@eudiplo/sdk-core 9.0.0 → 9.1.0-main.197e266

package/dist/{types.gen-lZIdbe_8.d.mts → types.gen-DgOouMDO.d.mts}

@@ -44,6 +44,10 @@ type FrontendConfigResponseDto = {
      * Active startup configuration import mode
      */
     configImportMode: 'disabled' | 'create' | 'upsert' | 'replace';
+    /**
+     * Public URL of the instance (PUBLIC_URL). Wallets and other verifiers reach the wallet-facing endpoints, such as trust lists, under this URL, which can differ from the URL the client signed in with.
+     */
+    publicUrl: string;
 };
 type RoleDto = {
     /**
@@ -68,7 +72,7 @@ type TokenResponse = {
     /**
      * Token type
      */
-    token_type: string;
+    token_type: 'Bearer';
     /**
      * Access token lifetime in seconds
      */
@@ -191,11 +195,11 @@ type ClientEntity = {
     /**
      * Tenant identifier the client belongs to
      */
-    tenantId?: string;
+    tenantId?: string | null;
     /**
      * Client description
      */
-    description?: string;
+    description?: string | null;
     /**
      * Roles assigned to the client
      */
@@ -225,7 +229,7 @@ type TenantResponseDto = {
     /**
      * Tenant status
      */
-    status: string;
+    status: 'active' | null;
     /**
      * Session storage configuration for this tenant. Controls TTL and cleanup behavior.
      */
@@ -324,7 +328,7 @@ type TenantCreateResponseDto = {
     /**
      * Tenant status
      */
-    status: string;
+    status: 'active' | null;
     /**
      * Session storage configuration for this tenant. Controls TTL and cleanup behavior.
      */
@@ -392,7 +396,7 @@ type UpdateTenantDto = {
 type AuditLogResponseDto = {
     id: string;
     tenantId: string;
-    actionType: 'tenant_created' | 'tenant_updated' | 'tenant_deleted' | 'presentation_config_created' | 'presentation_config_updated' | 'presentation_config_deleted' | 'issuance_config_updated' | 'credential_config_created' | 'credential_config_updated' | 'credential_config_deleted' | 'status_list_config_updated' | 'status_list_config_reset' | 'webhook_endpoint_created' | 'webhook_endpoint_updated' | 'webhook_endpoint_deleted' | 'attribute_provider_created' | 'attribute_provider_updated' | 'attribute_provider_deleted' | 'config_bundle_exported' | 'config_bundle_imported' | 'config_client_secret_generated' | 'config_resource_detached';
+    actionType: 'tenant_created' | 'tenant_updated' | 'tenant_deleted' | 'presentation_config_created' | 'presentation_config_updated' | 'presentation_config_deleted' | 'issuance_config_updated' | 'credential_config_created' | 'credential_config_updated' | 'credential_config_deleted' | 'status_list_config_updated' | 'status_list_config_reset' | 'webhook_endpoint_created' | 'webhook_endpoint_updated' | 'webhook_endpoint_deleted' | 'attribute_provider_created' | 'attribute_provider_updated' | 'attribute_provider_deleted' | 'config_bundle_exported' | 'config_bundle_imported' | 'config_client_secret_generated' | 'config_resource_detached' | 'config_resource_reattached' | 'session_cancelled';
     actorType: 'user' | 'client' | 'system';
     actorId?: string;
     actorDisplay?: string;
@@ -479,10 +483,6 @@ type RegistrarConfigResponseDto = {
      * The OIDC client ID for the registrar
      */
     clientId: string;
-    /**
-     * The OIDC client secret (optional, for confidential clients)
-     */
-    clientSecret?: string;
     /**
      * The username for OIDC login
      */
@@ -495,6 +495,10 @@ type RegistrarConfigResponseDto = {
      * Indicates whether a password is configured (actual password is never returned)
      */
     hasPassword: boolean;
+    /**
+     * Indicates whether a client secret is configured (actual client secret is never returned)
+     */
+    hasClientSecret: boolean;
 };
 type CreateRegistrarConfigDto = {
     /**
@@ -922,11 +926,11 @@ type KmsConfigDto = {
 };
 type KmsTenantConfigResponseDto = {
     /**
-     * Tenant-specific KMS configuration from <CONFIG_FOLDER>/<tenantId>/kms.json. Null when no tenant file exists.
+     * Tenant-specific KMS configuration from <CONFIG_FOLDER>/<tenantId>/kms.json. Null when no tenant file exists. Credentials are `<redacted>`; `${ENV_VAR}` placeholders are returned as stored.
      */
     tenantConfig?: KmsConfigDto | null;
     /**
-     * Effective configuration used at runtime for the tenant (global + tenant merge).
+     * Effective configuration used at runtime for the tenant (global + tenant merge). Credentials are `<redacted>`; providers from the global configuration are shown with their non-secret settings only.
      */
     effectiveConfig: KmsConfigDto;
 };
@@ -1068,9 +1072,9 @@ type ExportEcJwk = {
      */
     y: string;
     /**
-     * Private key (base64url)
+     * Private key (base64url). Only present for keys held in the database (`db` provider); external KMS keys are exported without private material.
      */
-    d: string;
+    d?: string;
     /**
      * Algorithm
      */
@@ -1108,7 +1112,7 @@ type KeyChainExportDto = {
      */
     usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
     /**
-     * The private key in JWK format (EC).
+     * The key in JWK format (EC). Contains the private key for database-held keys and only the public key for external KMS providers.
      */
     key: ExportEcJwk;
     /**
@@ -1356,7 +1360,7 @@ type TenantEntity = {
     /**
      * Tenant status
      */
-    status: string;
+    status: 'active' | null;
     /**
      * Session storage configuration for this tenant. Controls TTL and cleanup behavior.
      */
@@ -1505,7 +1509,7 @@ type OfferRequestDto = {
     /**
      * The type of response expected for the offer request.
      */
-    response_type: 'uri' | 'iso-18013-7' | 'dc-api';
+    response_type: 'uri' | 'dc-api' | 'iso-18013-7';
     /**
      * Authorization server id from issuer configuration. If omitted, the first enabled server is used.
      */
@@ -1532,6 +1536,14 @@ type OfferRequestDto = {
             };
         };
     };
+    /**
+     * Lifetime of this offer in seconds. Overrides offerLifetimeSeconds of the issuance configuration. Without both, the offer does not expire.
+     */
+    offerLifetimeSeconds?: number;
+    /**
+     * Your own reference for this offer, e.g. an order or case id. Stored in plaintext, searchable in the session list, included in webhooks and kept when the session is anonymized. Must not contain personal data.
+     */
+    reference?: string;
     /**
      * The flow type for the offer request.
      */
@@ -1552,49 +1564,49 @@ type OfferRequestDto = {
      * ID of the webhook endpoint to notify about the status of the issuance process.
      */
     webhookEndpointId?: string;
-    /**
-     * Your own reference for this offer, e.g. an order or case id. Stored in plaintext, searchable in the session list, included in webhooks and kept when the session is anonymized. Must not contain personal data.
-     */
-    reference?: string;
 };
 type WebHookAuthConfigNone = {
     /**
-     * The type of authentication used for the webhook.
+     * Disable authentication.
      */
-    type: never;
+    type: 'none';
 };
 type ApiKeyConfig = {
     /**
-     * The name of the header where the API key will be sent.
+     * The header name used to send the API key.
      */
     headerName: string;
     /**
-     * The value of the API key to be sent in the header.
+     * The API key value.
      */
     value: string;
 };
 type WebHookAuthConfigHeader = {
     /**
-     * The type of authentication used for the webhook.
+     * Use API key authentication.
      */
-    type: never;
+    type: 'apiKey';
     /**
-     * Configuration for API key authentication.
-     * This is required if the type is 'apiKey'.
+     * API key authentication settings.
      */
     config: ApiKeyConfig & {
+        /**
+         * The header name used to send the API key.
+         */
         headerName?: string;
+        /**
+         * The API key value.
+         */
         value?: string;
     };
 };
 type WebhookConfig = {
     /**
-     * Optional authentication configuration for the webhook.
-     * If not provided, no authentication will be used.
+     * Webhook authentication strategy.
      */
     auth: WebHookAuthConfigNone | WebHookAuthConfigHeader;
     /**
-     * List of credential IDs to include raw tokens for (e.g., ['sca_credential'])
+     * List of credential IDs to include raw tokens for (for example ['sca_credential']).
      */
     includeRawTokensFor?: Array<string>;
     /**
@@ -1610,7 +1622,7 @@ type Session = {
     /**
      * Status of the session.
      */
-    status: 'active' | 'fetched' | 'completed' | 'expired' | 'failed';
+    status: 'active' | 'fetched' | 'completed' | 'expired' | 'failed' | 'cancelled';
     /**
      * Unique identifier for the session.
      */
@@ -1624,7 +1636,8 @@ type Session = {
      */
     updatedAt: string;
     /**
-     * The timestamp when the request is set to expire.
+     * The timestamp after which a wallet can no longer redeem the offer or
+     * presentation request. Not set for offers without a lifetime.
      */
     expiresAt?: string;
     /**
@@ -1657,7 +1670,23 @@ type Session = {
     reference?: string | null;
     authorization_code?: string;
     /**
-     * Refresh token for the session - used to obtain a new access token.
+     * Expiration timestamp of the authorization code issued by the authorization endpoint.
+     * Not set for pre-authorized codes.
+     */
+    authorization_code_expires_at?: string;
+    /**
+     * JWK thumbprint of the DPoP key the session's tokens are bound to.
+     * Set from the PAR request (DPoP header or `dpop_jkt`) or at token issuance.
+     */
+    dpop_jkt?: string;
+    /**
+     * JWK thumbprint of the client instance key (client attestation `cnf`)
+     * the refresh token is bound to.
+     */
+    client_key_jkt?: string;
+    /**
+     * SHA-256 hash of the refresh token for the session, which is used to
+     * obtain a new access token. The token itself is not stored.
      */
     refresh_token?: string;
     /**
@@ -1669,6 +1698,11 @@ type Session = {
      * Request URI from the authorization request.
      */
     request_uri?: string;
+    /**
+     * Expiration timestamp of the PAR request_uri. Set to the time of use once
+     * the request_uri was redeemed, making it single-use.
+     */
+    request_uri_expires_at?: string;
     /**
      * Authorization queries associated with the session.
      * Encrypted at rest.
@@ -1758,6 +1792,7 @@ type Session = {
     redirectUri?: string | null;
     /**
      * Where to send the claims webhook response.
+     * The webhook API key is encrypted at rest.
      */
     parsedWebhook?: WebhookConfig;
     /**
@@ -1842,6 +1877,62 @@ type PaginatedSessionResponseDto = {
      */
     totalPages: number;
 };
+type SessionStatusCountsDto = {
+    /**
+     * Sessions waiting for the wallet
+     */
+    active: number;
+    /**
+     * Issuance: first credential issued. Presentation: the wallet fetched the request object.
+     */
+    fetched: number;
+    /**
+     * Issuance: the wallet reported credential_accepted. Presentation: response verified.
+     */
+    completed: number;
+    /**
+     * Sessions that expired before completion
+     */
+    expired: number;
+    /**
+     * Issuance: the wallet reported credential_failure or credential_deleted. Presentation: verification failed, or the wallet sent an error.
+     */
+    failed: number;
+    /**
+     * Offers and requests an operator cancelled
+     */
+    cancelled: number;
+};
+type SessionTypeStatsDto = {
+    /**
+     * Number of sessions of this type
+     */
+    total: number;
+    /**
+     * Number of sessions per status, 0 for a status without any
+     */
+    byStatus: SessionStatusCountsDto;
+    /**
+     * Last update of the most recently updated completed session, or null when none completed
+     */
+    lastCompletedAt: string | null;
+};
+type SessionStatsResponseDto = {
+    /**
+     * Issuance sessions; present only when the caller may read them, as in GET /api/session
+     */
+    issuance?: SessionTypeStatsDto;
+    /**
+     * Presentation sessions; present only when the caller may read them, as in GET /api/session
+     */
+    presentation?: SessionTypeStatsDto;
+};
+type CancelSessionDto = {
+    /**
+     * Why the offer was cancelled. Stored in the audit logs and sent to the session webhook.
+     */
+    reason?: string;
+};
 type SessionLogEntryResponseDto = {
     /**
      * Log entry ID
@@ -1874,6 +1965,28 @@ type SessionLogEntryResponseDto = {
         [key: string]: unknown;
     };
 };
+type CredentialStatusDto = {
+    /**
+     * Credential configuration the credential was issued for.
+     */
+    credentialConfigurationId: string;
+    /**
+     * ID of the status list holding the entry.
+     */
+    statusListId: string;
+    /**
+     * Index of the entry in the status list.
+     */
+    index: number;
+    /**
+     * Current status: 0 = valid, 1 = revoked, 2 = suspended. Lists with more bits per entry can hold higher values.
+     */
+    status: number;
+    /**
+     * Bits per entry of the status list. Suspension (2) needs at least 2.
+     */
+    bits: 1 | 2 | 4 | 8;
+};
 type StatusUpdateDto = {
     /**
      * Session identifier used to locate credentials for status updates.
@@ -2023,9 +2136,12 @@ type UpdateStatusListDto = {
     keyChainId?: string | null | null;
 };
 type ClaimsQuery = {
+    /**
+     * Allowed values of the claim. A disclosed value must equal one of them in type and value.
+     */
+    values?: Array<string | number | boolean>;
     id?: string;
     path: Array<string>;
-    values?: Array<string>;
 };
 type CredentialSetQuery = {
     options: Array<Array<string>>;
@@ -2045,14 +2161,14 @@ type AttestationBasedPolicy = {
     }>;
 };
 type NoneTrustPolicy = {
-    policy: string;
+    policy: 'none';
 };
 type AllowListPolicy = {
-    policy: string;
+    policy: 'allowList';
     values: Array<string>;
 };
 type RootOfTrustPolicy = {
-    policy: string;
+    policy: 'rootOfTrust';
     values: string;
 };
 type Vct = {
@@ -2120,19 +2236,19 @@ type WebhookEndpointEntity = {
 };
 type SchemaUriEntry = {
     /**
-     * Credential config ID to resolve and upload its schema content. When set, uri can be omitted and is resolved server-side.
+     * Credential configuration whose schema EUDIPLO builds and uploads; `uri` and `meta` are not needed.
      */
     credentialConfigId?: string;
     /**
-     * Attestation format this schema URI applies to (e.g. dc+sd-jwt, mso_mdoc)
+     * Attestation format of the schema, for example `dc+sd-jwt` or `mso_mdoc`. Required with `uri`; with `credentialConfigId`, the format of the configuration takes precedence.
      */
     format?: string;
     /**
-     * URI pointing to the schema document for this format
+     * URL of a schema document that EUDIPLO downloads and uploads to the registrar. Requires `format` and `meta`.
      */
     uri?: string;
     /**
-     * Schema-format specific metadata (for example { vct: 'urn:example:vct' } for dc+sd-jwt).
+     * Format-specific schema metadata, for example `{ "vct": "urn:example:vct" }` for `dc+sd-jwt`. Required with `uri`.
      */
     meta?: {
         [key: string]: unknown;
@@ -2140,19 +2256,19 @@ type SchemaUriEntry = {
 };
 type TrustAuthorityEntry = {
     /**
-     * Trust list ID to resolve from the database. When set, frameworkType, value, and verificationMethod are derived automatically.
+     * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
      */
     trustListId?: string;
     /**
-     * Trust framework type (ignored when trustListId is set)
+     * Trust framework of an external authority. `x509` takes a root certificate in `value` and no `verificationMethod`.
      */
     frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
     /**
-     * Trust list URI for etsi_tl or base64-encoded DER root certificate for x509 (ignored when trustListId is set)
+     * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
      */
     value?: string;
     /**
-     * Optional verification material for external trusted authorities (for example a JWK). Required for etsi_tl and omitted for x509 root certificate anchors. For internal trust-list URLs, EUDIPLO resolves verification material from the database.
+     * Verification material of an external authority, for example a JWK, as object or JSON string. Required, except for `x509` (must be omitted) and for a `value` that is a trust list URL of this tenant (EUDIPLO adds the certificate).
      */
     verificationMethod?: {
         [key: string]: unknown;
@@ -2160,47 +2276,71 @@ type TrustAuthorityEntry = {
 };
 type SchemaMetaConfig = {
     /**
-     * Optional override for the schema ID (attestation identifier URI). When not set, derived from vct (dc+sd-jwt) or docType (mso_mdoc).
+     * Schema ID (attestation identifier URI). `publish` passes it to the registrar when set; `publish-version` requires the ID of the existing schema. With `credentialConfigId` and no `rulebookURI`, `publish` only links that credential configuration to this ID and uploads nothing.
      */
     id?: string;
     /**
-     * Human-readable name of the schema metadata entry. Required when publishing new schema metadata; optional when linking an existing schema metadata id to a credential config.
+     * Human-readable name. Required when publishing; not needed for a link-only request.
      */
     name?: string;
     /**
-     * Schema version in SemVer format
+     * Schema version, for example `1.0.0`.
      */
-    version?: string;
+    version: string;
     /**
-     * URI of the Attestation Rulebook. Required when publishing new schema metadata; optional when linking an existing schema metadata id to a credential config.
+     * URL of the attestation rulebook, which EUDIPLO downloads and uploads to the registrar. Required when publishing.
      */
     rulebookURI?: string;
     /**
-     * Attestation Level of Security
+     * Attestation level of security.
      */
-    attestationLoS?: 'iso_18045_high' | 'iso_18045_moderate' | 'iso_18045_enhanced-basic' | 'iso_18045_basic';
+    attestationLoS: 'iso_18045_high' | 'iso_18045_moderate' | 'iso_18045_enhanced-basic' | 'iso_18045_basic';
     /**
-     * Cryptographic binding type
+     * Cryptographic binding type.
      */
-    bindingType?: 'claim' | 'key' | 'biometric' | 'none';
+    bindingType: 'claim' | 'key' | 'biometric' | 'none';
     /**
-     * Schema URIs per attestation format. When omitted, the format is derived from the credential config format field.
+     * Schemas per attestation format. When omitted, the schema of `credentialConfigId` is used.
      */
     schemaURIs?: Array<{
+        /**
+         * Credential configuration whose schema EUDIPLO builds and uploads; `uri` and `meta` are not needed.
+         */
         credentialConfigId?: string;
+        /**
+         * Attestation format of the schema, for example `dc+sd-jwt` or `mso_mdoc`. Required with `uri`; with `credentialConfigId`, the format of the configuration takes precedence.
+         */
         format?: string;
+        /**
+         * URL of a schema document that EUDIPLO downloads and uploads to the registrar. Requires `format` and `meta`.
+         */
         uri?: string;
+        /**
+         * Format-specific schema metadata, for example `{ "vct": "urn:example:vct" }` for `dc+sd-jwt`. Required with `uri`.
+         */
         meta?: {
             [key: string]: unknown;
         };
     }>;
     /**
-     * Trust authorities for this attestation schema
+     * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` with `x509Certificate`).
      */
     trustedAuthorities?: Array<{
+        /**
+         * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+         */
         trustListId?: string;
+        /**
+         * Trust framework of an external authority. `x509` takes a root certificate in `value` and no `verificationMethod`.
+         */
         frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
+        /**
+         * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+         */
         value?: string;
+        /**
+         * Verification material of an external authority, for example a JWK, as object or JSON string. Required, except for `x509` (must be omitted) and for a `value` that is a trust list URL of this tenant (EUDIPLO adds the certificate).
+         */
         verificationMethod?: {
             [key: string]: unknown;
         } | string;
@@ -2252,7 +2392,7 @@ type IssuerMetadataCredentialConfig = {
      */
     proofTypesSupported?: Array<'jwt' | 'attestation'>;
     credentialReusePolicy?: CredentialReusePolicy;
-    format: 'mso_mdoc' | 'dc+sd-jwt';
+    format: 'dc+sd-jwt' | 'mso_mdoc';
     display: Array<Display>;
     scope?: string;
     /**
@@ -2656,13 +2796,16 @@ type MsoMdocCredentialQueryMeta = {
     doctype_value: string;
 };
 type MsoMdocClaimsQuery = {
+    /**
+     * Allowed values of the claim. A disclosed value must equal one of them in type and value.
+     */
+    values?: Array<string | number | boolean>;
     /**
      * Whether the holder should be allowed to retain the claim in an mso_mdoc response.
      */
     intent_to_retain?: boolean;
     id?: string;
     path: Array<string>;
-    values?: Array<string>;
 };
 type CredentialQueryDcSdJwt = {
     /**
@@ -2728,9 +2871,11 @@ type RegistrationCertificateBody = {
     credentials?: Array<{
         [key: string]: unknown;
     }>;
-    provided_attestations?: Array<{
-        [key: string]: unknown;
-    }>;
+    /**
+     * Credential type identifiers (SD-JWT VC `vct` or mdoc doctype) provided
+     * by an issuer.
+     */
+    provides_attestations?: Array<string>;
 };
 type RegistrationCertificateRequest = {
     /**
@@ -2753,9 +2898,7 @@ type RegistrationCertificateRequest = {
         credentials?: Array<{
             [key: string]: unknown;
         }>;
-        provided_attestations?: Array<{
-            [key: string]: unknown;
-        }>;
+        provides_attestations?: Array<string>;
     };
     /**
      * Optional pre-existing registration certificate JWT.
@@ -3301,9 +3444,9 @@ type PresentationConfigCreateDto = {
                  */
                 path: Array<string | number>;
                 /**
-                 * Optional allowed values for the claim.
+                 * Optional allowed values for the claim. A disclosed value must equal one of them in type and value.
                  */
-                values?: Array<string>;
+                values?: Array<string | number | boolean>;
             }>;
         } | {
             /**
@@ -3382,9 +3525,9 @@ type PresentationConfigCreateDto = {
                  */
                 path: Array<string | number>;
                 /**
-                 * Optional allowed values for the claim.
+                 * Optional allowed values for the claim. A disclosed value must equal one of them in type and value.
                  */
-                values?: Array<string>;
+                values?: Array<string | number | boolean>;
                 /**
                  * Whether relying party intends to retain the claim.
                  */
@@ -3439,9 +3582,7 @@ type PresentationConfigCreateDto = {
             credentials?: Array<{
                 [key: string]: unknown;
             }>;
-            provided_attestations?: Array<{
-                [key: string]: unknown;
-            }>;
+            provides_attestations?: Array<string>;
         };
         jwt?: string;
     } | null;
@@ -3611,9 +3752,9 @@ type PresentationConfigUpdateDto = {
                  */
                 path: Array<string | number>;
                 /**
-                 * Optional allowed values for the claim.
+                 * Optional allowed values for the claim. A disclosed value must equal one of them in type and value.
                  */
-                values?: Array<string>;
+                values?: Array<string | number | boolean>;
             }>;
         } | {
             /**
@@ -3692,9 +3833,9 @@ type PresentationConfigUpdateDto = {
                  */
                 path: Array<string | number>;
                 /**
-                 * Optional allowed values for the claim.
+                 * Optional allowed values for the claim. A disclosed value must equal one of them in type and value.
                  */
-                values?: Array<string>;
+                values?: Array<string | number | boolean>;
                 /**
                  * Whether relying party intends to retain the claim.
                  */
@@ -3749,9 +3890,7 @@ type PresentationConfigUpdateDto = {
             credentials?: Array<{
                 [key: string]: unknown;
             }>;
-            provided_attestations?: Array<{
-                [key: string]: unknown;
-            }>;
+            provides_attestations?: Array<string>;
         };
         jwt?: string;
     } | null;
@@ -3962,16 +4101,40 @@ type AuthenticationUrlConfig = {
      * Optional webhook configuration for authentication callbacks
      */
     webhook?: WebhookConfig & {
+        /**
+         * The URL to which the webhook will send notifications.
+         */
         url?: string;
+        /**
+         * Webhook authentication strategy.
+         */
         auth?: {
+            /**
+             * Disable authentication.
+             */
             type: 'none';
         } | {
+            /**
+             * Use API key authentication.
+             */
             type: 'apiKey';
+            /**
+             * API key authentication settings.
+             */
             config: {
+                /**
+                 * The header name used to send the API key.
+                 */
                 headerName: string;
+                /**
+                 * The API key value.
+                 */
                 value: string;
             };
         };
+        /**
+         * List of credential IDs to include raw tokens for (for example ['sca_credential']).
+         */
         includeRawTokensFor?: Array<string>;
     };
 };
@@ -3980,16 +4143,40 @@ type AuthenticationMethodAuth = {
     config: AuthenticationUrlConfig & {
         url?: string;
         webhook?: {
+            /**
+             * The URL to which the webhook will send notifications.
+             */
             url: string;
+            /**
+             * Webhook authentication strategy.
+             */
             auth: {
+                /**
+                 * Disable authentication.
+                 */
                 type: 'none';
             } | {
+                /**
+                 * Use API key authentication.
+                 */
                 type: 'apiKey';
+                /**
+                 * API key authentication settings.
+                 */
                 config: {
+                    /**
+                     * The header name used to send the API key.
+                     */
                     headerName: string;
+                    /**
+                     * The API key value.
+                     */
                     value: string;
                 };
             };
+            /**
+             * List of credential IDs to include raw tokens for (for example ['sca_credential']).
+             */
             includeRawTokensFor?: Array<string>;
         };
     };
@@ -4038,7 +4225,7 @@ type ExternalAuthorizationServerConfig = {
      */
     issuer: string;
     sessionBinding?: {
-        method: string;
+        method: 'access_token_claim';
         claim: string;
     };
     label?: string;
@@ -4074,6 +4261,10 @@ type WalletProviderTrustListRefDto = {
     verifierKey?: {
         [key: string]: unknown;
     };
+    /**
+     * PEM-encoded public key (SPKI, -----BEGIN PUBLIC KEY-----) used to verify the trust-list JWT signature.
+     */
+    verifierKeyPem?: string;
     /**
      * Base64 DER-encoded X.509 certificate used to verify the trust-list JWT signature.
      */
@@ -4122,6 +4313,7 @@ type Oid4VpAuthorizationServerConfig = {
         verifierKey?: {
             [key: string]: unknown;
         };
+        verifierKeyPem?: string;
         verifierX509Der?: string;
     }>;
     label?: string;
@@ -4189,6 +4381,7 @@ type ChainedAuthorizationServerConfig = {
         verifierKey?: {
             [key: string]: unknown;
         };
+        verifierKeyPem?: string;
         verifierX509Der?: string;
     }>;
     label?: string;
@@ -4229,6 +4422,7 @@ type BuiltInAuthorizationServerConfig = {
         verifierKey?: {
             [key: string]: unknown;
         };
+        verifierKeyPem?: string;
         verifierX509Der?: string;
     }>;
     label?: string;
@@ -4330,7 +4524,7 @@ type IssuanceConfig = {
     /**
      * Shared wallet provider trust lists for key attestations at the credential endpoint
      * and default wallet-attestation trust at managed authorization servers.
-     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
@@ -4371,6 +4565,10 @@ type IssuanceConfig = {
      * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
      */
     txCodeMaxAttempts?: number | null;
+    /**
+     * Default lifetime of credential offers in seconds. Can be overridden per offer request. Unset: offers do not expire.
+     */
+    offerLifetimeSeconds?: number | null;
     /**
      * The tenant that owns this object.
      */
@@ -4404,7 +4602,7 @@ type UpdateIssuanceDto = {
     /**
      * Shared wallet provider trust lists for key attestations at the credential endpoint
      * and default wallet-attestation trust at managed authorization servers.
-     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
@@ -4445,6 +4643,10 @@ type UpdateIssuanceDto = {
      * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
      */
     txCodeMaxAttempts?: number | null;
+    /**
+     * Default lifetime of credential offers in seconds. Can be overridden per offer request. Unset: offers do not expire.
+     */
+    offerLifetimeSeconds?: number | null;
     /**
      * Value to determine the amount of credentials that are issued in a batch.
      * Default is 1.
@@ -4467,35 +4669,83 @@ type SignSchemaMetaConfigDto = {
      * The schema metadata configuration to submit. Registrar builds and signs the final schema metadata.
      */
     config: SchemaMetaConfig & {
+        /**
+         * Schema ID (attestation identifier URI). `publish` passes it to the registrar when set; `publish-version` requires the ID of the existing schema. With `credentialConfigId` and no `rulebookURI`, `publish` only links that credential configuration to this ID and uploads nothing.
+         */
         id?: string;
+        /**
+         * Human-readable name. Required when publishing; not needed for a link-only request.
+         */
         name?: string;
+        /**
+         * Schema version, for example `1.0.0`.
+         */
         version?: string;
+        /**
+         * URL of the attestation rulebook, which EUDIPLO downloads and uploads to the registrar. Required when publishing.
+         */
         rulebookURI?: string;
+        /**
+         * Attestation level of security.
+         */
         attestationLoS?: 'iso_18045_high' | 'iso_18045_moderate' | 'iso_18045_enhanced-basic' | 'iso_18045_basic';
+        /**
+         * Cryptographic binding type.
+         */
         bindingType?: 'claim' | 'key' | 'biometric' | 'none';
+        /**
+         * Schemas per attestation format. When omitted, the schema of `credentialConfigId` is used.
+         */
         schemaURIs?: Array<{
+            /**
+             * Credential configuration whose schema EUDIPLO builds and uploads; `uri` and `meta` are not needed.
+             */
             credentialConfigId?: string;
+            /**
+             * Attestation format of the schema, for example `dc+sd-jwt` or `mso_mdoc`. Required with `uri`; with `credentialConfigId`, the format of the configuration takes precedence.
+             */
             format?: string;
+            /**
+             * URL of a schema document that EUDIPLO downloads and uploads to the registrar. Requires `format` and `meta`.
+             */
             uri?: string;
+            /**
+             * Format-specific schema metadata, for example `{ "vct": "urn:example:vct" }` for `dc+sd-jwt`. Required with `uri`.
+             */
             meta?: {
                 [key: string]: unknown;
             };
         }>;
+        /**
+         * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` with `x509Certificate`).
+         */
         trustedAuthorities?: Array<{
+            /**
+             * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+             */
             trustListId?: string;
+            /**
+             * Trust framework of an external authority. `x509` takes a root certificate in `value` and no `verificationMethod`.
+             */
             frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
+            /**
+             * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+             */
             value?: string;
+            /**
+             * Verification material of an external authority, for example a JWK, as object or JSON string. Required, except for `x509` (must be omitted) and for a `value` that is a trust list URL of this tenant (EUDIPLO adds the certificate).
+             */
             verificationMethod?: {
                 [key: string]: unknown;
             } | string;
         }>;
     };
     /**
-     * ID of the credential config to link back after submission. When provided, schemaMeta.id on the credential config is updated with the reserved attestation ID.
+     * Credential configuration to link to the published schema metadata ID.
      */
     credentialConfigId?: string;
     /**
-     * How to update credential config pinning after publish. keep_current: do not change existing pin (unless empty). update_to_new_version: update pinned version under current id. replace_id: repoint pin to a different schema id.
+     * How to update the schema metadata pin of `credentialConfigId`: `keep_current` (default) keeps a pin to the same ID, `update_to_new_version` updates the pinned version under the same ID, `replace_id` repoints the pin to the new ID. A configuration without a pin is always linked. If it is pinned to another ID, only `replace_id` succeeds; the others answer `400` after the schema metadata was published.
      */
     pinMode?: 'keep_current' | 'update_to_new_version' | 'replace_id';
 };
@@ -4504,35 +4754,83 @@ type SignVersionSchemaMetaConfigDto = {
      * The schema metadata configuration to submit as a new version. Must include the existing id.
      */
     config: SchemaMetaConfig & {
+        /**
+         * Schema ID (attestation identifier URI). `publish` passes it to the registrar when set; `publish-version` requires the ID of the existing schema. With `credentialConfigId` and no `rulebookURI`, `publish` only links that credential configuration to this ID and uploads nothing.
+         */
         id?: string;
+        /**
+         * Human-readable name. Required when publishing; not needed for a link-only request.
+         */
         name?: string;
+        /**
+         * Schema version, for example `1.0.0`.
+         */
         version?: string;
+        /**
+         * URL of the attestation rulebook, which EUDIPLO downloads and uploads to the registrar. Required when publishing.
+         */
         rulebookURI?: string;
+        /**
+         * Attestation level of security.
+         */
         attestationLoS?: 'iso_18045_high' | 'iso_18045_moderate' | 'iso_18045_enhanced-basic' | 'iso_18045_basic';
+        /**
+         * Cryptographic binding type.
+         */
         bindingType?: 'claim' | 'key' | 'biometric' | 'none';
+        /**
+         * Schemas per attestation format. When omitted, the schema of `credentialConfigId` is used.
+         */
         schemaURIs?: Array<{
+            /**
+             * Credential configuration whose schema EUDIPLO builds and uploads; `uri` and `meta` are not needed.
+             */
             credentialConfigId?: string;
+            /**
+             * Attestation format of the schema, for example `dc+sd-jwt` or `mso_mdoc`. Required with `uri`; with `credentialConfigId`, the format of the configuration takes precedence.
+             */
             format?: string;
+            /**
+             * URL of a schema document that EUDIPLO downloads and uploads to the registrar. Requires `format` and `meta`.
+             */
             uri?: string;
+            /**
+             * Format-specific schema metadata, for example `{ "vct": "urn:example:vct" }` for `dc+sd-jwt`. Required with `uri`.
+             */
             meta?: {
                 [key: string]: unknown;
             };
         }>;
+        /**
+         * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` with `x509Certificate`).
+         */
         trustedAuthorities?: Array<{
+            /**
+             * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+             */
             trustListId?: string;
+            /**
+             * Trust framework of an external authority. `x509` takes a root certificate in `value` and no `verificationMethod`.
+             */
             frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
+            /**
+             * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+             */
             value?: string;
+            /**
+             * Verification material of an external authority, for example a JWK, as object or JSON string. Required, except for `x509` (must be omitted) and for a `value` that is a trust list URL of this tenant (EUDIPLO adds the certificate).
+             */
             verificationMethod?: {
                 [key: string]: unknown;
             } | string;
         }>;
     };
     /**
-     * Optional credential config to update pinning for after successful version publish.
+     * Credential configuration to link to the new version.
      */
     credentialConfigId?: string;
     /**
-     * How to update credential config pinning after version publish. keep_current: do not change existing pin (unless empty). update_to_new_version: update pinned version under current id. replace_id: repoint pin to config.id.
+     * How to update the schema metadata pin of `credentialConfigId`: `keep_current` (default) keeps a pin to the same ID, `update_to_new_version` updates the pinned version under the same ID, `replace_id` repoints the pin to `config.id`. A configuration without a pin is always linked. If it is pinned to another ID, only `replace_id` succeeds; the others answer `400` after the schema metadata was published.
      */
     pinMode?: 'keep_current' | 'update_to_new_version' | 'replace_id';
 };
@@ -4711,7 +5009,8 @@ type DeferredCredentialRequestDto = {
 };
 type NotificationRequestDto = {
     notification_id: string;
-    event: 'credential_accepted' | 'credential_failure' | 'credential_deleted';
+    event: 'credential_accepted' | 'credential_deleted' | 'credential_failure';
+    event_description?: string;
 };
 type OfferResponse = {
     uri: string;
@@ -4753,7 +5052,7 @@ type EcPublic = {
     /**
      * The key type, which is always 'EC' for Elliptic Curve keys.
      */
-    kty: string;
+    kty: 'EC';
     /**
      * The algorithm intended for use with the key, such as 'ES256'.
      */
@@ -4881,7 +5180,7 @@ type InteractiveAuthorizationCodeResponseDto = {
     /**
      * Response status
      */
-    status: string;
+    status: 'ok';
     /**
      * Authorization code
      */
@@ -5025,16 +5324,40 @@ type PresentationRequest = {
      * If not provided, the configured webhook from the configuration will be used.
      */
     webhook?: WebhookConfig & {
+        /**
+         * The URL to which the webhook will send notifications.
+         */
         url?: string;
+        /**
+         * Webhook authentication strategy.
+         */
         auth?: {
+            /**
+             * Disable authentication.
+             */
             type: 'none';
         } | {
+            /**
+             * Use API key authentication.
+             */
             type: 'apiKey';
+            /**
+             * API key authentication settings.
+             */
             config: {
+                /**
+                 * The header name used to send the API key.
+                 */
                 headerName: string;
+                /**
+                 * The API key value.
+                 */
                 value: string;
             };
         };
+        /**
+         * List of credential IDs to include raw tokens for (for example ['sca_credential']).
+         */
         includeRawTokensFor?: Array<string>;
     };
     /**
@@ -5056,10 +5379,14 @@ type PresentationRequest = {
         payload?: unknown;
         [key: string]: unknown;
     }>;
+    /**
+     * Client identifier scheme for the OID4VP request. Defaults to x509_hash.
+     */
+    clientIdScheme?: 'x509_hash' | 'x509_san_dns';
     /**
      * The type of response expected from the presentation request.
      */
-    response_type: 'uri' | 'iso-18013-7' | 'dc-api';
+    response_type: 'uri' | 'dc-api' | 'iso-18013-7';
     /**
      * Identifier of the presentation configuration
      */
@@ -5134,7 +5461,7 @@ type ConfigResourceMetadataEntity = {
     tenantId: string;
     kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'StatusList';
     resourceId: string;
-    ownership: 'unmanaged' | 'file-managed';
+    ownership: 'unmanaged' | 'file-managed' | 'detached';
     generation: number;
     source?: string;
     sourceHash?: string;
@@ -5225,7 +5552,7 @@ type IssuanceConfigWritable = {
     /**
      * Shared wallet provider trust lists for key attestations at the credential endpoint
      * and default wallet-attestation trust at managed authorization servers.
-     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
@@ -5262,6 +5589,10 @@ type IssuanceConfigWritable = {
      * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
      */
     txCodeMaxAttempts?: number | null;
+    /**
+     * Default lifetime of credential offers in seconds. Can be overridden per offer request. Unset: offers do not expire.
+     */
+    offerLifetimeSeconds?: number | null;
     /**
      * The tenant that owns this object.
      */
@@ -5295,7 +5626,7 @@ type UpdateIssuanceDtoWritable = {
     /**
      * Shared wallet provider trust lists for key attestations at the credential endpoint
      * and default wallet-attestation trust at managed authorization servers.
-     * Each entry MUST include either `verifierKey` or `verifierX509Der`.
+     * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
     /**
@@ -5332,6 +5663,10 @@ type UpdateIssuanceDtoWritable = {
      * Maximum failed tx_code attempts before the pre-authorized code is invalidated. Defaults to 5.
      */
     txCodeMaxAttempts?: number | null;
+    /**
+     * Default lifetime of credential offers in seconds. Can be overridden per offer request. Unset: offers do not expire.
+     */
+    offerLifetimeSeconds?: number | null;
     /**
      * Value to determine the amount of credentials that are issued in a batch.
      * Default is 1.
@@ -5604,7 +5939,7 @@ type RegistrarControllerUpdateConfigData = {
 };
 type RegistrarControllerUpdateConfigErrors = {
     /**
-     * Invalid credentials
+     * Invalid credentials, or oidcUrl or registrarUrl changes without password (and clientSecret, if one is stored) sent again
      */
     400: unknown;
     /**
@@ -5654,7 +5989,7 @@ type RegistrarControllerCreateAccessCertificateData = {
 };
 type RegistrarControllerCreateAccessCertificateErrors = {
     /**
-     * No relying party found at registrar or failed to create certificate
+     * The registrar rejected the relying-party registration or the certificate request
      */
     400: unknown;
     /**
@@ -5670,11 +6005,15 @@ type RegistrarControllerCreateAccessCertificateResponses = {
         /**
          * The certificate ID at the registrar
          */
-        id?: string;
+        id: string;
+        /**
+         * ID of the key chain that now holds the certificate
+         */
+        certId: string;
         /**
          * The certificate in PEM format
          */
-        crt?: string;
+        crt: string;
     };
 };
 type RegistrarControllerCreateAccessCertificateResponse = RegistrarControllerCreateAccessCertificateResponses[keyof RegistrarControllerCreateAccessCertificateResponses];
@@ -5769,6 +6108,12 @@ type KeyChainControllerDeleteTenantKmsConfigData = {
     query?: never;
     url: '/api/key-chain/providers/config';
 };
+type KeyChainControllerDeleteTenantKmsConfigErrors = {
+    /**
+     * The caller lacks the `tenant:admin` or `tenants:manage` role or a tenant context.
+     */
+    403: unknown;
+};
 type KeyChainControllerDeleteTenantKmsConfigResponses = {
     /**
      * Tenant-specific KMS config removed.
@@ -5782,6 +6127,12 @@ type KeyChainControllerGetTenantKmsConfigData = {
     query?: never;
     url: '/api/key-chain/providers/config';
 };
+type KeyChainControllerGetTenantKmsConfigErrors = {
+    /**
+     * The caller lacks the `tenant:admin` or `tenants:manage` role or a tenant context.
+     */
+    403: unknown;
+};
 type KeyChainControllerGetTenantKmsConfigResponses = {
     /**
      * Tenant and effective KMS configuration.
@@ -5795,6 +6146,12 @@ type KeyChainControllerUpdateTenantKmsConfigData = {
     query?: never;
     url: '/api/key-chain/providers/config';
 };
+type KeyChainControllerUpdateTenantKmsConfigErrors = {
+    /**
+     * The caller lacks the `tenant:admin` or `tenants:manage` role or a tenant context.
+     */
+    403: unknown;
+};
 type KeyChainControllerUpdateTenantKmsConfigResponses = {
     /**
      * Updated tenant KMS config.
@@ -5905,6 +6262,10 @@ type KeyChainControllerExportData = {
     url: '/api/key-chain/{id}/export';
 };
 type KeyChainControllerExportErrors = {
+    /**
+     * The caller lacks the `tenant:admin` or `tenants:manage` role or a tenant context.
+     */
+    403: unknown;
     /**
      * Key chain not found
      */
@@ -6055,7 +6416,7 @@ type SessionControllerGetAllSessionsData = {
         /**
          * Filter by session status. Repeat the parameter to match any of several statuses.
          */
-        status?: 'active' | 'fetched' | 'completed' | 'expired' | 'failed' | Array<'active' | 'fetched' | 'completed' | 'expired' | 'failed'>;
+        status?: 'active' | 'fetched' | 'completed' | 'expired' | 'failed' | 'cancelled' | Array<'active' | 'fetched' | 'completed' | 'expired' | 'failed' | 'cancelled'>;
         /**
          * Filter by session type
          */
@@ -6111,6 +6472,16 @@ type SessionControllerGetAllSessionsResponses = {
     200: PaginatedSessionResponseDto;
 };
 type SessionControllerGetAllSessionsResponse = SessionControllerGetAllSessionsResponses[keyof SessionControllerGetAllSessionsResponses];
+type SessionControllerGetSessionStatsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/api/session/stats';
+};
+type SessionControllerGetSessionStatsResponses = {
+    200: SessionStatsResponseDto;
+};
+type SessionControllerGetSessionStatsResponse = SessionControllerGetSessionStatsResponses[keyof SessionControllerGetSessionStatsResponses];
 type SessionControllerDeleteSessionData = {
     body?: never;
     path: {
@@ -6141,6 +6512,34 @@ type SessionControllerGetSessionResponses = {
     200: Session;
 };
 type SessionControllerGetSessionResponse = SessionControllerGetSessionResponses[keyof SessionControllerGetSessionResponses];
+type SessionControllerCancelData = {
+    body?: CancelSessionDto;
+    path: {
+        /**
+         * The session ID
+         */
+        id: string;
+    };
+    query?: never;
+    url: '/api/session/{id}/cancel';
+};
+type SessionControllerCancelErrors = {
+    /**
+     * Session not found
+     */
+    404: unknown;
+    /**
+     * A wallet already redeemed the offer, or the session is completed, failed, expired or cancelled
+     */
+    409: unknown;
+};
+type SessionControllerCancelResponses = {
+    /**
+     * Session cancelled
+     */
+    204: void;
+};
+type SessionControllerCancelResponse = SessionControllerCancelResponses[keyof SessionControllerCancelResponses];
 type SessionControllerGetSessionLogsData = {
     body?: never;
     path: {
@@ -6156,15 +6555,46 @@ type SessionControllerGetSessionLogsResponses = {
     200: Array<SessionLogEntryResponseDto>;
 };
 type SessionControllerGetSessionLogsResponse = SessionControllerGetSessionLogsResponses[keyof SessionControllerGetSessionLogsResponses];
+type SessionControllerGetCredentialStatusData = {
+    body?: never;
+    path: {
+        /**
+         * The session ID
+         */
+        id: string;
+    };
+    query?: never;
+    url: '/api/session/{id}/credential-status';
+};
+type SessionControllerGetCredentialStatusErrors = {
+    /**
+     * Session not found
+     */
+    404: unknown;
+};
+type SessionControllerGetCredentialStatusResponses = {
+    200: Array<CredentialStatusDto>;
+};
+type SessionControllerGetCredentialStatusResponse = SessionControllerGetCredentialStatusResponses[keyof SessionControllerGetCredentialStatusResponses];
 type SessionControllerRevokeAllData = {
     body: StatusUpdateDto;
     path?: never;
     query?: never;
     url: '/api/session/revoke';
 };
+type SessionControllerRevokeAllErrors = {
+    /**
+     * The status does not fit the status list's bits per entry
+     */
+    400: unknown;
+    /**
+     * No status entry for the session, or a revoked credential would be reinstated or suspended
+     */
+    409: unknown;
+};
 type SessionControllerRevokeAllResponses = {
     /**
-     * All sessions revoked
+     * Status updated
      */
     204: void;
 };
@@ -7081,120 +7511,6 @@ type DeferredControllerFailDeferredResponses = {
     200: DeferredOperationResponse;
 };
 type DeferredControllerFailDeferredResponse = DeferredControllerFailDeferredResponses[keyof DeferredControllerFailDeferredResponses];
-type ChainedAsVpControllerParData = {
-    body: ChainedAsParRequestDto;
-    headers?: {
-        /**
-         * DPoP proof JWT
-         */
-        DPoP?: string;
-        /**
-         * Wallet attestation JWT
-         */
-        'OAuth-Client-Attestation'?: string;
-        /**
-         * Wallet attestation proof-of-possession JWT
-         */
-        'OAuth-Client-Attestation-PoP'?: string;
-    };
-    path: {
-        /**
-         * Tenant identifier
-         */
-        tenantId: string;
-    };
-    query?: never;
-    url: '/api/issuers/{tenantId}/chained-as-vp/par';
-};
-type ChainedAsVpControllerParErrors = {
-    400: ChainedAsErrorResponseDto;
-};
-type ChainedAsVpControllerParError = ChainedAsVpControllerParErrors[keyof ChainedAsVpControllerParErrors];
-type ChainedAsVpControllerParResponses = {
-    201: ChainedAsParResponseDto;
-};
-type ChainedAsVpControllerParResponse = ChainedAsVpControllerParResponses[keyof ChainedAsVpControllerParResponses];
-type ChainedAsVpControllerAuthorizeData = {
-    body?: never;
-    path: {
-        /**
-         * Tenant identifier
-         */
-        tenantId: string;
-    };
-    query: {
-        /**
-         * Client identifier
-         */
-        client_id: string;
-        /**
-         * Request URI from PAR response
-         */
-        request_uri: string;
-        /**
-         * State parameter (returned in redirect)
-         */
-        state?: string;
-    };
-    url: '/api/issuers/{tenantId}/chained-as-vp/authorize';
-};
-type ChainedAsVpControllerAuthorizeErrors = {
-    400: ChainedAsErrorResponseDto;
-};
-type ChainedAsVpControllerAuthorizeError = ChainedAsVpControllerAuthorizeErrors[keyof ChainedAsVpControllerAuthorizeErrors];
-type ChainedAsVpControllerVpCallbackData = {
-    body?: never;
-    path: {
-        /**
-         * Tenant identifier
-         */
-        tenantId: string;
-    };
-    query: {
-        cas: string;
-        response_code?: string;
-        error?: string;
-        error_description?: string;
-    };
-    url: '/api/issuers/{tenantId}/chained-as-vp/vp-callback';
-};
-type ChainedAsVpControllerVpCallbackErrors = {
-    400: ChainedAsErrorResponseDto;
-};
-type ChainedAsVpControllerVpCallbackError = ChainedAsVpControllerVpCallbackErrors[keyof ChainedAsVpControllerVpCallbackErrors];
-type ChainedAsVpControllerTokenData = {
-    body: ChainedAsTokenRequestDto;
-    headers?: {
-        /**
-         * DPoP proof JWT
-         */
-        DPoP?: string;
-        /**
-         * Wallet attestation JWT
-         */
-        'OAuth-Client-Attestation'?: string;
-        /**
-         * Wallet attestation proof-of-possession JWT
-         */
-        'OAuth-Client-Attestation-PoP'?: string;
-    };
-    path: {
-        /**
-         * Tenant identifier
-         */
-        tenantId: string;
-    };
-    query?: never;
-    url: '/api/issuers/{tenantId}/chained-as-vp/token';
-};
-type ChainedAsVpControllerTokenErrors = {
-    400: ChainedAsErrorResponseDto;
-};
-type ChainedAsVpControllerTokenError = ChainedAsVpControllerTokenErrors[keyof ChainedAsVpControllerTokenErrors];
-type ChainedAsVpControllerTokenResponses = {
-    200: ChainedAsTokenResponseDto;
-};
-type ChainedAsVpControllerTokenResponse = ChainedAsVpControllerTokenResponses[keyof ChainedAsVpControllerTokenResponses];
 type VerifierOfferControllerGetOfferData = {
     body: PresentationRequest;
     path?: never;
@@ -7366,5 +7682,40 @@ type ConfigPortabilityControllerDetachResponses = {
     201: ConfigResourceMetadataEntity;
 };
 type ConfigPortabilityControllerDetachResponse = ConfigPortabilityControllerDetachResponses[keyof ConfigPortabilityControllerDetachResponses];
+type ConfigPortabilityControllerPlanReattachData = {
+    body?: never;
+    path: {
+        kind: string;
+        id: string;
+    };
+    query?: never;
+    url: '/api/config-bundles/resources/{kind}/{id}/reattach/plan';
+};
+type ConfigPortabilityControllerPlanReattachResponses = {
+    201: {
+        [key: string]: unknown;
+    };
+};
+type ConfigPortabilityControllerPlanReattachResponse = ConfigPortabilityControllerPlanReattachResponses[keyof ConfigPortabilityControllerPlanReattachResponses];
+type ConfigPortabilityControllerReattachData = {
+    body?: never;
+    path: {
+        kind: string;
+        id: string;
+    };
+    query: {
+        /**
+         * Fingerprint from the reviewed reattach plan
+         */
+        planFingerprint: string;
+    };
+    url: '/api/config-bundles/resources/{kind}/{id}/reattach';
+};
+type ConfigPortabilityControllerReattachResponses = {
+    201: {
+        [key: string]: unknown;
+    };
+};
+type ConfigPortabilityControllerReattachResponse = ConfigPortabilityControllerReattachResponses[keyof ConfigPortabilityControllerReattachResponses];
 
-export type { CacheControllerClearStatusListCacheResponses as $, AccessCertificateRefDto as A, AttributeProviderControllerUpdateResponse as B, ClientOptions as C, AttributeProviderControllerUpdateResponses as D, AttributeProviderEntity as E, AuditLogControllerGetAuditLogsData as F, AuditLogControllerGetAuditLogsResponse as G, AuditLogControllerGetAuditLogsResponses as H, AuditLogResponseDto as I, AuthControllerGetOAuth2TokenData as J, AuthControllerGetOAuth2TokenError as K, AuthControllerGetOAuth2TokenErrors as L, AuthControllerGetOAuth2TokenResponse as M, AuthControllerGetOAuth2TokenResponses as N, AuthenticationMethodAuth as O, AuthenticationMethodNone as P, AuthenticationMethodPresentation as Q, AuthenticationUrlConfig as R, Session as S, AuthorizationResponse as T, AuthorizeQueries as U, BuiltInAuthorizationServerConfig as V, CacheControllerClearAllCachesData as W, CacheControllerClearAllCachesResponse as X, CacheControllerClearAllCachesResponses as Y, CacheControllerClearStatusListCacheData as Z, CacheControllerClearStatusListCacheResponse as _, ActiveCredentialPolicy as a, ConfigPortabilityControllerDetachResponses as a$, CacheControllerClearTrustListCacheData as a0, CacheControllerClearTrustListCacheResponse as a1, CacheControllerClearTrustListCacheResponses as a2, CacheControllerGetStatsData as a3, CacheControllerGetStatsResponse as a4, CacheControllerGetStatsResponses as a5, CacheStatsResponseDto as a6, CertificateInfoDto as a7, ChainedAsErrorResponseDto as a8, ChainedAsParRequestDto as a9, ClientControllerDeleteClientData as aA, ClientControllerDeleteClientResponse as aB, ClientControllerDeleteClientResponses as aC, ClientControllerGetClientData as aD, ClientControllerGetClientErrors as aE, ClientControllerGetClientResponse as aF, ClientControllerGetClientResponses as aG, ClientControllerGetClientsData as aH, ClientControllerGetClientsResponse as aI, ClientControllerGetClientsResponses as aJ, ClientControllerRotateClientSecretData as aK, ClientControllerRotateClientSecretResponse as aL, ClientControllerRotateClientSecretResponses as aM, ClientControllerUpdateClientData as aN, ClientControllerUpdateClientErrors as aO, ClientControllerUpdateClientResponse as aP, ClientControllerUpdateClientResponses as aQ, ClientCredentialsDto as aR, ClientEntity as aS, ClientSecretResponseDto as aT, CompleteDeferredDto as aU, ConfigImportRunEntity as aV, ConfigPortabilityControllerAcknowledgeInterruptionData as aW, ConfigPortabilityControllerAcknowledgeInterruptionResponse as aX, ConfigPortabilityControllerAcknowledgeInterruptionResponses as aY, ConfigPortabilityControllerDetachData as aZ, ConfigPortabilityControllerDetachResponse as a_, ChainedAsParResponseDto as aa, ChainedAsTokenConfig as ab, ChainedAsTokenRequestDto as ac, ChainedAsTokenResponseDto as ad, ChainedAsVpControllerAuthorizeData as ae, ChainedAsVpControllerAuthorizeError as af, ChainedAsVpControllerAuthorizeErrors as ag, ChainedAsVpControllerParData as ah, ChainedAsVpControllerParError as ai, ChainedAsVpControllerParErrors as aj, ChainedAsVpControllerParResponse as ak, ChainedAsVpControllerParResponses as al, ChainedAsVpControllerTokenData as am, ChainedAsVpControllerTokenError as an, ChainedAsVpControllerTokenErrors as ao, ChainedAsVpControllerTokenResponse as ap, ChainedAsVpControllerTokenResponses as aq, ChainedAsVpControllerVpCallbackData as ar, ChainedAsVpControllerVpCallbackError as as, ChainedAsVpControllerVpCallbackErrors as at, ChainedAuthorizationServerConfig as au, ClaimFieldDefinitionDto as av, ClaimsQuery as aw, ClientControllerCreateClientData as ax, ClientControllerCreateClientResponse as ay, ClientControllerCreateClientResponses as az, AllowListPolicy as b, DeferredControllerCompleteDeferredData as b$, ConfigPortabilityControllerExportData as b0, ConfigPortabilityControllerExportResponse as b1, ConfigPortabilityControllerExportResponses as b2, ConfigPortabilityControllerImportArchiveData as b3, ConfigPortabilityControllerImportArchiveResponse as b4, ConfigPortabilityControllerImportArchiveResponses as b5, ConfigPortabilityControllerImportData as b6, ConfigPortabilityControllerImportResponse as b7, ConfigPortabilityControllerImportResponses as b8, ConfigPortabilityControllerOperationData as b9, CredentialConfigControllerDeleteIssuanceConfigurationData as bA, CredentialConfigControllerDeleteIssuanceConfigurationResponse as bB, CredentialConfigControllerDeleteIssuanceConfigurationResponses as bC, CredentialConfigControllerGetConfigByIdData as bD, CredentialConfigControllerGetConfigByIdResponse as bE, CredentialConfigControllerGetConfigByIdResponses as bF, CredentialConfigControllerGetConfigsData as bG, CredentialConfigControllerGetConfigsResponse as bH, CredentialConfigControllerGetConfigsResponses as bI, CredentialConfigControllerStoreCredentialConfigurationData as bJ, CredentialConfigControllerStoreCredentialConfigurationResponse as bK, CredentialConfigControllerStoreCredentialConfigurationResponses as bL, CredentialConfigControllerUpdateCredentialConfigurationData as bM, CredentialConfigControllerUpdateCredentialConfigurationResponse as bN, CredentialConfigControllerUpdateCredentialConfigurationResponses as bO, CredentialConfigCreate as bP, CredentialConfigUpdate as bQ, CredentialIssuerMetadataDto as bR, CredentialOfferControllerGetOfferData as bS, CredentialOfferControllerGetOfferResponse as bT, CredentialOfferControllerGetOfferResponses as bU, CredentialQueryDcSdJwt as bV, CredentialQueryMsoMdoc as bW, CredentialReusePolicy as bX, CredentialSetQuery as bY, DcSdJwtCredentialQueryMeta as bZ, Dcql as b_, ConfigPortabilityControllerOperationResponse as ba, ConfigPortabilityControllerOperationResponses as bb, ConfigPortabilityControllerOperationsData as bc, ConfigPortabilityControllerOperationsResponse as bd, ConfigPortabilityControllerOperationsResponses as be, ConfigPortabilityControllerPlanArchiveData as bf, ConfigPortabilityControllerPlanArchiveResponse as bg, ConfigPortabilityControllerPlanArchiveResponses as bh, ConfigPortabilityControllerPlanData as bi, ConfigPortabilityControllerPlanResponse as bj, ConfigPortabilityControllerPlanResponses as bk, ConfigPortabilityControllerResourcesData as bl, ConfigPortabilityControllerResourcesResponse as bm, ConfigPortabilityControllerResourcesResponses as bn, ConfigPortabilityControllerUpgradeData as bo, ConfigPortabilityControllerUpgradeResponses as bp, ConfigResourceMetadataEntity as bq, CreateAccessCertificateDto as br, CreateAttributeProviderDto as bs, CreateClientDto as bt, CreateRegistrarConfigDto as bu, CreateStatusListDto as bv, CreateTenantDto as bw, CreateUserDto as bx, CreateWebhookEndpointDto as by, CredentialConfig as bz, ApiKeyConfig as c, KeyChainControllerExportData as c$, DeferredControllerCompleteDeferredErrors as c0, DeferredControllerCompleteDeferredResponse as c1, DeferredControllerCompleteDeferredResponses as c2, DeferredControllerFailDeferredData as c3, DeferredControllerFailDeferredErrors as c4, DeferredControllerFailDeferredResponse as c5, DeferredControllerFailDeferredResponses as c6, DeferredCredentialRequestDto as c7, DeferredOperationResponse as c8, DeprecateSchemaMetadataDto as c9, IssuanceConfigControllerGetIssuanceConfigurationsData as cA, IssuanceConfigControllerGetIssuanceConfigurationsResponse as cB, IssuanceConfigControllerGetIssuanceConfigurationsResponses as cC, IssuanceConfigControllerReissueRegistrationCertificateData as cD, IssuanceConfigControllerReissueRegistrationCertificateErrors as cE, IssuanceConfigControllerReissueRegistrationCertificateResponse as cF, IssuanceConfigControllerReissueRegistrationCertificateResponses as cG, IssuanceConfigControllerStoreIssuanceConfigurationData as cH, IssuanceConfigControllerStoreIssuanceConfigurationResponse as cI, IssuanceConfigControllerStoreIssuanceConfigurationResponses as cJ, IssuanceConfigWritable as cK, IssuerMetadataCredentialConfig as cL, IssuerOfferEntryDto as cM, IssuerRegistrationCertificateCache as cN, IssuerRegistrationCertificateConfig as cO, JwksResponseDto as cP, KeyAttestationsRequired as cQ, KeyChainControllerCreateData as cR, KeyChainControllerCreateResponse as cS, KeyChainControllerCreateResponses as cT, KeyChainControllerDeleteData as cU, KeyChainControllerDeleteErrors as cV, KeyChainControllerDeleteResponse as cW, KeyChainControllerDeleteResponses as cX, KeyChainControllerDeleteTenantKmsConfigData as cY, KeyChainControllerDeleteTenantKmsConfigResponse as cZ, KeyChainControllerDeleteTenantKmsConfigResponses as c_, Display as ca, DisplayImage as cb, DisplayInfo as cc, DisplayLogo as cd, EcJwk as ce, EcPublic as cf, EmbeddedDisclosurePolicy as cg, ExportEcJwk as ch, ExportRotationPolicyDto as ci, ExternalAuthorizationServerConfig as cj, ExternalTrustListEntity as ck, FailDeferredDto as cl, FederationConfig as cm, FederationTrustAnchorConfig as cn, FieldDisplayDto as co, FileUploadDto as cp, FrontendConfigResponseDto as cq, GrafanaConfigDto as cr, IaeActionOpenid4VpPresentation as cs, IaeActionRedirectToWeb as ct, ImportTenantDto as cu, InteractiveAuthorizationCodeResponseDto as cv, InteractiveAuthorizationErrorResponseDto as cw, InteractiveAuthorizationRequestDto as cx, InternalTrustListEntity as cy, IssuanceConfig as cz, AppControllerGetFrontendConfigData as d, PresentationAttachment as d$, KeyChainControllerExportErrors as d0, KeyChainControllerExportResponse as d1, KeyChainControllerExportResponses as d2, KeyChainControllerGetAllData as d3, KeyChainControllerGetAllResponse as d4, KeyChainControllerGetAllResponses as d5, KeyChainControllerGetByIdData as d6, KeyChainControllerGetByIdErrors as d7, KeyChainControllerGetByIdResponse as d8, KeyChainControllerGetByIdResponses as d9, KeyChainExportDto as dA, KeyChainIdResponseDto as dB, KeyChainImportDto as dC, KeyChainResponseDto as dD, KeyChainUpdateDto as dE, KeyResponseDto as dF, KmsConfigDto as dG, KmsProviderCapabilitiesDto as dH, KmsProviderInfoDto as dI, KmsProvidersResponseDto as dJ, KmsTenantConfigResponseDto as dK, ManagedAuthorizationServerConfig as dL, ManagedUserDto as dM, MetadataSchemaDto as dN, MsoMdocClaimsQuery as dO, MsoMdocCredentialQueryMeta as dP, NoneTrustPolicy as dQ, NotificationRequestDto as dR, OAuthTokenErrorResponseDto as dS, Object$1 as dT, ObjectWritable as dU, OfferRequestDto as dV, OfferResponse as dW, Oid4VpAuthorizationServerConfig as dX, PaginatedSessionResponseDto as dY, ParResponseDto as dZ, PolicyCredential as d_, KeyChainControllerGetProvidersData as da, KeyChainControllerGetProvidersHealthData as db, KeyChainControllerGetProvidersHealthResponse as dc, KeyChainControllerGetProvidersHealthResponses as dd, KeyChainControllerGetProvidersResponse as de, KeyChainControllerGetProvidersResponses as df, KeyChainControllerGetTenantKmsConfigData as dg, KeyChainControllerGetTenantKmsConfigResponse as dh, KeyChainControllerGetTenantKmsConfigResponses as di, KeyChainControllerImportData as dj, KeyChainControllerImportResponse as dk, KeyChainControllerImportResponses as dl, KeyChainControllerRotateData as dm, KeyChainControllerRotateErrors as dn, KeyChainControllerRotateResponse as dp, KeyChainControllerRotateResponses as dq, KeyChainControllerUpdateData as dr, KeyChainControllerUpdateErrors as ds, KeyChainControllerUpdateResponse as dt, KeyChainControllerUpdateResponses as du, KeyChainControllerUpdateTenantKmsConfigData as dv, KeyChainControllerUpdateTenantKmsConfigResponse as dw, KeyChainControllerUpdateTenantKmsConfigResponses as dx, KeyChainCreateDto as dy, KeyChainEntity as dz, AppControllerGetFrontendConfigResponse as e, RegistrationCertificateDefaults as e$, PresentationConfig as e0, PresentationConfigCreateDto as e1, PresentationConfigUpdateDto as e2, PresentationConfigWritable as e3, PresentationDuringIssuanceConfig as e4, PresentationManagementControllerConfigurationData as e5, PresentationManagementControllerConfigurationResponse as e6, PresentationManagementControllerConfigurationResponses as e7, PresentationManagementControllerDeleteConfigurationData as e8, PresentationManagementControllerDeleteConfigurationResponse as e9, PresentationManagementControllerUpdateConfigurationData as eA, PresentationManagementControllerUpdateConfigurationResponse as eB, PresentationManagementControllerUpdateConfigurationResponses as eC, PresentationRequest as eD, ProviderHealthResponseDto as eE, PublicKeyInfoDto as eF, RegistrarConfigResponseDto as eG, RegistrarControllerCreateAccessCertificateData as eH, RegistrarControllerCreateAccessCertificateErrors as eI, RegistrarControllerCreateAccessCertificateResponse as eJ, RegistrarControllerCreateAccessCertificateResponses as eK, RegistrarControllerCreateConfigData as eL, RegistrarControllerCreateConfigErrors as eM, RegistrarControllerCreateConfigResponse as eN, RegistrarControllerCreateConfigResponses as eO, RegistrarControllerDeleteConfigData as eP, RegistrarControllerDeleteConfigResponse as eQ, RegistrarControllerDeleteConfigResponses as eR, RegistrarControllerGetConfigData as eS, RegistrarControllerGetConfigErrors as eT, RegistrarControllerGetConfigResponse as eU, RegistrarControllerGetConfigResponses as eV, RegistrarControllerUpdateConfigData as eW, RegistrarControllerUpdateConfigErrors as eX, RegistrarControllerUpdateConfigResponse as eY, RegistrarControllerUpdateConfigResponses as eZ, RegistrationCertificateBody as e_, PresentationManagementControllerDeleteConfigurationResponses as ea, PresentationManagementControllerGetConfigurationData as eb, PresentationManagementControllerGetConfigurationResponse as ec, PresentationManagementControllerGetConfigurationResponses as ed, PresentationManagementControllerListSchemaMetadataCatalogData as ee, PresentationManagementControllerListSchemaMetadataCatalogResponse as ef, PresentationManagementControllerListSchemaMetadataCatalogResponses as eg, PresentationManagementControllerReissueRegistrationCertificateData as eh, PresentationManagementControllerReissueRegistrationCertificateErrors as ei, PresentationManagementControllerReissueRegistrationCertificateResponse as ej, PresentationManagementControllerReissueRegistrationCertificateResponses as ek, PresentationManagementControllerResolveIssuerMetadataData as el, PresentationManagementControllerResolveIssuerMetadataErrors as em, PresentationManagementControllerResolveIssuerMetadataResponse as en, PresentationManagementControllerResolveIssuerMetadataResponses as eo, PresentationManagementControllerResolveSchemaMetadataData as ep, PresentationManagementControllerResolveSchemaMetadataErrors as eq, PresentationManagementControllerResolveSchemaMetadataJwtData as er, PresentationManagementControllerResolveSchemaMetadataJwtErrors as es, PresentationManagementControllerResolveSchemaMetadataJwtResponse as et, PresentationManagementControllerResolveSchemaMetadataJwtResponses as eu, PresentationManagementControllerResolveSchemaMetadataResponse as ev, PresentationManagementControllerResolveSchemaMetadataResponses as ew, PresentationManagementControllerStorePresentationConfigData as ex, PresentationManagementControllerStorePresentationConfigResponse as ey, PresentationManagementControllerStorePresentationConfigResponses as ez, AppControllerGetFrontendConfigResponses as f, SessionConfigControllerGetConfigResponse as f$, RegistrationCertificatePurpose as f0, RegistrationCertificateRequest as f1, ResolveIssuerMetadataDto as f2, ResolveSchemaMetadataDto as f3, ResolveSchemaMetadataJwtDto as f4, ResolvedSchemaMetadataReferenceDto as f5, ResolvedSchemaMetadataResponseDto as f6, ResolvedSchemaMetadataSchemaDto as f7, ResolvedSchemaMetadataSchemaUriDto as f8, ResolvedSchemaMetadataTrustedAuthorityDto as f9, SchemaMetadataControllerGetSchemaResponse as fA, SchemaMetadataControllerGetSchemaResponses as fB, SchemaMetadataControllerGetVersionsData as fC, SchemaMetadataControllerGetVersionsResponse as fD, SchemaMetadataControllerGetVersionsResponses as fE, SchemaMetadataControllerGetVocabulariesData as fF, SchemaMetadataControllerGetVocabulariesResponse as fG, SchemaMetadataControllerGetVocabulariesResponses as fH, SchemaMetadataControllerPublishSchemaMetadataData as fI, SchemaMetadataControllerPublishSchemaMetadataErrors as fJ, SchemaMetadataControllerPublishSchemaMetadataResponse as fK, SchemaMetadataControllerPublishSchemaMetadataResponses as fL, SchemaMetadataControllerPublishSchemaMetadataVersionData as fM, SchemaMetadataControllerPublishSchemaMetadataVersionErrors as fN, SchemaMetadataControllerPublishSchemaMetadataVersionResponse as fO, SchemaMetadataControllerPublishSchemaMetadataVersionResponses as fP, SchemaMetadataControllerRemoveData as fQ, SchemaMetadataControllerRemoveResponse as fR, SchemaMetadataControllerRemoveResponses as fS, SchemaMetadataControllerUpdateData as fT, SchemaMetadataControllerUpdateResponse as fU, SchemaMetadataControllerUpdateResponses as fV, SchemaMetadataResponseDto as fW, SchemaMetadataVocabulariesDto as fX, SchemaUriEntry as fY, ServiceInfoResponseDto as fZ, SessionConfigControllerGetConfigData as f_, RoleDto as fa, RootOfTrustPolicy as fb, RotationPolicyCreateDto as fc, RotationPolicyImportDto as fd, RotationPolicyResponseDto as fe, RotationPolicyUpdateDto as ff, SchemaMetaConfig as fg, SchemaMetadataControllerDeprecateVersionData as fh, SchemaMetadataControllerDeprecateVersionResponse as fi, SchemaMetadataControllerDeprecateVersionResponses as fj, SchemaMetadataControllerFindAllData as fk, SchemaMetadataControllerFindAllResponse as fl, SchemaMetadataControllerFindAllResponses as fm, SchemaMetadataControllerFindOneData as fn, SchemaMetadataControllerFindOneResponse as fo, SchemaMetadataControllerFindOneResponses as fp, SchemaMetadataControllerGetJwtData as fq, SchemaMetadataControllerGetJwtResponse as fr, SchemaMetadataControllerGetJwtResponses as fs, SchemaMetadataControllerGetLatestData as ft, SchemaMetadataControllerGetLatestResponse as fu, SchemaMetadataControllerGetLatestResponses as fv, SchemaMetadataControllerGetMineData as fw, SchemaMetadataControllerGetMineResponse as fx, SchemaMetadataControllerGetMineResponses as fy, SchemaMetadataControllerGetSchemaData as fz, AppControllerGetVersionData as g, StoredObjectResponseDto as g$, SessionConfigControllerGetConfigResponses as g0, SessionConfigControllerResetConfigData as g1, SessionConfigControllerResetConfigResponse as g2, SessionConfigControllerResetConfigResponses as g3, SessionConfigControllerUpdateConfigData as g4, SessionConfigControllerUpdateConfigResponse as g5, SessionConfigControllerUpdateConfigResponses as g6, SessionControllerDeleteSessionData as g7, SessionControllerDeleteSessionResponse as g8, SessionControllerDeleteSessionResponses as g9, StatusListConfigControllerResetConfigData as gA, StatusListConfigControllerResetConfigResponse as gB, StatusListConfigControllerResetConfigResponses as gC, StatusListConfigControllerUpdateConfigData as gD, StatusListConfigControllerUpdateConfigResponse as gE, StatusListConfigControllerUpdateConfigResponses as gF, StatusListImportDto as gG, StatusListManagementControllerCreateListData as gH, StatusListManagementControllerCreateListResponse as gI, StatusListManagementControllerCreateListResponses as gJ, StatusListManagementControllerDeleteListData as gK, StatusListManagementControllerDeleteListResponse as gL, StatusListManagementControllerDeleteListResponses as gM, StatusListManagementControllerGetListData as gN, StatusListManagementControllerGetListResponse as gO, StatusListManagementControllerGetListResponses as gP, StatusListManagementControllerGetListsData as gQ, StatusListManagementControllerGetListsResponse as gR, StatusListManagementControllerGetListsResponses as gS, StatusListManagementControllerUpdateListData as gT, StatusListManagementControllerUpdateListResponse as gU, StatusListManagementControllerUpdateListResponses as gV, StatusListResponseDto as gW, StatusUpdateDto as gX, StorageControllerUploadData as gY, StorageControllerUploadResponse as gZ, StorageControllerUploadResponses as g_, SessionControllerGetAllSessionsData as ga, SessionControllerGetAllSessionsResponse as gb, SessionControllerGetAllSessionsResponses as gc, SessionControllerGetSessionData as gd, SessionControllerGetSessionLogsData as ge, SessionControllerGetSessionLogsResponse as gf, SessionControllerGetSessionLogsResponses as gg, SessionControllerGetSessionResponse as gh, SessionControllerGetSessionResponses as gi, SessionControllerRevokeAllData as gj, SessionControllerRevokeAllResponse as gk, SessionControllerRevokeAllResponses as gl, SessionEventsControllerSubscribeToSessionEventsData as gm, SessionEventsControllerSubscribeToSessionEventsErrors as gn, SessionEventsControllerSubscribeToSessionEventsResponse as go, SessionEventsControllerSubscribeToSessionEventsResponses as gp, SessionLogEntryResponseDto as gq, SessionStorageConfig as gr, SignSchemaMetaConfigDto as gs, SignVersionSchemaMetaConfigDto as gt, StatusListAggregationDto as gu, StatusListCacheStatsDto as gv, StatusListConfig as gw, StatusListConfigControllerGetConfigData as gx, StatusListConfigControllerGetConfigResponse as gy, StatusListConfigControllerGetConfigResponses as gz, AppControllerGetVersionResponse as h, UpdateStatusListConfigDto as h$, TenantClientCredentialsDto as h0, TenantControllerDeleteTenantData as h1, TenantControllerDeleteTenantResponse as h2, TenantControllerDeleteTenantResponses as h3, TenantControllerGetTenantData as h4, TenantControllerGetTenantResponse as h5, TenantControllerGetTenantResponses as h6, TenantControllerGetTenantsData as h7, TenantControllerGetTenantsResponse as h8, TenantControllerGetTenantsResponses as h9, TrustListControllerGetAllTrustListsResponses as hA, TrustListControllerGetTrustListData as hB, TrustListControllerGetTrustListResponse as hC, TrustListControllerGetTrustListResponses as hD, TrustListControllerGetTrustListVersionData as hE, TrustListControllerGetTrustListVersionResponse as hF, TrustListControllerGetTrustListVersionResponses as hG, TrustListControllerGetTrustListVersionsData as hH, TrustListControllerGetTrustListVersionsResponse as hI, TrustListControllerGetTrustListVersionsResponses as hJ, TrustListControllerUpdateTrustListData as hK, TrustListControllerUpdateTrustListResponse as hL, TrustListControllerUpdateTrustListResponses as hM, TrustListCreateDto as hN, TrustListEntityInfo as hO, TrustListRef as hP, TrustListVersion as hQ, TrustedAuthorityQueryEtsiTl as hR, TrustedAuthorityQueryOpenIdFederation as hS, UpdateAttributeProviderDto as hT, UpdateClientDto as hU, UpdateIssuanceDto as hV, UpdateIssuanceDtoWritable as hW, UpdateIssuerOfferDto as hX, UpdateRegistrarConfigDto as hY, UpdateSchemaMetadataDto as hZ, UpdateSessionConfigDto as h_, TenantControllerInitTenantData as ha, TenantControllerInitTenantResponse as hb, TenantControllerInitTenantResponses as hc, TenantControllerUpdateTenantData as hd, TenantControllerUpdateTenantResponse as he, TenantControllerUpdateTenantResponses as hf, TenantCreateResponseDto as hg, TenantEntity as hh, TenantResponseDto as hi, TokenResponse as hj, TransactionData as hk, TrustAuthorityDto as hl, TrustAuthorityEntry as hm, TrustList as hn, TrustListCacheStatsDto as ho, TrustListControllerCreateTrustListData as hp, TrustListControllerCreateTrustListResponse as hq, TrustListControllerCreateTrustListResponses as hr, TrustListControllerDeleteTrustListData as hs, TrustListControllerDeleteTrustListResponse as ht, TrustListControllerDeleteTrustListResponses as hu, TrustListControllerExportTrustListData as hv, TrustListControllerExportTrustListResponse as hw, TrustListControllerExportTrustListResponses as hx, TrustListControllerGetAllTrustListsData as hy, TrustListControllerGetAllTrustListsResponse as hz, AppControllerGetVersionResponses as i, UpdateStatusListDto as i0, UpdateTenantDto as i1, UpdateUserDto as i2, UpdateWebhookEndpointDto as i3, UpstreamOidcConfig as i4, UserControllerCreateUserData as i5, UserControllerCreateUserResponse as i6, UserControllerCreateUserResponses as i7, UserControllerDeleteUserData as i8, UserControllerDeleteUserResponse as i9, WebhookEndpointControllerDeleteErrors as iA, WebhookEndpointControllerDeleteResponse as iB, WebhookEndpointControllerDeleteResponses as iC, WebhookEndpointControllerGetAllData as iD, WebhookEndpointControllerGetAllResponse as iE, WebhookEndpointControllerGetAllResponses as iF, WebhookEndpointControllerGetByIdData as iG, WebhookEndpointControllerGetByIdErrors as iH, WebhookEndpointControllerGetByIdResponse as iI, WebhookEndpointControllerGetByIdResponses as iJ, WebhookEndpointControllerUpdateData as iK, WebhookEndpointControllerUpdateErrors as iL, WebhookEndpointControllerUpdateResponse as iM, WebhookEndpointControllerUpdateResponses as iN, WebhookEndpointEntity as iO, UserControllerDeleteUserResponses as ia, UserControllerGetUserData as ib, UserControllerGetUserResponse as ic, UserControllerGetUserResponses as id, UserControllerGetUsersData as ie, UserControllerGetUsersResponse as ig, UserControllerGetUsersResponses as ih, UserControllerUpdateUserData as ii, UserControllerUpdateUserResponse as ij, UserControllerUpdateUserResponses as ik, Vct as il, VerifierOfferControllerGetOfferData as im, VerifierOfferControllerGetOfferResponse as io, VerifierOfferControllerGetOfferResponses as ip, VersionResponseDto as iq, VocabularyEntryDto as ir, WalletProviderTrustListRefDto as is, WebHookAuthConfigHeader as it, WebHookAuthConfigNone as iu, WebhookConfig as iv, WebhookEndpointControllerCreateData as iw, WebhookEndpointControllerCreateResponse as ix, WebhookEndpointControllerCreateResponses as iy, WebhookEndpointControllerDeleteData as iz, AttestationBasedPolicy as j, AttributeProviderControllerCreateData as k, AttributeProviderControllerCreateResponse as l, AttributeProviderControllerCreateResponses as m, AttributeProviderControllerDeleteData as n, AttributeProviderControllerDeleteErrors as o, AttributeProviderControllerDeleteResponse as p, AttributeProviderControllerDeleteResponses as q, AttributeProviderControllerGetAllData as r, AttributeProviderControllerGetAllResponse as s, AttributeProviderControllerGetAllResponses as t, AttributeProviderControllerGetByIdData as u, AttributeProviderControllerGetByIdErrors as v, AttributeProviderControllerGetByIdResponse as w, AttributeProviderControllerGetByIdResponses as x, AttributeProviderControllerUpdateData as y, AttributeProviderControllerUpdateErrors as z };
+export type { CacheControllerClearStatusListCacheResponses as $, AccessCertificateRefDto as A, AttributeProviderControllerUpdateResponse as B, ClientOptions as C, AttributeProviderControllerUpdateResponses as D, AttributeProviderEntity as E, AuditLogControllerGetAuditLogsData as F, AuditLogControllerGetAuditLogsResponse as G, AuditLogControllerGetAuditLogsResponses as H, AuditLogResponseDto as I, AuthControllerGetOAuth2TokenData as J, AuthControllerGetOAuth2TokenError as K, AuthControllerGetOAuth2TokenErrors as L, AuthControllerGetOAuth2TokenResponse as M, AuthControllerGetOAuth2TokenResponses as N, AuthenticationMethodAuth as O, AuthenticationMethodNone as P, AuthenticationMethodPresentation as Q, AuthenticationUrlConfig as R, Session as S, AuthorizationResponse as T, AuthorizeQueries as U, BuiltInAuthorizationServerConfig as V, CacheControllerClearAllCachesData as W, CacheControllerClearAllCachesResponse as X, CacheControllerClearAllCachesResponses as Y, CacheControllerClearStatusListCacheData as Z, CacheControllerClearStatusListCacheResponse as _, ActiveCredentialPolicy as a, ConfigPortabilityControllerOperationsResponses as a$, CacheControllerClearTrustListCacheData as a0, CacheControllerClearTrustListCacheResponse as a1, CacheControllerClearTrustListCacheResponses as a2, CacheControllerGetStatsData as a3, CacheControllerGetStatsResponse as a4, CacheControllerGetStatsResponses as a5, CacheStatsResponseDto as a6, CancelSessionDto as a7, CertificateInfoDto as a8, ChainedAsErrorResponseDto as a9, ClientControllerUpdateClientResponse as aA, ClientControllerUpdateClientResponses as aB, ClientCredentialsDto as aC, ClientEntity as aD, ClientSecretResponseDto as aE, CompleteDeferredDto as aF, ConfigImportRunEntity as aG, ConfigPortabilityControllerAcknowledgeInterruptionData as aH, ConfigPortabilityControllerAcknowledgeInterruptionResponse as aI, ConfigPortabilityControllerAcknowledgeInterruptionResponses as aJ, ConfigPortabilityControllerDetachData as aK, ConfigPortabilityControllerDetachResponse as aL, ConfigPortabilityControllerDetachResponses as aM, ConfigPortabilityControllerExportData as aN, ConfigPortabilityControllerExportResponse as aO, ConfigPortabilityControllerExportResponses as aP, ConfigPortabilityControllerImportArchiveData as aQ, ConfigPortabilityControllerImportArchiveResponse as aR, ConfigPortabilityControllerImportArchiveResponses as aS, ConfigPortabilityControllerImportData as aT, ConfigPortabilityControllerImportResponse as aU, ConfigPortabilityControllerImportResponses as aV, ConfigPortabilityControllerOperationData as aW, ConfigPortabilityControllerOperationResponse as aX, ConfigPortabilityControllerOperationResponses as aY, ConfigPortabilityControllerOperationsData as aZ, ConfigPortabilityControllerOperationsResponse as a_, ChainedAsParRequestDto as aa, ChainedAsParResponseDto as ab, ChainedAsTokenConfig as ac, ChainedAsTokenRequestDto as ad, ChainedAsTokenResponseDto as ae, ChainedAuthorizationServerConfig as af, ClaimFieldDefinitionDto as ag, ClaimsQuery as ah, ClientControllerCreateClientData as ai, ClientControllerCreateClientResponse as aj, ClientControllerCreateClientResponses as ak, ClientControllerDeleteClientData as al, ClientControllerDeleteClientResponse as am, ClientControllerDeleteClientResponses as an, ClientControllerGetClientData as ao, ClientControllerGetClientErrors as ap, ClientControllerGetClientResponse as aq, ClientControllerGetClientResponses as ar, ClientControllerGetClientsData as as, ClientControllerGetClientsResponse as at, ClientControllerGetClientsResponses as au, ClientControllerRotateClientSecretData as av, ClientControllerRotateClientSecretResponse as aw, ClientControllerRotateClientSecretResponses as ax, ClientControllerUpdateClientData as ay, ClientControllerUpdateClientErrors as az, AllowListPolicy as b, DeferredCredentialRequestDto as b$, ConfigPortabilityControllerPlanArchiveData as b0, ConfigPortabilityControllerPlanArchiveResponse as b1, ConfigPortabilityControllerPlanArchiveResponses as b2, ConfigPortabilityControllerPlanData as b3, ConfigPortabilityControllerPlanReattachData as b4, ConfigPortabilityControllerPlanReattachResponse as b5, ConfigPortabilityControllerPlanReattachResponses as b6, ConfigPortabilityControllerPlanResponse as b7, ConfigPortabilityControllerPlanResponses as b8, ConfigPortabilityControllerReattachData as b9, CredentialConfigControllerStoreCredentialConfigurationData as bA, CredentialConfigControllerStoreCredentialConfigurationResponse as bB, CredentialConfigControllerStoreCredentialConfigurationResponses as bC, CredentialConfigControllerUpdateCredentialConfigurationData as bD, CredentialConfigControllerUpdateCredentialConfigurationResponse as bE, CredentialConfigControllerUpdateCredentialConfigurationResponses as bF, CredentialConfigCreate as bG, CredentialConfigUpdate as bH, CredentialIssuerMetadataDto as bI, CredentialOfferControllerGetOfferData as bJ, CredentialOfferControllerGetOfferResponse as bK, CredentialOfferControllerGetOfferResponses as bL, CredentialQueryDcSdJwt as bM, CredentialQueryMsoMdoc as bN, CredentialReusePolicy as bO, CredentialSetQuery as bP, CredentialStatusDto as bQ, DcSdJwtCredentialQueryMeta as bR, Dcql as bS, DeferredControllerCompleteDeferredData as bT, DeferredControllerCompleteDeferredErrors as bU, DeferredControllerCompleteDeferredResponse as bV, DeferredControllerCompleteDeferredResponses as bW, DeferredControllerFailDeferredData as bX, DeferredControllerFailDeferredErrors as bY, DeferredControllerFailDeferredResponse as bZ, DeferredControllerFailDeferredResponses as b_, ConfigPortabilityControllerReattachResponse as ba, ConfigPortabilityControllerReattachResponses as bb, ConfigPortabilityControllerResourcesData as bc, ConfigPortabilityControllerResourcesResponse as bd, ConfigPortabilityControllerResourcesResponses as be, ConfigPortabilityControllerUpgradeData as bf, ConfigPortabilityControllerUpgradeResponses as bg, ConfigResourceMetadataEntity as bh, CreateAccessCertificateDto as bi, CreateAttributeProviderDto as bj, CreateClientDto as bk, CreateRegistrarConfigDto as bl, CreateStatusListDto as bm, CreateTenantDto as bn, CreateUserDto as bo, CreateWebhookEndpointDto as bp, CredentialConfig as bq, CredentialConfigControllerDeleteIssuanceConfigurationData as br, CredentialConfigControllerDeleteIssuanceConfigurationResponse as bs, CredentialConfigControllerDeleteIssuanceConfigurationResponses as bt, CredentialConfigControllerGetConfigByIdData as bu, CredentialConfigControllerGetConfigByIdResponse as bv, CredentialConfigControllerGetConfigByIdResponses as bw, CredentialConfigControllerGetConfigsData as bx, CredentialConfigControllerGetConfigsResponse as by, CredentialConfigControllerGetConfigsResponses as bz, ApiKeyConfig as c, KeyChainControllerGetByIdData as c$, DeferredOperationResponse as c0, DeprecateSchemaMetadataDto as c1, Display as c2, DisplayImage as c3, DisplayInfo as c4, DisplayLogo as c5, EcJwk as c6, EcPublic as c7, EmbeddedDisclosurePolicy as c8, ExportEcJwk as c9, IssuanceConfigControllerStoreIssuanceConfigurationResponse as cA, IssuanceConfigControllerStoreIssuanceConfigurationResponses as cB, IssuanceConfigWritable as cC, IssuerMetadataCredentialConfig as cD, IssuerOfferEntryDto as cE, IssuerRegistrationCertificateCache as cF, IssuerRegistrationCertificateConfig as cG, JwksResponseDto as cH, KeyAttestationsRequired as cI, KeyChainControllerCreateData as cJ, KeyChainControllerCreateResponse as cK, KeyChainControllerCreateResponses as cL, KeyChainControllerDeleteData as cM, KeyChainControllerDeleteErrors as cN, KeyChainControllerDeleteResponse as cO, KeyChainControllerDeleteResponses as cP, KeyChainControllerDeleteTenantKmsConfigData as cQ, KeyChainControllerDeleteTenantKmsConfigErrors as cR, KeyChainControllerDeleteTenantKmsConfigResponse as cS, KeyChainControllerDeleteTenantKmsConfigResponses as cT, KeyChainControllerExportData as cU, KeyChainControllerExportErrors as cV, KeyChainControllerExportResponse as cW, KeyChainControllerExportResponses as cX, KeyChainControllerGetAllData as cY, KeyChainControllerGetAllResponse as cZ, KeyChainControllerGetAllResponses as c_, ExportRotationPolicyDto as ca, ExternalAuthorizationServerConfig as cb, ExternalTrustListEntity as cc, FailDeferredDto as cd, FederationConfig as ce, FederationTrustAnchorConfig as cf, FieldDisplayDto as cg, FileUploadDto as ch, FrontendConfigResponseDto as ci, GrafanaConfigDto as cj, IaeActionOpenid4VpPresentation as ck, IaeActionRedirectToWeb as cl, ImportTenantDto as cm, InteractiveAuthorizationCodeResponseDto as cn, InteractiveAuthorizationErrorResponseDto as co, InteractiveAuthorizationRequestDto as cp, InternalTrustListEntity as cq, IssuanceConfig as cr, IssuanceConfigControllerGetIssuanceConfigurationsData as cs, IssuanceConfigControllerGetIssuanceConfigurationsResponse as ct, IssuanceConfigControllerGetIssuanceConfigurationsResponses as cu, IssuanceConfigControllerReissueRegistrationCertificateData as cv, IssuanceConfigControllerReissueRegistrationCertificateErrors as cw, IssuanceConfigControllerReissueRegistrationCertificateResponse as cx, IssuanceConfigControllerReissueRegistrationCertificateResponses as cy, IssuanceConfigControllerStoreIssuanceConfigurationData as cz, AppControllerGetFrontendConfigData as d, PresentationDuringIssuanceConfig as d$, KeyChainControllerGetByIdErrors as d0, KeyChainControllerGetByIdResponse as d1, KeyChainControllerGetByIdResponses as d2, KeyChainControllerGetProvidersData as d3, KeyChainControllerGetProvidersHealthData as d4, KeyChainControllerGetProvidersHealthResponse as d5, KeyChainControllerGetProvidersHealthResponses as d6, KeyChainControllerGetProvidersResponse as d7, KeyChainControllerGetProvidersResponses as d8, KeyChainControllerGetTenantKmsConfigData as d9, KeyResponseDto as dA, KmsConfigDto as dB, KmsProviderCapabilitiesDto as dC, KmsProviderInfoDto as dD, KmsProvidersResponseDto as dE, KmsTenantConfigResponseDto as dF, ManagedAuthorizationServerConfig as dG, ManagedUserDto as dH, MetadataSchemaDto as dI, MsoMdocClaimsQuery as dJ, MsoMdocCredentialQueryMeta as dK, NoneTrustPolicy as dL, NotificationRequestDto as dM, OAuthTokenErrorResponseDto as dN, Object$1 as dO, ObjectWritable as dP, OfferRequestDto as dQ, OfferResponse as dR, Oid4VpAuthorizationServerConfig as dS, PaginatedSessionResponseDto as dT, ParResponseDto as dU, PolicyCredential as dV, PresentationAttachment as dW, PresentationConfig as dX, PresentationConfigCreateDto as dY, PresentationConfigUpdateDto as dZ, PresentationConfigWritable as d_, KeyChainControllerGetTenantKmsConfigErrors as da, KeyChainControllerGetTenantKmsConfigResponse as db, KeyChainControllerGetTenantKmsConfigResponses as dc, KeyChainControllerImportData as dd, KeyChainControllerImportResponse as de, KeyChainControllerImportResponses as df, KeyChainControllerRotateData as dg, KeyChainControllerRotateErrors as dh, KeyChainControllerRotateResponse as di, KeyChainControllerRotateResponses as dj, KeyChainControllerUpdateData as dk, KeyChainControllerUpdateErrors as dl, KeyChainControllerUpdateResponse as dm, KeyChainControllerUpdateResponses as dn, KeyChainControllerUpdateTenantKmsConfigData as dp, KeyChainControllerUpdateTenantKmsConfigErrors as dq, KeyChainControllerUpdateTenantKmsConfigResponse as dr, KeyChainControllerUpdateTenantKmsConfigResponses as ds, KeyChainCreateDto as dt, KeyChainEntity as du, KeyChainExportDto as dv, KeyChainIdResponseDto as dw, KeyChainImportDto as dx, KeyChainResponseDto as dy, KeyChainUpdateDto as dz, AppControllerGetFrontendConfigResponse as e, ResolveSchemaMetadataJwtDto as e$, PresentationManagementControllerConfigurationData as e0, PresentationManagementControllerConfigurationResponse as e1, PresentationManagementControllerConfigurationResponses as e2, PresentationManagementControllerDeleteConfigurationData as e3, PresentationManagementControllerDeleteConfigurationResponse as e4, PresentationManagementControllerDeleteConfigurationResponses as e5, PresentationManagementControllerGetConfigurationData as e6, PresentationManagementControllerGetConfigurationResponse as e7, PresentationManagementControllerGetConfigurationResponses as e8, PresentationManagementControllerListSchemaMetadataCatalogData as e9, PublicKeyInfoDto as eA, RegistrarConfigResponseDto as eB, RegistrarControllerCreateAccessCertificateData as eC, RegistrarControllerCreateAccessCertificateErrors as eD, RegistrarControllerCreateAccessCertificateResponse as eE, RegistrarControllerCreateAccessCertificateResponses as eF, RegistrarControllerCreateConfigData as eG, RegistrarControllerCreateConfigErrors as eH, RegistrarControllerCreateConfigResponse as eI, RegistrarControllerCreateConfigResponses as eJ, RegistrarControllerDeleteConfigData as eK, RegistrarControllerDeleteConfigResponse as eL, RegistrarControllerDeleteConfigResponses as eM, RegistrarControllerGetConfigData as eN, RegistrarControllerGetConfigErrors as eO, RegistrarControllerGetConfigResponse as eP, RegistrarControllerGetConfigResponses as eQ, RegistrarControllerUpdateConfigData as eR, RegistrarControllerUpdateConfigErrors as eS, RegistrarControllerUpdateConfigResponse as eT, RegistrarControllerUpdateConfigResponses as eU, RegistrationCertificateBody as eV, RegistrationCertificateDefaults as eW, RegistrationCertificatePurpose as eX, RegistrationCertificateRequest as eY, ResolveIssuerMetadataDto as eZ, ResolveSchemaMetadataDto as e_, PresentationManagementControllerListSchemaMetadataCatalogResponse as ea, PresentationManagementControllerListSchemaMetadataCatalogResponses as eb, PresentationManagementControllerReissueRegistrationCertificateData as ec, PresentationManagementControllerReissueRegistrationCertificateErrors as ed, PresentationManagementControllerReissueRegistrationCertificateResponse as ee, PresentationManagementControllerReissueRegistrationCertificateResponses as ef, PresentationManagementControllerResolveIssuerMetadataData as eg, PresentationManagementControllerResolveIssuerMetadataErrors as eh, PresentationManagementControllerResolveIssuerMetadataResponse as ei, PresentationManagementControllerResolveIssuerMetadataResponses as ej, PresentationManagementControllerResolveSchemaMetadataData as ek, PresentationManagementControllerResolveSchemaMetadataErrors as el, PresentationManagementControllerResolveSchemaMetadataJwtData as em, PresentationManagementControllerResolveSchemaMetadataJwtErrors as en, PresentationManagementControllerResolveSchemaMetadataJwtResponse as eo, PresentationManagementControllerResolveSchemaMetadataJwtResponses as ep, PresentationManagementControllerResolveSchemaMetadataResponse as eq, PresentationManagementControllerResolveSchemaMetadataResponses as er, PresentationManagementControllerStorePresentationConfigData as es, PresentationManagementControllerStorePresentationConfigResponse as et, PresentationManagementControllerStorePresentationConfigResponses as eu, PresentationManagementControllerUpdateConfigurationData as ev, PresentationManagementControllerUpdateConfigurationResponse as ew, PresentationManagementControllerUpdateConfigurationResponses as ex, PresentationRequest as ey, ProviderHealthResponseDto as ez, AppControllerGetFrontendConfigResponses as f, SessionConfigControllerUpdateConfigData as f$, ResolvedSchemaMetadataReferenceDto as f0, ResolvedSchemaMetadataResponseDto as f1, ResolvedSchemaMetadataSchemaDto as f2, ResolvedSchemaMetadataSchemaUriDto as f3, ResolvedSchemaMetadataTrustedAuthorityDto as f4, RoleDto as f5, RootOfTrustPolicy as f6, RotationPolicyCreateDto as f7, RotationPolicyImportDto as f8, RotationPolicyResponseDto as f9, SchemaMetadataControllerGetVocabulariesData as fA, SchemaMetadataControllerGetVocabulariesResponse as fB, SchemaMetadataControllerGetVocabulariesResponses as fC, SchemaMetadataControllerPublishSchemaMetadataData as fD, SchemaMetadataControllerPublishSchemaMetadataErrors as fE, SchemaMetadataControllerPublishSchemaMetadataResponse as fF, SchemaMetadataControllerPublishSchemaMetadataResponses as fG, SchemaMetadataControllerPublishSchemaMetadataVersionData as fH, SchemaMetadataControllerPublishSchemaMetadataVersionErrors as fI, SchemaMetadataControllerPublishSchemaMetadataVersionResponse as fJ, SchemaMetadataControllerPublishSchemaMetadataVersionResponses as fK, SchemaMetadataControllerRemoveData as fL, SchemaMetadataControllerRemoveResponse as fM, SchemaMetadataControllerRemoveResponses as fN, SchemaMetadataControllerUpdateData as fO, SchemaMetadataControllerUpdateResponse as fP, SchemaMetadataControllerUpdateResponses as fQ, SchemaMetadataResponseDto as fR, SchemaMetadataVocabulariesDto as fS, SchemaUriEntry as fT, ServiceInfoResponseDto as fU, SessionConfigControllerGetConfigData as fV, SessionConfigControllerGetConfigResponse as fW, SessionConfigControllerGetConfigResponses as fX, SessionConfigControllerResetConfigData as fY, SessionConfigControllerResetConfigResponse as fZ, SessionConfigControllerResetConfigResponses as f_, RotationPolicyUpdateDto as fa, SchemaMetaConfig as fb, SchemaMetadataControllerDeprecateVersionData as fc, SchemaMetadataControllerDeprecateVersionResponse as fd, SchemaMetadataControllerDeprecateVersionResponses as fe, SchemaMetadataControllerFindAllData as ff, SchemaMetadataControllerFindAllResponse as fg, SchemaMetadataControllerFindAllResponses as fh, SchemaMetadataControllerFindOneData as fi, SchemaMetadataControllerFindOneResponse as fj, SchemaMetadataControllerFindOneResponses as fk, SchemaMetadataControllerGetJwtData as fl, SchemaMetadataControllerGetJwtResponse as fm, SchemaMetadataControllerGetJwtResponses as fn, SchemaMetadataControllerGetLatestData as fo, SchemaMetadataControllerGetLatestResponse as fp, SchemaMetadataControllerGetLatestResponses as fq, SchemaMetadataControllerGetMineData as fr, SchemaMetadataControllerGetMineResponse as fs, SchemaMetadataControllerGetMineResponses as ft, SchemaMetadataControllerGetSchemaData as fu, SchemaMetadataControllerGetSchemaResponse as fv, SchemaMetadataControllerGetSchemaResponses as fw, SchemaMetadataControllerGetVersionsData as fx, SchemaMetadataControllerGetVersionsResponse as fy, SchemaMetadataControllerGetVersionsResponses as fz, AppControllerGetVersionData as g, StatusListManagementControllerGetListsResponse as g$, SessionConfigControllerUpdateConfigResponse as g0, SessionConfigControllerUpdateConfigResponses as g1, SessionControllerCancelData as g2, SessionControllerCancelErrors as g3, SessionControllerCancelResponse as g4, SessionControllerCancelResponses as g5, SessionControllerDeleteSessionData as g6, SessionControllerDeleteSessionResponse as g7, SessionControllerDeleteSessionResponses as g8, SessionControllerGetAllSessionsData as g9, SessionStorageConfig as gA, SessionTypeStatsDto as gB, SignSchemaMetaConfigDto as gC, SignVersionSchemaMetaConfigDto as gD, StatusListAggregationDto as gE, StatusListCacheStatsDto as gF, StatusListConfig as gG, StatusListConfigControllerGetConfigData as gH, StatusListConfigControllerGetConfigResponse as gI, StatusListConfigControllerGetConfigResponses as gJ, StatusListConfigControllerResetConfigData as gK, StatusListConfigControllerResetConfigResponse as gL, StatusListConfigControllerResetConfigResponses as gM, StatusListConfigControllerUpdateConfigData as gN, StatusListConfigControllerUpdateConfigResponse as gO, StatusListConfigControllerUpdateConfigResponses as gP, StatusListImportDto as gQ, StatusListManagementControllerCreateListData as gR, StatusListManagementControllerCreateListResponse as gS, StatusListManagementControllerCreateListResponses as gT, StatusListManagementControllerDeleteListData as gU, StatusListManagementControllerDeleteListResponse as gV, StatusListManagementControllerDeleteListResponses as gW, StatusListManagementControllerGetListData as gX, StatusListManagementControllerGetListResponse as gY, StatusListManagementControllerGetListResponses as gZ, StatusListManagementControllerGetListsData as g_, SessionControllerGetAllSessionsResponse as ga, SessionControllerGetAllSessionsResponses as gb, SessionControllerGetCredentialStatusData as gc, SessionControllerGetCredentialStatusErrors as gd, SessionControllerGetCredentialStatusResponse as ge, SessionControllerGetCredentialStatusResponses as gf, SessionControllerGetSessionData as gg, SessionControllerGetSessionLogsData as gh, SessionControllerGetSessionLogsResponse as gi, SessionControllerGetSessionLogsResponses as gj, SessionControllerGetSessionResponse as gk, SessionControllerGetSessionResponses as gl, SessionControllerGetSessionStatsData as gm, SessionControllerGetSessionStatsResponse as gn, SessionControllerGetSessionStatsResponses as go, SessionControllerRevokeAllData as gp, SessionControllerRevokeAllErrors as gq, SessionControllerRevokeAllResponse as gr, SessionControllerRevokeAllResponses as gs, SessionEventsControllerSubscribeToSessionEventsData as gt, SessionEventsControllerSubscribeToSessionEventsErrors as gu, SessionEventsControllerSubscribeToSessionEventsResponse as gv, SessionEventsControllerSubscribeToSessionEventsResponses as gw, SessionLogEntryResponseDto as gx, SessionStatsResponseDto as gy, SessionStatusCountsDto as gz, AppControllerGetVersionResponse as h, TrustedAuthorityQueryEtsiTl as h$, StatusListManagementControllerGetListsResponses as h0, StatusListManagementControllerUpdateListData as h1, StatusListManagementControllerUpdateListResponse as h2, StatusListManagementControllerUpdateListResponses as h3, StatusListResponseDto as h4, StatusUpdateDto as h5, StorageControllerUploadData as h6, StorageControllerUploadResponse as h7, StorageControllerUploadResponses as h8, StoredObjectResponseDto as h9, TrustListControllerCreateTrustListResponse as hA, TrustListControllerCreateTrustListResponses as hB, TrustListControllerDeleteTrustListData as hC, TrustListControllerDeleteTrustListResponse as hD, TrustListControllerDeleteTrustListResponses as hE, TrustListControllerExportTrustListData as hF, TrustListControllerExportTrustListResponse as hG, TrustListControllerExportTrustListResponses as hH, TrustListControllerGetAllTrustListsData as hI, TrustListControllerGetAllTrustListsResponse as hJ, TrustListControllerGetAllTrustListsResponses as hK, TrustListControllerGetTrustListData as hL, TrustListControllerGetTrustListResponse as hM, TrustListControllerGetTrustListResponses as hN, TrustListControllerGetTrustListVersionData as hO, TrustListControllerGetTrustListVersionResponse as hP, TrustListControllerGetTrustListVersionResponses as hQ, TrustListControllerGetTrustListVersionsData as hR, TrustListControllerGetTrustListVersionsResponse as hS, TrustListControllerGetTrustListVersionsResponses as hT, TrustListControllerUpdateTrustListData as hU, TrustListControllerUpdateTrustListResponse as hV, TrustListControllerUpdateTrustListResponses as hW, TrustListCreateDto as hX, TrustListEntityInfo as hY, TrustListRef as hZ, TrustListVersion as h_, TenantClientCredentialsDto as ha, TenantControllerDeleteTenantData as hb, TenantControllerDeleteTenantResponse as hc, TenantControllerDeleteTenantResponses as hd, TenantControllerGetTenantData as he, TenantControllerGetTenantResponse as hf, TenantControllerGetTenantResponses as hg, TenantControllerGetTenantsData as hh, TenantControllerGetTenantsResponse as hi, TenantControllerGetTenantsResponses as hj, TenantControllerInitTenantData as hk, TenantControllerInitTenantResponse as hl, TenantControllerInitTenantResponses as hm, TenantControllerUpdateTenantData as hn, TenantControllerUpdateTenantResponse as ho, TenantControllerUpdateTenantResponses as hp, TenantCreateResponseDto as hq, TenantEntity as hr, TenantResponseDto as hs, TokenResponse as ht, TransactionData as hu, TrustAuthorityDto as hv, TrustAuthorityEntry as hw, TrustList as hx, TrustListCacheStatsDto as hy, TrustListControllerCreateTrustListData as hz, AppControllerGetVersionResponses as i, TrustedAuthorityQueryOpenIdFederation as i0, UpdateAttributeProviderDto as i1, UpdateClientDto as i2, UpdateIssuanceDto as i3, UpdateIssuanceDtoWritable as i4, UpdateIssuerOfferDto as i5, UpdateRegistrarConfigDto as i6, UpdateSchemaMetadataDto as i7, UpdateSessionConfigDto as i8, UpdateStatusListConfigDto as i9, VersionResponseDto as iA, VocabularyEntryDto as iB, WalletProviderTrustListRefDto as iC, WebHookAuthConfigHeader as iD, WebHookAuthConfigNone as iE, WebhookConfig as iF, WebhookEndpointControllerCreateData as iG, WebhookEndpointControllerCreateResponse as iH, WebhookEndpointControllerCreateResponses as iI, WebhookEndpointControllerDeleteData as iJ, WebhookEndpointControllerDeleteErrors as iK, WebhookEndpointControllerDeleteResponse as iL, WebhookEndpointControllerDeleteResponses as iM, WebhookEndpointControllerGetAllData as iN, WebhookEndpointControllerGetAllResponse as iO, WebhookEndpointControllerGetAllResponses as iP, WebhookEndpointControllerGetByIdData as iQ, WebhookEndpointControllerGetByIdErrors as iR, WebhookEndpointControllerGetByIdResponse as iS, WebhookEndpointControllerGetByIdResponses as iT, WebhookEndpointControllerUpdateData as iU, WebhookEndpointControllerUpdateErrors as iV, WebhookEndpointControllerUpdateResponse as iW, WebhookEndpointControllerUpdateResponses as iX, WebhookEndpointEntity as iY, UpdateStatusListDto as ia, UpdateTenantDto as ib, UpdateUserDto as ic, UpdateWebhookEndpointDto as id, UpstreamOidcConfig as ie, UserControllerCreateUserData as ig, UserControllerCreateUserResponse as ih, UserControllerCreateUserResponses as ii, UserControllerDeleteUserData as ij, UserControllerDeleteUserResponse as ik, UserControllerDeleteUserResponses as il, UserControllerGetUserData as im, UserControllerGetUserResponse as io, UserControllerGetUserResponses as ip, UserControllerGetUsersData as iq, UserControllerGetUsersResponse as ir, UserControllerGetUsersResponses as is, UserControllerUpdateUserData as it, UserControllerUpdateUserResponse as iu, UserControllerUpdateUserResponses as iv, Vct as iw, VerifierOfferControllerGetOfferData as ix, VerifierOfferControllerGetOfferResponse as iy, VerifierOfferControllerGetOfferResponses as iz, AttestationBasedPolicy as j, AttributeProviderControllerCreateData as k, AttributeProviderControllerCreateResponse as l, AttributeProviderControllerCreateResponses as m, AttributeProviderControllerDeleteData as n, AttributeProviderControllerDeleteErrors as o, AttributeProviderControllerDeleteResponse as p, AttributeProviderControllerDeleteResponses as q, AttributeProviderControllerGetAllData as r, AttributeProviderControllerGetAllResponse as s, AttributeProviderControllerGetAllResponses as t, AttributeProviderControllerGetByIdData as u, AttributeProviderControllerGetByIdErrors as v, AttributeProviderControllerGetByIdResponse as w, AttributeProviderControllerGetByIdResponses as x, AttributeProviderControllerUpdateData as y, AttributeProviderControllerUpdateErrors as z };