@eudiplo/sdk-core 6.2.0 → 7.0.0

package/dist/{types.gen-01j05Y1J.d.ts → types.gen-DrLP5Bfl.d.ts}

@@ -592,6 +592,13 @@ type Session = {
      * Signed presentation auth request.
      */
     requestObject?: string;
+    /**
+     * Per-authorization-request private encryption key used to decrypt
+     * wallet responses. Encrypted at rest.
+     */
+    responseEncryptionPrivateJwk?: {
+        [key: string]: unknown;
+    };
     /**
      * Verified credentials from the presentation process.
      * Encrypted at rest - contains personal information.
@@ -600,7 +607,7 @@ type Session = {
         [key: string]: unknown;
     }>;
     /**
-     * Noncce from the Verifiable Presentation request.
+     * Nonce from the Verifiable Presentation request.
      */
     vp_nonce?: string;
     /**
@@ -636,6 +643,10 @@ type Session = {
      * Can be overridden per-request from the presentation configuration.
      */
     transaction_data?: Array<TransactionData>;
+    /**
+     * Per-session clock skew tolerance for presentation credential JWT time validation.
+     */
+    skewSeconds?: number;
     externalIssuer?: string;
     /**
      * The subject (sub) from the external authorization server token.
@@ -974,6 +985,19 @@ type BuiltInAuthorizationServerConfig = {
      */
     requireDPoP?: boolean;
 };
+type WalletProviderTrustListRefDto = {
+    url: string;
+    /**
+     * JWK used to verify the trust-list JWT signature.
+     */
+    verifierKey?: {
+        [key: string]: unknown;
+    };
+    /**
+     * Base64 DER-encoded X.509 certificate used to verify the trust-list JWT signature.
+     */
+    verifierX509Der?: string;
+};
 type FederationTrustAnchorConfig = {
     /**
      * Entity identifier (sub) of the federation trust anchor.
@@ -1060,6 +1084,11 @@ type DisplayInfo = {
     logo?: DisplayLogo;
 };
 type IssuanceConfig = {
+    /**
+     * Trust lists containing trusted wallet providers.
+     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     */
+    walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -1113,12 +1142,6 @@ type IssuanceConfig = {
      * Default value is false.
      */
     walletAttestationRequired?: boolean;
-    /**
-     * URLs of trust lists containing trusted wallet providers.
-     * The wallet attestation's X.509 certificate will be validated against these trust lists.
-     * If empty and walletAttestationRequired is true, all wallet providers are rejected.
-     */
-    walletProviderTrustLists?: Array<string>;
     display: Array<DisplayInfo>;
     /**
      * The timestamp when the VP request was created.
@@ -1130,6 +1153,11 @@ type IssuanceConfig = {
     updatedAt: string;
 };
 type UpdateIssuanceDto = {
+    /**
+     * Trust lists containing trusted wallet providers.
+     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     */
+    walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -1179,12 +1207,6 @@ type UpdateIssuanceDto = {
      * Default value is false.
      */
     walletAttestationRequired?: boolean;
-    /**
-     * URLs of trust lists containing trusted wallet providers.
-     * The wallet attestation's X.509 certificate will be validated against these trust lists.
-     * If empty and walletAttestationRequired is true, all wallet providers are rejected.
-     */
-    walletProviderTrustLists?: Array<string>;
     display?: Array<DisplayInfo>;
 };
 type ClaimsQuery = {
@@ -1192,31 +1214,15 @@ type ClaimsQuery = {
     path: Array<string>;
     values?: Array<string>;
 };
-type TrustedAuthorityQuery = {
-    type: 'etsi_tl' | 'openid_federation';
-    values: Array<string>;
-};
-type CredentialQuery = {
-    /**
-     * Ordered alternative claim combinations for this credential query.
-     */
-    claim_sets?: Array<Array<string>>;
-    id: string;
-    format: string;
-    multiple?: boolean;
-    claims?: Array<ClaimsQuery>;
-    meta: {
-        [key: string]: unknown;
-    };
-    trusted_authorities?: Array<TrustedAuthorityQuery>;
-};
 type CredentialSetQuery = {
     options: Array<Array<string>>;
     required?: boolean;
 };
 type PolicyCredential = {
     claims?: Array<ClaimsQuery>;
-    credentials: Array<CredentialQuery>;
+    credentials: Array<{
+        [key: string]: unknown;
+    }>;
     credential_sets?: Array<CredentialSetQuery>;
 };
 type AttestationBasedPolicy = {
@@ -1397,6 +1403,10 @@ type IssuerMetadataCredentialConfig = {
      * for this specific credential configuration.
      */
     keyAttestationsRequired?: KeyAttestationsRequired;
+    /**
+     * Supported proof types for this credential configuration. Defaults to ['attestation', 'jwt'].
+     */
+    proofTypesSupported?: Array<'jwt' | 'attestation'>;
     format: 'mso_mdoc' | 'dc+sd-jwt';
     display: Array<Display>;
     scope?: string;
@@ -1504,6 +1514,11 @@ type KeyChainEntity = {
      * This field stores the provider-specific key reference for the active signing key.
      */
     externalKeyId?: string;
+    /**
+     * External key identifier for cloud KMS providers for the root CA key.
+     * Used when rotating internal-chain key chains backed by external KMS.
+     */
+    rootExternalKeyId?: string;
     rootJwk?: {
         [key: string]: unknown;
     };
@@ -2109,8 +2124,102 @@ type TrustListVersion = {
     jwt: string;
     createdAt: string;
 };
+type TrustListRef = {
+    /**
+     * Managed local trust-list identifier. When provided, verifier material is resolved server-side from the trust list key chain.
+     */
+    trustListId?: string;
+    /**
+     * Trust-list JWT URL. Required for external trust lists when trustListId is not set.
+     */
+    url?: string;
+    /**
+     * JWK used to verify trust-list JWT signatures for external trusted authority values.
+     */
+    verifierKey?: {
+        [key: string]: unknown;
+    };
+    /**
+     * Base64 DER-encoded X.509 certificate used to verify trust-list JWT signatures for external trusted authority values.
+     */
+    verifierX509Der?: string;
+};
+type TrustedAuthorityQueryEtsiTl = {
+    type: 'etsi_tl';
+    values: Array<TrustListRef>;
+};
+type TrustedAuthorityQueryOpenIdFederation = {
+    type: 'openid_federation';
+    values: Array<string>;
+};
+type DcSdJwtCredentialQueryMeta = {
+    /**
+     * VCT identifiers accepted for dc+sd-jwt credentials.
+     */
+    vct_values: Array<string>;
+};
+type MsoMdocCredentialQueryMeta = {
+    /**
+     * Document type identifier accepted for mso_mdoc credentials.
+     */
+    doctype_value: string;
+};
+type MsoMdocClaimsQuery = {
+    /**
+     * Whether the holder should be allowed to retain the claim in an mso_mdoc response.
+     */
+    intent_to_retain?: boolean;
+    id?: string;
+    path: Array<string>;
+    values?: Array<string>;
+};
+type CredentialQueryDcSdJwt = {
+    /**
+     * Credential format discriminator.
+     */
+    format: 'dc+sd-jwt';
+    /**
+     * Ordered alternative claim combinations for this credential query.
+     */
+    claim_sets?: Array<Array<string>>;
+    /**
+     * Trusted authority constraints (discriminated by type) for this credential query.
+     */
+    trusted_authorities?: Array<TrustedAuthorityQueryEtsiTl | TrustedAuthorityQueryOpenIdFederation>;
+    /**
+     * dc+sd-jwt schema metadata for the requested credential.
+     */
+    meta: DcSdJwtCredentialQueryMeta;
+    claims?: Array<ClaimsQuery>;
+    id: string;
+    multiple?: boolean;
+};
+type CredentialQueryMsoMdoc = {
+    /**
+     * Credential format discriminator.
+     */
+    format: 'mso_mdoc';
+    /**
+     * Ordered alternative claim combinations for this credential query.
+     */
+    claim_sets?: Array<Array<string>>;
+    /**
+     * Trusted authority constraints (discriminated by type) for this credential query.
+     */
+    trusted_authorities?: Array<TrustedAuthorityQueryEtsiTl | TrustedAuthorityQueryOpenIdFederation>;
+    /**
+     * mso_mdoc document type metadata for the requested credential.
+     */
+    meta: MsoMdocCredentialQueryMeta;
+    claims?: Array<MsoMdocClaimsQuery>;
+    id: string;
+    multiple?: boolean;
+};
 type Dcql = {
-    credentials: Array<CredentialQuery>;
+    /**
+     * Format-discriminated credential queries.
+     */
+    credentials?: Array<CredentialQueryDcSdJwt | CredentialQueryMsoMdoc>;
     credential_sets?: Array<CredentialSetQuery>;
 };
 type RegistrationCertificatePurpose = {
@@ -2154,6 +2263,14 @@ type PresentationAttachment = {
     credential_ids?: Array<string>;
 };
 type PresentationConfig = {
+    /**
+     * Clock skew tolerance for credential JWT time validation, in seconds.
+     */
+    skewSeconds?: number;
+    /**
+     * Status list verification mode for presentations: strict (default), best_effort, or disabled.
+     */
+    statusCheckMode?: 'strict' | 'best_effort' | 'disabled';
     /**
      * Server-managed cache of the materialized registration certificate. Read-only; values supplied by clients are ignored.
      */
@@ -2176,10 +2293,6 @@ type PresentationConfig = {
      * Lifetime how long the presentation request is valid after creation, in seconds.
      */
     lifeTime?: number;
-    /**
-     * Clock skew tolerance for credential JWT time validation, in seconds.
-     */
-    skewSeconds?: number;
     /**
      * The DCQL query to be used for the VP request.
      */
@@ -2194,13 +2307,6 @@ type PresentationConfig = {
      * Optional: if set, notifications will be sent to this endpoint.
      */
     webhookEndpointId?: string;
-    webhookEndpoint?: WebhookEndpointEntity;
-    /**
-     * Optional webhook URL to receive the response.
-     *
-     * @deprecated
-     */
-    webhook?: WebhookConfig;
     /**
      * The timestamp when the VP request was created.
      */
@@ -2228,6 +2334,18 @@ type PresentationConfig = {
      * at the application level in the service layer.
      */
     accessKeyChainId?: string;
+    /**
+     * Enable reader authentication for the ISO 18013-7 Annex C (DC API) flow.
+     *
+     * When `true`, the DeviceRequest embeds a detached `readerAuth` COSE_Sign1
+     * signed with the tenant's Access key chain (selected by
+     * {@link accessKeyChainId}), letting the wallet cryptographically
+     * authenticate the verifier — the mDOC equivalent of the signed request
+     * object used in the OID4VP flow. Defaults to disabled (null/false).
+     *
+     * Only affects `response_type: "iso-18013-7"` offers.
+     */
+    readerAuth?: boolean;
 };
 type ResolveIssuerMetadataDto = {
     /**
@@ -2248,6 +2366,14 @@ type ResolveSchemaMetadataJwtDto = {
     signedJwt: string;
 };
 type PresentationConfigCreateDto = {
+    /**
+     * Clock skew tolerance for credential JWT time validation, in seconds.
+     */
+    skewSeconds?: number;
+    /**
+     * Status list verification mode for presentations: strict (default), best_effort, or disabled.
+     */
+    statusCheckMode?: 'strict' | 'best_effort' | 'disabled';
     /**
      * Unique identifier for the VP request.
      */
@@ -2260,10 +2386,6 @@ type PresentationConfigCreateDto = {
      * Lifetime how long the presentation request is valid after creation, in seconds.
      */
     lifeTime?: number;
-    /**
-     * Clock skew tolerance for credential JWT time validation, in seconds.
-     */
-    skewSeconds?: number;
     /**
      * The DCQL query to be used for the VP request.
      */
@@ -2278,13 +2400,6 @@ type PresentationConfigCreateDto = {
      * Optional: if set, notifications will be sent to this endpoint.
      */
     webhookEndpointId?: string;
-    webhookEndpoint?: WebhookEndpointEntity;
-    /**
-     * Optional webhook URL to receive the response.
-     *
-     * @deprecated
-     */
-    webhook?: WebhookConfig;
     /**
      * Attestation that should be attached
      */
@@ -2304,8 +2419,28 @@ type PresentationConfigCreateDto = {
      * at the application level in the service layer.
      */
     accessKeyChainId?: string;
+    /**
+     * Enable reader authentication for the ISO 18013-7 Annex C (DC API) flow.
+     *
+     * When `true`, the DeviceRequest embeds a detached `readerAuth` COSE_Sign1
+     * signed with the tenant's Access key chain (selected by
+     * {@link accessKeyChainId}), letting the wallet cryptographically
+     * authenticate the verifier — the mDOC equivalent of the signed request
+     * object used in the OID4VP flow. Defaults to disabled (null/false).
+     *
+     * Only affects `response_type: "iso-18013-7"` offers.
+     */
+    readerAuth?: boolean;
 };
 type PresentationConfigUpdateDto = {
+    /**
+     * Clock skew tolerance for credential JWT time validation, in seconds.
+     */
+    skewSeconds?: number;
+    /**
+     * Status list verification mode for presentations: strict (default), best_effort, or disabled.
+     */
+    statusCheckMode?: 'strict' | 'best_effort' | 'disabled';
     /**
      * Unique identifier for the VP request.
      */
@@ -2318,10 +2453,6 @@ type PresentationConfigUpdateDto = {
      * Lifetime how long the presentation request is valid after creation, in seconds.
      */
     lifeTime?: number;
-    /**
-     * Clock skew tolerance for credential JWT time validation, in seconds.
-     */
-    skewSeconds?: number;
     /**
      * The DCQL query to be used for the VP request.
      */
@@ -2336,13 +2467,6 @@ type PresentationConfigUpdateDto = {
      * Optional: if set, notifications will be sent to this endpoint.
      */
     webhookEndpointId?: string;
-    webhookEndpoint?: WebhookEndpointEntity;
-    /**
-     * Optional webhook URL to receive the response.
-     *
-     * @deprecated
-     */
-    webhook?: WebhookConfig;
     /**
      * Attestation that should be attached
      */
@@ -2362,6 +2486,18 @@ type PresentationConfigUpdateDto = {
      * at the application level in the service layer.
      */
     accessKeyChainId?: string;
+    /**
+     * Enable reader authentication for the ISO 18013-7 Annex C (DC API) flow.
+     *
+     * When `true`, the DeviceRequest embeds a detached `readerAuth` COSE_Sign1
+     * signed with the tenant's Access key chain (selected by
+     * {@link accessKeyChainId}), letting the wallet cryptographically
+     * authenticate the verifier — the mDOC equivalent of the signed request
+     * object used in the OID4VP flow. Defaults to disabled (null/false).
+     *
+     * Only affects `response_type: "iso-18013-7"` offers.
+     */
+    readerAuth?: boolean;
 };
 type RegistrationCertificateDefaults = {
     /**
@@ -2792,225 +2928,262 @@ type KmsProvidersResponseDto = {
      */
     default: string;
 };
-type DbKmsConfigDto = {
-    /**
-     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
-     */
-    id: string;
-    /**
-     * Type of the KMS provider.
-     */
-    type: 'db';
-    /**
-     * Human-readable description of this provider instance.
-     */
-    description?: string;
-};
-type VaultKmsConfigDto = {
-    /**
-     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
-     */
-    id: string;
-    /**
-     * Type of the KMS provider.
-     */
-    type: 'vault';
-    /**
-     * Human-readable description of this provider instance.
-     */
-    description?: string;
-    /**
-     * URL of the HashiCorp Vault instance. Supports ${ENV_VAR} placeholders.
-     */
-    vaultUrl: string;
-    /**
-     * Authentication token for HashiCorp Vault. Supports ${ENV_VAR} placeholders.
-     */
-    vaultToken: string;
-};
-type AwsKmsConfigDto = {
-    /**
-     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
-     */
-    id: string;
-    /**
-     * Type of the KMS provider.
-     */
-    type: 'aws-kms';
-    /**
-     * Human-readable description of this provider instance.
-     */
-    description?: string;
-    /**
-     * AWS region for KMS. Supports ${ENV_VAR} placeholders.
-     */
-    region: string;
-    /**
-     * AWS access key ID. Optional — uses SDK credential chain if not provided. Supports ${ENV_VAR} placeholders.
-     */
-    accessKeyId?: string;
-    /**
-     * AWS secret access key. Optional — uses SDK credential chain if not provided. Supports ${ENV_VAR} placeholders.
-     */
-    secretAccessKey?: string;
-};
-type Pkcs11KmsConfigDto = {
-    /**
-     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
-     */
-    id: string;
-    /**
-     * Type of the KMS provider.
-     */
-    type: 'pkcs11';
-    /**
-     * Human-readable description of this provider instance.
-     */
-    description?: string;
-    /**
-     * Absolute path to the PKCS#11 module library (.so/.dll/.dylib). Supports ${ENV_VAR} placeholders.
-     */
-    library: string;
-    /**
-     * Slot selection. Either the numeric slot index (as a string for ENV interpolation, or a number) or the token label. Supports ${ENV_VAR} placeholders.
-     */
-    slot: {
-        [key: string]: unknown;
-    };
-    /**
-     * User PIN used for C_Login. Supports ${ENV_VAR} placeholders.
-     */
-    pin: string;
-    /**
-     * Open the PKCS#11 session in read-only mode. Defaults to false.
-     */
-    readOnly?: boolean;
-};
-type HttpAuthBaseConfigDto = {
-    /**
-     * Authentication method for the remote KMS service.
-     */
-    type: 'none' | 'bearer' | 'oauth2-client-credentials' | 'mtls';
-};
-type HttpKmsConfigDto = {
-    /**
-     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
-     */
-    id: string;
-    /**
-     * Type of the KMS provider.
-     */
-    type: 'http';
-    /**
-     * Human-readable description of this provider instance.
-     */
-    description?: string;
-    /**
-     * Base URL of the remote KMS microservice (no trailing slash). Supports ${ENV_VAR} placeholders.
-     */
-    baseUrl: string;
-    /**
-     * Authentication method for the remote KMS service. Supports bearer token, OAuth 2.0 client credentials, and mutual TLS. Omit (or set type to "none") for unauthenticated services.
-     */
-    auth?: HttpAuthBaseConfigDto;
-    /**
-     * Path prefix for key endpoints on the remote service. Defaults to /keys.
-     */
-    keysPath?: string;
-    /**
-     * Path for the health check endpoint on the remote service. Defaults to /health.
-     */
-    healthPath?: string;
-    /**
-     * Whether the remote service supports key import via POST {keysPath}/{kid}/import. Defaults to false.
-     */
-    canImport?: boolean;
-};
-type CscAuthorizeAuthDataDto = {
-    /**
-     * Authentication factor identifier expected by the CSC provider (e.g., PIN, OTP).
-     */
-    id: string;
-    /**
-     * Authentication factor value sent to CSC credentials/authorize.
-     */
-    value: string;
-};
-type CscKmsConfigDto = {
-    /**
-     * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
-     */
-    id: string;
-    /**
-     * Type of the KMS provider.
-     */
-    type: 'csc';
-    /**
-     * Human-readable description of this provider instance.
-     */
-    description?: string;
-    /**
-     * Base URL of the CSC service (without trailing slash). Supports ${ENV_VAR} placeholders.
-     */
-    baseUrl: string;
-    /**
-     * OAuth2 token endpoint URL for client-credentials flow. Supports ${ENV_VAR} placeholders.
-     */
-    tokenUrl: string;
-    /**
-     * OAuth2 client ID. Supports ${ENV_VAR} placeholders.
-     */
-    clientId: string;
-    /**
-     * OAuth2 client secret. Supports ${ENV_VAR} placeholders.
-     */
-    clientSecret: string;
-    /**
-     * OAuth2 scope to request during token acquisition.
-     */
-    scope?: string;
-    /**
-     * Default CSC credential ID. If omitted, the adapter calls credentials/list and picks the first entry.
-     */
-    credentialId?: string;
-    /**
-     * Optional CSC user ID used in credentials/list requests.
-     */
-    userId?: string;
-    /**
-     * CSC API path prefix appended to baseUrl. Defaults to /csc/v2.
-     */
-    apiPath?: string;
-    /**
-     * Hash algorithm OID for signatures/signHash and credentials/authorize. Defaults to SHA-256 OID.
-     */
-    hashAlgorithmOid?: string;
-    /**
-     * Signature algorithm OID for signatures/signHash. Defaults to ecdsa-with-SHA256 OID.
-     */
-    signAlgorithmOid?: string;
-    /**
-     * Static SAD token. If set, the adapter sends it directly in signatures/signHash requests.
-     */
-    sad?: string;
-    /**
-     * When true and no static SAD is provided, the adapter calls credentials/authorize to obtain SAD before signatures/signHash.
-     */
-    useAuthorizeEndpoint?: boolean;
-    /**
-     * Optional authData array passed to credentials/authorize (e.g., PIN/OTP factors).
-     */
-    authorizeAuthData?: Array<CscAuthorizeAuthDataDto>;
-};
 type KmsConfigDto = {
     /**
      * ID of the default KMS provider. Defaults to "db" if not set.
      */
-    defaultProvider?: string;
+    defaultProvider?: string | string;
     /**
      * List of KMS provider configurations. Each provider must have a unique id and a type.
      */
-    providers: Array<DbKmsConfigDto | VaultKmsConfigDto | AwsKmsConfigDto | Pkcs11KmsConfigDto | HttpKmsConfigDto | CscKmsConfigDto>;
+    providers: Array<{
+        /**
+         * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+         */
+        id: string | string;
+        /**
+         * Type of the KMS provider.
+         */
+        type: 'db';
+        /**
+         * Human-readable description of this provider instance.
+         */
+        description?: string | string;
+    } | {
+        /**
+         * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+         */
+        id: string | string;
+        /**
+         * Type of the KMS provider.
+         */
+        type: 'vault';
+        /**
+         * Human-readable description of this provider instance.
+         */
+        description?: string | string;
+        /**
+         * URL of the HashiCorp Vault instance. Supports ${ENV_VAR} placeholders.
+         */
+        vaultUrl: string | string;
+        /**
+         * Authentication token for HashiCorp Vault. Supports ${ENV_VAR} placeholders.
+         */
+        vaultToken: string | string;
+    } | {
+        /**
+         * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+         */
+        id: string | string;
+        /**
+         * Type of the KMS provider.
+         */
+        type: 'aws-kms';
+        /**
+         * Human-readable description of this provider instance.
+         */
+        description?: string | string;
+        /**
+         * AWS region for KMS. Supports ${ENV_VAR} placeholders.
+         */
+        region: string | string;
+        /**
+         * AWS access key ID. Optional — uses SDK credential chain if not provided. Supports ${ENV_VAR} placeholders.
+         */
+        accessKeyId?: string | string;
+        /**
+         * AWS secret access key. Optional — uses SDK credential chain if not provided. Supports ${ENV_VAR} placeholders.
+         */
+        secretAccessKey?: string | string;
+    } | {
+        /**
+         * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+         */
+        id: string | string;
+        /**
+         * Type of the KMS provider.
+         */
+        type: 'pkcs11';
+        /**
+         * Human-readable description of this provider instance.
+         */
+        description?: string | string;
+        /**
+         * Absolute path to the PKCS#11 module library (.so/.dll/.dylib). Supports ${ENV_VAR} placeholders.
+         */
+        library: string | string;
+        /**
+         * Slot selection. Either the numeric slot index (as a string for ENV interpolation, or a number) or the token label. Supports ${ENV_VAR} placeholders.
+         */
+        slot: number | string;
+        /**
+         * User PIN used for C_Login. Supports ${ENV_VAR} placeholders.
+         */
+        pin: string | string;
+        /**
+         * Open the PKCS#11 session in read-only mode. Defaults to false.
+         */
+        readOnly?: boolean;
+    } | {
+        /**
+         * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+         */
+        id: string | string;
+        /**
+         * Type of the KMS provider.
+         */
+        type: 'http';
+        /**
+         * Human-readable description of this provider instance.
+         */
+        description?: string | string;
+        /**
+         * Base URL of the remote KMS microservice (no trailing slash). Supports ${ENV_VAR} placeholders.
+         */
+        baseUrl: string | string;
+        /**
+         * Authentication method for the remote KMS service. Supports bearer token, OAuth 2.0 client credentials, and mutual TLS. Omit (or set type to "none") for unauthenticated services.
+         */
+        auth?: {
+            /**
+             * No authentication — suitable for services on a trusted private network.
+             */
+            type: 'none';
+        } | {
+            /**
+             * Static Bearer token sent as Authorization: Bearer <token>.
+             */
+            type: 'bearer';
+            /**
+             * Bearer token value. Supports ${ENV_VAR} placeholders.
+             */
+            token: string | string;
+        } | {
+            /**
+             * OAuth 2.0 Client Credentials — EUDIPLO fetches and caches short-lived tokens.
+             */
+            type: 'oauth2-client-credentials';
+            /**
+             * Token endpoint URL (e.g. Keycloak, Entra ID). Supports ${ENV_VAR} placeholders.
+             */
+            tokenUrl: string | string;
+            /**
+             * OAuth 2.0 client ID. Supports ${ENV_VAR} placeholders.
+             */
+            clientId: string | string;
+            /**
+             * OAuth 2.0 client secret. Supports ${ENV_VAR} placeholders.
+             */
+            clientSecret: string | string;
+            /**
+             * Space-separated list of OAuth 2.0 scopes to request. Optional.
+             */
+            scope?: string | string;
+        } | {
+            /**
+             * Mutual TLS — EUDIPLO presents a client certificate on every connection.
+             */
+            type: 'mtls';
+            /**
+             * Absolute path to the PEM-encoded client certificate file. Supports ${ENV_VAR} placeholders.
+             */
+            certFile: string | string;
+            /**
+             * Absolute path to the PEM-encoded private key file for the client certificate. Supports ${ENV_VAR} placeholders.
+             */
+            keyFile: string | string;
+            /**
+             * Absolute path to the PEM-encoded CA bundle to trust for the remote server's certificate. Omit to use the system CA store.
+             */
+            caFile?: string | string;
+        };
+        /**
+         * Path prefix for key endpoints on the remote service. Defaults to /keys.
+         */
+        keysPath?: string | string;
+        /**
+         * Path for the health check endpoint on the remote service. Defaults to /health.
+         */
+        healthPath?: string | string;
+        /**
+         * Whether the remote service supports key import via POST {keysPath}/{kid}/import. Defaults to false.
+         */
+        canImport?: boolean;
+    } | {
+        /**
+         * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
+         */
+        id: string | string;
+        /**
+         * Type of the KMS provider.
+         */
+        type: 'csc';
+        /**
+         * Human-readable description of this provider instance.
+         */
+        description?: string | string;
+        /**
+         * Base URL of the CSC service (without trailing slash). Supports ${ENV_VAR} placeholders.
+         */
+        baseUrl: string | string;
+        /**
+         * OAuth2 token endpoint URL for client-credentials flow. Supports ${ENV_VAR} placeholders.
+         */
+        tokenUrl: string | string;
+        /**
+         * OAuth2 client ID. Supports ${ENV_VAR} placeholders.
+         */
+        clientId: string | string;
+        /**
+         * OAuth2 client secret. Supports ${ENV_VAR} placeholders.
+         */
+        clientSecret: string | string;
+        /**
+         * OAuth2 scope to request during token acquisition.
+         */
+        scope?: string | string;
+        /**
+         * Default CSC credential ID. If omitted, the adapter calls credentials/list and picks the first entry.
+         */
+        credentialId?: string | string;
+        /**
+         * Optional CSC user ID used in credentials/list requests.
+         */
+        userId?: string | string;
+        /**
+         * CSC API path prefix appended to baseUrl. Defaults to /csc/v2.
+         */
+        apiPath?: string | string;
+        /**
+         * Hash algorithm OID for signatures/signHash and credentials/authorize. Defaults to SHA-256 OID.
+         */
+        hashAlgorithmOid?: string | string;
+        /**
+         * Signature algorithm OID for signatures/signHash. Defaults to ecdsa-with-SHA256 OID.
+         */
+        signAlgorithmOid?: string | string;
+        /**
+         * Static SAD token. If set, the adapter sends it directly in signatures/signHash requests.
+         */
+        sad?: string | string;
+        /**
+         * When true and no static SAD is provided, the adapter calls credentials/authorize to obtain SAD before signatures/signHash.
+         */
+        useAuthorizeEndpoint?: boolean;
+        /**
+         * Optional authData array passed to credentials/authorize (e.g., PIN/OTP factors).
+         */
+        authorizeAuthData?: Array<{
+            /**
+             * Authentication factor identifier expected by the CSC provider (e.g., PIN, OTP).
+             */
+            id: string | string;
+            /**
+             * Authentication factor value sent to CSC credentials/authorize.
+             */
+            value: string | string;
+        }>;
+    }>;
 };
 type KmsTenantConfigResponseDto = {
     /**
@@ -3263,7 +3436,7 @@ type EcJwk = {
 };
 type RotationPolicyImportDto = {
     /**
-     * Whether rotation is enabled. When true, the imported key becomes a root CA.
+     * Whether rotation is enabled. When true, the imported key becomes a root CA signer.
      */
     enabled: boolean;
     /**
@@ -3293,7 +3466,7 @@ type KeyChainImportDto = {
      */
     usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
     /**
-     * Certificate chain (leaf first). Each entry may be PEM or base64-encoded DER; values are normalized to PEM during import.
+     * Certificate chain (leaf first). Each entry may be PEM or base64-encoded DER; values are normalized to PEM during import. When rotationPolicy.enabled=true, the last certificate in the chain is treated as the root CA certificate.
      */
     crt?: Array<string>;
     /**
@@ -3301,7 +3474,7 @@ type KeyChainImportDto = {
      */
     kmsProvider?: string;
     /**
-     * Rotation policy. When enabled, the imported key becomes a root CA and a new leaf key is generated.
+     * Rotation policy. When enabled, the imported key becomes a root CA signer and a new leaf key is generated. If crt is provided, the selected root CA certificate must have CA=true and its public key must match the imported private key.
      */
     rotationPolicy?: RotationPolicyImportDto;
 };
@@ -3372,6 +3545,11 @@ type FileUploadDto = {
     file: Blob | File;
 };
 type IssuanceConfigWritable = {
+    /**
+     * Trust lists containing trusted wallet providers.
+     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     */
+    walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -3421,12 +3599,6 @@ type IssuanceConfigWritable = {
      * Default value is false.
      */
     walletAttestationRequired?: boolean;
-    /**
-     * URLs of trust lists containing trusted wallet providers.
-     * The wallet attestation's X.509 certificate will be validated against these trust lists.
-     * If empty and walletAttestationRequired is true, all wallet providers are rejected.
-     */
-    walletProviderTrustLists?: Array<string>;
     display: Array<DisplayInfo>;
     /**
      * The timestamp when the VP request was created.
@@ -3438,6 +3610,11 @@ type IssuanceConfigWritable = {
     updatedAt: string;
 };
 type UpdateIssuanceDtoWritable = {
+    /**
+     * Trust lists containing trusted wallet providers.
+     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     */
+    walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -3483,15 +3660,17 @@ type UpdateIssuanceDtoWritable = {
      * Default value is false.
      */
     walletAttestationRequired?: boolean;
-    /**
-     * URLs of trust lists containing trusted wallet providers.
-     * The wallet attestation's X.509 certificate will be validated against these trust lists.
-     * If empty and walletAttestationRequired is true, all wallet providers are rejected.
-     */
-    walletProviderTrustLists?: Array<string>;
     display?: Array<DisplayInfo>;
 };
 type PresentationConfigWritable = {
+    /**
+     * Clock skew tolerance for credential JWT time validation, in seconds.
+     */
+    skewSeconds?: number;
+    /**
+     * Status list verification mode for presentations: strict (default), best_effort, or disabled.
+     */
+    statusCheckMode?: 'strict' | 'best_effort' | 'disabled';
     /**
      * Unique identifier for the VP request.
      */
@@ -3522,13 +3701,6 @@ type PresentationConfigWritable = {
      * Optional: if set, notifications will be sent to this endpoint.
      */
     webhookEndpointId?: string;
-    webhookEndpoint?: WebhookEndpointEntity;
-    /**
-     * Optional webhook URL to receive the response.
-     *
-     * @deprecated
-     */
-    webhook?: WebhookConfig;
     /**
      * The timestamp when the VP request was created.
      */
@@ -3556,6 +3728,18 @@ type PresentationConfigWritable = {
      * at the application level in the service layer.
      */
     accessKeyChainId?: string;
+    /**
+     * Enable reader authentication for the ISO 18013-7 Annex C (DC API) flow.
+     *
+     * When `true`, the DeviceRequest embeds a detached `readerAuth` COSE_Sign1
+     * signed with the tenant's Access key chain (selected by
+     * {@link accessKeyChainId}), letting the wallet cryptographically
+     * authenticate the verifier — the mDOC equivalent of the signed request
+     * object used in the OID4VP flow. Defaults to disabled (null/false).
+     *
+     * Only affects `response_type: "iso-18013-7"` offers.
+     */
+    readerAuth?: boolean;
 };
 type ObjectWritable = {
     [key: string]: unknown;
@@ -4111,8 +4295,9 @@ type IssuanceConfigControllerReissueRegistrationCertificateResponses = {
     /**
      * Updated issuance configuration
      */
-    201: unknown;
+    201: IssuanceConfig;
 };
+type IssuanceConfigControllerReissueRegistrationCertificateResponse = IssuanceConfigControllerReissueRegistrationCertificateResponses[keyof IssuanceConfigControllerReissueRegistrationCertificateResponses];
 type CredentialConfigControllerGetConfigsData = {
     body?: never;
     path?: never;
@@ -5337,4 +5522,4 @@ type StorageControllerUploadResponses = {
 };
 type StorageControllerUploadResponse = StorageControllerUploadResponses[keyof StorageControllerUploadResponses];
 
-export type { ChainedAsErrorResponseDto as $, AccessCertificateRefDto as A, AuthControllerGetOAuth2TokenData as B, ClientOptions as C, AuthControllerGetOAuth2TokenErrors as D, AuthControllerGetOAuth2TokenResponse as E, AuthControllerGetOAuth2TokenResponses as F, AuthenticationMethodAuth as G, AuthenticationMethodNone as H, AuthenticationMethodPresentation as I, AuthenticationUrlConfig as J, AuthorizationResponse as K, AuthorizeQueries as L, AwsKmsConfigDto as M, BuiltInAuthorizationServerConfig as N, CacheControllerClearAllCachesData as O, CacheControllerClearAllCachesResponse as P, CacheControllerClearAllCachesResponses as Q, CacheControllerClearStatusListCacheData as R, Session as S, CacheControllerClearStatusListCacheResponse as T, CacheControllerClearStatusListCacheResponses as U, CacheControllerClearTrustListCacheData as V, CacheControllerClearTrustListCacheResponse as W, CacheControllerClearTrustListCacheResponses as X, CacheControllerGetStatsData as Y, CacheControllerGetStatsResponses as Z, CertificateInfoDto as _, AllowListPolicy as a, CredentialConfigControllerGetConfigsResponse as a$, ChainedAsParResponseDto as a0, ChainedAsTokenConfig as a1, ChainedAsTokenRequestDto as a2, ChainedAsTokenResponseDto as a3, ChainedAsVpControllerAuthorizeData as a4, ChainedAsVpControllerAuthorizeError as a5, ChainedAsVpControllerAuthorizeErrors as a6, ChainedAsVpControllerParData as a7, ChainedAsVpControllerParError as a8, ChainedAsVpControllerParErrors as a9, ClientControllerGetClientsResponses as aA, ClientControllerRotateClientSecretData as aB, ClientControllerRotateClientSecretResponse as aC, ClientControllerRotateClientSecretResponses as aD, ClientControllerUpdateClientData as aE, ClientControllerUpdateClientResponse as aF, ClientControllerUpdateClientResponses as aG, ClientCredentialsDto as aH, ClientEntity as aI, ClientSecretResponseDto as aJ, CompleteDeferredDto as aK, CreateAccessCertificateDto as aL, CreateAttributeProviderDto as aM, CreateClientDto as aN, CreateRegistrarConfigDto as aO, CreateStatusListDto as aP, CreateTenantDto as aQ, CreateUserDto as aR, CreateWebhookEndpointDto as aS, CredentialConfig as aT, CredentialConfigControllerDeleteIssuanceConfigurationData as aU, CredentialConfigControllerDeleteIssuanceConfigurationResponse as aV, CredentialConfigControllerDeleteIssuanceConfigurationResponses as aW, CredentialConfigControllerGetConfigByIdData as aX, CredentialConfigControllerGetConfigByIdResponse as aY, CredentialConfigControllerGetConfigByIdResponses as aZ, CredentialConfigControllerGetConfigsData as a_, ChainedAsVpControllerParResponse as aa, ChainedAsVpControllerParResponses as ab, ChainedAsVpControllerTokenData as ac, ChainedAsVpControllerTokenError as ad, ChainedAsVpControllerTokenErrors as ae, ChainedAsVpControllerTokenResponse as af, ChainedAsVpControllerTokenResponses as ag, ChainedAsVpControllerVpCallbackData as ah, ChainedAsVpControllerVpCallbackError as ai, ChainedAsVpControllerVpCallbackErrors as aj, ChainedAuthorizationServerConfig as ak, ClaimFieldDefinitionDto as al, ClaimsQuery as am, ClientControllerCreateClientData as an, ClientControllerCreateClientResponse as ao, ClientControllerCreateClientResponses as ap, ClientControllerDeleteClientData as aq, ClientControllerDeleteClientResponses as ar, ClientControllerGetClientData as as, ClientControllerGetClientResponse as at, ClientControllerGetClientResponses as au, ClientControllerGetClientSecretData as av, ClientControllerGetClientSecretResponse as aw, ClientControllerGetClientSecretResponses as ax, ClientControllerGetClientsData as ay, ClientControllerGetClientsResponse as az, ApiKeyConfig as b, IssuanceConfigControllerStoreIssuanceConfigurationData as b$, CredentialConfigControllerGetConfigsResponses as b0, CredentialConfigControllerStoreCredentialConfigurationData as b1, CredentialConfigControllerStoreCredentialConfigurationResponse as b2, CredentialConfigControllerStoreCredentialConfigurationResponses as b3, CredentialConfigControllerUpdateCredentialConfigurationData as b4, CredentialConfigControllerUpdateCredentialConfigurationResponse as b5, CredentialConfigControllerUpdateCredentialConfigurationResponses as b6, CredentialConfigCreate as b7, CredentialConfigUpdate as b8, CredentialOfferControllerGetOfferData as b9, ExportEcJwk as bA, ExportRotationPolicyDto as bB, ExternalAuthorizationServerConfig as bC, ExternalTrustListEntity as bD, FailDeferredDto as bE, FederationConfig as bF, FederationTrustAnchorConfig as bG, FieldDisplayDto as bH, FileUploadDto as bI, FrontendConfigResponseDto as bJ, GrafanaConfigDto as bK, HttpAuthBaseConfigDto as bL, HttpKmsConfigDto as bM, IaeActionOpenid4VpPresentation as bN, IaeActionRedirectToWeb as bO, ImportTenantDto as bP, InteractiveAuthorizationCodeResponseDto as bQ, InteractiveAuthorizationErrorResponseDto as bR, InteractiveAuthorizationRequestDto as bS, InternalTrustListEntity as bT, IssuanceConfig as bU, IssuanceConfigControllerGetIssuanceConfigurationsData as bV, IssuanceConfigControllerGetIssuanceConfigurationsResponse as bW, IssuanceConfigControllerGetIssuanceConfigurationsResponses as bX, IssuanceConfigControllerReissueRegistrationCertificateData as bY, IssuanceConfigControllerReissueRegistrationCertificateErrors as bZ, IssuanceConfigControllerReissueRegistrationCertificateResponses as b_, CredentialOfferControllerGetOfferResponse as ba, CredentialOfferControllerGetOfferResponses as bb, CredentialQuery as bc, CredentialSetQuery as bd, CscAuthorizeAuthDataDto as be, CscKmsConfigDto as bf, DbKmsConfigDto as bg, Dcql as bh, DeferredControllerCompleteDeferredData as bi, DeferredControllerCompleteDeferredErrors as bj, DeferredControllerCompleteDeferredResponse as bk, DeferredControllerCompleteDeferredResponses as bl, DeferredControllerFailDeferredData as bm, DeferredControllerFailDeferredErrors as bn, DeferredControllerFailDeferredResponse as bo, DeferredControllerFailDeferredResponses as bp, DeferredCredentialRequestDto as bq, DeferredOperationResponse as br, DeprecateSchemaMetadataDto as bs, Display as bt, DisplayImage as bu, DisplayInfo as bv, DisplayLogo as bw, EcJwk as bx, EcPublic as by, EmbeddedDisclosurePolicy as bz, AppControllerGetFrontendConfigData as c, ObjectWritable as c$, IssuanceConfigControllerStoreIssuanceConfigurationResponse as c0, IssuanceConfigControllerStoreIssuanceConfigurationResponses as c1, IssuanceConfigWritable as c2, IssuerMetadataCredentialConfig as c3, IssuerOfferEntryDto as c4, IssuerRegistrationCertificateCache as c5, IssuerRegistrationCertificateConfig as c6, JwksResponseDto as c7, KeyAttestationsRequired as c8, KeyChainControllerCreateData as c9, KeyChainControllerImportResponses as cA, KeyChainControllerRotateData as cB, KeyChainControllerRotateErrors as cC, KeyChainControllerRotateResponses as cD, KeyChainControllerUpdateData as cE, KeyChainControllerUpdateErrors as cF, KeyChainControllerUpdateResponses as cG, KeyChainControllerUpdateTenantKmsConfigData as cH, KeyChainControllerUpdateTenantKmsConfigResponse as cI, KeyChainControllerUpdateTenantKmsConfigResponses as cJ, KeyChainCreateDto as cK, KeyChainEntity as cL, KeyChainExportDto as cM, KeyChainImportDto as cN, KeyChainResponseDto as cO, KeyChainUpdateDto as cP, KmsConfigDto as cQ, KmsProviderCapabilitiesDto as cR, KmsProviderInfoDto as cS, KmsProvidersResponseDto as cT, KmsTenantConfigResponseDto as cU, ManagedAuthorizationServerConfig as cV, ManagedUserDto as cW, MetadataSchemaDto as cX, NoneTrustPolicy as cY, NotificationRequestDto as cZ, Object$1 as c_, KeyChainControllerCreateResponses as ca, KeyChainControllerDeleteData as cb, KeyChainControllerDeleteErrors as cc, KeyChainControllerDeleteResponses as cd, KeyChainControllerDeleteTenantKmsConfigData as ce, KeyChainControllerDeleteTenantKmsConfigResponses as cf, KeyChainControllerExportData as cg, KeyChainControllerExportErrors as ch, KeyChainControllerExportResponse as ci, KeyChainControllerExportResponses as cj, KeyChainControllerGetAllData as ck, KeyChainControllerGetAllResponse as cl, KeyChainControllerGetAllResponses as cm, KeyChainControllerGetByIdData as cn, KeyChainControllerGetByIdErrors as co, KeyChainControllerGetByIdResponse as cp, KeyChainControllerGetByIdResponses as cq, KeyChainControllerGetProvidersData as cr, KeyChainControllerGetProvidersHealthData as cs, KeyChainControllerGetProvidersHealthResponses as ct, KeyChainControllerGetProvidersResponse as cu, KeyChainControllerGetProvidersResponses as cv, KeyChainControllerGetTenantKmsConfigData as cw, KeyChainControllerGetTenantKmsConfigResponse as cx, KeyChainControllerGetTenantKmsConfigResponses as cy, KeyChainControllerImportData as cz, AppControllerGetFrontendConfigResponse as d, RegistrarControllerUpdateConfigResponses as d$, OfferRequestDto as d0, OfferResponse as d1, Oid4VpAuthorizationServerConfig as d2, PaginatedSessionResponseDto as d3, ParResponseDto as d4, Pkcs11KmsConfigDto as d5, PolicyCredential as d6, PresentationAttachment as d7, PresentationConfig as d8, PresentationConfigCreateDto as d9, PresentationManagementControllerStorePresentationConfigData as dA, PresentationManagementControllerStorePresentationConfigResponse as dB, PresentationManagementControllerStorePresentationConfigResponses as dC, PresentationManagementControllerUpdateConfigurationData as dD, PresentationManagementControllerUpdateConfigurationResponse as dE, PresentationManagementControllerUpdateConfigurationResponses as dF, PresentationRequest as dG, PublicKeyInfoDto as dH, RegistrarConfigResponseDto as dI, RegistrarControllerCreateAccessCertificateData as dJ, RegistrarControllerCreateAccessCertificateErrors as dK, RegistrarControllerCreateAccessCertificateResponse as dL, RegistrarControllerCreateAccessCertificateResponses as dM, RegistrarControllerCreateConfigData as dN, RegistrarControllerCreateConfigErrors as dO, RegistrarControllerCreateConfigResponse as dP, RegistrarControllerCreateConfigResponses as dQ, RegistrarControllerDeleteConfigData as dR, RegistrarControllerDeleteConfigResponse as dS, RegistrarControllerDeleteConfigResponses as dT, RegistrarControllerGetConfigData as dU, RegistrarControllerGetConfigErrors as dV, RegistrarControllerGetConfigResponse as dW, RegistrarControllerGetConfigResponses as dX, RegistrarControllerUpdateConfigData as dY, RegistrarControllerUpdateConfigErrors as dZ, RegistrarControllerUpdateConfigResponse as d_, PresentationConfigUpdateDto as da, PresentationConfigWritable as db, PresentationDuringIssuanceConfig as dc, PresentationManagementControllerConfigurationData as dd, PresentationManagementControllerConfigurationResponse as de, PresentationManagementControllerConfigurationResponses as df, PresentationManagementControllerDeleteConfigurationData as dg, PresentationManagementControllerDeleteConfigurationResponses as dh, PresentationManagementControllerGetConfigurationData as di, PresentationManagementControllerGetConfigurationResponse as dj, PresentationManagementControllerGetConfigurationResponses as dk, PresentationManagementControllerListSchemaMetadataCatalogData as dl, PresentationManagementControllerListSchemaMetadataCatalogResponses as dm, PresentationManagementControllerReissueRegistrationCertificateData as dn, PresentationManagementControllerReissueRegistrationCertificateErrors as dp, PresentationManagementControllerReissueRegistrationCertificateResponses as dq, PresentationManagementControllerResolveIssuerMetadataData as dr, PresentationManagementControllerResolveIssuerMetadataErrors as ds, PresentationManagementControllerResolveIssuerMetadataResponses as dt, PresentationManagementControllerResolveSchemaMetadataData as du, PresentationManagementControllerResolveSchemaMetadataErrors as dv, PresentationManagementControllerResolveSchemaMetadataJwtData as dw, PresentationManagementControllerResolveSchemaMetadataJwtErrors as dx, PresentationManagementControllerResolveSchemaMetadataJwtResponses as dy, PresentationManagementControllerResolveSchemaMetadataResponses as dz, AppControllerGetFrontendConfigResponses as e, SessionConfigControllerResetConfigResponses as e$, RegistrationCertificateBody as e0, RegistrationCertificateDefaults as e1, RegistrationCertificatePurpose as e2, RegistrationCertificateRequest as e3, ResolveIssuerMetadataDto as e4, ResolveSchemaMetadataDto as e5, ResolveSchemaMetadataJwtDto as e6, RoleDto as e7, RootOfTrustPolicy as e8, RotationPolicyCreateDto as e9, SchemaMetadataControllerGetVersionsResponse as eA, SchemaMetadataControllerGetVersionsResponses as eB, SchemaMetadataControllerGetVocabulariesData as eC, SchemaMetadataControllerGetVocabulariesResponse as eD, SchemaMetadataControllerGetVocabulariesResponses as eE, SchemaMetadataControllerPublishSchemaMetadataData as eF, SchemaMetadataControllerPublishSchemaMetadataErrors as eG, SchemaMetadataControllerPublishSchemaMetadataResponses as eH, SchemaMetadataControllerPublishSchemaMetadataVersionData as eI, SchemaMetadataControllerPublishSchemaMetadataVersionErrors as eJ, SchemaMetadataControllerPublishSchemaMetadataVersionResponses as eK, SchemaMetadataControllerRemoveData as eL, SchemaMetadataControllerRemoveResponses as eM, SchemaMetadataControllerSignSchemaMetaConfigData as eN, SchemaMetadataControllerSignSchemaMetaConfigResponses as eO, SchemaMetadataControllerSignVersionSchemaMetaConfigData as eP, SchemaMetadataControllerSignVersionSchemaMetaConfigResponses as eQ, SchemaMetadataControllerUpdateData as eR, SchemaMetadataControllerUpdateResponse as eS, SchemaMetadataControllerUpdateResponses as eT, SchemaMetadataResponseDto as eU, SchemaMetadataVocabulariesDto as eV, SchemaUriEntry as eW, SessionConfigControllerGetConfigData as eX, SessionConfigControllerGetConfigResponse as eY, SessionConfigControllerGetConfigResponses as eZ, SessionConfigControllerResetConfigData as e_, RotationPolicyImportDto as ea, RotationPolicyResponseDto as eb, RotationPolicyUpdateDto as ec, SchemaMetaConfig as ed, SchemaMetadataControllerDeprecateVersionData as ee, SchemaMetadataControllerDeprecateVersionResponse as ef, SchemaMetadataControllerDeprecateVersionResponses as eg, SchemaMetadataControllerFindAllData as eh, SchemaMetadataControllerFindAllResponse as ei, SchemaMetadataControllerFindAllResponses as ej, SchemaMetadataControllerFindOneData as ek, SchemaMetadataControllerFindOneResponse as el, SchemaMetadataControllerFindOneResponses as em, SchemaMetadataControllerGetJwtData as en, SchemaMetadataControllerGetJwtResponse as eo, SchemaMetadataControllerGetJwtResponses as ep, SchemaMetadataControllerGetLatestData as eq, SchemaMetadataControllerGetLatestResponse as er, SchemaMetadataControllerGetLatestResponses as es, SchemaMetadataControllerGetMineData as et, SchemaMetadataControllerGetMineResponse as eu, SchemaMetadataControllerGetMineResponses as ev, SchemaMetadataControllerGetSchemaData as ew, SchemaMetadataControllerGetSchemaResponse as ex, SchemaMetadataControllerGetSchemaResponses as ey, SchemaMetadataControllerGetVersionsData as ez, AppControllerGetVersionData as f, TenantControllerInitTenantResponse as f$, SessionConfigControllerUpdateConfigData as f0, SessionConfigControllerUpdateConfigResponse as f1, SessionConfigControllerUpdateConfigResponses as f2, SessionControllerDeleteSessionData as f3, SessionControllerDeleteSessionResponses as f4, SessionControllerGetAllSessionsData as f5, SessionControllerGetAllSessionsResponse as f6, SessionControllerGetAllSessionsResponses as f7, SessionControllerGetSessionData as f8, SessionControllerGetSessionLogsData as f9, StatusListManagementControllerCreateListResponses as fA, StatusListManagementControllerDeleteListData as fB, StatusListManagementControllerDeleteListResponse as fC, StatusListManagementControllerDeleteListResponses as fD, StatusListManagementControllerGetListData as fE, StatusListManagementControllerGetListResponse as fF, StatusListManagementControllerGetListResponses as fG, StatusListManagementControllerGetListsData as fH, StatusListManagementControllerGetListsResponse as fI, StatusListManagementControllerGetListsResponses as fJ, StatusListManagementControllerUpdateListData as fK, StatusListManagementControllerUpdateListResponse as fL, StatusListManagementControllerUpdateListResponses as fM, StatusListResponseDto as fN, StatusUpdateDto as fO, StorageControllerUploadData as fP, StorageControllerUploadResponse as fQ, StorageControllerUploadResponses as fR, TenantControllerDeleteTenantData as fS, TenantControllerDeleteTenantResponses as fT, TenantControllerGetTenantData as fU, TenantControllerGetTenantResponse as fV, TenantControllerGetTenantResponses as fW, TenantControllerGetTenantsData as fX, TenantControllerGetTenantsResponse as fY, TenantControllerGetTenantsResponses as fZ, TenantControllerInitTenantData as f_, SessionControllerGetSessionLogsResponse as fa, SessionControllerGetSessionLogsResponses as fb, SessionControllerGetSessionResponse as fc, SessionControllerGetSessionResponses as fd, SessionControllerRevokeAllData as fe, SessionControllerRevokeAllResponses as ff, SessionEventsControllerSubscribeToSessionEventsData as fg, SessionEventsControllerSubscribeToSessionEventsResponses as fh, SessionLogEntryResponseDto as fi, SessionStorageConfig as fj, SignSchemaMetaConfigDto as fk, SignVersionSchemaMetaConfigDto as fl, StatusListAggregationDto as fm, StatusListConfig as fn, StatusListConfigControllerGetConfigData as fo, StatusListConfigControllerGetConfigResponse as fp, StatusListConfigControllerGetConfigResponses as fq, StatusListConfigControllerResetConfigData as fr, StatusListConfigControllerResetConfigResponse as fs, StatusListConfigControllerResetConfigResponses as ft, StatusListConfigControllerUpdateConfigData as fu, StatusListConfigControllerUpdateConfigResponse as fv, StatusListConfigControllerUpdateConfigResponses as fw, StatusListImportDto as fx, StatusListManagementControllerCreateListData as fy, StatusListManagementControllerCreateListResponse as fz, AppControllerGetVersionResponses as g, UserControllerUpdateUserResponse as g$, TenantControllerInitTenantResponses as g0, TenantControllerUpdateTenantData as g1, TenantControllerUpdateTenantResponse as g2, TenantControllerUpdateTenantResponses as g3, TenantEntity as g4, TokenResponse as g5, TransactionData as g6, TrustAuthorityDto as g7, TrustAuthorityEntry as g8, TrustList as g9, TrustedAuthorityQuery as gA, UpdateAttributeProviderDto as gB, UpdateClientDto as gC, UpdateIssuanceDto as gD, UpdateIssuanceDtoWritable as gE, UpdateIssuerOfferDto as gF, UpdateRegistrarConfigDto as gG, UpdateSchemaMetadataDto as gH, UpdateSessionConfigDto as gI, UpdateStatusListConfigDto as gJ, UpdateStatusListDto as gK, UpdateTenantDto as gL, UpdateUserDto as gM, UpdateWebhookEndpointDto as gN, UpstreamOidcConfig as gO, UserControllerCreateUserData as gP, UserControllerCreateUserResponse as gQ, UserControllerCreateUserResponses as gR, UserControllerDeleteUserData as gS, UserControllerDeleteUserResponses as gT, UserControllerGetUserData as gU, UserControllerGetUserResponse as gV, UserControllerGetUserResponses as gW, UserControllerGetUsersData as gX, UserControllerGetUsersResponse as gY, UserControllerGetUsersResponses as gZ, UserControllerUpdateUserData as g_, TrustListControllerCreateTrustListData as ga, TrustListControllerCreateTrustListResponse as gb, TrustListControllerCreateTrustListResponses as gc, TrustListControllerDeleteTrustListData as gd, TrustListControllerDeleteTrustListResponses as ge, TrustListControllerExportTrustListData as gf, TrustListControllerExportTrustListResponse as gg, TrustListControllerExportTrustListResponses as gh, TrustListControllerGetAllTrustListsData as gi, TrustListControllerGetAllTrustListsResponse as gj, TrustListControllerGetAllTrustListsResponses as gk, TrustListControllerGetTrustListData as gl, TrustListControllerGetTrustListResponse as gm, TrustListControllerGetTrustListResponses as gn, TrustListControllerGetTrustListVersionData as go, TrustListControllerGetTrustListVersionResponse as gp, TrustListControllerGetTrustListVersionResponses as gq, TrustListControllerGetTrustListVersionsData as gr, TrustListControllerGetTrustListVersionsResponse as gs, TrustListControllerGetTrustListVersionsResponses as gt, TrustListControllerUpdateTrustListData as gu, TrustListControllerUpdateTrustListResponse as gv, TrustListControllerUpdateTrustListResponses as gw, TrustListCreateDto as gx, TrustListEntityInfo as gy, TrustListVersion as gz, AttestationBasedPolicy as h, UserControllerUpdateUserResponses as h0, VaultKmsConfigDto as h1, Vct as h2, VerifierOfferControllerGetOfferData as h3, VerifierOfferControllerGetOfferResponse as h4, VerifierOfferControllerGetOfferResponses as h5, VocabularyEntryDto as h6, WebHookAuthConfigHeader as h7, WebHookAuthConfigNone as h8, WebhookConfig as h9, WebhookEndpointControllerCreateData as ha, WebhookEndpointControllerCreateResponses as hb, WebhookEndpointControllerDeleteData as hc, WebhookEndpointControllerDeleteErrors as hd, WebhookEndpointControllerDeleteResponses as he, WebhookEndpointControllerGetAllData as hf, WebhookEndpointControllerGetAllResponse as hg, WebhookEndpointControllerGetAllResponses as hh, WebhookEndpointControllerGetByIdData as hi, WebhookEndpointControllerGetByIdErrors as hj, WebhookEndpointControllerGetByIdResponses as hk, WebhookEndpointControllerUpdateData as hl, WebhookEndpointControllerUpdateErrors as hm, WebhookEndpointControllerUpdateResponses as hn, WebhookEndpointEntity as ho, AttributeProviderControllerCreateData as i, AttributeProviderControllerCreateResponses as j, AttributeProviderControllerDeleteData as k, AttributeProviderControllerDeleteErrors as l, AttributeProviderControllerDeleteResponses as m, AttributeProviderControllerGetAllData as n, AttributeProviderControllerGetAllResponses as o, AttributeProviderControllerGetByIdData as p, AttributeProviderControllerGetByIdErrors as q, AttributeProviderControllerGetByIdResponses as r, AttributeProviderControllerUpdateData as s, AttributeProviderControllerUpdateErrors as t, AttributeProviderControllerUpdateResponses as u, AttributeProviderEntity as v, AuditLogControllerGetAuditLogsData as w, AuditLogControllerGetAuditLogsResponse as x, AuditLogControllerGetAuditLogsResponses as y, AuditLogResponseDto as z };
+export type { ChainedAsParResponseDto as $, AccessCertificateRefDto as A, AuthControllerGetOAuth2TokenData as B, ClientOptions as C, AuthControllerGetOAuth2TokenErrors as D, AuthControllerGetOAuth2TokenResponse as E, AuthControllerGetOAuth2TokenResponses as F, AuthenticationMethodAuth as G, AuthenticationMethodNone as H, AuthenticationMethodPresentation as I, AuthenticationUrlConfig as J, AuthorizationResponse as K, AuthorizeQueries as L, BuiltInAuthorizationServerConfig as M, CacheControllerClearAllCachesData as N, CacheControllerClearAllCachesResponse as O, CacheControllerClearAllCachesResponses as P, CacheControllerClearStatusListCacheData as Q, CacheControllerClearStatusListCacheResponse as R, Session as S, CacheControllerClearStatusListCacheResponses as T, CacheControllerClearTrustListCacheData as U, CacheControllerClearTrustListCacheResponse as V, CacheControllerClearTrustListCacheResponses as W, CacheControllerGetStatsData as X, CacheControllerGetStatsResponses as Y, CertificateInfoDto as Z, ChainedAsErrorResponseDto as _, AllowListPolicy as a, CredentialConfigControllerGetConfigsResponses as a$, ChainedAsTokenConfig as a0, ChainedAsTokenRequestDto as a1, ChainedAsTokenResponseDto as a2, ChainedAsVpControllerAuthorizeData as a3, ChainedAsVpControllerAuthorizeError as a4, ChainedAsVpControllerAuthorizeErrors as a5, ChainedAsVpControllerParData as a6, ChainedAsVpControllerParError as a7, ChainedAsVpControllerParErrors as a8, ChainedAsVpControllerParResponse as a9, ClientControllerRotateClientSecretData as aA, ClientControllerRotateClientSecretResponse as aB, ClientControllerRotateClientSecretResponses as aC, ClientControllerUpdateClientData as aD, ClientControllerUpdateClientResponse as aE, ClientControllerUpdateClientResponses as aF, ClientCredentialsDto as aG, ClientEntity as aH, ClientSecretResponseDto as aI, CompleteDeferredDto as aJ, CreateAccessCertificateDto as aK, CreateAttributeProviderDto as aL, CreateClientDto as aM, CreateRegistrarConfigDto as aN, CreateStatusListDto as aO, CreateTenantDto as aP, CreateUserDto as aQ, CreateWebhookEndpointDto as aR, CredentialConfig as aS, CredentialConfigControllerDeleteIssuanceConfigurationData as aT, CredentialConfigControllerDeleteIssuanceConfigurationResponse as aU, CredentialConfigControllerDeleteIssuanceConfigurationResponses as aV, CredentialConfigControllerGetConfigByIdData as aW, CredentialConfigControllerGetConfigByIdResponse as aX, CredentialConfigControllerGetConfigByIdResponses as aY, CredentialConfigControllerGetConfigsData as aZ, CredentialConfigControllerGetConfigsResponse as a_, ChainedAsVpControllerParResponses as aa, ChainedAsVpControllerTokenData as ab, ChainedAsVpControllerTokenError as ac, ChainedAsVpControllerTokenErrors as ad, ChainedAsVpControllerTokenResponse as ae, ChainedAsVpControllerTokenResponses as af, ChainedAsVpControllerVpCallbackData as ag, ChainedAsVpControllerVpCallbackError as ah, ChainedAsVpControllerVpCallbackErrors as ai, ChainedAuthorizationServerConfig as aj, ClaimFieldDefinitionDto as ak, ClaimsQuery as al, ClientControllerCreateClientData as am, ClientControllerCreateClientResponse as an, ClientControllerCreateClientResponses as ao, ClientControllerDeleteClientData as ap, ClientControllerDeleteClientResponses as aq, ClientControllerGetClientData as ar, ClientControllerGetClientResponse as as, ClientControllerGetClientResponses as at, ClientControllerGetClientSecretData as au, ClientControllerGetClientSecretResponse as av, ClientControllerGetClientSecretResponses as aw, ClientControllerGetClientsData as ax, ClientControllerGetClientsResponse as ay, ClientControllerGetClientsResponses as az, ApiKeyConfig as b, IssuanceConfigWritable as b$, CredentialConfigControllerStoreCredentialConfigurationData as b0, CredentialConfigControllerStoreCredentialConfigurationResponse as b1, CredentialConfigControllerStoreCredentialConfigurationResponses as b2, CredentialConfigControllerUpdateCredentialConfigurationData as b3, CredentialConfigControllerUpdateCredentialConfigurationResponse as b4, CredentialConfigControllerUpdateCredentialConfigurationResponses as b5, CredentialConfigCreate as b6, CredentialConfigUpdate as b7, CredentialOfferControllerGetOfferData as b8, CredentialOfferControllerGetOfferResponse as b9, ExternalAuthorizationServerConfig as bA, ExternalTrustListEntity as bB, FailDeferredDto as bC, FederationConfig as bD, FederationTrustAnchorConfig as bE, FieldDisplayDto as bF, FileUploadDto as bG, FrontendConfigResponseDto as bH, GrafanaConfigDto as bI, IaeActionOpenid4VpPresentation as bJ, IaeActionRedirectToWeb as bK, ImportTenantDto as bL, InteractiveAuthorizationCodeResponseDto as bM, InteractiveAuthorizationErrorResponseDto as bN, InteractiveAuthorizationRequestDto as bO, InternalTrustListEntity as bP, IssuanceConfig as bQ, IssuanceConfigControllerGetIssuanceConfigurationsData as bR, IssuanceConfigControllerGetIssuanceConfigurationsResponse as bS, IssuanceConfigControllerGetIssuanceConfigurationsResponses as bT, IssuanceConfigControllerReissueRegistrationCertificateData as bU, IssuanceConfigControllerReissueRegistrationCertificateErrors as bV, IssuanceConfigControllerReissueRegistrationCertificateResponse as bW, IssuanceConfigControllerReissueRegistrationCertificateResponses as bX, IssuanceConfigControllerStoreIssuanceConfigurationData as bY, IssuanceConfigControllerStoreIssuanceConfigurationResponse as bZ, IssuanceConfigControllerStoreIssuanceConfigurationResponses as b_, CredentialOfferControllerGetOfferResponses as ba, CredentialQueryDcSdJwt as bb, CredentialQueryMsoMdoc as bc, CredentialSetQuery as bd, DcSdJwtCredentialQueryMeta as be, Dcql as bf, DeferredControllerCompleteDeferredData as bg, DeferredControllerCompleteDeferredErrors as bh, DeferredControllerCompleteDeferredResponse as bi, DeferredControllerCompleteDeferredResponses as bj, DeferredControllerFailDeferredData as bk, DeferredControllerFailDeferredErrors as bl, DeferredControllerFailDeferredResponse as bm, DeferredControllerFailDeferredResponses as bn, DeferredCredentialRequestDto as bo, DeferredOperationResponse as bp, DeprecateSchemaMetadataDto as bq, Display as br, DisplayImage as bs, DisplayInfo as bt, DisplayLogo as bu, EcJwk as bv, EcPublic as bw, EmbeddedDisclosurePolicy as bx, ExportEcJwk as by, ExportRotationPolicyDto as bz, AppControllerGetFrontendConfigData as c, OfferRequestDto as c$, IssuerMetadataCredentialConfig as c0, IssuerOfferEntryDto as c1, IssuerRegistrationCertificateCache as c2, IssuerRegistrationCertificateConfig as c3, JwksResponseDto as c4, KeyAttestationsRequired as c5, KeyChainControllerCreateData as c6, KeyChainControllerCreateResponses as c7, KeyChainControllerDeleteData as c8, KeyChainControllerDeleteErrors as c9, KeyChainControllerRotateResponses as cA, KeyChainControllerUpdateData as cB, KeyChainControllerUpdateErrors as cC, KeyChainControllerUpdateResponses as cD, KeyChainControllerUpdateTenantKmsConfigData as cE, KeyChainControllerUpdateTenantKmsConfigResponse as cF, KeyChainControllerUpdateTenantKmsConfigResponses as cG, KeyChainCreateDto as cH, KeyChainEntity as cI, KeyChainExportDto as cJ, KeyChainImportDto as cK, KeyChainResponseDto as cL, KeyChainUpdateDto as cM, KmsConfigDto as cN, KmsProviderCapabilitiesDto as cO, KmsProviderInfoDto as cP, KmsProvidersResponseDto as cQ, KmsTenantConfigResponseDto as cR, ManagedAuthorizationServerConfig as cS, ManagedUserDto as cT, MetadataSchemaDto as cU, MsoMdocClaimsQuery as cV, MsoMdocCredentialQueryMeta as cW, NoneTrustPolicy as cX, NotificationRequestDto as cY, Object$1 as cZ, ObjectWritable as c_, KeyChainControllerDeleteResponses as ca, KeyChainControllerDeleteTenantKmsConfigData as cb, KeyChainControllerDeleteTenantKmsConfigResponses as cc, KeyChainControllerExportData as cd, KeyChainControllerExportErrors as ce, KeyChainControllerExportResponse as cf, KeyChainControllerExportResponses as cg, KeyChainControllerGetAllData as ch, KeyChainControllerGetAllResponse as ci, KeyChainControllerGetAllResponses as cj, KeyChainControllerGetByIdData as ck, KeyChainControllerGetByIdErrors as cl, KeyChainControllerGetByIdResponse as cm, KeyChainControllerGetByIdResponses as cn, KeyChainControllerGetProvidersData as co, KeyChainControllerGetProvidersHealthData as cp, KeyChainControllerGetProvidersHealthResponses as cq, KeyChainControllerGetProvidersResponse as cr, KeyChainControllerGetProvidersResponses as cs, KeyChainControllerGetTenantKmsConfigData as ct, KeyChainControllerGetTenantKmsConfigResponse as cu, KeyChainControllerGetTenantKmsConfigResponses as cv, KeyChainControllerImportData as cw, KeyChainControllerImportResponses as cx, KeyChainControllerRotateData as cy, KeyChainControllerRotateErrors as cz, AppControllerGetFrontendConfigResponse as d, RegistrationCertificateDefaults as d$, OfferResponse as d0, Oid4VpAuthorizationServerConfig as d1, PaginatedSessionResponseDto as d2, ParResponseDto as d3, PolicyCredential as d4, PresentationAttachment as d5, PresentationConfig as d6, PresentationConfigCreateDto as d7, PresentationConfigUpdateDto as d8, PresentationConfigWritable as d9, PresentationManagementControllerStorePresentationConfigResponses as dA, PresentationManagementControllerUpdateConfigurationData as dB, PresentationManagementControllerUpdateConfigurationResponse as dC, PresentationManagementControllerUpdateConfigurationResponses as dD, PresentationRequest as dE, PublicKeyInfoDto as dF, RegistrarConfigResponseDto as dG, RegistrarControllerCreateAccessCertificateData as dH, RegistrarControllerCreateAccessCertificateErrors as dI, RegistrarControllerCreateAccessCertificateResponse as dJ, RegistrarControllerCreateAccessCertificateResponses as dK, RegistrarControllerCreateConfigData as dL, RegistrarControllerCreateConfigErrors as dM, RegistrarControllerCreateConfigResponse as dN, RegistrarControllerCreateConfigResponses as dO, RegistrarControllerDeleteConfigData as dP, RegistrarControllerDeleteConfigResponse as dQ, RegistrarControllerDeleteConfigResponses as dR, RegistrarControllerGetConfigData as dS, RegistrarControllerGetConfigErrors as dT, RegistrarControllerGetConfigResponse as dU, RegistrarControllerGetConfigResponses as dV, RegistrarControllerUpdateConfigData as dW, RegistrarControllerUpdateConfigErrors as dX, RegistrarControllerUpdateConfigResponse as dY, RegistrarControllerUpdateConfigResponses as dZ, RegistrationCertificateBody as d_, PresentationDuringIssuanceConfig as da, PresentationManagementControllerConfigurationData as db, PresentationManagementControllerConfigurationResponse as dc, PresentationManagementControllerConfigurationResponses as dd, PresentationManagementControllerDeleteConfigurationData as de, PresentationManagementControllerDeleteConfigurationResponses as df, PresentationManagementControllerGetConfigurationData as dg, PresentationManagementControllerGetConfigurationResponse as dh, PresentationManagementControllerGetConfigurationResponses as di, PresentationManagementControllerListSchemaMetadataCatalogData as dj, PresentationManagementControllerListSchemaMetadataCatalogResponses as dk, PresentationManagementControllerReissueRegistrationCertificateData as dl, PresentationManagementControllerReissueRegistrationCertificateErrors as dm, PresentationManagementControllerReissueRegistrationCertificateResponses as dn, PresentationManagementControllerResolveIssuerMetadataData as dp, PresentationManagementControllerResolveIssuerMetadataErrors as dq, PresentationManagementControllerResolveIssuerMetadataResponses as dr, PresentationManagementControllerResolveSchemaMetadataData as ds, PresentationManagementControllerResolveSchemaMetadataErrors as dt, PresentationManagementControllerResolveSchemaMetadataJwtData as du, PresentationManagementControllerResolveSchemaMetadataJwtErrors as dv, PresentationManagementControllerResolveSchemaMetadataJwtResponses as dw, PresentationManagementControllerResolveSchemaMetadataResponses as dx, PresentationManagementControllerStorePresentationConfigData as dy, PresentationManagementControllerStorePresentationConfigResponse as dz, AppControllerGetFrontendConfigResponses as e, SessionConfigControllerUpdateConfigResponse as e$, RegistrationCertificatePurpose as e0, RegistrationCertificateRequest as e1, ResolveIssuerMetadataDto as e2, ResolveSchemaMetadataDto as e3, ResolveSchemaMetadataJwtDto as e4, RoleDto as e5, RootOfTrustPolicy as e6, RotationPolicyCreateDto as e7, RotationPolicyImportDto as e8, RotationPolicyResponseDto as e9, SchemaMetadataControllerGetVocabulariesData as eA, SchemaMetadataControllerGetVocabulariesResponse as eB, SchemaMetadataControllerGetVocabulariesResponses as eC, SchemaMetadataControllerPublishSchemaMetadataData as eD, SchemaMetadataControllerPublishSchemaMetadataErrors as eE, SchemaMetadataControllerPublishSchemaMetadataResponses as eF, SchemaMetadataControllerPublishSchemaMetadataVersionData as eG, SchemaMetadataControllerPublishSchemaMetadataVersionErrors as eH, SchemaMetadataControllerPublishSchemaMetadataVersionResponses as eI, SchemaMetadataControllerRemoveData as eJ, SchemaMetadataControllerRemoveResponses as eK, SchemaMetadataControllerSignSchemaMetaConfigData as eL, SchemaMetadataControllerSignSchemaMetaConfigResponses as eM, SchemaMetadataControllerSignVersionSchemaMetaConfigData as eN, SchemaMetadataControllerSignVersionSchemaMetaConfigResponses as eO, SchemaMetadataControllerUpdateData as eP, SchemaMetadataControllerUpdateResponse as eQ, SchemaMetadataControllerUpdateResponses as eR, SchemaMetadataResponseDto as eS, SchemaMetadataVocabulariesDto as eT, SchemaUriEntry as eU, SessionConfigControllerGetConfigData as eV, SessionConfigControllerGetConfigResponse as eW, SessionConfigControllerGetConfigResponses as eX, SessionConfigControllerResetConfigData as eY, SessionConfigControllerResetConfigResponses as eZ, SessionConfigControllerUpdateConfigData as e_, RotationPolicyUpdateDto as ea, SchemaMetaConfig as eb, SchemaMetadataControllerDeprecateVersionData as ec, SchemaMetadataControllerDeprecateVersionResponse as ed, SchemaMetadataControllerDeprecateVersionResponses as ee, SchemaMetadataControllerFindAllData as ef, SchemaMetadataControllerFindAllResponse as eg, SchemaMetadataControllerFindAllResponses as eh, SchemaMetadataControllerFindOneData as ei, SchemaMetadataControllerFindOneResponse as ej, SchemaMetadataControllerFindOneResponses as ek, SchemaMetadataControllerGetJwtData as el, SchemaMetadataControllerGetJwtResponse as em, SchemaMetadataControllerGetJwtResponses as en, SchemaMetadataControllerGetLatestData as eo, SchemaMetadataControllerGetLatestResponse as ep, SchemaMetadataControllerGetLatestResponses as eq, SchemaMetadataControllerGetMineData as er, SchemaMetadataControllerGetMineResponse as es, SchemaMetadataControllerGetMineResponses as et, SchemaMetadataControllerGetSchemaData as eu, SchemaMetadataControllerGetSchemaResponse as ev, SchemaMetadataControllerGetSchemaResponses as ew, SchemaMetadataControllerGetVersionsData as ex, SchemaMetadataControllerGetVersionsResponse as ey, SchemaMetadataControllerGetVersionsResponses as ez, AppControllerGetVersionData as f, TenantControllerUpdateTenantData as f$, SessionConfigControllerUpdateConfigResponses as f0, SessionControllerDeleteSessionData as f1, SessionControllerDeleteSessionResponses as f2, SessionControllerGetAllSessionsData as f3, SessionControllerGetAllSessionsResponse as f4, SessionControllerGetAllSessionsResponses as f5, SessionControllerGetSessionData as f6, SessionControllerGetSessionLogsData as f7, SessionControllerGetSessionLogsResponse as f8, SessionControllerGetSessionLogsResponses as f9, StatusListManagementControllerDeleteListResponse as fA, StatusListManagementControllerDeleteListResponses as fB, StatusListManagementControllerGetListData as fC, StatusListManagementControllerGetListResponse as fD, StatusListManagementControllerGetListResponses as fE, StatusListManagementControllerGetListsData as fF, StatusListManagementControllerGetListsResponse as fG, StatusListManagementControllerGetListsResponses as fH, StatusListManagementControllerUpdateListData as fI, StatusListManagementControllerUpdateListResponse as fJ, StatusListManagementControllerUpdateListResponses as fK, StatusListResponseDto as fL, StatusUpdateDto as fM, StorageControllerUploadData as fN, StorageControllerUploadResponse as fO, StorageControllerUploadResponses as fP, TenantControllerDeleteTenantData as fQ, TenantControllerDeleteTenantResponses as fR, TenantControllerGetTenantData as fS, TenantControllerGetTenantResponse as fT, TenantControllerGetTenantResponses as fU, TenantControllerGetTenantsData as fV, TenantControllerGetTenantsResponse as fW, TenantControllerGetTenantsResponses as fX, TenantControllerInitTenantData as fY, TenantControllerInitTenantResponse as fZ, TenantControllerInitTenantResponses as f_, SessionControllerGetSessionResponse as fa, SessionControllerGetSessionResponses as fb, SessionControllerRevokeAllData as fc, SessionControllerRevokeAllResponses as fd, SessionEventsControllerSubscribeToSessionEventsData as fe, SessionEventsControllerSubscribeToSessionEventsResponses as ff, SessionLogEntryResponseDto as fg, SessionStorageConfig as fh, SignSchemaMetaConfigDto as fi, SignVersionSchemaMetaConfigDto as fj, StatusListAggregationDto as fk, StatusListConfig as fl, StatusListConfigControllerGetConfigData as fm, StatusListConfigControllerGetConfigResponse as fn, StatusListConfigControllerGetConfigResponses as fo, StatusListConfigControllerResetConfigData as fp, StatusListConfigControllerResetConfigResponse as fq, StatusListConfigControllerResetConfigResponses as fr, StatusListConfigControllerUpdateConfigData as fs, StatusListConfigControllerUpdateConfigResponse as ft, StatusListConfigControllerUpdateConfigResponses as fu, StatusListImportDto as fv, StatusListManagementControllerCreateListData as fw, StatusListManagementControllerCreateListResponse as fx, StatusListManagementControllerCreateListResponses as fy, StatusListManagementControllerDeleteListData as fz, AppControllerGetVersionResponses as g, UserControllerUpdateUserResponse as g$, TenantControllerUpdateTenantResponse as g0, TenantControllerUpdateTenantResponses as g1, TenantEntity as g2, TokenResponse as g3, TransactionData as g4, TrustAuthorityDto as g5, TrustAuthorityEntry as g6, TrustList as g7, TrustListControllerCreateTrustListData as g8, TrustListControllerCreateTrustListResponse as g9, TrustedAuthorityQueryOpenIdFederation as gA, UpdateAttributeProviderDto as gB, UpdateClientDto as gC, UpdateIssuanceDto as gD, UpdateIssuanceDtoWritable as gE, UpdateIssuerOfferDto as gF, UpdateRegistrarConfigDto as gG, UpdateSchemaMetadataDto as gH, UpdateSessionConfigDto as gI, UpdateStatusListConfigDto as gJ, UpdateStatusListDto as gK, UpdateTenantDto as gL, UpdateUserDto as gM, UpdateWebhookEndpointDto as gN, UpstreamOidcConfig as gO, UserControllerCreateUserData as gP, UserControllerCreateUserResponse as gQ, UserControllerCreateUserResponses as gR, UserControllerDeleteUserData as gS, UserControllerDeleteUserResponses as gT, UserControllerGetUserData as gU, UserControllerGetUserResponse as gV, UserControllerGetUserResponses as gW, UserControllerGetUsersData as gX, UserControllerGetUsersResponse as gY, UserControllerGetUsersResponses as gZ, UserControllerUpdateUserData as g_, TrustListControllerCreateTrustListResponses as ga, TrustListControllerDeleteTrustListData as gb, TrustListControllerDeleteTrustListResponses as gc, TrustListControllerExportTrustListData as gd, TrustListControllerExportTrustListResponse as ge, TrustListControllerExportTrustListResponses as gf, TrustListControllerGetAllTrustListsData as gg, TrustListControllerGetAllTrustListsResponse as gh, TrustListControllerGetAllTrustListsResponses as gi, TrustListControllerGetTrustListData as gj, TrustListControllerGetTrustListResponse as gk, TrustListControllerGetTrustListResponses as gl, TrustListControllerGetTrustListVersionData as gm, TrustListControllerGetTrustListVersionResponse as gn, TrustListControllerGetTrustListVersionResponses as go, TrustListControllerGetTrustListVersionsData as gp, TrustListControllerGetTrustListVersionsResponse as gq, TrustListControllerGetTrustListVersionsResponses as gr, TrustListControllerUpdateTrustListData as gs, TrustListControllerUpdateTrustListResponse as gt, TrustListControllerUpdateTrustListResponses as gu, TrustListCreateDto as gv, TrustListEntityInfo as gw, TrustListRef as gx, TrustListVersion as gy, TrustedAuthorityQueryEtsiTl as gz, AttestationBasedPolicy as h, UserControllerUpdateUserResponses as h0, Vct as h1, VerifierOfferControllerGetOfferData as h2, VerifierOfferControllerGetOfferResponse as h3, VerifierOfferControllerGetOfferResponses as h4, VocabularyEntryDto as h5, WalletProviderTrustListRefDto as h6, WebHookAuthConfigHeader as h7, WebHookAuthConfigNone as h8, WebhookConfig as h9, WebhookEndpointControllerCreateData as ha, WebhookEndpointControllerCreateResponses as hb, WebhookEndpointControllerDeleteData as hc, WebhookEndpointControllerDeleteErrors as hd, WebhookEndpointControllerDeleteResponses as he, WebhookEndpointControllerGetAllData as hf, WebhookEndpointControllerGetAllResponse as hg, WebhookEndpointControllerGetAllResponses as hh, WebhookEndpointControllerGetByIdData as hi, WebhookEndpointControllerGetByIdErrors as hj, WebhookEndpointControllerGetByIdResponses as hk, WebhookEndpointControllerUpdateData as hl, WebhookEndpointControllerUpdateErrors as hm, WebhookEndpointControllerUpdateResponses as hn, WebhookEndpointEntity as ho, AttributeProviderControllerCreateData as i, AttributeProviderControllerCreateResponses as j, AttributeProviderControllerDeleteData as k, AttributeProviderControllerDeleteErrors as l, AttributeProviderControllerDeleteResponses as m, AttributeProviderControllerGetAllData as n, AttributeProviderControllerGetAllResponses as o, AttributeProviderControllerGetByIdData as p, AttributeProviderControllerGetByIdErrors as q, AttributeProviderControllerGetByIdResponses as r, AttributeProviderControllerUpdateData as s, AttributeProviderControllerUpdateErrors as t, AttributeProviderControllerUpdateResponses as u, AttributeProviderEntity as v, AuditLogControllerGetAuditLogsData as w, AuditLogControllerGetAuditLogsResponse as x, AuditLogControllerGetAuditLogsResponses as y, AuditLogResponseDto as z };