@turnkey/http 4.0.0 → 4.1.1

package/dist/__generated__/services/coordinator/public/v1/public_api.types.d.ts

@@ -95,6 +95,10 @@ export type paths = {
         /** Get details about a single TVC Deployment */
         post: operations["PublicApiService_GetTvcDeployment"];
     };
+    "/public/v1/query/get_tvc_deployment_provisioning_details": {
+        /** Get the attestation document and manifest envelope of the provisioning enclave for a TVC deployment */
+        post: operations["PublicApiService_GetTvcDeploymentProvisioningDetails"];
+    };
     "/public/v1/query/get_user": {
         /** Get details about a user. */
         post: operations["PublicApiService_GetUser"];
@@ -335,6 +339,14 @@ export type paths = {
         /** Delete a sub-organization. */
         post: operations["PublicApiService_DeleteSubOrganization"];
     };
+    "/public/v1/submit/delete_tvc_app_and_deployments": {
+        /** Delete a TVC App and all of its deployments */
+        post: operations["PublicApiService_DeleteTvcAppAndDeployments"];
+    };
+    "/public/v1/submit/delete_tvc_deployment": {
+        /** Delete a TVC Deployment */
+        post: operations["PublicApiService_DeleteTvcDeployment"];
+    };
     "/public/v1/submit/delete_user_tags": {
         /** Delete user tags within an organization. */
         post: operations["PublicApiService_DeleteUserTags"];
@@ -431,6 +443,10 @@ export type paths = {
         /** Create an OTP session for a user. */
         post: operations["PublicApiService_OtpLogin"];
     };
+    "/public/v1/submit/post_tvc_quorum_key_share": {
+        /** Post re-encrypted quorum key share for a TVC deployment. */
+        post: operations["PublicApiService_PostTvcQuorumKeyShare"];
+    };
     "/public/v1/submit/recover_user": {
         /** Complete the process of recovering a user by adding an authenticator. */
         post: operations["PublicApiService_RecoverUser"];
@@ -447,6 +463,10 @@ export type paths = {
         /** Remove an organization feature. This activity must be approved by the current root quorum. */
         post: operations["PublicApiService_RemoveOrganizationFeature"];
     };
+    "/public/v1/submit/restore_tvc_deployment": {
+        /** Restore a deleted TVC Deployment */
+        post: operations["PublicApiService_RestoreTvcDeployment"];
+    };
     "/public/v1/submit/set_ip_allowlist": {
         /** Create or update IP allowlist and rules for organization or API key. The IP allowlist restricts API access to specific CIDR blocks. Organization-level allowlists apply to all API keys unless overridden by a key-specific allowlist. */
         post: operations["PublicApiService_SetIpAllowlist"];
@@ -455,6 +475,10 @@ export type paths = {
         /** Set an organization feature. This activity must be approved by the current root quorum. */
         post: operations["PublicApiService_SetOrganizationFeature"];
     };
+    "/public/v1/submit/set_tvc_app_live_deployment": {
+        /** Set the live deployment for a TVC App */
+        post: operations["PublicApiService_UpdateTvcAppLiveDeployment"];
+    };
     "/public/v1/submit/sign_raw_payload": {
         /** Sign a raw payload. */
         post: operations["PublicApiService_SignRawPayload"];
@@ -471,6 +495,22 @@ export type paths = {
         /** Submit a transaction intent describing an SVM transaction you would like to broadcast. */
         post: operations["PublicApiService_SolSendTransaction"];
     };
+    "/public/v1/submit/spark_claim_transfer": {
+        /** Construct receiver-side encrypted operator packages to claim a Spark transfer. Does not perform FROST signing. */
+        post: operations["PublicApiService_SparkClaimTransfer"];
+    };
+    "/public/v1/submit/spark_prepare_lightning_receive": {
+        /** Generate a Lightning preimage and distribute Feldman shares to operators for a Spark Lightning receive. Does not perform FROST signing. */
+        post: operations["PublicApiService_SparkPrepareLightningReceive"];
+    };
+    "/public/v1/submit/spark_prepare_transfer": {
+        /** Construct sender-side encrypted operator packages for a Spark BTC transfer. Does not perform FROST signing. */
+        post: operations["PublicApiService_SparkPrepareTransfer"];
+    };
+    "/public/v1/submit/spark_sign_frost": {
+        /** Perform pure FROST partial signing for a Spark wallet. Produces partial signatures without constructing operator packages. */
+        post: operations["PublicApiService_SparkSignFrost"];
+    };
     "/public/v1/submit/stamp_login": {
         /** Create a session for a user through stamping client side (API key, wallet client, or passkey client). */
         post: operations["PublicApiService_StampLogin"];
@@ -555,6 +595,7 @@ export type definitions = {
     billingActivateBillingTierIntent: {
         /** @description The product that the customer wants to subscribe to. */
         productId: string;
+        orbPlanId?: string;
     };
     billingActivateBillingTierResult: {
         /** @description The id of the product being subscribed to. */
@@ -738,7 +779,7 @@ export type definitions = {
     /** @enum {string} */
     v1ActivityStatus: "ACTIVITY_STATUS_CREATED" | "ACTIVITY_STATUS_PENDING" | "ACTIVITY_STATUS_COMPLETED" | "ACTIVITY_STATUS_FAILED" | "ACTIVITY_STATUS_CONSENSUS_NEEDED" | "ACTIVITY_STATUS_REJECTED";
     /** @enum {string} */
-    v1ActivityType: "ACTIVITY_TYPE_CREATE_API_KEYS" | "ACTIVITY_TYPE_CREATE_USERS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD" | "ACTIVITY_TYPE_CREATE_INVITATIONS" | "ACTIVITY_TYPE_ACCEPT_INVITATION" | "ACTIVITY_TYPE_CREATE_POLICY" | "ACTIVITY_TYPE_DISABLE_PRIVATE_KEY" | "ACTIVITY_TYPE_DELETE_USERS" | "ACTIVITY_TYPE_DELETE_API_KEYS" | "ACTIVITY_TYPE_DELETE_INVITATION" | "ACTIVITY_TYPE_DELETE_ORGANIZATION" | "ACTIVITY_TYPE_DELETE_POLICY" | "ACTIVITY_TYPE_CREATE_USER_TAG" | "ACTIVITY_TYPE_DELETE_USER_TAGS" | "ACTIVITY_TYPE_CREATE_ORGANIZATION" | "ACTIVITY_TYPE_SIGN_TRANSACTION" | "ACTIVITY_TYPE_APPROVE_ACTIVITY" | "ACTIVITY_TYPE_REJECT_ACTIVITY" | "ACTIVITY_TYPE_DELETE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEY_TAGS" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD" | "ACTIVITY_TYPE_ACTIVATE_BILLING_TIER" | "ACTIVITY_TYPE_DELETE_PAYMENT_METHOD" | "ACTIVITY_TYPE_CREATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_POLICY_V3" | "ACTIVITY_TYPE_CREATE_API_ONLY_USERS" | "ACTIVITY_TYPE_UPDATE_ROOT_QUORUM" | "ACTIVITY_TYPE_UPDATE_USER_TAG" | "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2" | "ACTIVITY_TYPE_CREATE_ORGANIZATION_V2" | "ACTIVITY_TYPE_CREATE_USERS_V2" | "ACTIVITY_TYPE_ACCEPT_INVITATION_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2" | "ACTIVITY_TYPE_UPDATE_ALLOWED_ORIGINS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS_V2" | "ACTIVITY_TYPE_UPDATE_USER" | "ACTIVITY_TYPE_UPDATE_POLICY" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V3" | "ACTIVITY_TYPE_CREATE_WALLET" | "ACTIVITY_TYPE_CREATE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY" | "ACTIVITY_TYPE_RECOVER_USER" | "ACTIVITY_TYPE_SET_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_REMOVE_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2" | "ACTIVITY_TYPE_SIGN_TRANSACTION_V2" | "ACTIVITY_TYPE_EXPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_EXPORT_WALLET" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V4" | "ACTIVITY_TYPE_EMAIL_AUTH" | "ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT" | "ACTIVITY_TYPE_INIT_IMPORT_WALLET" | "ACTIVITY_TYPE_IMPORT_WALLET" | "ACTIVITY_TYPE_INIT_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_CREATE_POLICIES" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOADS" | "ACTIVITY_TYPE_CREATE_READ_ONLY_SESSION" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_DELETE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V5" | "ACTIVITY_TYPE_OAUTH" | "ACTIVITY_TYPE_CREATE_API_KEYS_V2" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION" | "ACTIVITY_TYPE_EMAIL_AUTH_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V6" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEYS" | "ACTIVITY_TYPE_DELETE_WALLETS" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION_V2" | "ACTIVITY_TYPE_DELETE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_INIT_OTP_AUTH" | "ACTIVITY_TYPE_OTP_AUTH" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V7" | "ACTIVITY_TYPE_UPDATE_WALLET" | "ACTIVITY_TYPE_UPDATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_USERS_V3" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V2" | "ACTIVITY_TYPE_INIT_OTP" | "ACTIVITY_TYPE_VERIFY_OTP" | "ACTIVITY_TYPE_OTP_LOGIN" | "ACTIVITY_TYPE_STAMP_LOGIN" | "ACTIVITY_TYPE_OAUTH_LOGIN" | "ACTIVITY_TYPE_UPDATE_USER_NAME" | "ACTIVITY_TYPE_UPDATE_USER_EMAIL" | "ACTIVITY_TYPE_UPDATE_USER_PHONE_NUMBER" | "ACTIVITY_TYPE_INIT_FIAT_ON_RAMP" | "ACTIVITY_TYPE_CREATE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_DELETE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_ENABLE_AUTH_PROXY" | "ACTIVITY_TYPE_DISABLE_AUTH_PROXY" | "ACTIVITY_TYPE_UPDATE_AUTH_PROXY_CONFIG" | "ACTIVITY_TYPE_CREATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_OAUTH2_AUTHENTICATE" | "ACTIVITY_TYPE_DELETE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_DELETE_POLICIES" | "ACTIVITY_TYPE_ETH_SEND_RAW_TRANSACTION" | "ACTIVITY_TYPE_ETH_SEND_TRANSACTION" | "ACTIVITY_TYPE_CREATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_EMAIL_AUTH_V3" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY_V2" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V3" | "ACTIVITY_TYPE_INIT_OTP_V2" | "ACTIVITY_TYPE_UPSERT_GAS_USAGE_CONFIG" | "ACTIVITY_TYPE_CREATE_TVC_APP" | "ACTIVITY_TYPE_CREATE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_CREATE_TVC_MANIFEST_APPROVALS" | "ACTIVITY_TYPE_SOL_SEND_TRANSACTION" | "ACTIVITY_TYPE_INIT_OTP_V3" | "ACTIVITY_TYPE_VERIFY_OTP_V2" | "ACTIVITY_TYPE_OTP_LOGIN_V2" | "ACTIVITY_TYPE_UPDATE_ORGANIZATION_NAME" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V8" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2" | "ACTIVITY_TYPE_CREATE_USERS_V4" | "ACTIVITY_TYPE_CREATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_UPDATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_DELETE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_SET_IP_ALLOWLIST" | "ACTIVITY_TYPE_REMOVE_IP_ALLOWLIST";
+    v1ActivityType: "ACTIVITY_TYPE_CREATE_API_KEYS" | "ACTIVITY_TYPE_CREATE_USERS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD" | "ACTIVITY_TYPE_CREATE_INVITATIONS" | "ACTIVITY_TYPE_ACCEPT_INVITATION" | "ACTIVITY_TYPE_CREATE_POLICY" | "ACTIVITY_TYPE_DISABLE_PRIVATE_KEY" | "ACTIVITY_TYPE_DELETE_USERS" | "ACTIVITY_TYPE_DELETE_API_KEYS" | "ACTIVITY_TYPE_DELETE_INVITATION" | "ACTIVITY_TYPE_DELETE_ORGANIZATION" | "ACTIVITY_TYPE_DELETE_POLICY" | "ACTIVITY_TYPE_CREATE_USER_TAG" | "ACTIVITY_TYPE_DELETE_USER_TAGS" | "ACTIVITY_TYPE_CREATE_ORGANIZATION" | "ACTIVITY_TYPE_SIGN_TRANSACTION" | "ACTIVITY_TYPE_APPROVE_ACTIVITY" | "ACTIVITY_TYPE_REJECT_ACTIVITY" | "ACTIVITY_TYPE_DELETE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEY_TAGS" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD" | "ACTIVITY_TYPE_ACTIVATE_BILLING_TIER" | "ACTIVITY_TYPE_DELETE_PAYMENT_METHOD" | "ACTIVITY_TYPE_CREATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_POLICY_V3" | "ACTIVITY_TYPE_CREATE_API_ONLY_USERS" | "ACTIVITY_TYPE_UPDATE_ROOT_QUORUM" | "ACTIVITY_TYPE_UPDATE_USER_TAG" | "ACTIVITY_TYPE_UPDATE_PRIVATE_KEY_TAG" | "ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2" | "ACTIVITY_TYPE_CREATE_ORGANIZATION_V2" | "ACTIVITY_TYPE_CREATE_USERS_V2" | "ACTIVITY_TYPE_ACCEPT_INVITATION_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V2" | "ACTIVITY_TYPE_UPDATE_ALLOWED_ORIGINS" | "ACTIVITY_TYPE_CREATE_PRIVATE_KEYS_V2" | "ACTIVITY_TYPE_UPDATE_USER" | "ACTIVITY_TYPE_UPDATE_POLICY" | "ACTIVITY_TYPE_SET_PAYMENT_METHOD_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V3" | "ACTIVITY_TYPE_CREATE_WALLET" | "ACTIVITY_TYPE_CREATE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY" | "ACTIVITY_TYPE_RECOVER_USER" | "ACTIVITY_TYPE_SET_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_REMOVE_ORGANIZATION_FEATURE" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2" | "ACTIVITY_TYPE_SIGN_TRANSACTION_V2" | "ACTIVITY_TYPE_EXPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_EXPORT_WALLET" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V4" | "ACTIVITY_TYPE_EMAIL_AUTH" | "ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT" | "ACTIVITY_TYPE_INIT_IMPORT_WALLET" | "ACTIVITY_TYPE_IMPORT_WALLET" | "ACTIVITY_TYPE_INIT_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_IMPORT_PRIVATE_KEY" | "ACTIVITY_TYPE_CREATE_POLICIES" | "ACTIVITY_TYPE_SIGN_RAW_PAYLOADS" | "ACTIVITY_TYPE_CREATE_READ_ONLY_SESSION" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_DELETE_OAUTH_PROVIDERS" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V5" | "ACTIVITY_TYPE_OAUTH" | "ACTIVITY_TYPE_CREATE_API_KEYS_V2" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION" | "ACTIVITY_TYPE_EMAIL_AUTH_V2" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V6" | "ACTIVITY_TYPE_DELETE_PRIVATE_KEYS" | "ACTIVITY_TYPE_DELETE_WALLETS" | "ACTIVITY_TYPE_CREATE_READ_WRITE_SESSION_V2" | "ACTIVITY_TYPE_DELETE_SUB_ORGANIZATION" | "ACTIVITY_TYPE_INIT_OTP_AUTH" | "ACTIVITY_TYPE_OTP_AUTH" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V7" | "ACTIVITY_TYPE_UPDATE_WALLET" | "ACTIVITY_TYPE_UPDATE_POLICY_V2" | "ACTIVITY_TYPE_CREATE_USERS_V3" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V2" | "ACTIVITY_TYPE_INIT_OTP" | "ACTIVITY_TYPE_VERIFY_OTP" | "ACTIVITY_TYPE_OTP_LOGIN" | "ACTIVITY_TYPE_STAMP_LOGIN" | "ACTIVITY_TYPE_OAUTH_LOGIN" | "ACTIVITY_TYPE_UPDATE_USER_NAME" | "ACTIVITY_TYPE_UPDATE_USER_EMAIL" | "ACTIVITY_TYPE_UPDATE_USER_PHONE_NUMBER" | "ACTIVITY_TYPE_INIT_FIAT_ON_RAMP" | "ACTIVITY_TYPE_CREATE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_DELETE_SMART_CONTRACT_INTERFACE" | "ACTIVITY_TYPE_ENABLE_AUTH_PROXY" | "ACTIVITY_TYPE_DISABLE_AUTH_PROXY" | "ACTIVITY_TYPE_UPDATE_AUTH_PROXY_CONFIG" | "ACTIVITY_TYPE_CREATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_OAUTH2_CREDENTIAL" | "ACTIVITY_TYPE_OAUTH2_AUTHENTICATE" | "ACTIVITY_TYPE_DELETE_WALLET_ACCOUNTS" | "ACTIVITY_TYPE_DELETE_POLICIES" | "ACTIVITY_TYPE_ETH_SEND_RAW_TRANSACTION" | "ACTIVITY_TYPE_ETH_SEND_TRANSACTION" | "ACTIVITY_TYPE_CREATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_UPDATE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_DELETE_FIAT_ON_RAMP_CREDENTIAL" | "ACTIVITY_TYPE_EMAIL_AUTH_V3" | "ACTIVITY_TYPE_INIT_USER_EMAIL_RECOVERY_V2" | "ACTIVITY_TYPE_INIT_OTP_AUTH_V3" | "ACTIVITY_TYPE_INIT_OTP_V2" | "ACTIVITY_TYPE_UPSERT_GAS_USAGE_CONFIG" | "ACTIVITY_TYPE_CREATE_TVC_APP" | "ACTIVITY_TYPE_CREATE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_CREATE_TVC_MANIFEST_APPROVALS" | "ACTIVITY_TYPE_SOL_SEND_TRANSACTION" | "ACTIVITY_TYPE_INIT_OTP_V3" | "ACTIVITY_TYPE_VERIFY_OTP_V2" | "ACTIVITY_TYPE_OTP_LOGIN_V2" | "ACTIVITY_TYPE_UPDATE_ORGANIZATION_NAME" | "ACTIVITY_TYPE_CREATE_SUB_ORGANIZATION_V8" | "ACTIVITY_TYPE_CREATE_OAUTH_PROVIDERS_V2" | "ACTIVITY_TYPE_CREATE_USERS_V4" | "ACTIVITY_TYPE_CREATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_UPDATE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_DELETE_WEBHOOK_ENDPOINT" | "ACTIVITY_TYPE_SET_IP_ALLOWLIST" | "ACTIVITY_TYPE_REMOVE_IP_ALLOWLIST" | "ACTIVITY_TYPE_UPDATE_TVC_APP_LIVE_DEPLOYMENT" | "ACTIVITY_TYPE_DELETE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_DELETE_TVC_APP_AND_DEPLOYMENTS" | "ACTIVITY_TYPE_RESTORE_TVC_DEPLOYMENT" | "ACTIVITY_TYPE_SPARK_SIGN_FROST" | "ACTIVITY_TYPE_SPARK_PREPARE_TRANSFER" | "ACTIVITY_TYPE_SPARK_CLAIM_TRANSFER" | "ACTIVITY_TYPE_SPARK_PREPARE_LIGHTNING_RECEIVE" | "ACTIVITY_TYPE_POST_TVC_QUORUM_KEY_SHARE";
     /** @enum {string} */
     v1AddressFormat: "ADDRESS_FORMAT_UNCOMPRESSED" | "ADDRESS_FORMAT_COMPRESSED" | "ADDRESS_FORMAT_ETHEREUM" | "ADDRESS_FORMAT_SOLANA" | "ADDRESS_FORMAT_COSMOS" | "ADDRESS_FORMAT_TRON" | "ADDRESS_FORMAT_SUI" | "ADDRESS_FORMAT_APTOS" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_MAINNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_TESTNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2PKH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2SH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2WSH" | "ADDRESS_FORMAT_BITCOIN_SIGNET_P2TR" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2PKH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2SH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2WPKH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2WSH" | "ADDRESS_FORMAT_BITCOIN_REGTEST_P2TR" | "ADDRESS_FORMAT_SEI" | "ADDRESS_FORMAT_XLM" | "ADDRESS_FORMAT_DOGE_MAINNET" | "ADDRESS_FORMAT_DOGE_TESTNET" | "ADDRESS_FORMAT_TON_V3R2" | "ADDRESS_FORMAT_TON_V4R2" | "ADDRESS_FORMAT_TON_V5R1" | "ADDRESS_FORMAT_XRP" | "ADDRESS_FORMAT_SPARK_MAINNET" | "ADDRESS_FORMAT_SPARK_REGTEST";
     v1ApiKey: {
@@ -1284,7 +1325,7 @@ export type definitions = {
     v1CreateReadWriteSessionIntentV2: {
         /** @description Client-side public key generated by the user, to which the read write session bundle (credentials) will be encrypted. */
         targetPublicKey: string;
-        /** @description Unique identifier for a given User. */
+        /** @description Optional unique identifier for a given User. If none provided, the read write session will be created for the user who is making the request. */
         userId?: string;
         /** @description Optional human-readable name for an API Key. If none provided, default to Read Write Session - <Timestamp> */
         apiKeyName?: string;
@@ -1628,7 +1669,7 @@ export type definitions = {
     };
     v1CreateTvcManifestApprovalsRequest: {
         /** @enum {string} */
-        type: "ACTIVITY_TYPE_APPROVE_TVC_DEPLOYMENT";
+        type: "ACTIVITY_TYPE_CREATE_TVC_MANIFEST_APPROVALS";
         /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
         timestampMs: string;
         /** @description Unique identifier for a given Organization. */
@@ -2011,6 +2052,42 @@ export type definitions = {
         /** @description Unique identifier of the sub organization that was removed */
         subOrganizationUuid: string;
     };
+    v1DeleteTvcAppAndDeploymentsIntent: {
+        /** @description The unique identifier of the TVC app to delete. The app and all associated deployments will be removed. */
+        appId: string;
+    };
+    v1DeleteTvcAppAndDeploymentsRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_DELETE_TVC_APP_AND_DEPLOYMENTS";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1DeleteTvcAppAndDeploymentsIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1DeleteTvcAppAndDeploymentsResult: {
+        /** @description The unique identifier of the deleted TVC app. */
+        appId: string;
+    };
+    v1DeleteTvcDeploymentIntent: {
+        /** @description The unique identifier of the TVC deployment to delete. */
+        deploymentId: string;
+    };
+    v1DeleteTvcDeploymentRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_DELETE_TVC_DEPLOYMENT";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1DeleteTvcDeploymentIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1DeleteTvcDeploymentResult: {
+        /** @description The unique identifier of the deleted TVC deployment. */
+        deploymentId: string;
+    };
     v1DeleteUserTagsIntent: {
         /** @description A list of User Tag IDs. */
         userTagIds: string[];
@@ -2307,6 +2384,8 @@ export type definitions = {
         maxFeePerGas?: string;
         /** @description Maximum priority fee (tip) per gas unit in wei. Required for non-sponsored (EIP-1559) transactions. Not used for sponsored transactions. */
         maxPriorityFeePerGas?: string;
+        /** @description Unix timestamp in seconds for EIP-712 execution deadline. Only used when sponsor=true. */
+        deadline?: string;
         /** @description The gas station delegate contract nonce. Only used when sponsor=true. Include this if you want maximal security posture. */
         gasStationNonce?: string;
     };
@@ -2744,6 +2823,24 @@ export type definitions = {
         /** @description A list of TVC Apps. */
         tvcApps: definitions["v1TvcApp"][];
     };
+    v1GetTvcDeploymentProvisioningDetailsRequest: {
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        /** @description Unique identifier for a given TVC Deployment. */
+        deploymentId: string;
+    };
+    v1GetTvcDeploymentProvisioningDetailsResponse: {
+        /**
+         * Format: byte
+         * @description The attestation document of the provisioning enclave in a TVC deployment.
+         */
+        attestationDocument: string;
+        /**
+         * Format: byte
+         * @description The manifest envelope containing the TVC deployment's manifest and signatures.
+         */
+        manifestEnvelope: string;
+    };
     v1GetTvcDeploymentRequest: {
         /** @description Unique identifier for a given organization. */
         organizationId: string;
@@ -3366,6 +3463,15 @@ export type definitions = {
         deleteWebhookEndpointIntent?: definitions["v1DeleteWebhookEndpointIntent"];
         setIpAllowlistIntent?: definitions["v1SetIpAllowlistIntent"];
         removeIpAllowlistIntent?: definitions["v1RemoveIpAllowlistIntent"];
+        updateTvcAppLiveDeploymentIntent?: definitions["v1UpdateTvcAppLiveDeploymentIntent"];
+        deleteTvcDeploymentIntent?: definitions["v1DeleteTvcDeploymentIntent"];
+        deleteTvcAppAndDeploymentsIntent?: definitions["v1DeleteTvcAppAndDeploymentsIntent"];
+        restoreTvcDeploymentIntent?: definitions["v1RestoreTvcDeploymentIntent"];
+        sparkSignFrostIntent?: definitions["v1SparkSignFrostIntent"];
+        sparkPrepareTransferIntent?: definitions["v1SparkPrepareTransferIntent"];
+        sparkClaimTransferIntent?: definitions["v1SparkClaimTransferIntent"];
+        sparkPrepareLightningReceiveIntent?: definitions["v1SparkPrepareLightningReceiveIntent"];
+        postTvcQuorumKeyShareIntent?: definitions["v1PostTvcQuorumKeyShareIntent"];
     };
     v1Invitation: {
         /** @description Unique identifier for a given Invitation object. */
@@ -3505,8 +3611,8 @@ export type definitions = {
         redirectUri: string;
         /** @description The code verifier used by OAuth 2.0 PKCE providers */
         codeVerifier: string;
-        /** @description An optional nonce used by the client to prevent replay/substitution of an ID token */
-        nonce?: string;
+        /** @description A nonce value set to sha256(publicKey), used to bind the OIDC token to a specific public key */
+        nonce: string;
         /** @description An optional P256 public key to which, if provided, the bearer token will be encrypted and returned via the `encrypted_bearer_token` claim of the OIDC Token */
         bearerTokenTargetPublicKey?: string;
     };
@@ -3745,6 +3851,27 @@ export type definitions = {
         /** @description A condition expression that evalutes to true or false. */
         condition: string;
     };
+    v1PostTvcQuorumKeyShareIntent: {
+        /** @description Unique identifier of the TVC deployment receiving quorum key share */
+        deploymentId: string;
+        /** @description Hex-encoded ephemeral public key used to encrypt the quorum key share */
+        ephemeralPublicKeyHex: string;
+        /** @description Re-encrypted quorum key share and approval */
+        shareApprovalBundle: definitions["v1QuorumKeyShareApprovalBundle"];
+    };
+    v1PostTvcQuorumKeyShareRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_POST_TVC_QUORUM_KEY_SHARE";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1PostTvcQuorumKeyShareIntent"];
+    };
+    v1PostTvcQuorumKeyShareResult: {
+        /** @description The unique identifier for the provisioning quorum key share */
+        provisioningShareId: string;
+    };
     v1PrivateKey: {
         /** @description Unique identifier for a given Private Key. */
         privateKeyId: string;
@@ -3789,6 +3916,14 @@ export type definitions = {
         response: definitions["v1AuthenticatorAttestationResponse"];
         clientExtensionResults: definitions["v1SimpleClientExtensionResults"];
     };
+    v1QuorumKeyShareApprovalBundle: {
+        /** @description Unique identifier of the operator providing this quorum key share */
+        operatorId: string;
+        /** @description Hex-encoded re-encrypted quorum key share */
+        reEncryptedShareHex: string;
+        /** @description Signature from the share set operator approving the manifest */
+        signature: string;
+    };
     v1RecoverUserIntent: {
         /** @description The new authenticator to register. */
         authenticator: definitions["v1AuthenticatorParamsV2"];
@@ -3841,6 +3976,7 @@ export type definitions = {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
         parameters: definitions["v1RemoveIpAllowlistIntent"];
+        generateAppProofs?: boolean;
     };
     v1RemoveIpAllowlistResult: {
         [key: string]: unknown;
@@ -3863,6 +3999,24 @@ export type definitions = {
         /** @description Resulting list of organization features. */
         features: definitions["v1Feature"][];
     };
+    v1RestoreTvcDeploymentIntent: {
+        /** @description The unique identifier of the TVC deployment to restore. */
+        deploymentId: string;
+    };
+    v1RestoreTvcDeploymentRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_RESTORE_TVC_DEPLOYMENT";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1RestoreTvcDeploymentIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1RestoreTvcDeploymentResult: {
+        /** @description The unique identifier of the restored TVC deployment. */
+        deploymentId: string;
+    };
     v1Result: {
         createOrganizationResult?: definitions["v1CreateOrganizationResult"];
         createAuthenticatorsResult?: definitions["v1CreateAuthenticatorsResult"];
@@ -3971,6 +4125,15 @@ export type definitions = {
         deleteWebhookEndpointResult?: definitions["v1DeleteWebhookEndpointResult"];
         setIpAllowlistResult?: definitions["v1SetIpAllowlistResult"];
         removeIpAllowlistResult?: definitions["v1RemoveIpAllowlistResult"];
+        updateTvcAppLiveDeploymentResult?: definitions["v1UpdateTvcAppLiveDeploymentResult"];
+        deleteTvcDeploymentResult?: definitions["v1DeleteTvcDeploymentResult"];
+        deleteTvcAppAndDeploymentsResult?: definitions["v1DeleteTvcAppAndDeploymentsResult"];
+        restoreTvcDeploymentResult?: definitions["v1RestoreTvcDeploymentResult"];
+        sparkSignFrostResult?: definitions["v1SparkSignFrostResult"];
+        sparkPrepareTransferResult?: definitions["v1SparkPrepareTransferResult"];
+        sparkClaimTransferResult?: definitions["v1SparkClaimTransferResult"];
+        sparkPrepareLightningReceiveResult?: definitions["v1SparkPrepareLightningReceiveResult"];
+        postTvcQuorumKeyShareResult?: definitions["v1PostTvcQuorumKeyShareResult"];
     };
     v1RevertChainEntry: {
         /** @description The contract address where the revert occurred. */
@@ -4076,6 +4239,7 @@ export type definitions = {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
         parameters: definitions["v1SetIpAllowlistIntent"];
+        generateAppProofs?: boolean;
     };
     v1SetIpAllowlistResult: {
         [key: string]: unknown;
@@ -4226,10 +4390,10 @@ export type definitions = {
         /** @description Whether to sponsor this transaction via Gas Station. */
         sponsor?: boolean;
         /**
-         * @description CAIP-2 chain ID (e.g., 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp' for Solana mainnet).
+         * @description CAIP-2 chain ID (e.g., 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp' for Solana mainnet). Human-readable Solana aliases ('solana:mainnet', 'solana:devnet') are also accepted and normalized to canonical CAIP-2 values.
          * @enum {string}
          */
-        caip2: "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" | "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1wcaWoxPkrZBG" | "solana:4uhcVJyU9pJkvQyS88uRDiswHXSCkY3zQawwpjk2NsNY";
+        caip2: "solana:mainnet" | "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp" | "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d" | "solana:devnet" | "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1" | "solana:EtWTRABZaYq6iMfeYKouRu166VU2xqa1wcaWoxPkrZBG";
         /** @description user-provided blockhash for replay protection / deadline control. If omitted and sponsor=true, we fetch a fresh blockhash during execution */
         recentBlockhash?: string;
     };
@@ -4277,6 +4441,229 @@ export type definitions = {
         /** @description The Solana transaction signature, if available. */
         signature?: string;
     };
+    v1SparkClaimLeaf: {
+        /** @description Leaf identifier (UUID). */
+        leafId: string;
+        /** @description ECIES ciphertext (hex-encoded) containing the inbound transfer secret. Decrypted inside the enclave using the wallet's Identity key. */
+        ciphertext: string;
+        /** @description Hex-encoded 64-byte compact ECDSA signature binding (leaf_id, transfer_id, ciphertext) to the sender's identity key. Verified inside the enclave before decryption. */
+        senderSignature: string;
+    };
+    v1SparkClaimPackage: {
+        /** @description Leaves being claimed. */
+        leaves: definitions["v1SparkClaimLeaf"][];
+        /**
+         * Format: int64
+         * @description Shamir threshold for reconstructing the per-leaf claim secret.
+         */
+        threshold: number;
+        /** @description Operators that will receive Shamir shares. */
+        operatorRecipients: definitions["v1SparkOperatorRecipient"][];
+        /** @description Spark transfer identifier (UUID). Used together with each leaf's sender_signature to verify the sender bound this ciphertext to this transfer. */
+        transferId: string;
+        /** @description Sender's compressed secp256k1 identity public key (hex-encoded, 33 bytes). Used to verify the per-leaf sender_signature fields. */
+        senderIdentityPublicKey: string;
+    };
+    v1SparkClaimTransferIntent: {
+        /** @description A Spark wallet account address identifying the wallet. */
+        signWith: string;
+        /** @description Claim package parameters. */
+        claim: definitions["v1SparkClaimPackage"];
+    };
+    v1SparkClaimTransferRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_CLAIM_TRANSFER";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkClaimTransferIntent"];
+    };
+    v1SparkClaimTransferResult: {
+        /** @description Per-operator ECIES-encrypted packages. */
+        operatorPackages: definitions["v1SparkEncryptedOperatorPackage"][];
+        /** @description Newly-derived SigningLeaf public keys, one per leaf, in input order. */
+        newLeafPublicKeys: definitions["v1SparkLeafPublicKey"][];
+    };
+    v1SparkDepositDerivation: {
+        [key: string]: unknown;
+    };
+    v1SparkEncryptedOperatorPackage: {
+        /** @description Spark operator identifier (UUID). */
+        operatorId: string;
+        /** @description ECIES ciphertext (hex-encoded) opaque to Turnkey after emission. */
+        encryptedPackage: string;
+    };
+    v1SparkFrostCommitment: {
+        /** @description FROST participant identifier, hex-encoded (32-byte scalar). */
+        id: string;
+        /** @description Hiding commitment D, hex-encoded compressed secp256k1 point. */
+        hiding: string;
+        /** @description Binding commitment E, hex-encoded compressed secp256k1 point. */
+        binding: string;
+    };
+    v1SparkHtlcPreimageDerivation: {
+        [key: string]: unknown;
+    };
+    v1SparkIdentityDerivation: {
+        [key: string]: unknown;
+    };
+    v1SparkKeyDerivation: {
+        /** @description Spark identity key derivation. */
+        identity?: definitions["v1SparkIdentityDerivation"];
+        /** @description Spark signing leaf key derivation, identified by leaf ID. */
+        signingLeaf?: definitions["v1SparkSigningLeafDerivation"];
+        /** @description Spark deposit key derivation. */
+        deposit?: definitions["v1SparkDepositDerivation"];
+        /** @description Spark static deposit key derivation, identified by index. */
+        staticDeposit?: definitions["v1SparkStaticDepositDerivation"];
+        /** @description Spark HTLC preimage key derivation. */
+        htlcPreimage?: definitions["v1SparkHtlcPreimageDerivation"];
+    };
+    v1SparkLeafPublicKey: {
+        /** @description The Spark leaf_id this public key was derived for. */
+        leafId: string;
+        /** @description Hex-encoded compressed secp256k1 point (33 bytes) for the SigningLeaf derivation at leaf_id. */
+        publicKey: string;
+    };
+    v1SparkLightningReceivePackage: {
+        /**
+         * Format: int64
+         * @description Feldman VSS threshold for reconstructing the preimage.
+         */
+        threshold: number;
+        /** @description Operators that will receive Feldman shares of the preimage. Order must match the operators' numeric IDs in the Spark operator config - share index is the 1-based position in this list. */
+        operatorRecipients: definitions["v1SparkOperatorRecipient"][];
+    };
+    v1SparkOperatorRecipient: {
+        /** @description Spark operator identifier (UUID). */
+        operatorId: string;
+        /** @description Operator's ECIES encryption pubkey (hex-encoded compressed secp256k1 point). */
+        encryptionPublicKey: string;
+    };
+    v1SparkPartialSignature: {
+        /** @description Hex-encoded FROST partial signature. */
+        signatureShare: string;
+        /** @description Turnkey's hiding commitment D (hex-encoded compressed secp256k1 point). Forward to the Spark Operator. */
+        hiding: string;
+        /** @description Turnkey's binding commitment E (hex-encoded compressed secp256k1 point). Forward to the Spark Operator. */
+        binding: string;
+    };
+    v1SparkPrepareLightningReceiveIntent: {
+        /** @description A Spark wallet account address identifying the wallet. */
+        signWith: string;
+        /** @description Lightning receive package parameters: threshold and operator recipients. */
+        lightningReceive: definitions["v1SparkLightningReceivePackage"];
+    };
+    v1SparkPrepareLightningReceiveRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_PREPARE_LIGHTNING_RECEIVE";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkPrepareLightningReceiveIntent"];
+    };
+    v1SparkPrepareLightningReceiveResult: {
+        /** @description Per-operator ECIES-encrypted Feldman share packages. */
+        operatorPackages: definitions["v1SparkEncryptedOperatorPackage"][];
+        /** @description Hex-encoded SHA256(preimage). Forward to the Lightning node. */
+        paymentHash: string;
+    };
+    v1SparkPrepareTransferIntent: {
+        /** @description A Spark wallet account address identifying the wallet. */
+        signWith: string;
+        /** @description Transfer package parameters for HD key tweak splitting. */
+        transfer: definitions["v1SparkTransferPackage"];
+    };
+    v1SparkPrepareTransferRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_PREPARE_TRANSFER";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkPrepareTransferIntent"];
+    };
+    v1SparkPrepareTransferResult: {
+        /** @description Per-operator ECIES-encrypted packages. */
+        operatorPackages: definitions["v1SparkEncryptedOperatorPackage"][];
+        /** @description Hex-encoded ECDSA-DER signature of the TransferPackage signing payload, signed with the wallet's IDENTITY key. */
+        transferUserSignature: string;
+        /** @description Newly-derived SigningLeaf public keys, one per leaf, in input order. */
+        newLeafPublicKeys: definitions["v1SparkLeafPublicKey"][];
+    };
+    v1SparkSignFrostIntent: {
+        /** @description A Spark wallet account address identifying the wallet to sign with. */
+        signWith: string;
+        /** @description Batched sign requests. Each produces a partial signature plus Turnkey's public commitments. */
+        signatures: definitions["v1SparkSignatureRequest"][];
+    };
+    v1SparkSignFrostRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_SPARK_SIGN_FROST";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1SparkSignFrostIntent"];
+    };
+    v1SparkSignFrostResult: {
+        /** @description Partial signatures plus Turnkey commitments, one per request, in order. */
+        signatures: definitions["v1SparkPartialSignature"][];
+    };
+    v1SparkSignatureRequest: {
+        /** @description Which key to sign with. */
+        derivation: definitions["v1SparkKeyDerivation"];
+        /** @description Hex-encoded 32-byte sighash to sign. */
+        message: string;
+        /** @description Aggregate group verifying key (hex-encoded compressed secp256k1 point), computed as P_ops + P_user. Bound into the nonce HMAC. */
+        verifyingKey: string;
+        /** @description Commitments for every non-Turnkey participant. MUST NOT include an entry under Turnkey's identifier. Bound into the nonce HMAC. */
+        operatorCommitments: definitions["v1SparkFrostCommitment"][];
+        /** @description Optional adaptor point T (hex-encoded 33-byte compressed secp256k1 pubkey). When set, Turnkey produces a Schnorr adaptor pre-signature with the FROST challenge bound to `R+T` (where `R` is the aggregate group nonce commitment from FROST). The party holding the discrete log `t` completes the pre-sig to a valid BIP-340 signature by adding `t` (or `-t`, for parity) to the signature scalar `s`. This is primarily used by Spark leaves-swap and other adaptor-bound flows; absent or empty leads to plain FROST signing (the typical case). */
+        adaptorPublicKey?: string;
+    };
+    v1SparkSigningLeafDerivation: {
+        /** @description Unique identifier for the Spark signing leaf. */
+        leafId: string;
+    };
+    v1SparkStaticDepositDerivation: {
+        /**
+         * Format: int64
+         * @description Index used to derive the static deposit key.
+         */
+        index: number;
+    };
+    v1SparkTransferLeaf: {
+        /** @description Leaf identifier (UUID). */
+        leafId: string;
+        /** @description Derivation for the existing (pre-transfer) leaf key. Always a SigningLeaf derivation. */
+        oldLeafDerivation: definitions["v1SparkKeyDerivation"];
+        /** @description Derivation for the new (post-transfer) leaf key. Always a SigningLeaf derivation. The enclave ECIES-encrypts this private key to receiver_public_key as the per-leaf secret_cipher; HD-derived rather than random so the sender can re-derive on retry (Turnkey's enclave is stateless). */
+        newLeafDerivation: definitions["v1SparkKeyDerivation"];
+        /** @description Client-produced CPFP refund signature (hex-encoded), passed through verbatim into the per-operator SendLeafKeyTweak. Empty omits the field from the operator package. */
+        refundSignature?: string;
+        /** @description Client-produced direct refund signature (hex-encoded). Passed through verbatim. */
+        directRefundSignature?: string;
+        /** @description Client-produced direct-from-CPFP refund signature (hex-encoded). Passed through verbatim. */
+        directFromCpfpRefundSignature?: string;
+    };
+    v1SparkTransferPackage: {
+        /** @description Spark transfer identifier (UUID). */
+        transferId: string;
+        /** @description Leaves being transferred. */
+        leaves: definitions["v1SparkTransferLeaf"][];
+        /**
+         * Format: int64
+         * @description Feldman VSS threshold for reconstructing the per-leaf tweak scalar.
+         */
+        threshold: number;
+        /** @description Operators that will receive Feldman shares of the per-leaf tweak. Order must match the operators' numeric IDs in the Spark operator config - share index is the 1-based position in this list. */
+        operatorRecipients: definitions["v1SparkOperatorRecipient"][];
+        /** @description Recipient's identity pubkey (hex-encoded compressed secp256k1 point). Each leaf's new_priv is ECIES-encrypted to this key and embedded in the per-operator package for claim-time delivery. */
+        receiverPublicKey: string;
+    };
     v1StampLoginIntent: {
         /** @description Client-side public key generated by the user, which will be conditionally added to org data based on the passkey stamp associated with this request */
         publicKey: string;
@@ -4345,6 +4732,8 @@ export type definitions = {
         updatedAt: definitions["externaldatav1Timestamp"];
         /** @description The deployment currently designated to receive traffic. Null if no deployment for this app is deployed. */
         liveDeploymentId?: string;
+        /** @description The public domain for ingress to this TVC App (in the format "app-<ID>.turnkey.cloud"). */
+        publicDomain: string;
     };
     v1TvcContainerSpec: {
         /** @description The URL for this container image. */
@@ -4387,16 +4776,12 @@ export type definitions = {
         qosVersion: string;
         /** @description The pivot container spec for this deployment */
         pivotContainer: definitions["v1TvcContainerSpec"];
-        /** @description Current stage for this deployment */
-        stage: definitions["v1TvcDeploymentStage"];
         createdAt: definitions["externaldatav1Timestamp"];
         updatedAt: definitions["externaldatav1Timestamp"];
         /** @description Whether or not the user wants this deployment deleted from the cluster. */
         delete: boolean;
     };
     /** @enum {string} */
-    v1TvcDeploymentStage: "TVC_DEPLOYMENT_STAGE_APPROVE" | "TVC_DEPLOYMENT_STAGE_PROVISION" | "TVC_DEPLOYMENT_STAGE_LIVE" | "TVC_DEPLOYMENT_STAGE_DELETE";
-    /** @enum {string} */
     v1TvcHealthCheckType: "TVC_HEALTH_CHECK_TYPE_HTTP" | "TVC_HEALTH_CHECK_TYPE_GRPC";
     v1TvcManifest: {
         /** @description Unique Identifier for this TVC Manifest. */
@@ -4615,6 +5000,7 @@ export type definitions = {
         /** @description Unique identifier for a given Organization. */
         organizationId: string;
         parameters: definitions["v1UpdateOrganizationNameIntent"];
+        generateAppProofs?: boolean;
     };
     v1UpdateOrganizationNameResult: {
         /** @description Unique identifier for the Organization. */
@@ -4714,6 +5100,23 @@ export type definitions = {
     v1UpdateRootQuorumResult: {
         [key: string]: unknown;
     };
+    v1UpdateTvcAppLiveDeploymentIntent: {
+        /** @description The unique identifier of the TVC deployment to set as live for the app. */
+        deploymentId: string;
+    };
+    v1UpdateTvcAppLiveDeploymentRequest: {
+        /** @enum {string} */
+        type: "ACTIVITY_TYPE_UPDATE_TVC_APP_LIVE_DEPLOYMENT";
+        /** @description Timestamp (in milliseconds) of the request, used to verify liveness of user requests. */
+        timestampMs: string;
+        /** @description Unique identifier for a given Organization. */
+        organizationId: string;
+        parameters: definitions["v1UpdateTvcAppLiveDeploymentIntent"];
+        generateAppProofs?: boolean;
+    };
+    v1UpdateTvcAppLiveDeploymentResult: {
+        [key: string]: unknown;
+    };
     v1UpdateUserEmailIntent: {
         /** @description Unique identifier for a given User. */
         userId: string;
@@ -4879,7 +5282,7 @@ export type definitions = {
         orgWindowLimitUsd: string;
         /** @description Gas sponsorship USD limit for sub-organizations under the billing organization. */
         subOrgWindowLimitUsd: string;
-        /** @description Rolling sponsorship window duration, expressed in minutes. */
+        /** @description Rolling sponsorship window duration, expressed in minutes. This value can't exceed 30 days (43200 minutes). */
         windowDurationMinutes: string;
         /** @description Whether gas sponsorship is enabled for the organization. */
         enabled?: boolean;
@@ -5140,7 +5543,7 @@ export type definitions = {
         subscriptions?: definitions["v1WebhookSubscriptionParams"][];
     };
     v1WebhookSubscriptionParams: {
-        /** @description The event type to subscribe to (for example, ACTIVITY_UPDATES or BALANCE_CONFIRMED_UPDATES). */
+        /** @description The event type to subscribe to (for example, ACTIVITY_UPDATES, BALANCE_CONFIRMED_UPDATES, or BALANCE_FINALIZED_UPDATES). */
         eventType: string;
         /** @description JSON-encoded filter criteria for this subscription. */
         filtersJson?: string;
@@ -5563,6 +5966,24 @@ export type operations = {
             };
         };
     };
+    /** Get the attestation document and manifest envelope of the provisioning enclave for a TVC deployment */
+    PublicApiService_GetTvcDeploymentProvisioningDetails: {
+        parameters: {
+            body: {
+                body: definitions["v1GetTvcDeploymentProvisioningDetailsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1GetTvcDeploymentProvisioningDetailsResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Get details about a user. */
     PublicApiService_GetUser: {
         parameters: {
@@ -6643,6 +7064,42 @@ export type operations = {
             };
         };
     };
+    /** Delete a TVC App and all of its deployments */
+    PublicApiService_DeleteTvcAppAndDeployments: {
+        parameters: {
+            body: {
+                body: definitions["v1DeleteTvcAppAndDeploymentsRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Delete a TVC Deployment */
+    PublicApiService_DeleteTvcDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1DeleteTvcDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Delete user tags within an organization. */
     PublicApiService_DeleteUserTags: {
         parameters: {
@@ -7075,6 +7532,24 @@ export type operations = {
             };
         };
     };
+    /** Post re-encrypted quorum key share for a TVC deployment. */
+    PublicApiService_PostTvcQuorumKeyShare: {
+        parameters: {
+            body: {
+                body: definitions["v1PostTvcQuorumKeyShareRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Complete the process of recovering a user by adding an authenticator. */
     PublicApiService_RecoverUser: {
         parameters: {
@@ -7147,6 +7622,24 @@ export type operations = {
             };
         };
     };
+    /** Restore a deleted TVC Deployment */
+    PublicApiService_RestoreTvcDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1RestoreTvcDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Create or update IP allowlist and rules for organization or API key. The IP allowlist restricts API access to specific CIDR blocks. Organization-level allowlists apply to all API keys unless overridden by a key-specific allowlist. */
     PublicApiService_SetIpAllowlist: {
         parameters: {
@@ -7183,6 +7676,24 @@ export type operations = {
             };
         };
     };
+    /** Set the live deployment for a TVC App */
+    PublicApiService_UpdateTvcAppLiveDeployment: {
+        parameters: {
+            body: {
+                body: definitions["v1UpdateTvcAppLiveDeploymentRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Sign a raw payload. */
     PublicApiService_SignRawPayload: {
         parameters: {
@@ -7255,6 +7766,78 @@ export type operations = {
             };
         };
     };
+    /** Construct receiver-side encrypted operator packages to claim a Spark transfer. Does not perform FROST signing. */
+    PublicApiService_SparkClaimTransfer: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkClaimTransferRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Generate a Lightning preimage and distribute Feldman shares to operators for a Spark Lightning receive. Does not perform FROST signing. */
+    PublicApiService_SparkPrepareLightningReceive: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkPrepareLightningReceiveRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Construct sender-side encrypted operator packages for a Spark BTC transfer. Does not perform FROST signing. */
+    PublicApiService_SparkPrepareTransfer: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkPrepareTransferRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
+    /** Perform pure FROST partial signing for a Spark wallet. Produces partial signatures without constructing operator packages. */
+    PublicApiService_SparkSignFrost: {
+        parameters: {
+            body: {
+                body: definitions["v1SparkSignFrostRequest"];
+            };
+        };
+        responses: {
+            /** A successful response. */
+            200: {
+                schema: definitions["v1ActivityResponse"];
+            };
+            /** An unexpected error response. */
+            default: {
+                schema: definitions["rpcStatus"];
+            };
+        };
+    };
     /** Create a session for a user through stamping client side (API key, wallet client, or passkey client). */
     PublicApiService_StampLogin: {
         parameters: {