@eudiplo/sdk-core 4.1.0 → 4.3.0

package/dist/{types.gen-CVLCgolx.d.mts → types.gen-DWk5kPkH.d.mts}

@@ -25,7 +25,7 @@ type RoleDto = {
     /**
      * OAuth2 roles
      */
-    role: "presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "tenants:manage" | "registrar:manage";
+    role: "presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage";
 };
 type ClientCredentialsDto = {
     grant_type?: string;
@@ -138,7 +138,7 @@ type ClientEntity = {
     /**
      * The roles assigned to the client.
      */
-    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "tenants:manage" | "registrar:manage">;
+    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
     /**
      * The tenant that the client belongs to.
      */
@@ -165,7 +165,7 @@ type CreateTenantDto = {
      * Session storage configuration. Controls TTL and cleanup behavior.
      */
     sessionConfig?: SessionStorageConfig;
-    roles?: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "tenants:manage" | "registrar:manage">;
+    roles?: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
 };
 type UpdateTenantDto = {
     /**
@@ -184,7 +184,7 @@ type UpdateTenantDto = {
      * Session storage configuration. Controls TTL and cleanup behavior.
      */
     sessionConfig?: SessionStorageConfig;
-    roles?: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "tenants:manage" | "registrar:manage">;
+    roles?: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
 };
 type ClientSecretResponseDto = {
     secret: string;
@@ -205,7 +205,7 @@ type UpdateClientDto = {
     /**
      * The roles assigned to the client.
      */
-    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "tenants:manage" | "registrar:manage">;
+    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
 };
 type CreateClientDto = {
     /**
@@ -231,7 +231,7 @@ type CreateClientDto = {
     /**
      * The roles assigned to the client.
      */
-    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "tenants:manage" | "registrar:manage">;
+    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
 };
 type StatusListImportDto = {
     /**
@@ -619,6 +619,24 @@ type Session = {
      * Stores the error message when status is 'failed'.
      */
     errorReason?: string;
+    /**
+     * Number of failed tx_code (transaction code) validation attempts.
+     * Used to enforce brute-force protection in the pre-authorized code flow.
+     * Reset implicitly when the session is consumed successfully.
+     */
+    txCodeFailedAttempts: number;
+    /**
+     * Flag indicating whether the session offer has been consumed.
+     * Prevents replay attacks by ensuring each offer can only be used once.
+     * For OID4VCI: set after successful token exchange.
+     * For OID4VP: set after successful response validation.
+     */
+    consumed: boolean;
+    /**
+     * Timestamp when the session offer was consumed.
+     * Null if the offer has not yet been consumed.
+     */
+    consumedAt?: string;
 };
 type SessionLogEntryResponseDto = {
     /**
@@ -678,6 +696,39 @@ type UpdateSessionConfigDto = {
      */
     cleanupMode?: "full" | "anonymize";
 };
+type ManagedUserDto = {
+    id: string;
+    username: string;
+    email?: string;
+    enabled: boolean;
+    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
+    tenantId?: string;
+    /**
+     * One-time temporary password returned only on user creation.
+     */
+    temporaryPassword?: string;
+};
+type CreateUserDto = {
+    username: string;
+    email?: string;
+    roles: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
+    /**
+     * One-time temporary password returned only on user creation.
+     */
+    temporaryPassword?: string;
+    enabled?: boolean;
+};
+type UpdateUserDto = {
+    username?: string;
+    email?: string;
+    roles?: Array<"presentation:manage" | "presentation:request" | "issuance:manage" | "issuance:offer" | "clients:manage" | "users:manage" | "tenants:manage" | "registrar:manage">;
+    /**
+     * One-time temporary password returned only on user creation.
+     */
+    temporaryPassword?: string;
+    enabled?: boolean;
+    password?: string;
+};
 type AuthenticationMethodNone = {
     method: "none";
 };
@@ -780,10 +831,18 @@ type IssuanceConfig = {
      * Whether `credential_response_encryption` should be advertised in the credential issuer metadata.
      */
     credentialResponseEncryption?: boolean;
+    /**
+     * Whether `credential_request_encryption` should be advertised in the credential issuer metadata.
+     */
+    credentialRequestEncryption?: boolean;
     /**
      * Refresh token lifetime in seconds. Defaults to 2592000 (30 days).
      */
     refreshTokenExpiresInSeconds?: number;
+    /**
+     * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
+     */
+    txCodeMaxAttempts?: number;
     /**
      * The tenant that owns this object.
      */
@@ -849,10 +908,18 @@ type IssuanceDto = {
      * Whether `credential_response_encryption` should be advertised in the credential issuer metadata.
      */
     credentialResponseEncryption?: boolean;
+    /**
+     * Whether `credential_request_encryption` should be advertised in the credential issuer metadata.
+     */
+    credentialRequestEncryption?: boolean;
     /**
      * Refresh token lifetime in seconds. Defaults to 2592000 (30 days).
      */
     refreshTokenExpiresInSeconds?: number;
+    /**
+     * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
+     */
+    txCodeMaxAttempts?: number;
     /**
      * Authentication server URL for the issuance process.
      */
@@ -975,6 +1042,92 @@ type IaeActionRedirectToWeb = {
      */
     description?: string;
 };
+type WebhookEndpointEntity = {
+    /**
+     * Unique identifier for the webhook endpoint
+     */
+    id: string;
+    auth: WebHookAuthConfigNone | WebHookAuthConfigHeader;
+    tenantId: string;
+    tenant: TenantEntity;
+    name: string;
+    description?: string;
+    url: string;
+};
+type SchemaUriEntry = {
+    /**
+     * Credential config ID to resolve and upload its schema content. When set, uri can be omitted and is resolved server-side.
+     */
+    credentialConfigId?: string;
+    /**
+     * Attestation format this schema URI applies to (e.g. dc+sd-jwt, mso_mdoc)
+     */
+    format?: string;
+    /**
+     * URI pointing to the schema document for this format
+     */
+    uri?: string;
+    /**
+     * Schema-format specific metadata (for example { vct: 'urn:example:vct' } for dc+sd-jwt).
+     */
+    metadata: {
+        [key: string]: unknown;
+    };
+};
+type TrustAuthorityEntry = {
+    /**
+     * Trust list ID to resolve from the database. When set, frameworkType, value, and verificationMethod are derived automatically.
+     */
+    trustListId?: string;
+    /**
+     * Trust framework type (ignored when trustListId is set)
+     */
+    frameworkType?: "aki" | "etsi_tl" | "openid_federation";
+    /**
+     * URI of the trust list or trust anchor (ignored when trustListId is set)
+     */
+    value?: string;
+    /**
+     * Whether this trust authority is a List of Trusted Entities (LoTE)
+     */
+    isLoTE?: boolean;
+    /**
+     * Optional verification material for external trusted authorities (for example a JWK). For internal trust-list URLs, EUDIPLO resolves verification material from the database.
+     */
+    verificationMethod?: {
+        [key: string]: unknown;
+    };
+};
+type SchemaMetaConfig = {
+    /**
+     * Optional override for the schema ID (attestation identifier URI). When not set, derived from vct (dc+sd-jwt) or docType (mso_mdoc).
+     */
+    id?: string;
+    /**
+     * Schema version in SemVer format
+     */
+    version?: string;
+    /**
+     * URI of the Attestation Rulebook
+     */
+    rulebookURI?: string;
+    /**
+     * Attestation Level of Security
+     */
+    attestationLoS?: "iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic";
+    /**
+     * Cryptographic binding type
+     */
+    bindingType?: "claim" | "key" | "biometric" | "none";
+    /**
+     * Schema URIs per attestation format. When omitted, the format is derived from the credential config format field.
+     */
+    schemaURIs?: Array<SchemaUriEntry>;
+    /**
+     * Trust authorities for this attestation schema
+     */
+    trustedAuthorities?: Array<TrustAuthorityEntry>;
+};
 type EmbeddedDisclosurePolicy = {
     policy: string;
 };
@@ -1081,15 +1234,6 @@ type AttributeProviderEntity = {
     description?: string;
     url: string;
 };
-type WebhookEndpointEntity = {
-    auth: WebHookAuthConfigNone | WebHookAuthConfigHeader;
-    id: string;
-    tenantId: string;
-    tenant: TenantEntity;
-    name: string;
-    description?: string;
-    url: string;
-};
 type KeyChainEntity = {
     /**
      * Unique identifier for the key chain.
@@ -1192,6 +1336,15 @@ type CredentialConfig = {
      * List of IAE actions to execute before credential issuance
      */
     iaeActions?: Array<IaeActionOpenid4VpPresentation | IaeActionRedirectToWeb>;
+    /**
+     * TS11 schema metadata configuration for EUDI Catalogue of Attestations.
+     *
+     * When present, EUDIPLO can generate a SchemaMeta object per the TS11 spec
+     * using the GET /issuer/credentials/:id/schema-metadata endpoint.
+     *
+     * The underlying TS11 specification is not yet finalized.
+     */
+    schemaMeta?: SchemaMetaConfig;
     /**
      * Embedded disclosure policy (discriminated union by `policy`).
      * The discriminator makes class-transformer instantiate the right subclass,
@@ -1243,6 +1396,15 @@ type CredentialConfigCreate = {
      * List of IAE actions to execute before credential issuance
      */
     iaeActions?: Array<IaeActionOpenid4VpPresentation | IaeActionRedirectToWeb>;
+    /**
+     * TS11 schema metadata configuration for EUDI Catalogue of Attestations.
+     *
+     * When present, EUDIPLO can generate a SchemaMeta object per the TS11 spec
+     * using the GET /issuer/credentials/:id/schema-metadata endpoint.
+     *
+     * The underlying TS11 specification is not yet finalized.
+     */
+    schemaMeta?: SchemaMetaConfig;
     /**
      * Embedded disclosure policy (discriminated union by `policy`).
      * The discriminator makes class-transformer instantiate the right subclass,
@@ -1287,6 +1449,15 @@ type CredentialConfigUpdate = {
      * List of IAE actions to execute before credential issuance
      */
     iaeActions?: Array<IaeActionOpenid4VpPresentation | IaeActionRedirectToWeb>;
+    /**
+     * TS11 schema metadata configuration for EUDI Catalogue of Attestations.
+     *
+     * When present, EUDIPLO can generate a SchemaMeta object per the TS11 spec
+     * using the GET /issuer/credentials/:id/schema-metadata endpoint.
+     *
+     * The underlying TS11 specification is not yet finalized.
+     */
+    schemaMeta?: SchemaMetaConfig;
     /**
      * Embedded disclosure policy (discriminated union by `policy`).
      * The discriminator makes class-transformer instantiate the right subclass,
@@ -1322,6 +1493,30 @@ type CredentialConfigUpdate = {
     lifeTime?: number;
     schema?: SchemaResponse;
 };
+type SignSchemaMetaConfigDto = {
+    /**
+     * The schema metadata configuration to sign and submit
+     */
+    config: SchemaMetaConfig;
+    /**
+     * ID of the key chain to use for signing. Defaults to the tenant's default key chain.
+     */
+    keyChainId?: string;
+    /**
+     * ID of the credential config to link back after submission. When provided, schemaMeta.id on the credential config is updated with the reserved attestation ID.
+     */
+    credentialConfigId?: string;
+};
+type SignVersionSchemaMetaConfigDto = {
+    /**
+     * The schema metadata configuration to sign and submit as a new version. Must include the existing id.
+     */
+    config: SchemaMetaConfig;
+    /**
+     * ID of the key chain to use for signing. Defaults to the tenant's default key chain.
+     */
+    keyChainId?: string;
+};
 type CreateAttributeProviderDto = {
     auth: WebHookAuthConfigNone | WebHookAuthConfigHeader;
     id: string;
@@ -1337,30 +1532,141 @@ type UpdateAttributeProviderDto = {
     url?: string;
 };
 type CreateWebhookEndpointDto = {
-    auth: WebHookAuthConfigNone | WebHookAuthConfigHeader;
+    /**
+     * Unique identifier for the webhook endpoint
+     */
     id: string;
+    auth: WebHookAuthConfigNone | WebHookAuthConfigHeader;
     name: string;
     description?: string;
     url: string;
 };
 type UpdateWebhookEndpointDto = {
-    auth?: WebHookAuthConfigNone | WebHookAuthConfigHeader;
+    /**
+     * Unique identifier for the webhook endpoint
+     */
     id?: string;
+    auth?: WebHookAuthConfigNone | WebHookAuthConfigHeader;
     name?: string;
     description?: string;
     url?: string;
 };
+type TrustListEntityInfo = {
+    name: string;
+    lang?: string;
+    uri?: string;
+    country?: string;
+    locality?: string;
+    postalCode?: string;
+    streetAddress?: string;
+    contactUri?: string;
+};
+type InternalTrustListEntity = {
+    type: "internal";
+    issuerKeyChainId: string;
+    revocationKeyChainId: string;
+    info: TrustListEntityInfo;
+};
+type ExternalTrustListEntity = {
+    type: "external";
+    issuerCertPem: string;
+    revocationCertPem: string;
+    info: TrustListEntityInfo;
+};
+type TrustListCreateDto = {
+    description?: string;
+    /**
+     * The full trust list JSON (generated LoTE structure)
+     */
+    data?: {
+        [key: string]: unknown;
+    };
+    entities: Array<({
+        type: "internal";
+    } & InternalTrustListEntity) | ({
+        type: "external";
+    } & ExternalTrustListEntity)>;
+    id?: string;
+    keyChainId?: string;
+};
+type TrustList = {
+    /**
+     * Unique identifier for the trust list
+     */
+    id: string;
+    description?: string;
+    /**
+     * The tenant ID for which the VP request is made.
+     */
+    tenantId: string;
+    /**
+     * The tenant that owns this object.
+     */
+    tenant: TenantEntity;
+    keyChainId: string;
+    keyChain: KeyChainEntity;
+    /**
+     * The full trust list JSON (generated LoTE structure)
+     */
+    data?: {
+        [key: string]: unknown;
+    };
+    /**
+     * The original entity configuration used to create this trust list.
+     * Stored for round-tripping when editing.
+     */
+    entityConfig?: Array<{
+        [key: string]: unknown;
+    }>;
+    /**
+     * The sequence number for versioning (incremented on updates)
+     */
+    sequenceNumber: number;
+    /**
+     * The signed JWT representation of this trust list
+     */
+    jwt: string;
+    createdAt: string;
+    updatedAt: string;
+};
+type TrustListVersion = {
+    id: string;
+    trustListId: string;
+    trustList: TrustList;
+    tenantId: string;
+    /**
+     * The sequence number at the time this version was created
+     */
+    sequenceNumber: number;
+    /**
+     * The full trust list JSON at this version
+     */
+    data: {
+        [key: string]: unknown;
+    };
+    /**
+     * The entity configuration at this version
+     */
+    entityConfig?: {
+        [key: string]: unknown;
+    };
+    /**
+     * The signed JWT at this version
+     */
+    jwt: string;
+    createdAt: string;
+};
 type Dcql = {
     credentials: Array<CredentialQuery>;
     credential_sets?: Array<CredentialSetQuery>;
 };
 type RegistrationCertificatePurpose = {
     lang: string;
-    value: string;
+    content: string;
 };
 type RegistrationCertificateBody = {
-    privacy_policy: string;
-    support_uri: string;
+    privacy_policy?: string;
+    support_uri?: string;
     intermediary?: string;
     purpose?: Array<RegistrationCertificatePurpose>;
     credentials?: Array<{
@@ -1425,7 +1731,7 @@ type PresentationConfig = {
     /**
      * The registration certificate request containing the necessary details.
      */
-    registrationCert?: RegistrationCertificateRequest;
+    registration_cert?: RegistrationCertificateRequest;
     /**
      * Optional webhook URL to receive the response.
      */
@@ -1464,6 +1770,12 @@ type ResolveIssuerMetadataDto = {
      */
     issuerUrl: string;
 };
+type ResolveSchemaMetadataDto = {
+    /**
+     * Schema metadata URL to resolve server-side. The response must contain a signedJwt field.
+     */
+    schemaMetadataUrl: string;
+};
 type PresentationConfigCreateDto = {
     /**
      * Unique identifier for the VP request.
@@ -1485,7 +1797,7 @@ type PresentationConfigCreateDto = {
     /**
      * The registration certificate request containing the necessary details.
      */
-    registrationCert?: RegistrationCertificateRequest;
+    registration_cert?: RegistrationCertificateRequest;
     /**
      * Optional webhook URL to receive the response.
      */
@@ -1531,7 +1843,7 @@ type PresentationConfigUpdateDto = {
     /**
      * The registration certificate request containing the necessary details.
      */
-    registrationCert?: RegistrationCertificateRequest;
+    registration_cert?: RegistrationCertificateRequest;
     /**
      * Optional webhook URL to receive the response.
      */
@@ -1556,6 +1868,16 @@ type PresentationConfigUpdateDto = {
      */
     accessKeyChainId?: string;
 };
+type RegistrationCertificateDefaults = {
+    /**
+     * Default privacy policy URL for registration certificate creation.
+     */
+    privacy_policy?: string;
+    /**
+     * Default support contact URI for registration certificate creation.
+     */
+    support_uri?: string;
+};
 type RegistrarConfigResponseDto = {
     /**
      * The base URL of the registrar API
@@ -1578,11 +1900,9 @@ type RegistrarConfigResponseDto = {
      */
     username: string;
     /**
-     * Optional default values merged into registration certificate creation requests (for example privacy_policy, support_uri, provided_attestations)
+     * Optional default values merged into registration certificate creation requests (for example privacy_policy, support_uri)
      */
-    registrationCertificateDefaults?: {
-        [key: string]: unknown;
-    };
+    registrationCertificateDefaults?: RegistrationCertificateDefaults;
     /**
      * Indicates whether a password is configured (actual password is never returned)
      */
@@ -1614,11 +1934,9 @@ type CreateRegistrarConfigDto = {
      */
     password: string;
     /**
-     * Optional default values merged into registration certificate creation requests (for example privacy_policy, support_uri, provided_attestations)
+     * Optional default values merged into registration certificate creation requests (for example privacy_policy, support_uri)
      */
-    registrationCertificateDefaults?: {
-        [key: string]: unknown;
-    };
+    registrationCertificateDefaults?: RegistrationCertificateDefaults;
 };
 type UpdateRegistrarConfigDto = {
     /**
@@ -1646,11 +1964,9 @@ type UpdateRegistrarConfigDto = {
      */
     password?: string;
     /**
-     * Optional default values merged into registration certificate creation requests (for example privacy_policy, support_uri, provided_attestations)
+     * Optional default values merged into registration certificate creation requests (for example privacy_policy, support_uri)
      */
-    registrationCertificateDefaults?: {
-        [key: string]: unknown;
-    };
+    registrationCertificateDefaults?: RegistrationCertificateDefaults;
 };
 type CreateAccessCertificateDto = {
     /**
@@ -1658,17 +1974,210 @@ type CreateAccessCertificateDto = {
      */
     keyId: string;
 };
-type DeferredCredentialRequestDto = {
+type VocabularyEntryDto = {
     /**
-     * The transaction identifier previously returned by the Credential Endpoint
+     * Stable machine-readable value to submit in schema metadata category/tags fields.
      */
-    transaction_id: string;
-};
-type NotificationRequestDto = {
-    notification_id: string;
-    event: {
-        [key: string]: unknown;
-    };
+    code: string;
+    /**
+     * Display label for UI rendering.
+     */
+    label: string;
+    /**
+     * Vocabulary lifecycle status.
+     */
+    status: "active" | "deprecated";
+    /**
+     * Replacement code when status is deprecated.
+     */
+    replacedBy?: string;
+};
+type SchemaMetadataVocabulariesDto = {
+    /**
+     * Vocabulary publication version for cache invalidation.
+     */
+    version: string;
+    /**
+     * Allowed category values that can be used when updating schema metadata category.
+     */
+    categories: Array<VocabularyEntryDto>;
+    /**
+     * Allowed tag values that can be used when updating schema metadata tags.
+     */
+    tags: Array<VocabularyEntryDto>;
+};
+type MetadataSchemaDto = {
+    /**
+     * Unique identifier for this schema entry
+     */
+    id: string;
+    /**
+     * The credential format identifier
+     */
+    formatIdentifier: "dc+sd-jwt" | "mso_mdoc";
+    /**
+     * URI to the schema definition
+     */
+    uri?: string;
+    /**
+     * Inline schema content (JSON Schema)
+     */
+    schemaContent?: {
+        [key: string]: unknown;
+    };
+    /**
+     * Subresource Integrity hash for the schema
+     */
+    integrity?: string;
+};
+type TrustAuthorityDto = {
+    /**
+     * Unique identifier for this trust authority entry
+     */
+    id: string;
+    /**
+     * Type of trust framework
+     */
+    frameworkType: "etsi_tl";
+    /**
+     * URI or identifier for the trust list / authority
+     */
+    value: string;
+    /**
+     * Verification method for the trust list signature (e.g., JWK)
+     */
+    verificationMethod?: {
+        [key: string]: unknown;
+    };
+};
+type AccessCertificateRefDto = {
+    id: string;
+    relyingPartyId: string;
+    certificate: string;
+    revoked: string;
+    createdAt: string;
+};
+type SchemaMetadataResponseDto = {
+    /**
+     * The unique, server-assigned identifier (UUID) for the schema metadata
+     */
+    id: string;
+    /**
+     * Version of this schema metadata (SemVer)
+     */
+    version: string;
+    /**
+     * URI of the human-readable Rulebook document
+     */
+    rulebookURI?: string;
+    /**
+     * Subresource Integrity hash for the rulebook URI
+     */
+    rulebookIntegrity?: string;
+    /**
+     * Level of security (LoS) of this attestation
+     */
+    attestationLoS: "iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic";
+    /**
+     * Required binding type between attestation and holder
+     */
+    bindingType: "claim" | "key" | "biometric" | "none";
+    /**
+     * Credential formats in which this attestation is available
+     */
+    supportedFormats: Array<"dc+sd-jwt" | "mso_mdoc">;
+    /**
+     * Format-specific schema URIs for this schema metadata
+     */
+    schemaURIs: Array<MetadataSchemaDto>;
+    /**
+     * Trust frameworks / trust anchors applicable to this schema metadata
+     */
+    trustedAuthorities: Array<TrustAuthorityDto>;
+    /**
+     * Domain category for filtering
+     */
+    category?: "identity" | "health" | "finance" | "education" | "mobility" | "employment" | "other";
+    /**
+     * Free-form tags for filtering and search
+     */
+    tags?: Array<string>;
+    /**
+     * The original signed JWT
+     */
+    signedJwt: string;
+    /**
+     * Issuer from the JWT (`iss` claim)
+     */
+    issuer: string;
+    /**
+     * Serial number of the access certificate that signed this schema metadata
+     */
+    signerCertificateSerial: string;
+    /**
+     * The access certificate used to sign this schema metadata
+     */
+    signerCertificate?: AccessCertificateRefDto;
+    /**
+     * Timestamp when the JWT was issued (from the `iat` claim)
+     */
+    issuedAt: string;
+    /**
+     * Server creation timestamp
+     */
+    createdAt: string;
+    /**
+     * Last update timestamp
+     */
+    updatedAt: string;
+    /**
+     * Whether this version is deprecated
+     */
+    deprecated?: boolean;
+    /**
+     * Deprecation message shown to consumers
+     */
+    deprecationMessage?: string;
+    /**
+     * The version that supersedes this one
+     */
+    supersededByVersion?: string;
+};
+type UpdateSchemaMetadataDto = {
+    /**
+     * Domain category for filtering
+     */
+    category?: "identity" | "health" | "finance" | "education" | "mobility" | "employment" | "other";
+    /**
+     * Predefined tags for filtering and search
+     */
+    tags?: Array<"pid" | "eudi" | "kyc" | "aml" | "age-verification" | "residency" | "membership" | "education" | "employment" | "mobility">;
+};
+type DeprecateSchemaMetadataDto = {
+    /**
+     * Whether to mark this version as deprecated
+     */
+    deprecated: boolean;
+    /**
+     * Deprecation message shown to consumers
+     */
+    message?: string;
+    /**
+     * The version that supersedes this one
+     */
+    supersededByVersion?: string;
+};
+type DeferredCredentialRequestDto = {
+    /**
+     * The transaction identifier previously returned by the Credential Endpoint
+     */
+    transaction_id: string;
+};
+type NotificationRequestDto = {
+    notification_id: string;
+    event: {
+        [key: string]: unknown;
+    };
 };
 type Object$1 = {
     [key: string]: unknown;
@@ -1933,111 +2442,6 @@ type AuthorizationResponse = {
      */
     state?: string;
 };
-type TrustListEntityInfo = {
-    name: string;
-    lang?: string;
-    uri?: string;
-    country?: string;
-    locality?: string;
-    postalCode?: string;
-    streetAddress?: string;
-    contactUri?: string;
-};
-type InternalTrustListEntity = {
-    type: "internal";
-    issuerKeyChainId: string;
-    revocationKeyChainId: string;
-    info: TrustListEntityInfo;
-};
-type ExternalTrustListEntity = {
-    type: "external";
-    issuerCertPem: string;
-    revocationCertPem: string;
-    info: TrustListEntityInfo;
-};
-type TrustListCreateDto = {
-    description?: string;
-    /**
-     * The full trust list JSON (generated LoTE structure)
-     */
-    data?: {
-        [key: string]: unknown;
-    };
-    entities: Array<({
-        type: "internal";
-    } & InternalTrustListEntity) | ({
-        type: "external";
-    } & ExternalTrustListEntity)>;
-    id?: string;
-    keyChainId?: string;
-};
-type TrustList = {
-    /**
-     * Unique identifier for the trust list
-     */
-    id: string;
-    description?: string;
-    /**
-     * The tenant ID for which the VP request is made.
-     */
-    tenantId: string;
-    /**
-     * The tenant that owns this object.
-     */
-    tenant: TenantEntity;
-    keyChainId: string;
-    keyChain: KeyChainEntity;
-    /**
-     * The full trust list JSON (generated LoTE structure)
-     */
-    data?: {
-        [key: string]: unknown;
-    };
-    /**
-     * The original entity configuration used to create this trust list.
-     * Stored for round-tripping when editing.
-     */
-    entityConfig?: Array<{
-        [key: string]: unknown;
-    }>;
-    /**
-     * The sequence number for versioning (incremented on updates)
-     */
-    sequenceNumber: number;
-    /**
-     * The signed JWT representation of this trust list
-     */
-    jwt: string;
-    createdAt: string;
-    updatedAt: string;
-};
-type TrustListVersion = {
-    id: string;
-    trustListId: string;
-    trustList: TrustList;
-    tenantId: string;
-    /**
-     * The sequence number at the time this version was created
-     */
-    sequenceNumber: number;
-    /**
-     * The full trust list JSON at this version
-     */
-    data: {
-        [key: string]: unknown;
-    };
-    /**
-     * The entity configuration at this version
-     */
-    entityConfig?: {
-        [key: string]: unknown;
-    };
-    /**
-     * The signed JWT at this version
-     */
-    jwt: string;
-    createdAt: string;
-};
 type KmsProviderCapabilitiesDto = {
     /**
      * Whether the provider supports importing existing keys.
@@ -2444,7 +2848,7 @@ type PresentationConfigWritable = {
     /**
      * The registration certificate request containing the necessary details.
      */
-    registrationCert?: RegistrationCertificateRequest;
+    registration_cert?: RegistrationCertificateRequest;
     /**
      * Optional webhook URL to receive the response.
      */
@@ -2879,6 +3283,61 @@ type SessionEventsControllerSubscribeToSessionEventsData = {
 type SessionEventsControllerSubscribeToSessionEventsResponses = {
     200: unknown;
 };
+type UserControllerGetUsersData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: "/api/user";
+};
+type UserControllerGetUsersResponses = {
+    200: Array<ManagedUserDto>;
+};
+type UserControllerGetUsersResponse = UserControllerGetUsersResponses[keyof UserControllerGetUsersResponses];
+type UserControllerCreateUserData = {
+    body: CreateUserDto;
+    path?: never;
+    query?: never;
+    url: "/api/user";
+};
+type UserControllerCreateUserResponses = {
+    201: ManagedUserDto;
+};
+type UserControllerCreateUserResponse = UserControllerCreateUserResponses[keyof UserControllerCreateUserResponses];
+type UserControllerDeleteUserData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/user/{id}";
+};
+type UserControllerDeleteUserResponses = {
+    200: unknown;
+};
+type UserControllerGetUserData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/user/{id}";
+};
+type UserControllerGetUserResponses = {
+    200: ManagedUserDto;
+};
+type UserControllerGetUserResponse = UserControllerGetUserResponses[keyof UserControllerGetUserResponses];
+type UserControllerUpdateUserData = {
+    body: UpdateUserDto;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/user/{id}";
+};
+type UserControllerUpdateUserResponses = {
+    200: ManagedUserDto;
+};
+type UserControllerUpdateUserResponse = UserControllerUpdateUserResponses[keyof UserControllerUpdateUserResponses];
 type IssuanceConfigControllerGetIssuanceConfigurationsData = {
     body?: never;
     path?: never;
@@ -2932,8 +3391,11 @@ type CredentialConfigControllerDeleteIssuanceConfigurationData = {
     url: "/api/issuer/credentials/{id}";
 };
 type CredentialConfigControllerDeleteIssuanceConfigurationResponses = {
-    200: unknown;
+    200: {
+        [key: string]: unknown;
+    };
 };
+type CredentialConfigControllerDeleteIssuanceConfigurationResponse = CredentialConfigControllerDeleteIssuanceConfigurationResponses[keyof CredentialConfigControllerDeleteIssuanceConfigurationResponses];
 type CredentialConfigControllerGetConfigByIdData = {
     body?: never;
     path: {
@@ -2960,6 +3422,42 @@ type CredentialConfigControllerUpdateCredentialConfigurationResponses = {
     };
 };
 type CredentialConfigControllerUpdateCredentialConfigurationResponse = CredentialConfigControllerUpdateCredentialConfigurationResponses[keyof CredentialConfigControllerUpdateCredentialConfigurationResponses];
+type CredentialConfigControllerSignSchemaMetaConfigData = {
+    body: SignSchemaMetaConfigDto;
+    path?: never;
+    query?: never;
+    url: "/api/issuer/credentials/schema-metadata/sign";
+};
+type CredentialConfigControllerSignSchemaMetaConfigErrors = {
+    /**
+     * Invalid schema metadata or missing certificate for signing
+     */
+    400: unknown;
+};
+type CredentialConfigControllerSignSchemaMetaConfigResponses = {
+    /**
+     * Registrar metadata entry for the freshly submitted schema metadata.
+     */
+    201: unknown;
+};
+type CredentialConfigControllerSignVersionSchemaMetaConfigData = {
+    body: SignVersionSchemaMetaConfigDto;
+    path?: never;
+    query?: never;
+    url: "/api/issuer/credentials/schema-metadata/sign-version";
+};
+type CredentialConfigControllerSignVersionSchemaMetaConfigErrors = {
+    /**
+     * config.id is required; or invalid schema metadata
+     */
+    400: unknown;
+};
+type CredentialConfigControllerSignVersionSchemaMetaConfigResponses = {
+    /**
+     * Registrar metadata entry for the newly submitted version.
+     */
+    201: unknown;
+};
 type AttributeProviderControllerGetAllData = {
     body?: never;
     path?: never;
@@ -3054,8 +3552,9 @@ type WebhookEndpointControllerGetAllResponses = {
     /**
      * List of webhook endpoints
      */
-    200: unknown;
+    200: Array<WebhookEndpointEntity>;
 };
+type WebhookEndpointControllerGetAllResponse = WebhookEndpointControllerGetAllResponses[keyof WebhookEndpointControllerGetAllResponses];
 type WebhookEndpointControllerCreateData = {
     body: CreateWebhookEndpointDto;
     path?: never;
@@ -3128,6 +3627,98 @@ type WebhookEndpointControllerUpdateResponses = {
      */
     200: unknown;
 };
+type TrustListControllerGetAllTrustListsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: "/api/trust-list";
+};
+type TrustListControllerGetAllTrustListsResponses = {
+    200: Array<TrustList>;
+};
+type TrustListControllerGetAllTrustListsResponse = TrustListControllerGetAllTrustListsResponses[keyof TrustListControllerGetAllTrustListsResponses];
+type TrustListControllerCreateTrustListData = {
+    body: TrustListCreateDto;
+    path?: never;
+    query?: never;
+    url: "/api/trust-list";
+};
+type TrustListControllerCreateTrustListResponses = {
+    201: TrustList;
+};
+type TrustListControllerCreateTrustListResponse = TrustListControllerCreateTrustListResponses[keyof TrustListControllerCreateTrustListResponses];
+type TrustListControllerDeleteTrustListData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/trust-list/{id}";
+};
+type TrustListControllerDeleteTrustListResponses = {
+    200: unknown;
+};
+type TrustListControllerGetTrustListData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/trust-list/{id}";
+};
+type TrustListControllerGetTrustListResponses = {
+    200: TrustList;
+};
+type TrustListControllerGetTrustListResponse = TrustListControllerGetTrustListResponses[keyof TrustListControllerGetTrustListResponses];
+type TrustListControllerUpdateTrustListData = {
+    body: TrustListCreateDto;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/trust-list/{id}";
+};
+type TrustListControllerUpdateTrustListResponses = {
+    200: TrustList;
+};
+type TrustListControllerUpdateTrustListResponse = TrustListControllerUpdateTrustListResponses[keyof TrustListControllerUpdateTrustListResponses];
+type TrustListControllerExportTrustListData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/trust-list/{id}/export";
+};
+type TrustListControllerExportTrustListResponses = {
+    200: TrustListCreateDto;
+};
+type TrustListControllerExportTrustListResponse = TrustListControllerExportTrustListResponses[keyof TrustListControllerExportTrustListResponses];
+type TrustListControllerGetTrustListVersionsData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: "/api/trust-list/{id}/versions";
+};
+type TrustListControllerGetTrustListVersionsResponses = {
+    200: Array<TrustListVersion>;
+};
+type TrustListControllerGetTrustListVersionsResponse = TrustListControllerGetTrustListVersionsResponses[keyof TrustListControllerGetTrustListVersionsResponses];
+type TrustListControllerGetTrustListVersionData = {
+    body?: never;
+    path: {
+        id: string;
+        versionId: string;
+    };
+    query?: never;
+    url: "/api/trust-list/{id}/versions/{versionId}";
+};
+type TrustListControllerGetTrustListVersionResponses = {
+    200: TrustListVersion;
+};
+type TrustListControllerGetTrustListVersionResponse = TrustListControllerGetTrustListVersionResponses[keyof TrustListControllerGetTrustListVersionResponses];
 type PresentationManagementControllerConfigurationData = {
     body?: never;
     path?: never;
@@ -3166,6 +3757,36 @@ type PresentationManagementControllerResolveIssuerMetadataResponses = {
      */
     200: unknown;
 };
+type PresentationManagementControllerResolveSchemaMetadataData = {
+    body: ResolveSchemaMetadataDto;
+    path?: never;
+    query?: never;
+    url: "/api/verifier/config/schema-metadata/resolve";
+};
+type PresentationManagementControllerResolveSchemaMetadataErrors = {
+    /**
+     * Invalid URL, invalid response, or invalid schema metadata JWT
+     */
+    400: unknown;
+};
+type PresentationManagementControllerResolveSchemaMetadataResponses = {
+    /**
+     * Resolved schema metadata import payload
+     */
+    200: unknown;
+};
+type PresentationManagementControllerListSchemaMetadataCatalogData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: "/api/verifier/config/schema-metadata/catalog";
+};
+type PresentationManagementControllerListSchemaMetadataCatalogResponses = {
+    /**
+     * Catalog entries from the registrar
+     */
+    200: unknown;
+};
 type PresentationManagementControllerDeleteConfigurationData = {
     body?: never;
     path: {
@@ -3378,153 +3999,214 @@ type RegistrarControllerCreateAccessCertificateResponses = {
     };
 };
 type RegistrarControllerCreateAccessCertificateResponse = RegistrarControllerCreateAccessCertificateResponses[keyof RegistrarControllerCreateAccessCertificateResponses];
-type CredentialOfferControllerGetOfferData = {
-    body: OfferRequestDto;
+type SchemaMetadataControllerGetVocabulariesData = {
+    body?: never;
     path?: never;
     query?: never;
-    url: "/api/issuer/offer";
+    url: "/api/schema-metadata/vocabularies";
 };
-type CredentialOfferControllerGetOfferResponses = {
-    /**
-     * JSON response
-     */
-    201: OfferResponse;
+type SchemaMetadataControllerGetVocabulariesResponses = {
+    200: SchemaMetadataVocabulariesDto;
 };
-type CredentialOfferControllerGetOfferResponse = CredentialOfferControllerGetOfferResponses[keyof CredentialOfferControllerGetOfferResponses];
-type DeferredControllerCompleteDeferredData = {
-    body: CompleteDeferredDto;
+type SchemaMetadataControllerGetVocabulariesResponse = SchemaMetadataControllerGetVocabulariesResponses[keyof SchemaMetadataControllerGetVocabulariesResponses];
+type SchemaMetadataControllerFindAllData = {
+    body?: never;
+    path?: never;
+    query?: {
+        attestationId?: string;
+        version?: string;
+    };
+    url: "/api/schema-metadata";
+};
+type SchemaMetadataControllerFindAllResponses = {
+    200: Array<SchemaMetadataResponseDto>;
+};
+type SchemaMetadataControllerFindAllResponse = SchemaMetadataControllerFindAllResponses[keyof SchemaMetadataControllerFindAllResponses];
+type SchemaMetadataControllerFindOneData = {
+    body?: never;
     path: {
-        transactionId: string;
+        id: string;
     };
     query?: never;
-    url: "/api/issuer/deferred/{transactionId}/complete";
-};
-type DeferredControllerCompleteDeferredErrors = {
-    /**
-     * Transaction not found
-     */
-    404: unknown;
+    url: "/api/schema-metadata/{id}";
 };
-type DeferredControllerCompleteDeferredResponses = {
-    /**
-     * Transaction completed successfully
-     */
-    200: DeferredOperationResponse;
+type SchemaMetadataControllerFindOneResponses = {
+    200: SchemaMetadataResponseDto;
 };
-type DeferredControllerCompleteDeferredResponse = DeferredControllerCompleteDeferredResponses[keyof DeferredControllerCompleteDeferredResponses];
-type DeferredControllerFailDeferredData = {
-    body?: FailDeferredDto;
+type SchemaMetadataControllerFindOneResponse = SchemaMetadataControllerFindOneResponses[keyof SchemaMetadataControllerFindOneResponses];
+type SchemaMetadataControllerRemoveData = {
+    body?: never;
     path: {
-        transactionId: string;
+        id: string;
+        version: string;
     };
     query?: never;
-    url: "/api/issuer/deferred/{transactionId}/fail";
+    url: "/api/schema-metadata/{id}/versions/{version}";
 };
-type DeferredControllerFailDeferredErrors = {
-    /**
-     * Transaction not found
-     */
-    404: unknown;
-};
-type DeferredControllerFailDeferredResponses = {
+type SchemaMetadataControllerRemoveResponses = {
     /**
-     * Transaction marked as failed
+     * Deleted
      */
-    200: DeferredOperationResponse;
+    200: unknown;
 };
-type DeferredControllerFailDeferredResponse = DeferredControllerFailDeferredResponses[keyof DeferredControllerFailDeferredResponses];
-type TrustListControllerGetAllTrustListsData = {
-    body?: never;
-    path?: never;
+type SchemaMetadataControllerUpdateData = {
+    body: UpdateSchemaMetadataDto;
+    path: {
+        id: string;
+        version: string;
+    };
     query?: never;
-    url: "/api/trust-list";
+    url: "/api/schema-metadata/{id}/versions/{version}";
 };
-type TrustListControllerGetAllTrustListsResponses = {
-    200: Array<TrustList>;
+type SchemaMetadataControllerUpdateResponses = {
+    200: SchemaMetadataResponseDto;
 };
-type TrustListControllerGetAllTrustListsResponse = TrustListControllerGetAllTrustListsResponses[keyof TrustListControllerGetAllTrustListsResponses];
-type TrustListControllerCreateTrustListData = {
-    body: TrustListCreateDto;
-    path?: never;
+type SchemaMetadataControllerUpdateResponse = SchemaMetadataControllerUpdateResponses[keyof SchemaMetadataControllerUpdateResponses];
+type SchemaMetadataControllerGetLatestData = {
+    body?: never;
+    path: {
+        id: string;
+    };
     query?: never;
-    url: "/api/trust-list";
+    url: "/api/schema-metadata/{id}/latest";
 };
-type TrustListControllerCreateTrustListResponses = {
-    201: TrustList;
+type SchemaMetadataControllerGetLatestResponses = {
+    200: SchemaMetadataResponseDto;
 };
-type TrustListControllerCreateTrustListResponse = TrustListControllerCreateTrustListResponses[keyof TrustListControllerCreateTrustListResponses];
-type TrustListControllerDeleteTrustListData = {
+type SchemaMetadataControllerGetLatestResponse = SchemaMetadataControllerGetLatestResponses[keyof SchemaMetadataControllerGetLatestResponses];
+type SchemaMetadataControllerGetVersionsData = {
     body?: never;
     path: {
         id: string;
     };
     query?: never;
-    url: "/api/trust-list/{id}";
+    url: "/api/schema-metadata/{id}/versions";
 };
-type TrustListControllerDeleteTrustListResponses = {
-    200: unknown;
+type SchemaMetadataControllerGetVersionsResponses = {
+    200: Array<SchemaMetadataResponseDto>;
 };
-type TrustListControllerGetTrustListData = {
+type SchemaMetadataControllerGetVersionsResponse = SchemaMetadataControllerGetVersionsResponses[keyof SchemaMetadataControllerGetVersionsResponses];
+type SchemaMetadataControllerGetJwtData = {
     body?: never;
     path: {
         id: string;
+        version: string;
     };
     query?: never;
-    url: "/api/trust-list/{id}";
+    url: "/api/schema-metadata/{id}/versions/{version}/jwt";
 };
-type TrustListControllerGetTrustListResponses = {
-    200: TrustList;
+type SchemaMetadataControllerGetJwtResponses = {
+    /**
+     * Compact-serialization JWS string
+     */
+    200: string;
 };
-type TrustListControllerGetTrustListResponse = TrustListControllerGetTrustListResponses[keyof TrustListControllerGetTrustListResponses];
-type TrustListControllerUpdateTrustListData = {
-    body: TrustListCreateDto;
+type SchemaMetadataControllerGetJwtResponse = SchemaMetadataControllerGetJwtResponses[keyof SchemaMetadataControllerGetJwtResponses];
+type SchemaMetadataControllerExportData = {
+    body?: never;
     path: {
         id: string;
+        version: string;
     };
     query?: never;
-    url: "/api/trust-list/{id}";
+    url: "/api/schema-metadata/{id}/versions/{version}/export";
 };
-type TrustListControllerUpdateTrustListResponses = {
-    200: TrustList;
+type SchemaMetadataControllerExportResponses = {
+    /**
+     * Registrar-defined catalog document
+     */
+    200: {
+        [key: string]: unknown;
+    };
 };
-type TrustListControllerUpdateTrustListResponse = TrustListControllerUpdateTrustListResponses[keyof TrustListControllerUpdateTrustListResponses];
-type TrustListControllerExportTrustListData = {
+type SchemaMetadataControllerExportResponse = SchemaMetadataControllerExportResponses[keyof SchemaMetadataControllerExportResponses];
+type SchemaMetadataControllerGetSchemaData = {
     body?: never;
     path: {
         id: string;
+        version: string;
+        format: string;
     };
     query?: never;
-    url: "/api/trust-list/{id}/export";
+    url: "/api/schema-metadata/{id}/versions/{version}/schemas/{format}";
 };
-type TrustListControllerExportTrustListResponses = {
-    200: TrustListCreateDto;
+type SchemaMetadataControllerGetSchemaResponses = {
+    /**
+     * JSON Schema document for the requested format
+     */
+    200: {
+        [key: string]: unknown;
+    };
 };
-type TrustListControllerExportTrustListResponse = TrustListControllerExportTrustListResponses[keyof TrustListControllerExportTrustListResponses];
-type TrustListControllerGetTrustListVersionsData = {
-    body?: never;
+type SchemaMetadataControllerGetSchemaResponse = SchemaMetadataControllerGetSchemaResponses[keyof SchemaMetadataControllerGetSchemaResponses];
+type SchemaMetadataControllerDeprecateVersionData = {
+    body: DeprecateSchemaMetadataDto;
     path: {
         id: string;
+        version: string;
     };
     query?: never;
-    url: "/api/trust-list/{id}/versions";
+    url: "/api/schema-metadata/{id}/versions/{version}/deprecation";
 };
-type TrustListControllerGetTrustListVersionsResponses = {
-    200: Array<TrustListVersion>;
+type SchemaMetadataControllerDeprecateVersionResponses = {
+    200: SchemaMetadataResponseDto;
 };
-type TrustListControllerGetTrustListVersionsResponse = TrustListControllerGetTrustListVersionsResponses[keyof TrustListControllerGetTrustListVersionsResponses];
-type TrustListControllerGetTrustListVersionData = {
-    body?: never;
+type SchemaMetadataControllerDeprecateVersionResponse = SchemaMetadataControllerDeprecateVersionResponses[keyof SchemaMetadataControllerDeprecateVersionResponses];
+type CredentialOfferControllerGetOfferData = {
+    body: OfferRequestDto;
+    path?: never;
+    query?: never;
+    url: "/api/issuer/offer";
+};
+type CredentialOfferControllerGetOfferResponses = {
+    /**
+     * JSON response
+     */
+    201: OfferResponse;
+};
+type CredentialOfferControllerGetOfferResponse = CredentialOfferControllerGetOfferResponses[keyof CredentialOfferControllerGetOfferResponses];
+type DeferredControllerCompleteDeferredData = {
+    body: CompleteDeferredDto;
     path: {
-        id: string;
-        versionId: string;
+        transactionId: string;
     };
     query?: never;
-    url: "/api/trust-list/{id}/versions/{versionId}";
+    url: "/api/issuer/deferred/{transactionId}/complete";
 };
-type TrustListControllerGetTrustListVersionResponses = {
-    200: TrustListVersion;
+type DeferredControllerCompleteDeferredErrors = {
+    /**
+     * Transaction not found
+     */
+    404: unknown;
 };
-type TrustListControllerGetTrustListVersionResponse = TrustListControllerGetTrustListVersionResponses[keyof TrustListControllerGetTrustListVersionResponses];
+type DeferredControllerCompleteDeferredResponses = {
+    /**
+     * Transaction completed successfully
+     */
+    200: DeferredOperationResponse;
+};
+type DeferredControllerCompleteDeferredResponse = DeferredControllerCompleteDeferredResponses[keyof DeferredControllerCompleteDeferredResponses];
+type DeferredControllerFailDeferredData = {
+    body?: FailDeferredDto;
+    path: {
+        transactionId: string;
+    };
+    query?: never;
+    url: "/api/issuer/deferred/{transactionId}/fail";
+};
+type DeferredControllerFailDeferredErrors = {
+    /**
+     * Transaction not found
+     */
+    404: unknown;
+};
+type DeferredControllerFailDeferredResponses = {
+    /**
+     * Transaction marked as failed
+     */
+    200: DeferredOperationResponse;
+};
+type DeferredControllerFailDeferredResponse = DeferredControllerFailDeferredResponses[keyof DeferredControllerFailDeferredResponses];
 type KeyChainControllerGetProvidersData = {
     body?: never;
     path?: never;
@@ -3541,7 +4223,12 @@ type KeyChainControllerGetProvidersResponse = KeyChainControllerGetProvidersResp
 type KeyChainControllerGetAllData = {
     body?: never;
     path?: never;
-    query?: never;
+    query?: {
+        /**
+         * Optional usage type filter
+         */
+        usageType?: "access" | "attestation" | "trustList" | "statusList" | "encrypt";
+    };
     url: "/api/key-chain";
 };
 type KeyChainControllerGetAllResponses = {
@@ -3703,4 +4390,4 @@ type StorageControllerUploadResponses = {
 };
 type StorageControllerUploadResponse = StorageControllerUploadResponses[keyof StorageControllerUploadResponses];
 
-export type { ClientControllerDeleteClientData as $, AllowListPolicy as A, AuthorizeQueries as B, CacheControllerClearAllCachesData as C, CacheControllerClearAllCachesResponse as D, CacheControllerClearAllCachesResponses as E, CacheControllerClearStatusListCacheData as F, CacheControllerClearStatusListCacheResponse as G, CacheControllerClearStatusListCacheResponses as H, CacheControllerClearTrustListCacheData as I, CacheControllerClearTrustListCacheResponse as J, CacheControllerClearTrustListCacheResponses as K, CacheControllerGetStatsData as L, CacheControllerGetStatsResponses as M, CertificateInfoDto as N, ChainedAsConfig as O, ChainedAsErrorResponseDto as P, ChainedAsParResponseDto as Q, ChainedAsTokenConfig as R, Session as S, ChainedAsTokenRequestDto as T, ChainedAsTokenResponseDto as U, ClaimDisplayInfo as V, ClaimMetadata as W, ClaimsQuery as X, ClientControllerCreateClientData as Y, ClientControllerCreateClientResponse as Z, ClientControllerCreateClientResponses as _, ApiKeyConfig as a, DisplayInfo as a$, ClientControllerDeleteClientResponses as a0, ClientControllerGetClientData as a1, ClientControllerGetClientResponse as a2, ClientControllerGetClientResponses as a3, ClientControllerGetClientSecretData as a4, ClientControllerGetClientSecretResponse as a5, ClientControllerGetClientSecretResponses as a6, ClientControllerGetClientsData as a7, ClientControllerGetClientsResponse as a8, ClientControllerGetClientsResponses as a9, CredentialConfigControllerGetConfigsResponses as aA, CredentialConfigControllerStoreCredentialConfigurationData as aB, CredentialConfigControllerStoreCredentialConfigurationResponse as aC, CredentialConfigControllerStoreCredentialConfigurationResponses as aD, CredentialConfigControllerUpdateCredentialConfigurationData as aE, CredentialConfigControllerUpdateCredentialConfigurationResponse as aF, CredentialConfigControllerUpdateCredentialConfigurationResponses as aG, CredentialConfigCreate as aH, CredentialConfigUpdate as aI, CredentialOfferControllerGetOfferData as aJ, CredentialOfferControllerGetOfferResponse as aK, CredentialOfferControllerGetOfferResponses as aL, CredentialQuery as aM, CredentialSetQuery as aN, Dcql as aO, DeferredControllerCompleteDeferredData as aP, DeferredControllerCompleteDeferredErrors as aQ, DeferredControllerCompleteDeferredResponse as aR, DeferredControllerCompleteDeferredResponses as aS, DeferredControllerFailDeferredData as aT, DeferredControllerFailDeferredErrors as aU, DeferredControllerFailDeferredResponse as aV, DeferredControllerFailDeferredResponses as aW, DeferredCredentialRequestDto as aX, DeferredOperationResponse as aY, Display as aZ, DisplayImage as a_, ClientControllerRotateClientSecretData as aa, ClientControllerRotateClientSecretResponse as ab, ClientControllerRotateClientSecretResponses as ac, ClientControllerUpdateClientData as ad, ClientControllerUpdateClientResponse as ae, ClientControllerUpdateClientResponses as af, ClientCredentialsDto as ag, ClientEntity as ah, ClientOptions as ai, ClientSecretResponseDto as aj, CompleteDeferredDto as ak, CreateAccessCertificateDto as al, CreateAttributeProviderDto as am, CreateClientDto as an, CreateRegistrarConfigDto as ao, CreateStatusListDto as ap, CreateTenantDto as aq, CreateWebhookEndpointDto as ar, CredentialConfig as as, CredentialConfigControllerDeleteIssuanceConfigurationData as at, CredentialConfigControllerDeleteIssuanceConfigurationResponses as au, CredentialConfigControllerGetConfigByIdData as av, CredentialConfigControllerGetConfigByIdResponse as aw, CredentialConfigControllerGetConfigByIdResponses as ax, CredentialConfigControllerGetConfigsData as ay, CredentialConfigControllerGetConfigsResponse as az, AppControllerGetFrontendConfigData as b, KmsProviderInfoDto as b$, DisplayLogo as b0, EcJwk as b1, EcPublic as b2, EmbeddedDisclosurePolicy as b3, ExportEcJwk as b4, ExportRotationPolicyDto as b5, ExternalTrustListEntity as b6, FailDeferredDto as b7, FileUploadDto as b8, FrontendConfigResponseDto as b9, KeyChainControllerExportResponse as bA, KeyChainControllerExportResponses as bB, KeyChainControllerGetAllData as bC, KeyChainControllerGetAllResponse as bD, KeyChainControllerGetAllResponses as bE, KeyChainControllerGetByIdData as bF, KeyChainControllerGetByIdErrors as bG, KeyChainControllerGetByIdResponse as bH, KeyChainControllerGetByIdResponses as bI, KeyChainControllerGetProvidersData as bJ, KeyChainControllerGetProvidersResponse as bK, KeyChainControllerGetProvidersResponses as bL, KeyChainControllerImportData as bM, KeyChainControllerImportResponses as bN, KeyChainControllerRotateData as bO, KeyChainControllerRotateErrors as bP, KeyChainControllerRotateResponses as bQ, KeyChainControllerUpdateData as bR, KeyChainControllerUpdateErrors as bS, KeyChainControllerUpdateResponses as bT, KeyChainCreateDto as bU, KeyChainEntity as bV, KeyChainExportDto as bW, KeyChainImportDto as bX, KeyChainResponseDto as bY, KeyChainUpdateDto as bZ, KmsProviderCapabilitiesDto as b_, GrafanaConfigDto as ba, IaeActionOpenid4VpPresentation as bb, IaeActionRedirectToWeb as bc, ImportTenantDto as bd, InteractiveAuthorizationCodeResponseDto as be, InteractiveAuthorizationErrorResponseDto as bf, InteractiveAuthorizationRequestDto as bg, InternalTrustListEntity as bh, IssuanceConfig as bi, IssuanceConfigControllerGetIssuanceConfigurationsData as bj, IssuanceConfigControllerGetIssuanceConfigurationsResponse as bk, IssuanceConfigControllerGetIssuanceConfigurationsResponses as bl, IssuanceConfigControllerStoreIssuanceConfigurationData as bm, IssuanceConfigControllerStoreIssuanceConfigurationResponse as bn, IssuanceConfigControllerStoreIssuanceConfigurationResponses as bo, IssuanceDto as bp, IssuerMetadataCredentialConfig as bq, JwksResponseDto as br, KeyAttestationsRequired as bs, KeyChainControllerCreateData as bt, KeyChainControllerCreateResponses as bu, KeyChainControllerDeleteData as bv, KeyChainControllerDeleteErrors as bw, KeyChainControllerDeleteResponses as bx, KeyChainControllerExportData as by, KeyChainControllerExportErrors as bz, AppControllerGetFrontendConfigResponse as c, RotationPolicyCreateDto as c$, KmsProvidersResponseDto as c0, NoneTrustPolicy as c1, NotificationRequestDto as c2, Object$1 as c3, ObjectWritable as c4, OfferRequestDto as c5, OfferResponse as c6, ParResponseDto as c7, PolicyCredential as c8, PresentationAttachment as c9, PublicKeyInfoDto as cA, RegistrarConfigResponseDto as cB, RegistrarControllerCreateAccessCertificateData as cC, RegistrarControllerCreateAccessCertificateErrors as cD, RegistrarControllerCreateAccessCertificateResponse as cE, RegistrarControllerCreateAccessCertificateResponses as cF, RegistrarControllerCreateConfigData as cG, RegistrarControllerCreateConfigErrors as cH, RegistrarControllerCreateConfigResponse as cI, RegistrarControllerCreateConfigResponses as cJ, RegistrarControllerDeleteConfigData as cK, RegistrarControllerDeleteConfigResponse as cL, RegistrarControllerDeleteConfigResponses as cM, RegistrarControllerGetConfigData as cN, RegistrarControllerGetConfigErrors as cO, RegistrarControllerGetConfigResponse as cP, RegistrarControllerGetConfigResponses as cQ, RegistrarControllerUpdateConfigData as cR, RegistrarControllerUpdateConfigErrors as cS, RegistrarControllerUpdateConfigResponse as cT, RegistrarControllerUpdateConfigResponses as cU, RegistrationCertificateBody as cV, RegistrationCertificatePurpose as cW, RegistrationCertificateRequest as cX, ResolveIssuerMetadataDto as cY, RoleDto as cZ, RootOfTrustPolicy as c_, PresentationConfig as ca, PresentationConfigCreateDto as cb, PresentationConfigUpdateDto as cc, PresentationConfigWritable as cd, PresentationDuringIssuanceConfig as ce, PresentationManagementControllerConfigurationData as cf, PresentationManagementControllerConfigurationResponse as cg, PresentationManagementControllerConfigurationResponses as ch, PresentationManagementControllerDeleteConfigurationData as ci, PresentationManagementControllerDeleteConfigurationResponses as cj, PresentationManagementControllerGetConfigurationData as ck, PresentationManagementControllerGetConfigurationResponse as cl, PresentationManagementControllerGetConfigurationResponses as cm, PresentationManagementControllerReissueRegistrationCertificateData as cn, PresentationManagementControllerReissueRegistrationCertificateErrors as co, PresentationManagementControllerReissueRegistrationCertificateResponses as cp, PresentationManagementControllerResolveIssuerMetadataData as cq, PresentationManagementControllerResolveIssuerMetadataErrors as cr, PresentationManagementControllerResolveIssuerMetadataResponses as cs, PresentationManagementControllerStorePresentationConfigData as ct, PresentationManagementControllerStorePresentationConfigResponse as cu, PresentationManagementControllerStorePresentationConfigResponses as cv, PresentationManagementControllerUpdateConfigurationData as cw, PresentationManagementControllerUpdateConfigurationResponse as cx, PresentationManagementControllerUpdateConfigurationResponses as cy, PresentationRequest as cz, AppControllerGetFrontendConfigResponses as d, TenantControllerDeleteTenantResponses as d$, RotationPolicyImportDto as d0, RotationPolicyResponseDto as d1, RotationPolicyUpdateDto as d2, SchemaResponse as d3, SessionConfigControllerGetConfigData as d4, SessionConfigControllerGetConfigResponse as d5, SessionConfigControllerGetConfigResponses as d6, SessionConfigControllerResetConfigData as d7, SessionConfigControllerResetConfigResponses as d8, SessionConfigControllerUpdateConfigData as d9, StatusListConfigControllerResetConfigResponse as dA, StatusListConfigControllerResetConfigResponses as dB, StatusListConfigControllerUpdateConfigData as dC, StatusListConfigControllerUpdateConfigResponse as dD, StatusListConfigControllerUpdateConfigResponses as dE, StatusListImportDto as dF, StatusListManagementControllerCreateListData as dG, StatusListManagementControllerCreateListResponse as dH, StatusListManagementControllerCreateListResponses as dI, StatusListManagementControllerDeleteListData as dJ, StatusListManagementControllerDeleteListResponse as dK, StatusListManagementControllerDeleteListResponses as dL, StatusListManagementControllerGetListData as dM, StatusListManagementControllerGetListResponse as dN, StatusListManagementControllerGetListResponses as dO, StatusListManagementControllerGetListsData as dP, StatusListManagementControllerGetListsResponse as dQ, StatusListManagementControllerGetListsResponses as dR, StatusListManagementControllerUpdateListData as dS, StatusListManagementControllerUpdateListResponse as dT, StatusListManagementControllerUpdateListResponses as dU, StatusListResponseDto as dV, StatusUpdateDto as dW, StorageControllerUploadData as dX, StorageControllerUploadResponse as dY, StorageControllerUploadResponses as dZ, TenantControllerDeleteTenantData as d_, SessionConfigControllerUpdateConfigResponse as da, SessionConfigControllerUpdateConfigResponses as db, SessionControllerDeleteSessionData as dc, SessionControllerDeleteSessionResponses as dd, SessionControllerGetAllSessionsData as de, SessionControllerGetAllSessionsResponse as df, SessionControllerGetAllSessionsResponses as dg, SessionControllerGetSessionData as dh, SessionControllerGetSessionLogsData as di, SessionControllerGetSessionLogsResponse as dj, SessionControllerGetSessionLogsResponses as dk, SessionControllerGetSessionResponse as dl, SessionControllerGetSessionResponses as dm, SessionControllerRevokeAllData as dn, SessionControllerRevokeAllResponses as dp, SessionEventsControllerSubscribeToSessionEventsData as dq, SessionEventsControllerSubscribeToSessionEventsResponses as dr, SessionLogEntryResponseDto as ds, SessionStorageConfig as dt, StatusListAggregationDto as du, StatusListConfig as dv, StatusListConfigControllerGetConfigData as dw, StatusListConfigControllerGetConfigResponse as dx, StatusListConfigControllerGetConfigResponses as dy, StatusListConfigControllerResetConfigData as dz, AppControllerGetVersionData as e, WebhookEndpointControllerDeleteResponses as e$, TenantControllerGetTenantData as e0, TenantControllerGetTenantResponse as e1, TenantControllerGetTenantResponses as e2, TenantControllerGetTenantsData as e3, TenantControllerGetTenantsResponse as e4, TenantControllerGetTenantsResponses as e5, TenantControllerInitTenantData as e6, TenantControllerInitTenantResponse as e7, TenantControllerInitTenantResponses as e8, TenantControllerUpdateTenantData as e9, TrustListControllerUpdateTrustListData as eA, TrustListControllerUpdateTrustListResponse as eB, TrustListControllerUpdateTrustListResponses as eC, TrustListCreateDto as eD, TrustListEntityInfo as eE, TrustListVersion as eF, TrustedAuthorityQuery as eG, UpdateAttributeProviderDto as eH, UpdateClientDto as eI, UpdateRegistrarConfigDto as eJ, UpdateSessionConfigDto as eK, UpdateStatusListConfigDto as eL, UpdateStatusListDto as eM, UpdateTenantDto as eN, UpdateWebhookEndpointDto as eO, UpstreamOidcConfig as eP, Vct as eQ, VerifierOfferControllerGetOfferData as eR, VerifierOfferControllerGetOfferResponse as eS, VerifierOfferControllerGetOfferResponses as eT, WebHookAuthConfigHeader as eU, WebHookAuthConfigNone as eV, WebhookConfig as eW, WebhookEndpointControllerCreateData as eX, WebhookEndpointControllerCreateResponses as eY, WebhookEndpointControllerDeleteData as eZ, WebhookEndpointControllerDeleteErrors as e_, TenantControllerUpdateTenantResponse as ea, TenantControllerUpdateTenantResponses as eb, TenantEntity as ec, TokenResponse as ed, TransactionData as ee, TrustList as ef, TrustListControllerCreateTrustListData as eg, TrustListControllerCreateTrustListResponse as eh, TrustListControllerCreateTrustListResponses as ei, TrustListControllerDeleteTrustListData as ej, TrustListControllerDeleteTrustListResponses as ek, TrustListControllerExportTrustListData as el, TrustListControllerExportTrustListResponse as em, TrustListControllerExportTrustListResponses as en, TrustListControllerGetAllTrustListsData as eo, TrustListControllerGetAllTrustListsResponse as ep, TrustListControllerGetAllTrustListsResponses as eq, TrustListControllerGetTrustListData as er, TrustListControllerGetTrustListResponse as es, TrustListControllerGetTrustListResponses as et, TrustListControllerGetTrustListVersionData as eu, TrustListControllerGetTrustListVersionResponse as ev, TrustListControllerGetTrustListVersionResponses as ew, TrustListControllerGetTrustListVersionsData as ex, TrustListControllerGetTrustListVersionsResponse as ey, TrustListControllerGetTrustListVersionsResponses as ez, AppControllerGetVersionResponses as f, WebhookEndpointControllerGetAllData as f0, WebhookEndpointControllerGetAllResponses as f1, WebhookEndpointControllerGetByIdData as f2, WebhookEndpointControllerGetByIdErrors as f3, WebhookEndpointControllerGetByIdResponses as f4, WebhookEndpointControllerUpdateData as f5, WebhookEndpointControllerUpdateErrors as f6, WebhookEndpointControllerUpdateResponses as f7, WebhookEndpointEntity as f8, AttestationBasedPolicy as g, AttributeProviderControllerCreateData as h, AttributeProviderControllerCreateResponses as i, AttributeProviderControllerDeleteData as j, AttributeProviderControllerDeleteErrors as k, AttributeProviderControllerDeleteResponses as l, AttributeProviderControllerGetAllData as m, AttributeProviderControllerGetAllResponses as n, AttributeProviderControllerGetByIdData as o, AttributeProviderControllerGetByIdErrors as p, AttributeProviderControllerGetByIdResponses as q, AttributeProviderControllerUpdateData as r, AttributeProviderControllerUpdateErrors as s, AttributeProviderControllerUpdateResponses as t, AttributeProviderEntity as u, AuthenticationMethodAuth as v, AuthenticationMethodNone as w, AuthenticationMethodPresentation as x, AuthenticationUrlConfig as y, AuthorizationResponse as z };
+export type { ClientControllerCreateClientResponses as $, AccessCertificateRefDto as A, AuthorizationResponse as B, AuthorizeQueries as C, CacheControllerClearAllCachesData as D, CacheControllerClearAllCachesResponse as E, CacheControllerClearAllCachesResponses as F, CacheControllerClearStatusListCacheData as G, CacheControllerClearStatusListCacheResponse as H, CacheControllerClearStatusListCacheResponses as I, CacheControllerClearTrustListCacheData as J, CacheControllerClearTrustListCacheResponse as K, CacheControllerClearTrustListCacheResponses as L, CacheControllerGetStatsData as M, CacheControllerGetStatsResponses as N, CertificateInfoDto as O, ChainedAsConfig as P, ChainedAsErrorResponseDto as Q, ChainedAsParResponseDto as R, Session as S, ChainedAsTokenConfig as T, ChainedAsTokenRequestDto as U, ChainedAsTokenResponseDto as V, ClaimDisplayInfo as W, ClaimMetadata as X, ClaimsQuery as Y, ClientControllerCreateClientData as Z, ClientControllerCreateClientResponse as _, AllowListPolicy as a, DeferredControllerCompleteDeferredResponses as a$, ClientControllerDeleteClientData as a0, ClientControllerDeleteClientResponses as a1, ClientControllerGetClientData as a2, ClientControllerGetClientResponse as a3, ClientControllerGetClientResponses as a4, ClientControllerGetClientSecretData as a5, ClientControllerGetClientSecretResponse as a6, ClientControllerGetClientSecretResponses as a7, ClientControllerGetClientsData as a8, ClientControllerGetClientsResponse as a9, CredentialConfigControllerGetConfigByIdResponses as aA, CredentialConfigControllerGetConfigsData as aB, CredentialConfigControllerGetConfigsResponse as aC, CredentialConfigControllerGetConfigsResponses as aD, CredentialConfigControllerSignSchemaMetaConfigData as aE, CredentialConfigControllerSignSchemaMetaConfigErrors as aF, CredentialConfigControllerSignSchemaMetaConfigResponses as aG, CredentialConfigControllerSignVersionSchemaMetaConfigData as aH, CredentialConfigControllerSignVersionSchemaMetaConfigErrors as aI, CredentialConfigControllerSignVersionSchemaMetaConfigResponses as aJ, CredentialConfigControllerStoreCredentialConfigurationData as aK, CredentialConfigControllerStoreCredentialConfigurationResponse as aL, CredentialConfigControllerStoreCredentialConfigurationResponses as aM, CredentialConfigControllerUpdateCredentialConfigurationData as aN, CredentialConfigControllerUpdateCredentialConfigurationResponse as aO, CredentialConfigControllerUpdateCredentialConfigurationResponses as aP, CredentialConfigCreate as aQ, CredentialConfigUpdate as aR, CredentialOfferControllerGetOfferData as aS, CredentialOfferControllerGetOfferResponse as aT, CredentialOfferControllerGetOfferResponses as aU, CredentialQuery as aV, CredentialSetQuery as aW, Dcql as aX, DeferredControllerCompleteDeferredData as aY, DeferredControllerCompleteDeferredErrors as aZ, DeferredControllerCompleteDeferredResponse as a_, ClientControllerGetClientsResponses as aa, ClientControllerRotateClientSecretData as ab, ClientControllerRotateClientSecretResponse as ac, ClientControllerRotateClientSecretResponses as ad, ClientControllerUpdateClientData as ae, ClientControllerUpdateClientResponse as af, ClientControllerUpdateClientResponses as ag, ClientCredentialsDto as ah, ClientEntity as ai, ClientOptions as aj, ClientSecretResponseDto as ak, CompleteDeferredDto as al, CreateAccessCertificateDto as am, CreateAttributeProviderDto as an, CreateClientDto as ao, CreateRegistrarConfigDto as ap, CreateStatusListDto as aq, CreateTenantDto as ar, CreateUserDto as as, CreateWebhookEndpointDto as at, CredentialConfig as au, CredentialConfigControllerDeleteIssuanceConfigurationData as av, CredentialConfigControllerDeleteIssuanceConfigurationResponse as aw, CredentialConfigControllerDeleteIssuanceConfigurationResponses as ax, CredentialConfigControllerGetConfigByIdData as ay, CredentialConfigControllerGetConfigByIdResponse as az, ApiKeyConfig as b, KeyChainControllerUpdateData as b$, DeferredControllerFailDeferredData as b0, DeferredControllerFailDeferredErrors as b1, DeferredControllerFailDeferredResponse as b2, DeferredControllerFailDeferredResponses as b3, DeferredCredentialRequestDto as b4, DeferredOperationResponse as b5, DeprecateSchemaMetadataDto as b6, Display as b7, DisplayImage as b8, DisplayInfo as b9, IssuerMetadataCredentialConfig as bA, JwksResponseDto as bB, KeyAttestationsRequired as bC, KeyChainControllerCreateData as bD, KeyChainControllerCreateResponses as bE, KeyChainControllerDeleteData as bF, KeyChainControllerDeleteErrors as bG, KeyChainControllerDeleteResponses as bH, KeyChainControllerExportData as bI, KeyChainControllerExportErrors as bJ, KeyChainControllerExportResponse as bK, KeyChainControllerExportResponses as bL, KeyChainControllerGetAllData as bM, KeyChainControllerGetAllResponse as bN, KeyChainControllerGetAllResponses as bO, KeyChainControllerGetByIdData as bP, KeyChainControllerGetByIdErrors as bQ, KeyChainControllerGetByIdResponse as bR, KeyChainControllerGetByIdResponses as bS, KeyChainControllerGetProvidersData as bT, KeyChainControllerGetProvidersResponse as bU, KeyChainControllerGetProvidersResponses as bV, KeyChainControllerImportData as bW, KeyChainControllerImportResponses as bX, KeyChainControllerRotateData as bY, KeyChainControllerRotateErrors as bZ, KeyChainControllerRotateResponses as b_, DisplayLogo as ba, EcJwk as bb, EcPublic as bc, EmbeddedDisclosurePolicy as bd, ExportEcJwk as be, ExportRotationPolicyDto as bf, ExternalTrustListEntity as bg, FailDeferredDto as bh, FileUploadDto as bi, FrontendConfigResponseDto as bj, GrafanaConfigDto as bk, IaeActionOpenid4VpPresentation as bl, IaeActionRedirectToWeb as bm, ImportTenantDto as bn, InteractiveAuthorizationCodeResponseDto as bo, InteractiveAuthorizationErrorResponseDto as bp, InteractiveAuthorizationRequestDto as bq, InternalTrustListEntity as br, IssuanceConfig as bs, IssuanceConfigControllerGetIssuanceConfigurationsData as bt, IssuanceConfigControllerGetIssuanceConfigurationsResponse as bu, IssuanceConfigControllerGetIssuanceConfigurationsResponses as bv, IssuanceConfigControllerStoreIssuanceConfigurationData as bw, IssuanceConfigControllerStoreIssuanceConfigurationResponse as bx, IssuanceConfigControllerStoreIssuanceConfigurationResponses as by, IssuanceDto as bz, AppControllerGetFrontendConfigData as c, RegistrarControllerDeleteConfigData as c$, KeyChainControllerUpdateErrors as c0, KeyChainControllerUpdateResponses as c1, KeyChainCreateDto as c2, KeyChainEntity as c3, KeyChainExportDto as c4, KeyChainImportDto as c5, KeyChainResponseDto as c6, KeyChainUpdateDto as c7, KmsProviderCapabilitiesDto as c8, KmsProviderInfoDto as c9, PresentationManagementControllerListSchemaMetadataCatalogResponses as cA, PresentationManagementControllerReissueRegistrationCertificateData as cB, PresentationManagementControllerReissueRegistrationCertificateErrors as cC, PresentationManagementControllerReissueRegistrationCertificateResponses as cD, PresentationManagementControllerResolveIssuerMetadataData as cE, PresentationManagementControllerResolveIssuerMetadataErrors as cF, PresentationManagementControllerResolveIssuerMetadataResponses as cG, PresentationManagementControllerResolveSchemaMetadataData as cH, PresentationManagementControllerResolveSchemaMetadataErrors as cI, PresentationManagementControllerResolveSchemaMetadataResponses as cJ, PresentationManagementControllerStorePresentationConfigData as cK, PresentationManagementControllerStorePresentationConfigResponse as cL, PresentationManagementControllerStorePresentationConfigResponses as cM, PresentationManagementControllerUpdateConfigurationData as cN, PresentationManagementControllerUpdateConfigurationResponse as cO, PresentationManagementControllerUpdateConfigurationResponses as cP, PresentationRequest as cQ, PublicKeyInfoDto as cR, RegistrarConfigResponseDto as cS, RegistrarControllerCreateAccessCertificateData as cT, RegistrarControllerCreateAccessCertificateErrors as cU, RegistrarControllerCreateAccessCertificateResponse as cV, RegistrarControllerCreateAccessCertificateResponses as cW, RegistrarControllerCreateConfigData as cX, RegistrarControllerCreateConfigErrors as cY, RegistrarControllerCreateConfigResponse as cZ, RegistrarControllerCreateConfigResponses as c_, KmsProvidersResponseDto as ca, ManagedUserDto as cb, MetadataSchemaDto as cc, NoneTrustPolicy as cd, NotificationRequestDto as ce, Object$1 as cf, ObjectWritable as cg, OfferRequestDto as ch, OfferResponse as ci, ParResponseDto as cj, PolicyCredential as ck, PresentationAttachment as cl, PresentationConfig as cm, PresentationConfigCreateDto as cn, PresentationConfigUpdateDto as co, PresentationConfigWritable as cp, PresentationDuringIssuanceConfig as cq, PresentationManagementControllerConfigurationData as cr, PresentationManagementControllerConfigurationResponse as cs, PresentationManagementControllerConfigurationResponses as ct, PresentationManagementControllerDeleteConfigurationData as cu, PresentationManagementControllerDeleteConfigurationResponses as cv, PresentationManagementControllerGetConfigurationData as cw, PresentationManagementControllerGetConfigurationResponse as cx, PresentationManagementControllerGetConfigurationResponses as cy, PresentationManagementControllerListSchemaMetadataCatalogData as cz, AppControllerGetFrontendConfigResponse as d, SessionConfigControllerResetConfigData as d$, RegistrarControllerDeleteConfigResponse as d0, RegistrarControllerDeleteConfigResponses as d1, RegistrarControllerGetConfigData as d2, RegistrarControllerGetConfigErrors as d3, RegistrarControllerGetConfigResponse as d4, RegistrarControllerGetConfigResponses as d5, RegistrarControllerUpdateConfigData as d6, RegistrarControllerUpdateConfigErrors as d7, RegistrarControllerUpdateConfigResponse as d8, RegistrarControllerUpdateConfigResponses as d9, SchemaMetadataControllerGetJwtData as dA, SchemaMetadataControllerGetJwtResponse as dB, SchemaMetadataControllerGetJwtResponses as dC, SchemaMetadataControllerGetLatestData as dD, SchemaMetadataControllerGetLatestResponse as dE, SchemaMetadataControllerGetLatestResponses as dF, SchemaMetadataControllerGetSchemaData as dG, SchemaMetadataControllerGetSchemaResponse as dH, SchemaMetadataControllerGetSchemaResponses as dI, SchemaMetadataControllerGetVersionsData as dJ, SchemaMetadataControllerGetVersionsResponse as dK, SchemaMetadataControllerGetVersionsResponses as dL, SchemaMetadataControllerGetVocabulariesData as dM, SchemaMetadataControllerGetVocabulariesResponse as dN, SchemaMetadataControllerGetVocabulariesResponses as dO, SchemaMetadataControllerRemoveData as dP, SchemaMetadataControllerRemoveResponses as dQ, SchemaMetadataControllerUpdateData as dR, SchemaMetadataControllerUpdateResponse as dS, SchemaMetadataControllerUpdateResponses as dT, SchemaMetadataResponseDto as dU, SchemaMetadataVocabulariesDto as dV, SchemaResponse as dW, SchemaUriEntry as dX, SessionConfigControllerGetConfigData as dY, SessionConfigControllerGetConfigResponse as dZ, SessionConfigControllerGetConfigResponses as d_, RegistrationCertificateBody as da, RegistrationCertificateDefaults as db, RegistrationCertificatePurpose as dc, RegistrationCertificateRequest as dd, ResolveIssuerMetadataDto as de, ResolveSchemaMetadataDto as df, RoleDto as dg, RootOfTrustPolicy as dh, RotationPolicyCreateDto as di, RotationPolicyImportDto as dj, RotationPolicyResponseDto as dk, RotationPolicyUpdateDto as dl, SchemaMetaConfig as dm, SchemaMetadataControllerDeprecateVersionData as dn, SchemaMetadataControllerDeprecateVersionResponse as dp, SchemaMetadataControllerDeprecateVersionResponses as dq, SchemaMetadataControllerExportData as dr, SchemaMetadataControllerExportResponse as ds, SchemaMetadataControllerExportResponses as dt, SchemaMetadataControllerFindAllData as du, SchemaMetadataControllerFindAllResponse as dv, SchemaMetadataControllerFindAllResponses as dw, SchemaMetadataControllerFindOneData as dx, SchemaMetadataControllerFindOneResponse as dy, SchemaMetadataControllerFindOneResponses as dz, AppControllerGetFrontendConfigResponses as e, TenantControllerInitTenantData as e$, SessionConfigControllerResetConfigResponses as e0, SessionConfigControllerUpdateConfigData as e1, SessionConfigControllerUpdateConfigResponse as e2, SessionConfigControllerUpdateConfigResponses as e3, SessionControllerDeleteSessionData as e4, SessionControllerDeleteSessionResponses as e5, SessionControllerGetAllSessionsData as e6, SessionControllerGetAllSessionsResponse as e7, SessionControllerGetAllSessionsResponses as e8, SessionControllerGetSessionData as e9, StatusListManagementControllerCreateListResponse as eA, StatusListManagementControllerCreateListResponses as eB, StatusListManagementControllerDeleteListData as eC, StatusListManagementControllerDeleteListResponse as eD, StatusListManagementControllerDeleteListResponses as eE, StatusListManagementControllerGetListData as eF, StatusListManagementControllerGetListResponse as eG, StatusListManagementControllerGetListResponses as eH, StatusListManagementControllerGetListsData as eI, StatusListManagementControllerGetListsResponse as eJ, StatusListManagementControllerGetListsResponses as eK, StatusListManagementControllerUpdateListData as eL, StatusListManagementControllerUpdateListResponse as eM, StatusListManagementControllerUpdateListResponses as eN, StatusListResponseDto as eO, StatusUpdateDto as eP, StorageControllerUploadData as eQ, StorageControllerUploadResponse as eR, StorageControllerUploadResponses as eS, TenantControllerDeleteTenantData as eT, TenantControllerDeleteTenantResponses as eU, TenantControllerGetTenantData as eV, TenantControllerGetTenantResponse as eW, TenantControllerGetTenantResponses as eX, TenantControllerGetTenantsData as eY, TenantControllerGetTenantsResponse as eZ, TenantControllerGetTenantsResponses as e_, SessionControllerGetSessionLogsData as ea, SessionControllerGetSessionLogsResponse as eb, SessionControllerGetSessionLogsResponses as ec, SessionControllerGetSessionResponse as ed, SessionControllerGetSessionResponses as ee, SessionControllerRevokeAllData as ef, SessionControllerRevokeAllResponses as eg, SessionEventsControllerSubscribeToSessionEventsData as eh, SessionEventsControllerSubscribeToSessionEventsResponses as ei, SessionLogEntryResponseDto as ej, SessionStorageConfig as ek, SignSchemaMetaConfigDto as el, SignVersionSchemaMetaConfigDto as em, StatusListAggregationDto as en, StatusListConfig as eo, StatusListConfigControllerGetConfigData as ep, StatusListConfigControllerGetConfigResponse as eq, StatusListConfigControllerGetConfigResponses as er, StatusListConfigControllerResetConfigData as es, StatusListConfigControllerResetConfigResponse as et, StatusListConfigControllerResetConfigResponses as eu, StatusListConfigControllerUpdateConfigData as ev, StatusListConfigControllerUpdateConfigResponse as ew, StatusListConfigControllerUpdateConfigResponses as ex, StatusListImportDto as ey, StatusListManagementControllerCreateListData as ez, AppControllerGetVersionData as f, Vct as f$, TenantControllerInitTenantResponse as f0, TenantControllerInitTenantResponses as f1, TenantControllerUpdateTenantData as f2, TenantControllerUpdateTenantResponse as f3, TenantControllerUpdateTenantResponses as f4, TenantEntity as f5, TokenResponse as f6, TransactionData as f7, TrustAuthorityDto as f8, TrustAuthorityEntry as f9, TrustListVersion as fA, TrustedAuthorityQuery as fB, UpdateAttributeProviderDto as fC, UpdateClientDto as fD, UpdateRegistrarConfigDto as fE, UpdateSchemaMetadataDto as fF, UpdateSessionConfigDto as fG, UpdateStatusListConfigDto as fH, UpdateStatusListDto as fI, UpdateTenantDto as fJ, UpdateUserDto as fK, UpdateWebhookEndpointDto as fL, UpstreamOidcConfig as fM, UserControllerCreateUserData as fN, UserControllerCreateUserResponse as fO, UserControllerCreateUserResponses as fP, UserControllerDeleteUserData as fQ, UserControllerDeleteUserResponses as fR, UserControllerGetUserData as fS, UserControllerGetUserResponse as fT, UserControllerGetUserResponses as fU, UserControllerGetUsersData as fV, UserControllerGetUsersResponse as fW, UserControllerGetUsersResponses as fX, UserControllerUpdateUserData as fY, UserControllerUpdateUserResponse as fZ, UserControllerUpdateUserResponses as f_, TrustList as fa, TrustListControllerCreateTrustListData as fb, TrustListControllerCreateTrustListResponse as fc, TrustListControllerCreateTrustListResponses as fd, TrustListControllerDeleteTrustListData as fe, TrustListControllerDeleteTrustListResponses as ff, TrustListControllerExportTrustListData as fg, TrustListControllerExportTrustListResponse as fh, TrustListControllerExportTrustListResponses as fi, TrustListControllerGetAllTrustListsData as fj, TrustListControllerGetAllTrustListsResponse as fk, TrustListControllerGetAllTrustListsResponses as fl, TrustListControllerGetTrustListData as fm, TrustListControllerGetTrustListResponse as fn, TrustListControllerGetTrustListResponses as fo, TrustListControllerGetTrustListVersionData as fp, TrustListControllerGetTrustListVersionResponse as fq, TrustListControllerGetTrustListVersionResponses as fr, TrustListControllerGetTrustListVersionsData as fs, TrustListControllerGetTrustListVersionsResponse as ft, TrustListControllerGetTrustListVersionsResponses as fu, TrustListControllerUpdateTrustListData as fv, TrustListControllerUpdateTrustListResponse as fw, TrustListControllerUpdateTrustListResponses as fx, TrustListCreateDto as fy, TrustListEntityInfo as fz, AppControllerGetVersionResponses as g, VerifierOfferControllerGetOfferData as g0, VerifierOfferControllerGetOfferResponse as g1, VerifierOfferControllerGetOfferResponses as g2, VocabularyEntryDto as g3, WebHookAuthConfigHeader as g4, WebHookAuthConfigNone as g5, WebhookConfig as g6, WebhookEndpointControllerCreateData as g7, WebhookEndpointControllerCreateResponses as g8, WebhookEndpointControllerDeleteData as g9, WebhookEndpointControllerDeleteErrors as ga, WebhookEndpointControllerDeleteResponses as gb, WebhookEndpointControllerGetAllData as gc, WebhookEndpointControllerGetAllResponse as gd, WebhookEndpointControllerGetAllResponses as ge, WebhookEndpointControllerGetByIdData as gf, WebhookEndpointControllerGetByIdErrors as gg, WebhookEndpointControllerGetByIdResponses as gh, WebhookEndpointControllerUpdateData as gi, WebhookEndpointControllerUpdateErrors as gj, WebhookEndpointControllerUpdateResponses as gk, WebhookEndpointEntity as gl, AttestationBasedPolicy as h, AttributeProviderControllerCreateData as i, AttributeProviderControllerCreateResponses as j, AttributeProviderControllerDeleteData as k, AttributeProviderControllerDeleteErrors as l, AttributeProviderControllerDeleteResponses as m, AttributeProviderControllerGetAllData as n, AttributeProviderControllerGetAllResponses as o, AttributeProviderControllerGetByIdData as p, AttributeProviderControllerGetByIdErrors as q, AttributeProviderControllerGetByIdResponses as r, AttributeProviderControllerUpdateData as s, AttributeProviderControllerUpdateErrors as t, AttributeProviderControllerUpdateResponses as u, AttributeProviderEntity as v, AuthenticationMethodAuth as w, AuthenticationMethodNone as x, AuthenticationMethodPresentation as y, AuthenticationUrlConfig as z };