@eudiplo/sdk-core 5.0.0 → 5.1.0-main.0f9e336

package/dist/{types.gen-z3We9JHj.d.ts → types.gen-BTQX6LCX.d.ts}

@@ -651,8 +651,9 @@ type Session = {
      */
     consumed: boolean;
     /**
-     * Timestamp when the session offer was consumed.
-     * Null if the offer has not yet been consumed.
+     * Timestamp of the first consumption event for the session offer.
+     * For OID4VCI this can be URI resolution or later flow completion.
+     * Null if no consumption event has happened yet.
      */
     consumedAt?: string;
 };
@@ -797,6 +798,90 @@ type AuthenticationMethodPresentation = {
     method: 'presentationDuringIssuance';
     config: PresentationDuringIssuanceConfig;
 };
+type ManagedAuthorizationServerConfig = {
+    /**
+     * Authorization server implementation type
+     */
+    type: 'external' | 'oid4vp' | 'chained' | 'built-in';
+    /**
+     * Human-friendly label for the UI
+     */
+    label?: string;
+    /**
+     * Whether this managed authorization server is enabled
+     */
+    enabled?: boolean;
+};
+type ExternalAuthorizationServerConfig = {
+    /**
+     * Authorization server implementation type
+     */
+    type: 'external';
+    /**
+     * Human-friendly label for the UI
+     */
+    label?: string;
+    /**
+     * Whether this managed authorization server is enabled
+     */
+    enabled?: boolean;
+    /**
+     * Issuer URL for external authorization servers
+     */
+    issuer: string;
+};
+type ChainedAsTokenConfig = {
+    /**
+     * Access token lifetime in seconds
+     */
+    lifetimeSeconds?: number;
+    /**
+     * Key ID for token signing
+     */
+    signingKeyId?: string;
+    /**
+     * Whether refresh tokens should be issued
+     */
+    refreshTokenEnabled?: boolean;
+    /**
+     * Refresh token lifetime in seconds
+     */
+    refreshTokenExpiresInSeconds?: number;
+};
+type Oid4VpAuthorizationServerConfig = {
+    /**
+     * Authorization server implementation type
+     */
+    type: 'oid4vp';
+    /**
+     * Human-friendly label for the UI
+     */
+    label?: string;
+    /**
+     * Whether this managed authorization server is enabled
+     */
+    enabled?: boolean;
+    /**
+     * Stable identifier used in the AS URL path
+     */
+    id: string;
+    /**
+     * Presentation configuration ID to use for OID4VP
+     */
+    presentationConfigId: string;
+    /**
+     * Immediately redirect the browser into the wallet OID4VP request
+     */
+    immediateWalletRedirect?: boolean;
+    /**
+     * Token configuration for this authorization server
+     */
+    token?: ChainedAsTokenConfig;
+    /**
+     * Require DPoP for token requests issued by this authorization server
+     */
+    requireDPoP?: boolean;
+};
 type UpstreamOidcConfig = {
     /**
      * The OIDC issuer URL of the upstream provider
@@ -815,31 +900,51 @@ type UpstreamOidcConfig = {
      */
     scopes?: Array<string>;
 };
-type ChainedAsTokenConfig = {
+type ChainedAuthorizationServerConfig = {
     /**
-     * Access token lifetime in seconds
+     * Authorization server implementation type
      */
-    lifetimeSeconds?: number;
+    type: 'chained';
     /**
-     * Key ID for token signing
+     * Human-friendly label for the UI
      */
-    signingKeyId?: string;
+    label?: string;
+    /**
+     * Whether this managed authorization server is enabled
+     */
+    enabled?: boolean;
+    /**
+     * Upstream OIDC provider configuration for chained mode
+     */
+    upstream: UpstreamOidcConfig;
+    /**
+     * Token configuration for this authorization server
+     */
+    token?: ChainedAsTokenConfig;
+    /**
+     * Require DPoP for token requests issued by this authorization server
+     */
+    requireDPoP?: boolean;
 };
-type ChainedAsConfig = {
+type BuiltInAuthorizationServerConfig = {
     /**
-     * Enable chained AS mode
+     * Authorization server implementation type
      */
-    enabled: boolean;
+    type: 'built-in';
     /**
-     * Upstream OIDC provider configuration
+     * Human-friendly label for the UI
      */
-    upstream?: UpstreamOidcConfig;
+    label?: string;
+    /**
+     * Whether this managed authorization server is enabled
+     */
+    enabled?: boolean;
     /**
-     * Token configuration
+     * Token configuration for this authorization server
      */
     token?: ChainedAsTokenConfig;
     /**
-     * Require DPoP binding for tokens
+     * Require DPoP for token requests issued by this authorization server
      */
     requireDPoP?: boolean;
 };
@@ -879,6 +984,66 @@ type FederationConfig = {
      */
     trustAnchors: Array<FederationTrustAnchorConfig>;
 };
+type IssuerProvidedAttestation = {
+    /**
+     * Attestation format as expected by the registrar (for example dc+sd-jwt, mso_mdoc).
+     */
+    format?: string;
+    /**
+     * Arbitrary attestation metadata forwarded to the registrar.
+     */
+    meta?: {
+        [key: string]: unknown;
+    };
+};
+type IssuerRegistrationCertificateConfig = {
+    /**
+     * Enable inclusion of a registration certificate in credential issuer metadata.
+     */
+    enabled?: boolean;
+    /**
+     * import: use an existing JWT, generate: create via registrar from provided attestations and selected credential configurations.
+     */
+    mode?: 'import' | 'generate';
+    /**
+     * Existing registration certificate JWT used when mode is import.
+     */
+    jwt?: string;
+    /**
+     * Schema metadata IDs selected for inclusion in generated registration certificates.
+     */
+    schemaMetadataIds?: Array<string>;
+    /**
+     * Privacy policy URL used when generating a registration certificate (optional if registrar defaults are configured).
+     */
+    privacyPolicy?: string;
+    /**
+     * Support URI used when generating a registration certificate (optional if registrar defaults are configured).
+     */
+    supportUri?: string;
+    /**
+     * Provided attestations included in generated registration certificates.
+     */
+    providedAttestations?: Array<IssuerProvidedAttestation>;
+};
+type IssuerRegistrationCertificateCache = {
+    /**
+     * Cached registration certificate JWT generated by EUDIPLO.
+     */
+    readonly jwt?: string;
+    /**
+     * Config fingerprint used to detect cache invalidation.
+     */
+    readonly fingerprint?: string;
+    /**
+     * JWT iat claim, seconds since epoch.
+     */
+    readonly issuedAt?: number;
+    /**
+     * JWT exp claim, seconds since epoch.
+     */
+    readonly expiresAt?: number;
+};
 type DisplayLogo = {
     uri: string;
     alt_text?: string;
@@ -894,20 +1059,23 @@ type IssuanceConfig = {
      */
     signingKeyId?: string;
     /**
-     * Configuration for Chained Authorization Server mode.
-     * When enabled, EUDIPLO acts as an OAuth AS facade, delegating user authentication
-     * to an upstream OIDC provider while issuing its own tokens with issuer_state.
+     * Dedicated managed authorization servers hosted by this issuer. At least one entry is required.
      */
-    chainedAs?: ChainedAsConfig;
+    authorizationServers: Array<ExternalAuthorizationServerConfig | Oid4VpAuthorizationServerConfig | ChainedAuthorizationServerConfig | BuiltInAuthorizationServerConfig>;
     /**
      * Optional OpenID Federation configuration used for trust evaluation.
      * When omitted, trust checks rely on existing LoTE trust-list behavior.
      */
     federation?: FederationConfig;
     /**
-     * Whether refresh tokens should be issued for OID4VCI token responses.
+     * Optional registration certificate configuration for issuer metadata (`issuer_info`).
+     * Supports importing an existing JWT or generating one via registrar.
      */
-    refreshTokenEnabled?: boolean;
+    registrationCertificate?: IssuerRegistrationCertificateConfig;
+    /**
+     * Server-managed cache for generated issuer registration certificates.
+     */
+    readonly registrationCertificateCache?: IssuerRegistrationCertificateCache;
     /**
      * Whether `credential_response_encryption` should be advertised in the credential issuer metadata.
      */
@@ -916,10 +1084,6 @@ type IssuanceConfig = {
      * Whether `credential_request_encryption` should be advertised in the credential issuer metadata.
      */
     credentialRequestEncryption?: boolean;
-    /**
-     * Refresh token lifetime in seconds. Defaults to 2592000 (30 days).
-     */
-    refreshTokenExpiresInSeconds?: number;
     /**
      * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
      */
@@ -928,10 +1092,6 @@ type IssuanceConfig = {
      * The tenant that owns this object.
      */
     tenant: TenantEntity;
-    /**
-     * Authentication server URL for the issuance process.
-     */
-    authServers?: Array<string>;
     /**
      * Value to determine the amount of credentials that are issued in a batch.
      * Default is 1.
@@ -953,13 +1113,6 @@ type IssuanceConfig = {
      * If empty and walletAttestationRequired is true, all wallet providers are rejected.
      */
     walletProviderTrustLists?: Array<string>;
-    /**
-     * The URL of the preferred authorization server for wallet-initiated flows.
-     * When set, this AS is placed first in the `authorization_servers` array
-     * of the credential issuer metadata, signaling wallets to use it by default.
-     * Must match one of the configured auth servers, the chained AS URL, or "built-in".
-     */
-    preferredAuthServer?: string;
     display: Array<DisplayInfo>;
     /**
      * The timestamp when the VP request was created.
@@ -970,26 +1123,29 @@ type IssuanceConfig = {
      */
     updatedAt: string;
 };
-type IssuanceDto = {
+type UpdateIssuanceDto = {
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
     signingKeyId?: string;
     /**
-     * Configuration for Chained Authorization Server mode.
-     * When enabled, EUDIPLO acts as an OAuth AS facade, delegating user authentication
-     * to an upstream OIDC provider while issuing its own tokens with issuer_state.
+     * Dedicated managed authorization servers hosted by this issuer. At least one entry is required.
      */
-    chainedAs?: ChainedAsConfig;
+    authorizationServers?: Array<ExternalAuthorizationServerConfig | Oid4VpAuthorizationServerConfig | ChainedAuthorizationServerConfig | BuiltInAuthorizationServerConfig>;
     /**
      * Optional OpenID Federation configuration used for trust evaluation.
      * When omitted, trust checks rely on existing LoTE trust-list behavior.
      */
     federation?: FederationConfig;
     /**
-     * Whether refresh tokens should be issued for OID4VCI token responses.
+     * Optional registration certificate configuration for issuer metadata (`issuer_info`).
+     * Supports importing an existing JWT or generating one via registrar.
      */
-    refreshTokenEnabled?: boolean;
+    registrationCertificate?: IssuerRegistrationCertificateConfig;
+    /**
+     * Server-managed cache for generated issuer registration certificates.
+     */
+    readonly registrationCertificateCache?: IssuerRegistrationCertificateCache;
     /**
      * Whether `credential_response_encryption` should be advertised in the credential issuer metadata.
      */
@@ -998,18 +1154,10 @@ type IssuanceDto = {
      * Whether `credential_request_encryption` should be advertised in the credential issuer metadata.
      */
     credentialRequestEncryption?: boolean;
-    /**
-     * Refresh token lifetime in seconds. Defaults to 2592000 (30 days).
-     */
-    refreshTokenExpiresInSeconds?: number;
     /**
      * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
      */
     txCodeMaxAttempts?: number;
-    /**
-     * Authentication server URL for the issuance process.
-     */
-    authServers?: Array<string>;
     /**
      * Value to determine the amount of credentials that are issued in a batch.
      * Default is 1.
@@ -1031,14 +1179,7 @@ type IssuanceDto = {
      * If empty and walletAttestationRequired is true, all wallet providers are rejected.
      */
     walletProviderTrustLists?: Array<string>;
-    /**
-     * The URL of the preferred authorization server for wallet-initiated flows.
-     * When set, this AS is placed first in the `authorization_servers` array
-     * of the credential issuer metadata, signaling wallets to use it by default.
-     * Must match one of the configured auth servers, the chained AS URL, or "built-in".
-     */
-    preferredAuthServer?: string;
-    display: Array<DisplayInfo>;
+    display?: Array<DisplayInfo>;
 };
 type ClaimsQuery = {
     id?: string;
@@ -1050,6 +1191,10 @@ type TrustedAuthorityQuery = {
     values: Array<string>;
 };
 type CredentialQuery = {
+    /**
+     * Ordered alternative claim combinations for this credential query.
+     */
+    claim_sets?: Array<Array<string>>;
     id: string;
     format: string;
     multiple?: boolean;
@@ -1156,7 +1301,7 @@ type SchemaUriEntry = {
     /**
      * Schema-format specific metadata (for example { vct: 'urn:example:vct' } for dc+sd-jwt).
      */
-    meta: {
+    meta?: {
         [key: string]: unknown;
     };
 };
@@ -1182,7 +1327,7 @@ type TrustAuthorityEntry = {
      */
     verificationMethod?: {
         [key: string]: unknown;
-    };
+    } | string;
 };
 type SchemaMetaConfig = {
     /**
@@ -1271,13 +1416,13 @@ type FieldDisplayDto = {
 };
 type ClaimFieldDefinitionDto = {
     /**
-     * Path to claim value
+     * Path to claim value. For nested child fields this can be relative to the parent path.
      */
     path: Array<string | number | null>;
     /**
      * Claim value type
      */
-    type: 'string' | 'number' | 'integer' | 'boolean' | 'object' | 'array' | 'date';
+    type: 'string' | 'number' | 'integer' | 'boolean' | 'object' | 'array';
     /**
      * Default value
      */
@@ -1293,7 +1438,7 @@ type ClaimFieldDefinitionDto = {
      */
     disclosable?: boolean;
     /**
-     * Namespace for mDOC field
+     * Namespace for mDOC field. Optional when the namespace is already present as the first path segment.
      */
     namespace?: string;
     display?: Array<FieldDisplayDto>;
@@ -1303,6 +1448,10 @@ type ClaimFieldDefinitionDto = {
     constraints?: {
         [key: string]: unknown;
     };
+    /**
+     * Optional nested child fields. Child paths may be specified relative to the parent field path.
+     */
+    children?: Array<ClaimFieldDefinitionDto>;
 };
 type AttributeProviderEntity = {
     auth: WebHookAuthConfigNone | WebHookAuthConfigHeader;
@@ -1427,7 +1576,6 @@ type CredentialConfig = {
      */
     tenant: TenantEntity;
     config: IssuerMetadataCredentialConfig;
-    configVersion: number;
     fields: Array<ClaimFieldDefinitionDto>;
     /**
      * Reference to the attribute provider used for fetching claims.
@@ -1484,7 +1632,6 @@ type CredentialConfigCreate = {
     id: string;
     description?: string;
     config: IssuerMetadataCredentialConfig;
-    configVersion: number;
     fields: Array<ClaimFieldDefinitionDto>;
     /**
      * Reference to the attribute provider used for fetching claims.
@@ -1538,7 +1685,6 @@ type CredentialConfigUpdate = {
     id?: string;
     description?: string;
     config?: IssuerMetadataCredentialConfig;
-    configVersion?: number;
     fields?: Array<ClaimFieldDefinitionDto>;
     /**
      * Reference to the attribute provider used for fetching claims.
@@ -1846,11 +1992,7 @@ type TrustListCreateDto = {
     data?: {
         [key: string]: unknown;
     };
-    entities: Array<({
-        type: 'internal';
-    } & InternalTrustListEntity) | ({
-        type: 'external';
-    } & ExternalTrustListEntity)>;
+    entities: Array<InternalTrustListEntity | ExternalTrustListEntity>;
     id?: string;
     keyChainId?: string;
 };
@@ -1997,8 +2139,16 @@ type PresentationConfig = {
      * The registration certificate request containing the necessary details.
      */
     registration_cert?: RegistrationCertificateRequest;
+    /**
+     * Reference to the webhook endpoint used for notifications.
+     * Optional: if set, notifications will be sent to this endpoint.
+     */
+    webhookEndpointId?: string;
+    webhookEndpoint?: WebhookEndpointEntity;
     /**
      * Optional webhook URL to receive the response.
+     *
+     * @deprecated
      */
     webhook?: WebhookConfig;
     /**
@@ -2063,8 +2213,16 @@ type PresentationConfigCreateDto = {
      * The registration certificate request containing the necessary details.
      */
     registration_cert?: RegistrationCertificateRequest;
+    /**
+     * Reference to the webhook endpoint used for notifications.
+     * Optional: if set, notifications will be sent to this endpoint.
+     */
+    webhookEndpointId?: string;
+    webhookEndpoint?: WebhookEndpointEntity;
     /**
      * Optional webhook URL to receive the response.
+     *
+     * @deprecated
      */
     webhook?: WebhookConfig;
     /**
@@ -2109,8 +2267,16 @@ type PresentationConfigUpdateDto = {
      * The registration certificate request containing the necessary details.
      */
     registration_cert?: RegistrationCertificateRequest;
+    /**
+     * Reference to the webhook endpoint used for notifications.
+     * Optional: if set, notifications will be sent to this endpoint.
+     */
+    webhookEndpointId?: string;
+    webhookEndpoint?: WebhookEndpointEntity;
     /**
      * Optional webhook URL to receive the response.
+     *
+     * @deprecated
      */
     webhook?: WebhookConfig;
     /**
@@ -2249,6 +2415,90 @@ type NotificationRequestDto = {
     notification_id: string;
     event: 'credential_accepted' | 'credential_failure' | 'credential_deleted';
 };
+type OfferResponse = {
+    uri: string;
+    /**
+     * URI for cross-device flows (no redirect after completion)
+     */
+    crossDeviceUri?: string;
+    session: string;
+};
+type CompleteDeferredDto = {
+    /**
+     * Claims to include in the credential. The structure should match the credential configuration's expected claims.
+     */
+    claims: {
+        [key: string]: unknown;
+    };
+};
+type DeferredOperationResponse = {
+    /**
+     * The transaction ID
+     */
+    transactionId: string;
+    /**
+     * The new status of the transaction
+     */
+    status: 'pending' | 'ready' | 'retrieved' | 'expired' | 'failed';
+    /**
+     * Optional message
+     */
+    message?: string;
+};
+type FailDeferredDto = {
+    /**
+     * Optional error message explaining why the issuance failed
+     */
+    error?: string;
+};
+type EcPublic = {
+    /**
+     * The key type, which is always 'EC' for Elliptic Curve keys.
+     */
+    kty: string;
+    /**
+     * The algorithm intended for use with the key, such as 'ES256'.
+     */
+    crv: string;
+    /**
+     * The x coordinate of the EC public key.
+     */
+    x: string;
+    /**
+     * The y coordinate of the EC public key.
+     */
+    y: string;
+};
+type JwksResponseDto = {
+    /**
+     * An array of EC public keys in JWK format.
+     */
+    keys: Array<EcPublic>;
+};
+type AuthorizationResponse = {
+    /**
+     * The response string containing the authorization details (JWE-encrypted VP token).
+     * Required for success responses, absent for error responses.
+     */
+    response?: string;
+    /**
+     * When set to true, the authorization response will be sent to the client.
+     */
+    sendResponse?: boolean;
+    error?: string;
+    /**
+     * Human-readable description of the error.
+     */
+    error_description?: string;
+    /**
+     * URI with additional information about the error.
+     */
+    error_uri?: string;
+    /**
+     * State value from the authorization request (for correlation).
+     */
+    state?: string;
+};
 type Object$1 = {
     [key: string]: unknown;
 };
@@ -2428,139 +2678,285 @@ type ChainedAsTokenResponseDto = {
      */
     refresh_token?: string;
 };
-type OfferResponse = {
-    uri: string;
+type KmsProviderCapabilitiesDto = {
     /**
-     * URI for cross-device flows (no redirect after completion)
+     * Whether the provider supports importing existing keys.
      */
-    crossDeviceUri?: string;
-    session: string;
+    canImport: boolean;
+    /**
+     * Whether the provider supports generating new keys.
+     */
+    canCreate: boolean;
+    /**
+     * Whether the provider supports deleting keys.
+     */
+    canDelete: boolean;
+    /**
+     * Signing algorithms supported by the provider.
+     */
+    supportedAlgs: Array<string>;
+    /**
+     * Default signing algorithm used when caller does not specify one.
+     */
+    defaultAlg: string;
 };
-type CompleteDeferredDto = {
+type KmsProviderInfoDto = {
     /**
-     * Claims to include in the credential. The structure should match the credential configuration's expected claims.
+     * Unique provider ID (matches the id in kms.json).
      */
-    claims: {
+    name: string;
+    /**
+     * Type of the KMS provider (db, vault, aws-kms).
+     */
+    type: string;
+    /**
+     * Human-readable description of this provider instance.
+     */
+    description?: string;
+    /**
+     * Capabilities of this provider.
+     */
+    capabilities: KmsProviderCapabilitiesDto;
+};
+type KmsProvidersResponseDto = {
+    /**
+     * Detailed info for each registered KMS provider.
+     */
+    providers: Array<KmsProviderInfoDto>;
+    /**
+     * The default KMS provider name.
+     */
+    default: string;
+};
+type DbKmsConfigDto = {
+    /**
+     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+     */
+    id: string;
+    /**
+     * Type of the KMS provider.
+     */
+    type: 'db';
+    /**
+     * Human-readable description of this provider instance.
+     */
+    description?: string;
+};
+type VaultKmsConfigDto = {
+    /**
+     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+     */
+    id: string;
+    /**
+     * Type of the KMS provider.
+     */
+    type: 'vault';
+    /**
+     * Human-readable description of this provider instance.
+     */
+    description?: string;
+    /**
+     * URL of the HashiCorp Vault instance. Supports ${ENV_VAR} placeholders.
+     */
+    vaultUrl: string;
+    /**
+     * Authentication token for HashiCorp Vault. Supports ${ENV_VAR} placeholders.
+     */
+    vaultToken: string;
+};
+type AwsKmsConfigDto = {
+    /**
+     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+     */
+    id: string;
+    /**
+     * Type of the KMS provider.
+     */
+    type: 'aws-kms';
+    /**
+     * Human-readable description of this provider instance.
+     */
+    description?: string;
+    /**
+     * AWS region for KMS. Supports ${ENV_VAR} placeholders.
+     */
+    region: string;
+    /**
+     * AWS access key ID. Optional — uses SDK credential chain if not provided. Supports ${ENV_VAR} placeholders.
+     */
+    accessKeyId?: string;
+    /**
+     * AWS secret access key. Optional — uses SDK credential chain if not provided. Supports ${ENV_VAR} placeholders.
+     */
+    secretAccessKey?: string;
+};
+type Pkcs11KmsConfigDto = {
+    /**
+     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+     */
+    id: string;
+    /**
+     * Type of the KMS provider.
+     */
+    type: 'pkcs11';
+    /**
+     * Human-readable description of this provider instance.
+     */
+    description?: string;
+    /**
+     * Absolute path to the PKCS#11 module library (.so/.dll/.dylib). Supports ${ENV_VAR} placeholders.
+     */
+    library: string;
+    /**
+     * Slot selection. Either the numeric slot index (as a string for ENV interpolation, or a number) or the token label. Supports ${ENV_VAR} placeholders.
+     */
+    slot: {
         [key: string]: unknown;
     };
-};
-type DeferredOperationResponse = {
     /**
-     * The transaction ID
+     * User PIN used for C_Login. Supports ${ENV_VAR} placeholders.
      */
-    transactionId: string;
+    pin: string;
     /**
-     * The new status of the transaction
+     * Open the PKCS#11 session in read-only mode. Defaults to false.
      */
-    status: 'pending' | 'ready' | 'retrieved' | 'expired' | 'failed';
+    readOnly?: boolean;
+};
+type HttpAuthBaseConfigDto = {
     /**
-     * Optional message
+     * Authentication method for the remote KMS service.
      */
-    message?: string;
+    type: 'none' | 'bearer' | 'oauth2-client-credentials' | 'mtls';
 };
-type FailDeferredDto = {
+type HttpKmsConfigDto = {
     /**
-     * Optional error message explaining why the issuance failed
+     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
      */
-    error?: string;
+    id: string;
+    /**
+     * Type of the KMS provider.
+     */
+    type: 'http';
+    /**
+     * Human-readable description of this provider instance.
+     */
+    description?: string;
+    /**
+     * Base URL of the remote KMS microservice (no trailing slash). Supports ${ENV_VAR} placeholders.
+     */
+    baseUrl: string;
+    /**
+     * Authentication method for the remote KMS service. Supports bearer token, OAuth 2.0 client credentials, and mutual TLS. Omit (or set type to "none") for unauthenticated services.
+     */
+    auth?: HttpAuthBaseConfigDto;
+    /**
+     * Path prefix for key endpoints on the remote service. Defaults to /keys.
+     */
+    keysPath?: string;
+    /**
+     * Path for the health check endpoint on the remote service. Defaults to /health.
+     */
+    healthPath?: string;
+    /**
+     * Whether the remote service supports key import via POST {keysPath}/{kid}/import. Defaults to false.
+     */
+    canImport?: boolean;
 };
-type EcPublic = {
+type CscAuthorizeAuthDataDto = {
     /**
-     * The key type, which is always 'EC' for Elliptic Curve keys.
+     * Authentication factor identifier expected by the CSC provider (e.g., PIN, OTP).
      */
-    kty: string;
+    id: string;
     /**
-     * The algorithm intended for use with the key, such as 'ES256'.
+     * Authentication factor value sent to CSC credentials/authorize.
      */
-    crv: string;
+    value: string;
+};
+type CscKmsConfigDto = {
     /**
-     * The x coordinate of the EC public key.
+     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
      */
-    x: string;
+    id: string;
     /**
-     * The y coordinate of the EC public key.
+     * Type of the KMS provider.
      */
-    y: string;
-};
-type JwksResponseDto = {
+    type: 'csc';
     /**
-     * An array of EC public keys in JWK format.
+     * Human-readable description of this provider instance.
      */
-    keys: Array<EcPublic>;
-};
-type AuthorizationResponse = {
+    description?: string;
     /**
-     * The response string containing the authorization details (JWE-encrypted VP token).
-     * Required for success responses, absent for error responses.
+     * Base URL of the CSC service (without trailing slash). Supports ${ENV_VAR} placeholders.
      */
-    response?: string;
+    baseUrl: string;
     /**
-     * When set to true, the authorization response will be sent to the client.
+     * OAuth2 token endpoint URL for client-credentials flow. Supports ${ENV_VAR} placeholders.
      */
-    sendResponse?: boolean;
-    error?: string;
+    tokenUrl: string;
     /**
-     * Human-readable description of the error.
+     * OAuth2 client ID. Supports ${ENV_VAR} placeholders.
      */
-    error_description?: string;
+    clientId: string;
     /**
-     * URI with additional information about the error.
+     * OAuth2 client secret. Supports ${ENV_VAR} placeholders.
      */
-    error_uri?: string;
+    clientSecret: string;
     /**
-     * State value from the authorization request (for correlation).
+     * OAuth2 scope to request during token acquisition.
      */
-    state?: string;
-};
-type KmsProviderCapabilitiesDto = {
+    scope?: string;
     /**
-     * Whether the provider supports importing existing keys.
+     * Default CSC credential ID. If omitted, the adapter calls credentials/list and picks the first entry.
      */
-    canImport: boolean;
+    credentialId?: string;
     /**
-     * Whether the provider supports generating new keys.
+     * Optional CSC user ID used in credentials/list requests.
      */
-    canCreate: boolean;
+    userId?: string;
     /**
-     * Whether the provider supports deleting keys.
+     * CSC API path prefix appended to baseUrl. Defaults to /csc/v2.
      */
-    canDelete: boolean;
+    apiPath?: string;
     /**
-     * Signing algorithms supported by the provider.
+     * Hash algorithm OID for signatures/signHash and credentials/authorize. Defaults to SHA-256 OID.
      */
-    supportedAlgs: Array<string>;
+    hashAlgorithmOid?: string;
     /**
-     * Default signing algorithm used when caller does not specify one.
+     * Signature algorithm OID for signatures/signHash. Defaults to ecdsa-with-SHA256 OID.
      */
-    defaultAlg: string;
-};
-type KmsProviderInfoDto = {
+    signAlgorithmOid?: string;
     /**
-     * Unique provider ID (matches the id in kms.json).
+     * Static SAD token. If set, the adapter sends it directly in signatures/signHash requests.
      */
-    name: string;
+    sad?: string;
     /**
-     * Type of the KMS provider (db, vault, aws-kms).
+     * When true and no static SAD is provided, the adapter calls credentials/authorize to obtain SAD before signatures/signHash.
      */
-    type: string;
+    useAuthorizeEndpoint?: boolean;
     /**
-     * Human-readable description of this provider instance.
+     * Optional authData array passed to credentials/authorize (e.g., PIN/OTP factors).
      */
-    description?: string;
+    authorizeAuthData?: Array<CscAuthorizeAuthDataDto>;
+};
+type KmsConfigDto = {
     /**
-     * Capabilities of this provider.
+     * ID of the default KMS provider. Defaults to "db" if not set.
      */
-    capabilities: KmsProviderCapabilitiesDto;
+    defaultProvider?: string;
+    /**
+     * List of KMS provider configurations. Each provider must have a unique id and a type.
+     */
+    providers: Array<DbKmsConfigDto | VaultKmsConfigDto | AwsKmsConfigDto | Pkcs11KmsConfigDto | HttpKmsConfigDto | CscKmsConfigDto>;
 };
-type KmsProvidersResponseDto = {
+type KmsTenantConfigResponseDto = {
     /**
-     * Detailed info for each registered KMS provider.
+     * Tenant-specific KMS configuration from <CONFIG_FOLDER>/<tenantId>/kms.json. Null when no tenant file exists.
      */
-    providers: Array<KmsProviderInfoDto>;
+    tenantConfig?: KmsConfigDto;
     /**
-     * The default KMS provider name.
+     * Effective configuration used at runtime for the tenant (global + tenant merge).
      */
-    default: string;
+    effectiveConfig: KmsConfigDto;
 };
 type CertificateInfoDto = {
     /**
@@ -2833,7 +3229,7 @@ type KeyChainImportDto = {
      */
     usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
     /**
-     * Certificate chain in PEM format (leaf first, then intermediates/CA).
+     * Certificate chain (leaf first). Each entry may be PEM or base64-encoded DER; values are normalized to PEM during import.
      */
     crt?: Array<string>;
     /**
@@ -2906,6 +3302,126 @@ type PresentationRequest = {
 type FileUploadDto = {
     file: Blob | File;
 };
+type IssuanceConfigWritable = {
+    /**
+     * Key ID for signing access tokens. If unset, the default signing key is used.
+     */
+    signingKeyId?: string;
+    /**
+     * Dedicated managed authorization servers hosted by this issuer. At least one entry is required.
+     */
+    authorizationServers: Array<ExternalAuthorizationServerConfig | Oid4VpAuthorizationServerConfig | ChainedAuthorizationServerConfig | BuiltInAuthorizationServerConfig>;
+    /**
+     * Optional OpenID Federation configuration used for trust evaluation.
+     * When omitted, trust checks rely on existing LoTE trust-list behavior.
+     */
+    federation?: FederationConfig;
+    /**
+     * Optional registration certificate configuration for issuer metadata (`issuer_info`).
+     * Supports importing an existing JWT or generating one via registrar.
+     */
+    registrationCertificate?: IssuerRegistrationCertificateConfig;
+    /**
+     * Whether `credential_response_encryption` should be advertised in the credential issuer metadata.
+     */
+    credentialResponseEncryption?: boolean;
+    /**
+     * Whether `credential_request_encryption` should be advertised in the credential issuer metadata.
+     */
+    credentialRequestEncryption?: boolean;
+    /**
+     * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
+     */
+    txCodeMaxAttempts?: number;
+    /**
+     * The tenant that owns this object.
+     */
+    tenant: TenantEntity;
+    /**
+     * Value to determine the amount of credentials that are issued in a batch.
+     * Default is 1.
+     */
+    batchSize?: number;
+    /**
+     * Indicates whether DPoP is required for the issuance process. Default value is true.
+     */
+    dPopRequired?: boolean;
+    /**
+     * Indicates whether wallet attestation is required for the token endpoint.
+     * When enabled, wallets must provide OAuth-Client-Attestation headers.
+     * Default value is false.
+     */
+    walletAttestationRequired?: boolean;
+    /**
+     * URLs of trust lists containing trusted wallet providers.
+     * The wallet attestation's X.509 certificate will be validated against these trust lists.
+     * If empty and walletAttestationRequired is true, all wallet providers are rejected.
+     */
+    walletProviderTrustLists?: Array<string>;
+    display: Array<DisplayInfo>;
+    /**
+     * The timestamp when the VP request was created.
+     */
+    createdAt: string;
+    /**
+     * The timestamp when the VP request was last updated.
+     */
+    updatedAt: string;
+};
+type UpdateIssuanceDtoWritable = {
+    /**
+     * Key ID for signing access tokens. If unset, the default signing key is used.
+     */
+    signingKeyId?: string;
+    /**
+     * Dedicated managed authorization servers hosted by this issuer. At least one entry is required.
+     */
+    authorizationServers?: Array<ExternalAuthorizationServerConfig | Oid4VpAuthorizationServerConfig | ChainedAuthorizationServerConfig | BuiltInAuthorizationServerConfig>;
+    /**
+     * Optional OpenID Federation configuration used for trust evaluation.
+     * When omitted, trust checks rely on existing LoTE trust-list behavior.
+     */
+    federation?: FederationConfig;
+    /**
+     * Optional registration certificate configuration for issuer metadata (`issuer_info`).
+     * Supports importing an existing JWT or generating one via registrar.
+     */
+    registrationCertificate?: IssuerRegistrationCertificateConfig;
+    /**
+     * Whether `credential_response_encryption` should be advertised in the credential issuer metadata.
+     */
+    credentialResponseEncryption?: boolean;
+    /**
+     * Whether `credential_request_encryption` should be advertised in the credential issuer metadata.
+     */
+    credentialRequestEncryption?: boolean;
+    /**
+     * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
+     */
+    txCodeMaxAttempts?: number;
+    /**
+     * Value to determine the amount of credentials that are issued in a batch.
+     * Default is 1.
+     */
+    batchSize?: number;
+    /**
+     * Indicates whether DPoP is required for the issuance process. Default value is true.
+     */
+    dPopRequired?: boolean;
+    /**
+     * Indicates whether wallet attestation is required for the token endpoint.
+     * When enabled, wallets must provide OAuth-Client-Attestation headers.
+     * Default value is false.
+     */
+    walletAttestationRequired?: boolean;
+    /**
+     * URLs of trust lists containing trusted wallet providers.
+     * The wallet attestation's X.509 certificate will be validated against these trust lists.
+     * If empty and walletAttestationRequired is true, all wallet providers are rejected.
+     */
+    walletProviderTrustLists?: Array<string>;
+    display?: Array<DisplayInfo>;
+};
 type PresentationConfigWritable = {
     /**
      * Unique identifier for the VP request.
@@ -2932,8 +3448,16 @@ type PresentationConfigWritable = {
      * The registration certificate request containing the necessary details.
      */
     registration_cert?: RegistrationCertificateRequest;
+    /**
+     * Reference to the webhook endpoint used for notifications.
+     * Optional: if set, notifications will be sent to this endpoint.
+     */
+    webhookEndpointId?: string;
+    webhookEndpoint?: WebhookEndpointEntity;
     /**
      * Optional webhook URL to receive the response.
+     *
+     * @deprecated
      */
     webhook?: WebhookConfig;
     /**
@@ -3491,7 +4015,7 @@ type IssuanceConfigControllerGetIssuanceConfigurationsResponses = {
 };
 type IssuanceConfigControllerGetIssuanceConfigurationsResponse = IssuanceConfigControllerGetIssuanceConfigurationsResponses[keyof IssuanceConfigControllerGetIssuanceConfigurationsResponses];
 type IssuanceConfigControllerStoreIssuanceConfigurationData = {
-    body: IssuanceDto;
+    body: UpdateIssuanceDtoWritable;
     path?: never;
     query?: never;
     url: '/api/issuer/config';
@@ -3623,6 +4147,16 @@ type SchemaMetadataControllerFindAllResponses = {
     200: Array<SchemaMetadataResponseDto>;
 };
 type SchemaMetadataControllerFindAllResponse = SchemaMetadataControllerFindAllResponses[keyof SchemaMetadataControllerFindAllResponses];
+type SchemaMetadataControllerGetMineData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/api/schema-metadata/mine';
+};
+type SchemaMetadataControllerGetMineResponses = {
+    200: Array<SchemaMetadataResponseDto>;
+};
+type SchemaMetadataControllerGetMineResponse = SchemaMetadataControllerGetMineResponses[keyof SchemaMetadataControllerGetMineResponses];
 type SchemaMetadataControllerFindOneData = {
     body?: never;
     path: {
@@ -4357,6 +4891,108 @@ type DeferredControllerFailDeferredResponses = {
     200: DeferredOperationResponse;
 };
 type DeferredControllerFailDeferredResponse = DeferredControllerFailDeferredResponses[keyof DeferredControllerFailDeferredResponses];
+type ChainedAsVpControllerParData = {
+    body?: never;
+    headers?: {
+        /**
+         * DPoP proof JWT
+         */
+        DPoP?: string;
+        /**
+         * Wallet attestation JWT
+         */
+        'OAuth-Client-Attestation'?: string;
+        /**
+         * Wallet attestation proof-of-possession JWT
+         */
+        'OAuth-Client-Attestation-PoP'?: string;
+    };
+    path: {
+        /**
+         * Tenant identifier
+         */
+        tenantId: string;
+    };
+    query?: never;
+    url: '/api/issuers/{tenantId}/chained-as-vp/par';
+};
+type ChainedAsVpControllerParErrors = {
+    400: ChainedAsErrorResponseDto;
+};
+type ChainedAsVpControllerParError = ChainedAsVpControllerParErrors[keyof ChainedAsVpControllerParErrors];
+type ChainedAsVpControllerParResponses = {
+    201: ChainedAsParResponseDto;
+};
+type ChainedAsVpControllerParResponse = ChainedAsVpControllerParResponses[keyof ChainedAsVpControllerParResponses];
+type ChainedAsVpControllerAuthorizeData = {
+    body?: never;
+    path: {
+        /**
+         * Tenant identifier
+         */
+        tenantId: string;
+    };
+    query: {
+        /**
+         * Client identifier
+         */
+        client_id: string;
+        /**
+         * Request URI from PAR response
+         */
+        request_uri: string;
+    };
+    url: '/api/issuers/{tenantId}/chained-as-vp/authorize';
+};
+type ChainedAsVpControllerAuthorizeErrors = {
+    400: ChainedAsErrorResponseDto;
+};
+type ChainedAsVpControllerAuthorizeError = ChainedAsVpControllerAuthorizeErrors[keyof ChainedAsVpControllerAuthorizeErrors];
+type ChainedAsVpControllerVpCallbackData = {
+    body?: never;
+    path: {
+        /**
+         * Tenant identifier
+         */
+        tenantId: string;
+    };
+    query: {
+        cas: string;
+        response_code?: string;
+        error?: string;
+        error_description?: string;
+    };
+    url: '/api/issuers/{tenantId}/chained-as-vp/vp-callback';
+};
+type ChainedAsVpControllerVpCallbackErrors = {
+    400: ChainedAsErrorResponseDto;
+};
+type ChainedAsVpControllerVpCallbackError = ChainedAsVpControllerVpCallbackErrors[keyof ChainedAsVpControllerVpCallbackErrors];
+type ChainedAsVpControllerTokenData = {
+    body: ChainedAsTokenRequestDto;
+    headers?: {
+        /**
+         * DPoP proof JWT
+         */
+        DPoP?: string;
+    };
+    path: {
+        /**
+         * Tenant identifier
+         */
+        tenantId: string;
+    };
+    query?: never;
+    url: '/api/issuers/{tenantId}/chained-as-vp/token';
+};
+type ChainedAsVpControllerTokenErrors = {
+    400: ChainedAsErrorResponseDto;
+};
+type ChainedAsVpControllerTokenError = ChainedAsVpControllerTokenErrors[keyof ChainedAsVpControllerTokenErrors];
+type ChainedAsVpControllerTokenResponses = {
+    200: ChainedAsTokenResponseDto;
+};
+type ChainedAsVpControllerTokenResponse = ChainedAsVpControllerTokenResponses[keyof ChainedAsVpControllerTokenResponses];
 type KeyChainControllerGetProvidersData = {
     body?: never;
     path?: never;
@@ -4382,6 +5018,44 @@ type KeyChainControllerGetProvidersHealthResponses = {
      */
     200: unknown;
 };
+type KeyChainControllerDeleteTenantKmsConfigData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/api/key-chain/providers/config';
+};
+type KeyChainControllerDeleteTenantKmsConfigResponses = {
+    /**
+     * Tenant-specific KMS config removed.
+     */
+    200: unknown;
+};
+type KeyChainControllerGetTenantKmsConfigData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/api/key-chain/providers/config';
+};
+type KeyChainControllerGetTenantKmsConfigResponses = {
+    /**
+     * Tenant and effective KMS configuration.
+     */
+    200: KmsTenantConfigResponseDto;
+};
+type KeyChainControllerGetTenantKmsConfigResponse = KeyChainControllerGetTenantKmsConfigResponses[keyof KeyChainControllerGetTenantKmsConfigResponses];
+type KeyChainControllerUpdateTenantKmsConfigData = {
+    body: KmsConfigDto;
+    path?: never;
+    query?: never;
+    url: '/api/key-chain/providers/config';
+};
+type KeyChainControllerUpdateTenantKmsConfigResponses = {
+    /**
+     * Updated tenant KMS config.
+     */
+    200: KmsTenantConfigResponseDto;
+};
+type KeyChainControllerUpdateTenantKmsConfigResponse = KeyChainControllerUpdateTenantKmsConfigResponses[keyof KeyChainControllerUpdateTenantKmsConfigResponses];
 type KeyChainControllerGetAllData = {
     body?: never;
     path?: never;
@@ -4552,4 +5226,4 @@ type StorageControllerUploadResponses = {
 };
 type StorageControllerUploadResponse = StorageControllerUploadResponses[keyof StorageControllerUploadResponses];
 
-export type { ChainedAsParResponseDto as $, AccessCertificateRefDto as A, AuthControllerGetOAuth2TokenData as B, ClientOptions as C, AuthControllerGetOAuth2TokenErrors as D, AuthControllerGetOAuth2TokenResponse as E, AuthControllerGetOAuth2TokenResponses as F, AuthenticationMethodAuth as G, AuthenticationMethodNone as H, AuthenticationMethodPresentation as I, AuthenticationUrlConfig as J, AuthorizationResponse as K, AuthorizeQueries as L, CacheControllerClearAllCachesData as M, CacheControllerClearAllCachesResponse as N, CacheControllerClearAllCachesResponses as O, CacheControllerClearStatusListCacheData as P, CacheControllerClearStatusListCacheResponse as Q, CacheControllerClearStatusListCacheResponses as R, Session as S, CacheControllerClearTrustListCacheData as T, CacheControllerClearTrustListCacheResponse as U, CacheControllerClearTrustListCacheResponses as V, CacheControllerGetStatsData as W, CacheControllerGetStatsResponses as X, CertificateInfoDto as Y, ChainedAsConfig as Z, ChainedAsErrorResponseDto as _, AllowListPolicy as a, DeferredControllerCompleteDeferredResponse as a$, ChainedAsTokenConfig as a0, ChainedAsTokenRequestDto as a1, ChainedAsTokenResponseDto as a2, ClaimFieldDefinitionDto as a3, ClaimsQuery as a4, ClientControllerCreateClientData as a5, ClientControllerCreateClientResponse as a6, ClientControllerCreateClientResponses as a7, ClientControllerDeleteClientData as a8, ClientControllerDeleteClientResponses as a9, CreateWebhookEndpointDto as aA, CredentialConfig as aB, CredentialConfigControllerDeleteIssuanceConfigurationData as aC, CredentialConfigControllerDeleteIssuanceConfigurationResponse as aD, CredentialConfigControllerDeleteIssuanceConfigurationResponses as aE, CredentialConfigControllerGetConfigByIdData as aF, CredentialConfigControllerGetConfigByIdResponse as aG, CredentialConfigControllerGetConfigByIdResponses as aH, CredentialConfigControllerGetConfigsData as aI, CredentialConfigControllerGetConfigsResponse as aJ, CredentialConfigControllerGetConfigsResponses as aK, CredentialConfigControllerStoreCredentialConfigurationData as aL, CredentialConfigControllerStoreCredentialConfigurationResponse as aM, CredentialConfigControllerStoreCredentialConfigurationResponses as aN, CredentialConfigControllerUpdateCredentialConfigurationData as aO, CredentialConfigControllerUpdateCredentialConfigurationResponse as aP, CredentialConfigControllerUpdateCredentialConfigurationResponses as aQ, CredentialConfigCreate as aR, CredentialConfigUpdate as aS, CredentialOfferControllerGetOfferData as aT, CredentialOfferControllerGetOfferResponse as aU, CredentialOfferControllerGetOfferResponses as aV, CredentialQuery as aW, CredentialSetQuery as aX, Dcql as aY, DeferredControllerCompleteDeferredData as aZ, DeferredControllerCompleteDeferredErrors as a_, ClientControllerGetClientData as aa, ClientControllerGetClientResponse as ab, ClientControllerGetClientResponses as ac, ClientControllerGetClientSecretData as ad, ClientControllerGetClientSecretResponse as ae, ClientControllerGetClientSecretResponses as af, ClientControllerGetClientsData as ag, ClientControllerGetClientsResponse as ah, ClientControllerGetClientsResponses as ai, ClientControllerRotateClientSecretData as aj, ClientControllerRotateClientSecretResponse as ak, ClientControllerRotateClientSecretResponses as al, ClientControllerUpdateClientData as am, ClientControllerUpdateClientResponse as an, ClientControllerUpdateClientResponses as ao, ClientCredentialsDto as ap, ClientEntity as aq, ClientSecretResponseDto as ar, CompleteDeferredDto as as, CreateAccessCertificateDto as at, CreateAttributeProviderDto as au, CreateClientDto as av, CreateRegistrarConfigDto as aw, CreateStatusListDto as ax, CreateTenantDto as ay, CreateUserDto as az, ApiKeyConfig as b, KeyChainControllerGetProvidersResponses as b$, DeferredControllerCompleteDeferredResponses as b0, DeferredControllerFailDeferredData as b1, DeferredControllerFailDeferredErrors as b2, DeferredControllerFailDeferredResponse as b3, DeferredControllerFailDeferredResponses as b4, DeferredCredentialRequestDto as b5, DeferredOperationResponse as b6, DeprecateSchemaMetadataDto as b7, Display as b8, DisplayImage as b9, IssuanceConfigControllerStoreIssuanceConfigurationData as bA, IssuanceConfigControllerStoreIssuanceConfigurationResponse as bB, IssuanceConfigControllerStoreIssuanceConfigurationResponses as bC, IssuanceDto as bD, IssuerMetadataCredentialConfig as bE, JwksResponseDto as bF, KeyAttestationsRequired as bG, KeyChainControllerCreateData as bH, KeyChainControllerCreateResponses as bI, KeyChainControllerDeleteData as bJ, KeyChainControllerDeleteErrors as bK, KeyChainControllerDeleteResponses as bL, KeyChainControllerExportData as bM, KeyChainControllerExportErrors as bN, KeyChainControllerExportResponse as bO, KeyChainControllerExportResponses as bP, KeyChainControllerGetAllData as bQ, KeyChainControllerGetAllResponse as bR, KeyChainControllerGetAllResponses as bS, KeyChainControllerGetByIdData as bT, KeyChainControllerGetByIdErrors as bU, KeyChainControllerGetByIdResponse as bV, KeyChainControllerGetByIdResponses as bW, KeyChainControllerGetProvidersData as bX, KeyChainControllerGetProvidersHealthData as bY, KeyChainControllerGetProvidersHealthResponses as bZ, KeyChainControllerGetProvidersResponse as b_, DisplayInfo as ba, DisplayLogo as bb, EcJwk as bc, EcPublic as bd, EmbeddedDisclosurePolicy as be, ExportEcJwk as bf, ExportRotationPolicyDto as bg, ExternalTrustListEntity as bh, FailDeferredDto as bi, FederationConfig as bj, FederationTrustAnchorConfig as bk, FieldDisplayDto as bl, FileUploadDto as bm, FrontendConfigResponseDto as bn, GrafanaConfigDto as bo, IaeActionOpenid4VpPresentation as bp, IaeActionRedirectToWeb as bq, ImportTenantDto as br, InteractiveAuthorizationCodeResponseDto as bs, InteractiveAuthorizationErrorResponseDto as bt, InteractiveAuthorizationRequestDto as bu, InternalTrustListEntity as bv, IssuanceConfig as bw, IssuanceConfigControllerGetIssuanceConfigurationsData as bx, IssuanceConfigControllerGetIssuanceConfigurationsResponse as by, IssuanceConfigControllerGetIssuanceConfigurationsResponses as bz, AppControllerGetFrontendConfigData as c, RegistrarControllerCreateAccessCertificateErrors as c$, KeyChainControllerImportData as c0, KeyChainControllerImportResponses as c1, KeyChainControllerRotateData as c2, KeyChainControllerRotateErrors as c3, KeyChainControllerRotateResponses as c4, KeyChainControllerUpdateData as c5, KeyChainControllerUpdateErrors as c6, KeyChainControllerUpdateResponses as c7, KeyChainCreateDto as c8, KeyChainEntity as c9, PresentationManagementControllerConfigurationResponses as cA, PresentationManagementControllerDeleteConfigurationData as cB, PresentationManagementControllerDeleteConfigurationResponses as cC, PresentationManagementControllerGetConfigurationData as cD, PresentationManagementControllerGetConfigurationResponse as cE, PresentationManagementControllerGetConfigurationResponses as cF, PresentationManagementControllerListSchemaMetadataCatalogData as cG, PresentationManagementControllerListSchemaMetadataCatalogResponses as cH, PresentationManagementControllerReissueRegistrationCertificateData as cI, PresentationManagementControllerReissueRegistrationCertificateErrors as cJ, PresentationManagementControllerReissueRegistrationCertificateResponses as cK, PresentationManagementControllerResolveIssuerMetadataData as cL, PresentationManagementControllerResolveIssuerMetadataErrors as cM, PresentationManagementControllerResolveIssuerMetadataResponses as cN, PresentationManagementControllerResolveSchemaMetadataData as cO, PresentationManagementControllerResolveSchemaMetadataErrors as cP, PresentationManagementControllerResolveSchemaMetadataResponses as cQ, PresentationManagementControllerStorePresentationConfigData as cR, PresentationManagementControllerStorePresentationConfigResponse as cS, PresentationManagementControllerStorePresentationConfigResponses as cT, PresentationManagementControllerUpdateConfigurationData as cU, PresentationManagementControllerUpdateConfigurationResponse as cV, PresentationManagementControllerUpdateConfigurationResponses as cW, PresentationRequest as cX, PublicKeyInfoDto as cY, RegistrarConfigResponseDto as cZ, RegistrarControllerCreateAccessCertificateData as c_, KeyChainExportDto as ca, KeyChainImportDto as cb, KeyChainResponseDto as cc, KeyChainUpdateDto as cd, KmsProviderCapabilitiesDto as ce, KmsProviderInfoDto as cf, KmsProvidersResponseDto as cg, ManagedUserDto as ch, MetadataSchemaDto as ci, NoneTrustPolicy as cj, NotificationRequestDto as ck, Object$1 as cl, ObjectWritable as cm, OfferRequestDto as cn, OfferResponse as co, PaginatedSessionResponseDto as cp, ParResponseDto as cq, PolicyCredential as cr, PresentationAttachment as cs, PresentationConfig as ct, PresentationConfigCreateDto as cu, PresentationConfigUpdateDto as cv, PresentationConfigWritable as cw, PresentationDuringIssuanceConfig as cx, PresentationManagementControllerConfigurationData as cy, PresentationManagementControllerConfigurationResponse as cz, AppControllerGetFrontendConfigResponse as d, SchemaMetadataControllerSignVersionSchemaMetaConfigData as d$, RegistrarControllerCreateAccessCertificateResponse as d0, RegistrarControllerCreateAccessCertificateResponses as d1, RegistrarControllerCreateConfigData as d2, RegistrarControllerCreateConfigErrors as d3, RegistrarControllerCreateConfigResponse as d4, RegistrarControllerCreateConfigResponses as d5, RegistrarControllerDeleteConfigData as d6, RegistrarControllerDeleteConfigResponse as d7, RegistrarControllerDeleteConfigResponses as d8, RegistrarControllerGetConfigData as d9, SchemaMetadataControllerExportResponses as dA, SchemaMetadataControllerFindAllData as dB, SchemaMetadataControllerFindAllResponse as dC, SchemaMetadataControllerFindAllResponses as dD, SchemaMetadataControllerFindOneData as dE, SchemaMetadataControllerFindOneResponse as dF, SchemaMetadataControllerFindOneResponses as dG, SchemaMetadataControllerGetJwtData as dH, SchemaMetadataControllerGetJwtResponse as dI, SchemaMetadataControllerGetJwtResponses as dJ, SchemaMetadataControllerGetLatestData as dK, SchemaMetadataControllerGetLatestResponse as dL, SchemaMetadataControllerGetLatestResponses as dM, SchemaMetadataControllerGetSchemaData as dN, SchemaMetadataControllerGetSchemaResponse as dO, SchemaMetadataControllerGetSchemaResponses as dP, SchemaMetadataControllerGetVersionsData as dQ, SchemaMetadataControllerGetVersionsResponse as dR, SchemaMetadataControllerGetVersionsResponses as dS, SchemaMetadataControllerGetVocabulariesData as dT, SchemaMetadataControllerGetVocabulariesResponse as dU, SchemaMetadataControllerGetVocabulariesResponses as dV, SchemaMetadataControllerRemoveData as dW, SchemaMetadataControllerRemoveResponses as dX, SchemaMetadataControllerSignSchemaMetaConfigData as dY, SchemaMetadataControllerSignSchemaMetaConfigErrors as dZ, SchemaMetadataControllerSignSchemaMetaConfigResponses as d_, RegistrarControllerGetConfigErrors as da, RegistrarControllerGetConfigResponse as db, RegistrarControllerGetConfigResponses as dc, RegistrarControllerUpdateConfigData as dd, RegistrarControllerUpdateConfigErrors as de, RegistrarControllerUpdateConfigResponse as df, RegistrarControllerUpdateConfigResponses as dg, RegistrationCertificateBody as dh, RegistrationCertificateDefaults as di, RegistrationCertificatePurpose as dj, RegistrationCertificateRequest as dk, ResolveIssuerMetadataDto as dl, ResolveSchemaMetadataDto as dm, RoleDto as dn, RootOfTrustPolicy as dp, RotationPolicyCreateDto as dq, RotationPolicyImportDto as dr, RotationPolicyResponseDto as ds, RotationPolicyUpdateDto as dt, SchemaMetaConfig as du, SchemaMetadataControllerDeprecateVersionData as dv, SchemaMetadataControllerDeprecateVersionResponse as dw, SchemaMetadataControllerDeprecateVersionResponses as dx, SchemaMetadataControllerExportData as dy, SchemaMetadataControllerExportResponse as dz, AppControllerGetFrontendConfigResponses as e, StatusUpdateDto as e$, SchemaMetadataControllerSignVersionSchemaMetaConfigErrors as e0, SchemaMetadataControllerSignVersionSchemaMetaConfigResponses as e1, SchemaMetadataControllerUpdateData as e2, SchemaMetadataControllerUpdateResponse as e3, SchemaMetadataControllerUpdateResponses as e4, SchemaMetadataResponseDto as e5, SchemaMetadataVocabulariesDto as e6, SchemaUriEntry as e7, SessionConfigControllerGetConfigData as e8, SessionConfigControllerGetConfigResponse as e9, StatusListConfig as eA, StatusListConfigControllerGetConfigData as eB, StatusListConfigControllerGetConfigResponse as eC, StatusListConfigControllerGetConfigResponses as eD, StatusListConfigControllerResetConfigData as eE, StatusListConfigControllerResetConfigResponse as eF, StatusListConfigControllerResetConfigResponses as eG, StatusListConfigControllerUpdateConfigData as eH, StatusListConfigControllerUpdateConfigResponse as eI, StatusListConfigControllerUpdateConfigResponses as eJ, StatusListImportDto as eK, StatusListManagementControllerCreateListData as eL, StatusListManagementControllerCreateListResponse as eM, StatusListManagementControllerCreateListResponses as eN, StatusListManagementControllerDeleteListData as eO, StatusListManagementControllerDeleteListResponse as eP, StatusListManagementControllerDeleteListResponses as eQ, StatusListManagementControllerGetListData as eR, StatusListManagementControllerGetListResponse as eS, StatusListManagementControllerGetListResponses as eT, StatusListManagementControllerGetListsData as eU, StatusListManagementControllerGetListsResponse as eV, StatusListManagementControllerGetListsResponses as eW, StatusListManagementControllerUpdateListData as eX, StatusListManagementControllerUpdateListResponse as eY, StatusListManagementControllerUpdateListResponses as eZ, StatusListResponseDto as e_, SessionConfigControllerGetConfigResponses as ea, SessionConfigControllerResetConfigData as eb, SessionConfigControllerResetConfigResponses as ec, SessionConfigControllerUpdateConfigData as ed, SessionConfigControllerUpdateConfigResponse as ee, SessionConfigControllerUpdateConfigResponses as ef, SessionControllerDeleteSessionData as eg, SessionControllerDeleteSessionResponses as eh, SessionControllerGetAllSessionsData as ei, SessionControllerGetAllSessionsResponse as ej, SessionControllerGetAllSessionsResponses as ek, SessionControllerGetSessionData as el, SessionControllerGetSessionLogsData as em, SessionControllerGetSessionLogsResponse as en, SessionControllerGetSessionLogsResponses as eo, SessionControllerGetSessionResponse as ep, SessionControllerGetSessionResponses as eq, SessionControllerRevokeAllData as er, SessionControllerRevokeAllResponses as es, SessionEventsControllerSubscribeToSessionEventsData as et, SessionEventsControllerSubscribeToSessionEventsResponses as eu, SessionLogEntryResponseDto as ev, SessionStorageConfig as ew, SignSchemaMetaConfigDto as ex, SignVersionSchemaMetaConfigDto as ey, StatusListAggregationDto as ez, AppControllerGetVersionData as f, UserControllerCreateUserResponses as f$, StorageControllerUploadData as f0, StorageControllerUploadResponse as f1, StorageControllerUploadResponses as f2, TenantControllerDeleteTenantData as f3, TenantControllerDeleteTenantResponses as f4, TenantControllerGetTenantData as f5, TenantControllerGetTenantResponse as f6, TenantControllerGetTenantResponses as f7, TenantControllerGetTenantsData as f8, TenantControllerGetTenantsResponse as f9, TrustListControllerGetTrustListResponses as fA, TrustListControllerGetTrustListVersionData as fB, TrustListControllerGetTrustListVersionResponse as fC, TrustListControllerGetTrustListVersionResponses as fD, TrustListControllerGetTrustListVersionsData as fE, TrustListControllerGetTrustListVersionsResponse as fF, TrustListControllerGetTrustListVersionsResponses as fG, TrustListControllerUpdateTrustListData as fH, TrustListControllerUpdateTrustListResponse as fI, TrustListControllerUpdateTrustListResponses as fJ, TrustListCreateDto as fK, TrustListEntityInfo as fL, TrustListVersion as fM, TrustedAuthorityQuery as fN, UpdateAttributeProviderDto as fO, UpdateClientDto as fP, UpdateRegistrarConfigDto as fQ, UpdateSchemaMetadataDto as fR, UpdateSessionConfigDto as fS, UpdateStatusListConfigDto as fT, UpdateStatusListDto as fU, UpdateTenantDto as fV, UpdateUserDto as fW, UpdateWebhookEndpointDto as fX, UpstreamOidcConfig as fY, UserControllerCreateUserData as fZ, UserControllerCreateUserResponse as f_, TenantControllerGetTenantsResponses as fa, TenantControllerInitTenantData as fb, TenantControllerInitTenantResponse as fc, TenantControllerInitTenantResponses as fd, TenantControllerUpdateTenantData as fe, TenantControllerUpdateTenantResponse as ff, TenantControllerUpdateTenantResponses as fg, TenantEntity as fh, TokenResponse as fi, TransactionData as fj, TrustAuthorityDto as fk, TrustAuthorityEntry as fl, TrustList as fm, TrustListControllerCreateTrustListData as fn, TrustListControllerCreateTrustListResponse as fo, TrustListControllerCreateTrustListResponses as fp, TrustListControllerDeleteTrustListData as fq, TrustListControllerDeleteTrustListResponses as fr, TrustListControllerExportTrustListData as fs, TrustListControllerExportTrustListResponse as ft, TrustListControllerExportTrustListResponses as fu, TrustListControllerGetAllTrustListsData as fv, TrustListControllerGetAllTrustListsResponse as fw, TrustListControllerGetAllTrustListsResponses as fx, TrustListControllerGetTrustListData as fy, TrustListControllerGetTrustListResponse as fz, AppControllerGetVersionResponses as g, UserControllerDeleteUserData as g0, UserControllerDeleteUserResponses as g1, UserControllerGetUserData as g2, UserControllerGetUserResponse as g3, UserControllerGetUserResponses as g4, UserControllerGetUsersData as g5, UserControllerGetUsersResponse as g6, UserControllerGetUsersResponses as g7, UserControllerUpdateUserData as g8, UserControllerUpdateUserResponse as g9, UserControllerUpdateUserResponses as ga, Vct as gb, VerifierOfferControllerGetOfferData as gc, VerifierOfferControllerGetOfferResponse as gd, VerifierOfferControllerGetOfferResponses as ge, VocabularyEntryDto as gf, WebHookAuthConfigHeader as gg, WebHookAuthConfigNone as gh, WebhookConfig as gi, WebhookEndpointControllerCreateData as gj, WebhookEndpointControllerCreateResponses as gk, WebhookEndpointControllerDeleteData as gl, WebhookEndpointControllerDeleteErrors as gm, WebhookEndpointControllerDeleteResponses as gn, WebhookEndpointControllerGetAllData as go, WebhookEndpointControllerGetAllResponse as gp, WebhookEndpointControllerGetAllResponses as gq, WebhookEndpointControllerGetByIdData as gr, WebhookEndpointControllerGetByIdErrors as gs, WebhookEndpointControllerGetByIdResponses as gt, WebhookEndpointControllerUpdateData as gu, WebhookEndpointControllerUpdateErrors as gv, WebhookEndpointControllerUpdateResponses as gw, WebhookEndpointEntity as gx, AttestationBasedPolicy as h, AttributeProviderControllerCreateData as i, AttributeProviderControllerCreateResponses as j, AttributeProviderControllerDeleteData as k, AttributeProviderControllerDeleteErrors as l, AttributeProviderControllerDeleteResponses as m, AttributeProviderControllerGetAllData as n, AttributeProviderControllerGetAllResponses as o, AttributeProviderControllerGetByIdData as p, AttributeProviderControllerGetByIdErrors as q, AttributeProviderControllerGetByIdResponses as r, AttributeProviderControllerUpdateData as s, AttributeProviderControllerUpdateErrors as t, AttributeProviderControllerUpdateResponses as u, AttributeProviderEntity as v, AuditLogControllerGetAuditLogsData as w, AuditLogControllerGetAuditLogsResponse as x, AuditLogControllerGetAuditLogsResponses as y, AuditLogResponseDto as z };
+export type { ChainedAsErrorResponseDto as $, AccessCertificateRefDto as A, AuthControllerGetOAuth2TokenData as B, ClientOptions as C, AuthControllerGetOAuth2TokenErrors as D, AuthControllerGetOAuth2TokenResponse as E, AuthControllerGetOAuth2TokenResponses as F, AuthenticationMethodAuth as G, AuthenticationMethodNone as H, AuthenticationMethodPresentation as I, AuthenticationUrlConfig as J, AuthorizationResponse as K, AuthorizeQueries as L, AwsKmsConfigDto as M, BuiltInAuthorizationServerConfig as N, CacheControllerClearAllCachesData as O, CacheControllerClearAllCachesResponse as P, CacheControllerClearAllCachesResponses as Q, CacheControllerClearStatusListCacheData as R, Session as S, CacheControllerClearStatusListCacheResponse as T, CacheControllerClearStatusListCacheResponses as U, CacheControllerClearTrustListCacheData as V, CacheControllerClearTrustListCacheResponse as W, CacheControllerClearTrustListCacheResponses as X, CacheControllerGetStatsData as Y, CacheControllerGetStatsResponses as Z, CertificateInfoDto as _, AllowListPolicy as a, CredentialConfigControllerGetConfigsResponse as a$, ChainedAsParResponseDto as a0, ChainedAsTokenConfig as a1, ChainedAsTokenRequestDto as a2, ChainedAsTokenResponseDto as a3, ChainedAsVpControllerAuthorizeData as a4, ChainedAsVpControllerAuthorizeError as a5, ChainedAsVpControllerAuthorizeErrors as a6, ChainedAsVpControllerParData as a7, ChainedAsVpControllerParError as a8, ChainedAsVpControllerParErrors as a9, ClientControllerGetClientsResponses as aA, ClientControllerRotateClientSecretData as aB, ClientControllerRotateClientSecretResponse as aC, ClientControllerRotateClientSecretResponses as aD, ClientControllerUpdateClientData as aE, ClientControllerUpdateClientResponse as aF, ClientControllerUpdateClientResponses as aG, ClientCredentialsDto as aH, ClientEntity as aI, ClientSecretResponseDto as aJ, CompleteDeferredDto as aK, CreateAccessCertificateDto as aL, CreateAttributeProviderDto as aM, CreateClientDto as aN, CreateRegistrarConfigDto as aO, CreateStatusListDto as aP, CreateTenantDto as aQ, CreateUserDto as aR, CreateWebhookEndpointDto as aS, CredentialConfig as aT, CredentialConfigControllerDeleteIssuanceConfigurationData as aU, CredentialConfigControllerDeleteIssuanceConfigurationResponse as aV, CredentialConfigControllerDeleteIssuanceConfigurationResponses as aW, CredentialConfigControllerGetConfigByIdData as aX, CredentialConfigControllerGetConfigByIdResponse as aY, CredentialConfigControllerGetConfigByIdResponses as aZ, CredentialConfigControllerGetConfigsData as a_, ChainedAsVpControllerParResponse as aa, ChainedAsVpControllerParResponses as ab, ChainedAsVpControllerTokenData as ac, ChainedAsVpControllerTokenError as ad, ChainedAsVpControllerTokenErrors as ae, ChainedAsVpControllerTokenResponse as af, ChainedAsVpControllerTokenResponses as ag, ChainedAsVpControllerVpCallbackData as ah, ChainedAsVpControllerVpCallbackError as ai, ChainedAsVpControllerVpCallbackErrors as aj, ChainedAuthorizationServerConfig as ak, ClaimFieldDefinitionDto as al, ClaimsQuery as am, ClientControllerCreateClientData as an, ClientControllerCreateClientResponse as ao, ClientControllerCreateClientResponses as ap, ClientControllerDeleteClientData as aq, ClientControllerDeleteClientResponses as ar, ClientControllerGetClientData as as, ClientControllerGetClientResponse as at, ClientControllerGetClientResponses as au, ClientControllerGetClientSecretData as av, ClientControllerGetClientSecretResponse as aw, ClientControllerGetClientSecretResponses as ax, ClientControllerGetClientsData as ay, ClientControllerGetClientsResponse as az, ApiKeyConfig as b, IssuanceConfigWritable as b$, CredentialConfigControllerGetConfigsResponses as b0, CredentialConfigControllerStoreCredentialConfigurationData as b1, CredentialConfigControllerStoreCredentialConfigurationResponse as b2, CredentialConfigControllerStoreCredentialConfigurationResponses as b3, CredentialConfigControllerUpdateCredentialConfigurationData as b4, CredentialConfigControllerUpdateCredentialConfigurationResponse as b5, CredentialConfigControllerUpdateCredentialConfigurationResponses as b6, CredentialConfigCreate as b7, CredentialConfigUpdate as b8, CredentialOfferControllerGetOfferData as b9, ExportEcJwk as bA, ExportRotationPolicyDto as bB, ExternalAuthorizationServerConfig as bC, ExternalTrustListEntity as bD, FailDeferredDto as bE, FederationConfig as bF, FederationTrustAnchorConfig as bG, FieldDisplayDto as bH, FileUploadDto as bI, FrontendConfigResponseDto as bJ, GrafanaConfigDto as bK, HttpAuthBaseConfigDto as bL, HttpKmsConfigDto as bM, IaeActionOpenid4VpPresentation as bN, IaeActionRedirectToWeb as bO, ImportTenantDto as bP, InteractiveAuthorizationCodeResponseDto as bQ, InteractiveAuthorizationErrorResponseDto as bR, InteractiveAuthorizationRequestDto as bS, InternalTrustListEntity as bT, IssuanceConfig as bU, IssuanceConfigControllerGetIssuanceConfigurationsData as bV, IssuanceConfigControllerGetIssuanceConfigurationsResponse as bW, IssuanceConfigControllerGetIssuanceConfigurationsResponses as bX, IssuanceConfigControllerStoreIssuanceConfigurationData as bY, IssuanceConfigControllerStoreIssuanceConfigurationResponse as bZ, IssuanceConfigControllerStoreIssuanceConfigurationResponses as b_, CredentialOfferControllerGetOfferResponse as ba, CredentialOfferControllerGetOfferResponses as bb, CredentialQuery as bc, CredentialSetQuery as bd, CscAuthorizeAuthDataDto as be, CscKmsConfigDto as bf, DbKmsConfigDto as bg, Dcql as bh, DeferredControllerCompleteDeferredData as bi, DeferredControllerCompleteDeferredErrors as bj, DeferredControllerCompleteDeferredResponse as bk, DeferredControllerCompleteDeferredResponses as bl, DeferredControllerFailDeferredData as bm, DeferredControllerFailDeferredErrors as bn, DeferredControllerFailDeferredResponse as bo, DeferredControllerFailDeferredResponses as bp, DeferredCredentialRequestDto as bq, DeferredOperationResponse as br, DeprecateSchemaMetadataDto as bs, Display as bt, DisplayImage as bu, DisplayInfo as bv, DisplayLogo as bw, EcJwk as bx, EcPublic as by, EmbeddedDisclosurePolicy as bz, AppControllerGetFrontendConfigData as c, Oid4VpAuthorizationServerConfig as c$, IssuerMetadataCredentialConfig as c0, IssuerProvidedAttestation as c1, IssuerRegistrationCertificateCache as c2, IssuerRegistrationCertificateConfig as c3, JwksResponseDto as c4, KeyAttestationsRequired as c5, KeyChainControllerCreateData as c6, KeyChainControllerCreateResponses as c7, KeyChainControllerDeleteData as c8, KeyChainControllerDeleteErrors as c9, KeyChainControllerRotateResponses as cA, KeyChainControllerUpdateData as cB, KeyChainControllerUpdateErrors as cC, KeyChainControllerUpdateResponses as cD, KeyChainControllerUpdateTenantKmsConfigData as cE, KeyChainControllerUpdateTenantKmsConfigResponse as cF, KeyChainControllerUpdateTenantKmsConfigResponses as cG, KeyChainCreateDto as cH, KeyChainEntity as cI, KeyChainExportDto as cJ, KeyChainImportDto as cK, KeyChainResponseDto as cL, KeyChainUpdateDto as cM, KmsConfigDto as cN, KmsProviderCapabilitiesDto as cO, KmsProviderInfoDto as cP, KmsProvidersResponseDto as cQ, KmsTenantConfigResponseDto as cR, ManagedAuthorizationServerConfig as cS, ManagedUserDto as cT, MetadataSchemaDto as cU, NoneTrustPolicy as cV, NotificationRequestDto as cW, Object$1 as cX, ObjectWritable as cY, OfferRequestDto as cZ, OfferResponse as c_, KeyChainControllerDeleteResponses as ca, KeyChainControllerDeleteTenantKmsConfigData as cb, KeyChainControllerDeleteTenantKmsConfigResponses as cc, KeyChainControllerExportData as cd, KeyChainControllerExportErrors as ce, KeyChainControllerExportResponse as cf, KeyChainControllerExportResponses as cg, KeyChainControllerGetAllData as ch, KeyChainControllerGetAllResponse as ci, KeyChainControllerGetAllResponses as cj, KeyChainControllerGetByIdData as ck, KeyChainControllerGetByIdErrors as cl, KeyChainControllerGetByIdResponse as cm, KeyChainControllerGetByIdResponses as cn, KeyChainControllerGetProvidersData as co, KeyChainControllerGetProvidersHealthData as cp, KeyChainControllerGetProvidersHealthResponses as cq, KeyChainControllerGetProvidersResponse as cr, KeyChainControllerGetProvidersResponses as cs, KeyChainControllerGetTenantKmsConfigData as ct, KeyChainControllerGetTenantKmsConfigResponse as cu, KeyChainControllerGetTenantKmsConfigResponses as cv, KeyChainControllerImportData as cw, KeyChainControllerImportResponses as cx, KeyChainControllerRotateData as cy, KeyChainControllerRotateErrors as cz, AppControllerGetFrontendConfigResponse as d, ResolveSchemaMetadataDto as d$, PaginatedSessionResponseDto as d0, ParResponseDto as d1, Pkcs11KmsConfigDto as d2, PolicyCredential as d3, PresentationAttachment as d4, PresentationConfig as d5, PresentationConfigCreateDto as d6, PresentationConfigUpdateDto as d7, PresentationConfigWritable as d8, PresentationDuringIssuanceConfig as d9, PresentationRequest as dA, PublicKeyInfoDto as dB, RegistrarConfigResponseDto as dC, RegistrarControllerCreateAccessCertificateData as dD, RegistrarControllerCreateAccessCertificateErrors as dE, RegistrarControllerCreateAccessCertificateResponse as dF, RegistrarControllerCreateAccessCertificateResponses as dG, RegistrarControllerCreateConfigData as dH, RegistrarControllerCreateConfigErrors as dI, RegistrarControllerCreateConfigResponse as dJ, RegistrarControllerCreateConfigResponses as dK, RegistrarControllerDeleteConfigData as dL, RegistrarControllerDeleteConfigResponse as dM, RegistrarControllerDeleteConfigResponses as dN, RegistrarControllerGetConfigData as dO, RegistrarControllerGetConfigErrors as dP, RegistrarControllerGetConfigResponse as dQ, RegistrarControllerGetConfigResponses as dR, RegistrarControllerUpdateConfigData as dS, RegistrarControllerUpdateConfigErrors as dT, RegistrarControllerUpdateConfigResponse as dU, RegistrarControllerUpdateConfigResponses as dV, RegistrationCertificateBody as dW, RegistrationCertificateDefaults as dX, RegistrationCertificatePurpose as dY, RegistrationCertificateRequest as dZ, ResolveIssuerMetadataDto as d_, PresentationManagementControllerConfigurationData as da, PresentationManagementControllerConfigurationResponse as db, PresentationManagementControllerConfigurationResponses as dc, PresentationManagementControllerDeleteConfigurationData as dd, PresentationManagementControllerDeleteConfigurationResponses as de, PresentationManagementControllerGetConfigurationData as df, PresentationManagementControllerGetConfigurationResponse as dg, PresentationManagementControllerGetConfigurationResponses as dh, PresentationManagementControllerListSchemaMetadataCatalogData as di, PresentationManagementControllerListSchemaMetadataCatalogResponses as dj, PresentationManagementControllerReissueRegistrationCertificateData as dk, PresentationManagementControllerReissueRegistrationCertificateErrors as dl, PresentationManagementControllerReissueRegistrationCertificateResponses as dm, PresentationManagementControllerResolveIssuerMetadataData as dn, PresentationManagementControllerResolveIssuerMetadataErrors as dp, PresentationManagementControllerResolveIssuerMetadataResponses as dq, PresentationManagementControllerResolveSchemaMetadataData as dr, PresentationManagementControllerResolveSchemaMetadataErrors as ds, PresentationManagementControllerResolveSchemaMetadataResponses as dt, PresentationManagementControllerStorePresentationConfigData as du, PresentationManagementControllerStorePresentationConfigResponse as dv, PresentationManagementControllerStorePresentationConfigResponses as dw, PresentationManagementControllerUpdateConfigurationData as dx, PresentationManagementControllerUpdateConfigurationResponse as dy, PresentationManagementControllerUpdateConfigurationResponses as dz, AppControllerGetFrontendConfigResponses as e, SessionControllerGetAllSessionsResponses as e$, RoleDto as e0, RootOfTrustPolicy as e1, RotationPolicyCreateDto as e2, RotationPolicyImportDto as e3, RotationPolicyResponseDto as e4, RotationPolicyUpdateDto as e5, SchemaMetaConfig as e6, SchemaMetadataControllerDeprecateVersionData as e7, SchemaMetadataControllerDeprecateVersionResponse as e8, SchemaMetadataControllerDeprecateVersionResponses as e9, SchemaMetadataControllerGetVocabulariesResponses as eA, SchemaMetadataControllerRemoveData as eB, SchemaMetadataControllerRemoveResponses as eC, SchemaMetadataControllerSignSchemaMetaConfigData as eD, SchemaMetadataControllerSignSchemaMetaConfigErrors as eE, SchemaMetadataControllerSignSchemaMetaConfigResponses as eF, SchemaMetadataControllerSignVersionSchemaMetaConfigData as eG, SchemaMetadataControllerSignVersionSchemaMetaConfigErrors as eH, SchemaMetadataControllerSignVersionSchemaMetaConfigResponses as eI, SchemaMetadataControllerUpdateData as eJ, SchemaMetadataControllerUpdateResponse as eK, SchemaMetadataControllerUpdateResponses as eL, SchemaMetadataResponseDto as eM, SchemaMetadataVocabulariesDto as eN, SchemaUriEntry as eO, SessionConfigControllerGetConfigData as eP, SessionConfigControllerGetConfigResponse as eQ, SessionConfigControllerGetConfigResponses as eR, SessionConfigControllerResetConfigData as eS, SessionConfigControllerResetConfigResponses as eT, SessionConfigControllerUpdateConfigData as eU, SessionConfigControllerUpdateConfigResponse as eV, SessionConfigControllerUpdateConfigResponses as eW, SessionControllerDeleteSessionData as eX, SessionControllerDeleteSessionResponses as eY, SessionControllerGetAllSessionsData as eZ, SessionControllerGetAllSessionsResponse as e_, SchemaMetadataControllerExportData as ea, SchemaMetadataControllerExportResponse as eb, SchemaMetadataControllerExportResponses as ec, SchemaMetadataControllerFindAllData as ed, SchemaMetadataControllerFindAllResponse as ee, SchemaMetadataControllerFindAllResponses as ef, SchemaMetadataControllerFindOneData as eg, SchemaMetadataControllerFindOneResponse as eh, SchemaMetadataControllerFindOneResponses as ei, SchemaMetadataControllerGetJwtData as ej, SchemaMetadataControllerGetJwtResponse as ek, SchemaMetadataControllerGetJwtResponses as el, SchemaMetadataControllerGetLatestData as em, SchemaMetadataControllerGetLatestResponse as en, SchemaMetadataControllerGetLatestResponses as eo, SchemaMetadataControllerGetMineData as ep, SchemaMetadataControllerGetMineResponse as eq, SchemaMetadataControllerGetMineResponses as er, SchemaMetadataControllerGetSchemaData as es, SchemaMetadataControllerGetSchemaResponse as et, SchemaMetadataControllerGetSchemaResponses as eu, SchemaMetadataControllerGetVersionsData as ev, SchemaMetadataControllerGetVersionsResponse as ew, SchemaMetadataControllerGetVersionsResponses as ex, SchemaMetadataControllerGetVocabulariesData as ey, SchemaMetadataControllerGetVocabulariesResponse as ez, AppControllerGetVersionData as f, TrustAuthorityDto as f$, SessionControllerGetSessionData as f0, SessionControllerGetSessionLogsData as f1, SessionControllerGetSessionLogsResponse as f2, SessionControllerGetSessionLogsResponses as f3, SessionControllerGetSessionResponse as f4, SessionControllerGetSessionResponses as f5, SessionControllerRevokeAllData as f6, SessionControllerRevokeAllResponses as f7, SessionEventsControllerSubscribeToSessionEventsData as f8, SessionEventsControllerSubscribeToSessionEventsResponses as f9, StatusListManagementControllerGetListsResponse as fA, StatusListManagementControllerGetListsResponses as fB, StatusListManagementControllerUpdateListData as fC, StatusListManagementControllerUpdateListResponse as fD, StatusListManagementControllerUpdateListResponses as fE, StatusListResponseDto as fF, StatusUpdateDto as fG, StorageControllerUploadData as fH, StorageControllerUploadResponse as fI, StorageControllerUploadResponses as fJ, TenantControllerDeleteTenantData as fK, TenantControllerDeleteTenantResponses as fL, TenantControllerGetTenantData as fM, TenantControllerGetTenantResponse as fN, TenantControllerGetTenantResponses as fO, TenantControllerGetTenantsData as fP, TenantControllerGetTenantsResponse as fQ, TenantControllerGetTenantsResponses as fR, TenantControllerInitTenantData as fS, TenantControllerInitTenantResponse as fT, TenantControllerInitTenantResponses as fU, TenantControllerUpdateTenantData as fV, TenantControllerUpdateTenantResponse as fW, TenantControllerUpdateTenantResponses as fX, TenantEntity as fY, TokenResponse as fZ, TransactionData as f_, SessionLogEntryResponseDto as fa, SessionStorageConfig as fb, SignSchemaMetaConfigDto as fc, SignVersionSchemaMetaConfigDto as fd, StatusListAggregationDto as fe, StatusListConfig as ff, StatusListConfigControllerGetConfigData as fg, StatusListConfigControllerGetConfigResponse as fh, StatusListConfigControllerGetConfigResponses as fi, StatusListConfigControllerResetConfigData as fj, StatusListConfigControllerResetConfigResponse as fk, StatusListConfigControllerResetConfigResponses as fl, StatusListConfigControllerUpdateConfigData as fm, StatusListConfigControllerUpdateConfigResponse as fn, StatusListConfigControllerUpdateConfigResponses as fo, StatusListImportDto as fp, StatusListManagementControllerCreateListData as fq, StatusListManagementControllerCreateListResponse as fr, StatusListManagementControllerCreateListResponses as fs, StatusListManagementControllerDeleteListData as ft, StatusListManagementControllerDeleteListResponse as fu, StatusListManagementControllerDeleteListResponses as fv, StatusListManagementControllerGetListData as fw, StatusListManagementControllerGetListResponse as fx, StatusListManagementControllerGetListResponses as fy, StatusListManagementControllerGetListsData as fz, AppControllerGetVersionResponses as g, WebHookAuthConfigNone as g$, TrustAuthorityEntry as g0, TrustList as g1, TrustListControllerCreateTrustListData as g2, TrustListControllerCreateTrustListResponse as g3, TrustListControllerCreateTrustListResponses as g4, TrustListControllerDeleteTrustListData as g5, TrustListControllerDeleteTrustListResponses as g6, TrustListControllerExportTrustListData as g7, TrustListControllerExportTrustListResponse as g8, TrustListControllerExportTrustListResponses as g9, UpdateStatusListConfigDto as gA, UpdateStatusListDto as gB, UpdateTenantDto as gC, UpdateUserDto as gD, UpdateWebhookEndpointDto as gE, UpstreamOidcConfig as gF, UserControllerCreateUserData as gG, UserControllerCreateUserResponse as gH, UserControllerCreateUserResponses as gI, UserControllerDeleteUserData as gJ, UserControllerDeleteUserResponses as gK, UserControllerGetUserData as gL, UserControllerGetUserResponse as gM, UserControllerGetUserResponses as gN, UserControllerGetUsersData as gO, UserControllerGetUsersResponse as gP, UserControllerGetUsersResponses as gQ, UserControllerUpdateUserData as gR, UserControllerUpdateUserResponse as gS, UserControllerUpdateUserResponses as gT, VaultKmsConfigDto as gU, Vct as gV, VerifierOfferControllerGetOfferData as gW, VerifierOfferControllerGetOfferResponse as gX, VerifierOfferControllerGetOfferResponses as gY, VocabularyEntryDto as gZ, WebHookAuthConfigHeader as g_, TrustListControllerGetAllTrustListsData as ga, TrustListControllerGetAllTrustListsResponse as gb, TrustListControllerGetAllTrustListsResponses as gc, TrustListControllerGetTrustListData as gd, TrustListControllerGetTrustListResponse as ge, TrustListControllerGetTrustListResponses as gf, TrustListControllerGetTrustListVersionData as gg, TrustListControllerGetTrustListVersionResponse as gh, TrustListControllerGetTrustListVersionResponses as gi, TrustListControllerGetTrustListVersionsData as gj, TrustListControllerGetTrustListVersionsResponse as gk, TrustListControllerGetTrustListVersionsResponses as gl, TrustListControllerUpdateTrustListData as gm, TrustListControllerUpdateTrustListResponse as gn, TrustListControllerUpdateTrustListResponses as go, TrustListCreateDto as gp, TrustListEntityInfo as gq, TrustListVersion as gr, TrustedAuthorityQuery as gs, UpdateAttributeProviderDto as gt, UpdateClientDto as gu, UpdateIssuanceDto as gv, UpdateIssuanceDtoWritable as gw, UpdateRegistrarConfigDto as gx, UpdateSchemaMetadataDto as gy, UpdateSessionConfigDto as gz, AttestationBasedPolicy as h, WebhookConfig as h0, WebhookEndpointControllerCreateData as h1, WebhookEndpointControllerCreateResponses as h2, WebhookEndpointControllerDeleteData as h3, WebhookEndpointControllerDeleteErrors as h4, WebhookEndpointControllerDeleteResponses as h5, WebhookEndpointControllerGetAllData as h6, WebhookEndpointControllerGetAllResponse as h7, WebhookEndpointControllerGetAllResponses as h8, WebhookEndpointControllerGetByIdData as h9, WebhookEndpointControllerGetByIdErrors as ha, WebhookEndpointControllerGetByIdResponses as hb, WebhookEndpointControllerUpdateData as hc, WebhookEndpointControllerUpdateErrors as hd, WebhookEndpointControllerUpdateResponses as he, WebhookEndpointEntity as hf, AttributeProviderControllerCreateData as i, AttributeProviderControllerCreateResponses as j, AttributeProviderControllerDeleteData as k, AttributeProviderControllerDeleteErrors as l, AttributeProviderControllerDeleteResponses as m, AttributeProviderControllerGetAllData as n, AttributeProviderControllerGetAllResponses as o, AttributeProviderControllerGetByIdData as p, AttributeProviderControllerGetByIdErrors as q, AttributeProviderControllerGetByIdResponses as r, AttributeProviderControllerUpdateData as s, AttributeProviderControllerUpdateErrors as t, AttributeProviderControllerUpdateResponses as u, AttributeProviderEntity as v, AuditLogControllerGetAuditLogsData as w, AuditLogControllerGetAuditLogsResponse as x, AuditLogControllerGetAuditLogsResponses as y, AuditLogResponseDto as z };