Whether or not this TVC App has network egress enabled. */
+        enableEgress: boolean;
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+        /** @description The deployment currently designated to receive traffic. Null if no deployment for this app is deployed. */
+        liveDeploymentId?: string;
+        /** @description The public domain for ingress to this TVC App (in the format "app-<ID>.turnkey.cloud"). */
+        publicDomain: string;
+    };
+    v1TvcContainerSpec: {
+        /** @description The URL for this container image. */
+        containerUrl: string;
+        /** @description The path (in-container) to the executable binary. */
+        path: string;
+        /** @description The arguments to pass to the executable. */
+        args: string[];
+        /** @description Whether or not this container requires a pull secret to access. */
+        hasPullSecret: boolean;
+        /** @description The type of health check to perform against this executable. */
+        healthCheckType: definitions["v1TvcHealthCheckType"];
+        /**
+         * Format: int64
+         * @description The port to use for health checks against this executable.
+         */
+        healthCheckPort: number;
+        /**
+         * Format: int64
+         * @description The port to use for public ingress to this executable.
+         */
+        publicIngressPort: number;
+    };
+    v1TvcDeployment: {
+        /** @description Unique Identifier for this TVC Deployment. */
+        id: string;
+        /** @description Unique Identifier of the Organization for this TVC Deployment */
+        organizationId: string;
+        /** @description Unique Identifier of the TVC App for this deployment */
+        appId: string;
+        /** @description Set of TVC operators who can approve this deployment */
+        manifestSet: definitions["v1TvcOperatorSet"];
+        /** @description Set of TVC operators who have a share of the Quorum Key */
+        shareSet: definitions["v1TvcOperatorSet"];
+        /** @description The manifest used for this deployment */
+        manifest: definitions["v1TvcManifest"];
+        /** @description List of operator approvals for this manifest */
+        manifestApprovals: definitions["v1TvcOperatorApproval"][];
+        /** @description QOS Version used for this deployment */
+        qosVersion: string;
+        /** @description The pivot container spec for this deployment */
+        pivotContainer: definitions["v1TvcContainerSpec"];
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+        /** @description Whether or not the user wants this deployment deleted from the cluster. */
+        delete: boolean;
+    };
     /** @enum {string} */
     v1TvcHealthCheckType: "TVC_HEALTH_CHECK_TYPE_HTTP" | "TVC_HEALTH_CHECK_TYPE_GRPC";
+    v1TvcManifest: {
+        /** @description Unique Identifier for this TVC Manifest. */
+        id: string;
+        /**
+         * Format: byte
+         * @description The manifest content (raw UTF-8 JSON bytes)
+         */
+        manifest: string;
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+    };
     v1TvcManifestApproval: {
         /** @description Unique identifier of the operator providing this approval */
         operatorId: string;
         /** @description Signature from the operator approving the manifest */
         signature: string;
     };
+    v1TvcOperator: {
+        /** @description Unique Identifier for this TVC Operator. */
+        id: string;
+        /** @description Name of this TVC Operator. */
+        name: string;
+        /** @description Public key for this TVC Operator. */
+        publicKey: string;
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+    };
+    v1TvcOperatorApproval: {
+        /** @description Unique ID for this approval */
+        id: string;
+        /** @description Unique Identifier of the TVC Manifest being approved */
+        manifestId: string;
+        /** @description The TVC Operator who made this approval */
+        operator: definitions["v1TvcOperator"];
+        /**
+         * Format: byte
+         * @description Signature of the operator over the deployment manifest
+         */
+        approval: string;
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+    };
     v1TvcOperatorParams: {
         /** @description The name for this new operator */
         name: string;
         /** @description Public key for this operator */
         publicKey: string;
     };
+    v1TvcOperatorSet: {
+        /** @description Unique Identifier for this TVC Operator Set. */
+        id: string;
+        /** @description Name of this TVC Operator Set. */
+        name: string;
+        /** @description Unique Identifier of the Organization for this TVC Operator Set */
+        organizationId: string;
+        /** @description List of TVC Operators in this set */
+        operators: definitions["v1TvcOperator"][];
+        /**
+         * Format: int64
+         * @description Threshold number of operators required for quorum.
+         */
+        threshold: number;
+        createdAt: definitions["externaldatav1Timestamp"];
+        updatedAt: definitions["externaldatav1Timestamp"];
+    };
     v1TvcOperatorSetParams: {
         /** @description Short description for this new operator set */
         name: string;
@@ -4005,6 +4929,8 @@ export type definitions = {
         sendFromEmailSenderName?: string;
         /** @description Verification token required for get account with PII (email/phone number). Default false. */
         verificationTokenRequiredForGetAccountPii?: boolean;
+        /** @description Whitelisted OAuth client IDs for social account linking. When a user authenticates via a social provider with an email matching an existing account, the accounts will be linked if the client ID is in this list and the issuer is considered a trusted provider. */
+        socialLinkingClientIds?: string[];
     };
     v1UpdateAuthProxyConfigResult: {
         /** @description Unique identifier for a given User. (representing the turnkey signer user id) */
@@ -4074,6 +5000,7 @@ export type definitions = {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
         parameters: definitions["v1UpdateOrganizationNameIntent"];
+        generateAppProofs?: boolean;
     };
     v1UpdateOrganizationNameResult: {
         /** @description Unique identifier for the Organization. */
@@ -4173,6 +5100,23 @@ export type definitions = {
     v1UpdateRootQuorumResult: {
         [key: string]: unknown;
     };
+    v1UpdateTvcAppLiveDeploymentIntent: {
+        /** @description The unique identifier of the TVC deployment to set as live for the app. */
+        deploymentId: string;
+    };
+    v1UpdateTvcAppLiveDeploymentRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_UPDATE_TVC_APP_LIVE_DEPLOYMENT";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1UpdateTvcAppLiveDeploymentIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1UpdateTvcAppLiveDeploymentResult: {
+        [key: string]: unknown;
+    };
     v1UpdateUserEmailIntent: {
         /** @description Unique identifier for a given User. */
         userId: string;
@@ -4338,7 +5282,7 @@ export type definitions = {
         orgWindowLimitUsd: string;
         /** @description Gas sponsorship USD limit for sub-organizations under the billing organization. */
         subOrgWindowLimitUsd: string;
-        /** @description Rolling sponsorship window duration, expressed in minutes. */
+        /** @description Rolling sponsorship window duration, expressed in minutes. This value can't exceed 30 days (43200 minutes). */
         windowDurationMinutes: string;
         /** @description Whether gas sponsorship is enabled for the organization. */
         enabled?: boolean;
@@ -4413,6 +5357,33 @@ export type definitions = {
         /** @description A list of User Tag IDs. This field, if not needed, should be an empty array in your request body. */
         userTags: string[];
     };
+    v1UserParamsV4: {
+        /** @description Human-readable name for a User. */
+        userName: string;
+        /** @description The user's email address. */
+        userEmail?: string;
+        /** @description The user's phone number in E.164 format e.g. +13214567890 */
+        userPhoneNumber?: string;
+        /** @description A list of API Key parameters. This field, if not needed, should be an empty array in your request body. */
+        apiKeys: definitions["v1ApiKeyParamsV2"][];
+        /** @description A list of Authenticator parameters. This field, if not needed, should be an empty array in your request body. */
+        authenticators: definitions["v1AuthenticatorParamsV2"][];
+        /** @description A list of Oauth providers. This field, if not needed, should be an empty array in your request body. */
+        oauthProviders: definitions["v1OauthProviderParamsV2"][];
+        /** @description A list of User Tag IDs. This field, if not needed, should be an empty array in your request body. */
+        userTags: string[];
+    };
+    v1ValidateTvcImageRequest: {
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        /** @description URL of the container image. */
+        pivotContainerImageUrl: string;
+        /** @description HPKE-encrypted pull secret for private images. */
+        pivotContainerEncryptedPullSecret?: string;
+    };
+    v1ValidateTvcImageResponse: {
+        resolvedImageDigest?: string;
+    };
     v1VerifyOtpIntent: {
         /** @description ID representing the result of an init OTP activity. */
         otpId: string;
@@ -4423,14 +5394,22 @@ export type definitions = {
         /** @description Client-side public key generated by the user, which will be added to the JWT response and verified in subsequent requests via a client proof signature */
         publicKey?: string;
     };
+    v1VerifyOtpIntentV2: {
+        /** @description UUID representing an OTP flow. A new UUID is created for each init OTP activity. */
+        otpId: string;
+        /** @description Encrypted bundle containing the OTP code and a client-generated public key. Turnkey's secure enclaves will decrypt this bundle, verify the OTP code, and issue a new Verification Token. Encrypted using the target encryption key provided in the INIT_OTP activity result. */
+        encryptedOtpBundle: string;
+        /** @description Expiration window (in seconds) indicating how long the verification token is valid for. If not provided, a default of 1 hour will be used. Maximum value is 86400 seconds (24 hours) */
+        expirationSeconds?: string;
+    };
     v1VerifyOtpRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_VERIFY_OTP";
+        type: "ACTIVITY_TYPE_VERIFY_OTP_V2";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
-        parameters: definitions["v1VerifyOtpIntent"];
+        parameters: definitions["v1VerifyOtpIntentV2"];
         generateAppProofs?: boolean;
     };
     v1VerifyOtpResult: {
@@ -4564,7 +5543,7 @@ export type definitions = {
         subscriptions?: definitions["v1WebhookSubscriptionParams"][];
     };
     v1WebhookSubscriptionParams: {
-        /** @description The event type to subscribe to (for example, ACTIVITY_UPDATES or BALANCE_UPDATES). */
+        /** @description The event type to subscribe to (for example, ACTIVITY_UPDATES, BALANCE_CONFIRMED_UPDATES, or BALANCE_FINALIZED_UPDATES). */
         eventType: string;
         /** @description JSON-encoded filter criteria for this subscription. */
         filtersJson?: string;
@@ -4717,6 +5696,24 @@ export type operations = {
             };
         };
     };
+    /** Get IP allowlist and rules for an organization. */
+    PublicApiService_GetIpAllowlist: {
+        parameters: {
+            body: {
+                body: definitions["v1GetIpAllowlistRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetIpAllowlistResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Get the latest boot proof for a given enclave app name. */
     PublicApiService_GetLatestBootProof: {
         parameters: {
@@ -4807,6 +5804,24 @@ export type operations = {
             };
         };
     };
+    /** Get details about an organization. */
+    PublicApiService_GetOrganization: {
+        parameters: {
+            body: {
+                body: definitions["v1GetOrganizationRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetOrganizationResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Get quorum settings and features for an organization. */
     PublicApiService_GetOrganizationConfigs: {
         parameters: {
@@ -4915,6 +5930,60 @@ export type operations = {
             };
         };
     };
+    /** Get details about a single TVC App */
+    PublicApiService_GetTvcApp: {
+        parameters: {
+            body: {
+                body: definitions["v1GetTvcAppRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetTvcAppResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Get details about a single TVC Deployment */
+    PublicApiService_GetTvcDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1GetTvcDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetTvcDeploymentResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Get the attestation document and manifest envelope of the provisioning enclave for a TVC deployment */
+    PublicApiService_GetTvcDeploymentProvisioningDetails: {
+        parameters: {
+            body: {
+                body: definitions["v1GetTvcDeploymentProvisioningDetailsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetTvcDeploymentProvisioningDetailsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Get details about a user. */
     PublicApiService_GetUser: {
         parameters: {
@@ -5167,6 +6236,42 @@ export type operations = {
             };
         };
     };
+    /** List all deployments for a given TVC App */
+    PublicApiService_GetTvcAppDeployments: {
+        parameters: {
+            body: {
+                body: definitions["v1GetTvcAppDeploymentsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetTvcAppDeploymentsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** List all TVC Apps within an organization. */
+    PublicApiService_GetTvcApps: {
+        parameters: {
+            body: {
+                body: definitions["v1GetTvcAppsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetTvcAppsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** List all user tags within an organization. */
     PublicApiService_ListUserTags: {
         parameters: {
@@ -5261,13 +6366,31 @@ export type operations = {
     PublicApiService_ListWebhookEndpoints: {
         parameters: {
             body: {
-                body: definitions["v1ListWebhookEndpointsRequest"];
+                body: definitions["v1ListWebhookEndpointsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ListWebhookEndpointsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Validate a container image URL and pull secret for TVC deployment */
+    PublicApiService_ValidateTvcImage: {
+        parameters: {
+            body: {
+                body: definitions["v1ValidateTvcImageRequest"];
             };
         };
         responses: {
             /** A successful response. */
             200: {
-                schema: definitions["v1ListWebhookEndpointsResponse"];
+                schema: definitions["v1ValidateTvcImageResponse"];
             };
             /** An unexpected error response. */
             default: {
@@ -5581,6 +6704,60 @@ export type operations = {
             };
         };
     };
+    /** Create a new TVC application */
+    PublicApiService_CreateTvcApp: {
+        parameters: {
+            body: {
+                body: definitions["v1CreateTvcAppRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Create a new TVC Deployment */
+    PublicApiService_CreateTvcDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1CreateTvcDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Post one or more manifest approvals for a TVC Manifest */
+    PublicApiService_CreateTvcManifestApprovals: {
+        parameters: {
+            body: {
+                body: definitions["v1CreateTvcManifestApprovalsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Create a user tag and add it to users. */
     PublicApiService_CreateUserTag: {
         parameters: {
@@ -5887,6 +7064,42 @@ export type operations = {
             };
         };
     };
+    /** Delete a TVC App and all of its deployments */
+    PublicApiService_DeleteTvcAppAndDeployments: {
+        parameters: {
+            body: {
+                body: definitions["v1DeleteTvcAppAndDeploymentsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Delete a TVC Deployment */
+    PublicApiService_DeleteTvcDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1DeleteTvcDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Delete user tags within an organization. */
     PublicApiService_DeleteUserTags: {
         parameters: {
@@ -5995,6 +7208,24 @@ export type operations = {
             };
         };
     };
+    /** Submit a raw transaction (serialized and signed) for broadcasting to the network. */
+    PublicApiService_EthSendRawTransaction: {
+        parameters: {
+            body: {
+                body: definitions["v1EthSendRawTransactionRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Submit a transaction intent describing an EVM transaction you would like to broadcast. */
     PublicApiService_EthSendTransaction: {
         parameters: {
@@ -6301,6 +7532,24 @@ export type operations = {
             };
         };
     };
+    /** Post re-encrypted quorum key share for a TVC deployment. */
+    PublicApiService_PostTvcQuorumKeyShare: {
+        parameters: {
+            body: {
+                body: definitions["v1PostTvcQuorumKeyShareRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Complete the process of recovering a user by adding an authenticator. */
     PublicApiService_RecoverUser: {
         parameters: {
@@ -6337,6 +7586,24 @@ export type operations = {
             };
         };
     };
+    /** Delete IP allowlist and all associated rules for organization or API key. After removal, access will be determined by organization-level allowlist (for API keys) or allowed from all IPs (for organizations). */
+    PublicApiService_RemoveIpAllowlist: {
+        parameters: {
+            body: {
+                body: definitions["v1RemoveIpAllowlistRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Remove an organization feature. This activity must be approved by the current root quorum. */
     PublicApiService_RemoveOrganizationFeature: {
         parameters: {
@@ -6355,6 +7622,42 @@ export type operations = {
             };
         };
     };
+    /** Restore a deleted TVC Deployment */
+    PublicApiService_RestoreTvcDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1RestoreTvcDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Create or update IP allowlist and rules for organization or API key. The IP allowlist restricts API access to specific CIDR blocks. Organization-level allowlists apply to all API keys unless overridden by a key-specific allowlist. */
+    PublicApiService_SetIpAllowlist: {
+        parameters: {
+            body: {
+                body: definitions["v1SetIpAllowlistRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Set an organization feature. This activity must be approved by the current root quorum. */
     PublicApiService_SetOrganizationFeature: {
         parameters: {
@@ -6373,6 +7676,24 @@ export type operations = {
             };
         };
     };
+    /** Set the live deployment for a TVC App */
+    PublicApiService_UpdateTvcAppLiveDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1UpdateTvcAppLiveDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Sign a raw payload. */
     PublicApiService_SignRawPayload: {
         parameters: {
@@ -6445,6 +7766,78 @@ export type operations = {
             };
         };
     };
+    /** Construct receiver-side encrypted operator packages to claim a Spark transfer. Does not perform FROST signing. */
+    PublicApiService_SparkClaimTransfer: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkClaimTransferRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Generate a Lightning preimage and distribute Feldman shares to operators for a Spark Lightning receive. Does not perform FROST signing. */
+    PublicApiService_SparkPrepareLightningReceive: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkPrepareLightningReceiveRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Construct sender-side encrypted operator packages for a Spark BTC transfer. Does not perform FROST signing. */
+    PublicApiService_SparkPrepareTransfer: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkPrepareTransferRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Perform pure FROST partial signing for a Spark wallet. Produces partial signatures without constructing operator packages. */
+    PublicApiService_SparkSignFrost: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkSignFrostRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Create a session for a user through stamping client side (API key, wallet client, or passkey client). */
     PublicApiService_StampLogin: {
         parameters: {
@@ -6727,6 +8120,42 @@ export type operations = {
             };
         };
     };
+    /** Refresh feature flags by triggering a DB read to flush the in-memory cache. */
+    PublicApiService_RefreshFeatureFlags: {
+        parameters: {
+            body: {
+                body: definitions["v1RefreshFeatureFlagsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1RefreshFeatureFlagsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Set a rate local rate limit just on the current endpoint, for purposes of testing with Vivosuite. */
+    PublicApiService_TestRateLimits: {
+        parameters: {
+            body: {
+                body: definitions["v1TestRateLimitsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1TestRateLimitsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
 };
 export type external = {};
 //# sourceMappingURL=public_api.types.d.ts.map