@eudiplo/sdk-core 9.1.0-main.e4e29b5 → 9.1.0-main.ea0dcd8

package/dist/{types.gen-DDVFZeVi.d.mts → types.gen-CUQHFJx0.d.mts}

@@ -53,7 +53,7 @@ type RoleDto = {
     /**
      * OAuth2 roles
      */
-    role: 'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage';
+    role: 'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage';
 };
 type ClientCredentialsDto = {
     grant_type?: string;
@@ -65,10 +65,6 @@ type TokenResponse = {
      * Bearer access token
      */
     access_token: string;
-    /**
-     * Optional refresh token
-     */
-    refresh_token?: string;
     /**
      * Token type
      */
@@ -179,11 +175,11 @@ type StatusListConfig = {
      */
     ttl?: number;
     /**
-     * If true, regenerate JWT immediately on status changes. If false (default), use lazy regeneration on TTL expiry.
+     * If true, regenerate JWT immediately on status changes. If false, use lazy regeneration on TTL expiry. If not set, uses global STATUS_IMMEDIATE_UPDATE.
      */
     immediateUpdate?: boolean;
     /**
-     * If true, include aggregation_uri in status list JWTs for pre-fetching support (default: true).
+     * If true, include aggregation_uri in status list JWTs for pre-fetching support. If not set, uses global STATUS_ENABLE_AGGREGATION.
      */
     enableAggregation?: boolean;
 };
@@ -203,7 +199,7 @@ type ClientEntity = {
     /**
      * Roles assigned to the client
      */
-    roles: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage'>;
+    roles: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage'>;
     /**
      * List of presentation config IDs this client can use. If empty/null, all configs are allowed.
      */
@@ -235,7 +231,7 @@ type TenantResponseDto = {
      */
     sessionConfig?: SessionStorageConfig | null;
     /**
-     * Status list configuration for this tenant. Only affects newly created status lists.
+     * Status list configuration for this tenant. Capacity and bits apply to status lists created afterwards; TTL, update mode and aggregation apply to all status lists of the tenant.
      */
     statusListConfig?: StatusListConfig | null;
     /**
@@ -262,7 +258,7 @@ type CreateTenantDto = {
     /**
      * Roles of the tenant's admin client `<id>-admin`, which also gets clients:manage. They are all that client can grant, unless they include tenant:admin. Without roles, no admin client is created.
      */
-    roles?: Array<'tenants:manage' | 'issuance:offer' | 'issuance:manage' | 'presentation:request' | 'presentation:manage' | 'clients:manage' | 'users:manage' | 'registrar:manage' | 'tenant:admin'>;
+    roles?: Array<'tenants:manage' | 'issuance:offer' | 'issuance:manage' | 'presentation:request' | 'presentation:manage' | 'clients:manage' | 'users:manage' | 'registrar:manage' | 'tenant:admin' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage'>;
     /**
      * Optional tenant-specific session storage configuration.
      */
@@ -334,7 +330,7 @@ type TenantCreateResponseDto = {
      */
     sessionConfig?: SessionStorageConfig | null;
     /**
-     * Status list configuration for this tenant. Only affects newly created status lists.
+     * Status list configuration for this tenant. Capacity and bits apply to status lists created afterwards; TTL, update mode and aggregation apply to all status lists of the tenant.
      */
     statusListConfig?: StatusListConfig | null;
     /**
@@ -396,7 +392,7 @@ type UpdateTenantDto = {
 type AuditLogResponseDto = {
     id: string;
     tenantId: string;
-    actionType: 'tenant_created' | 'tenant_updated' | 'tenant_deleted' | 'presentation_config_created' | 'presentation_config_updated' | 'presentation_config_deleted' | 'issuance_config_updated' | 'credential_config_created' | 'credential_config_updated' | 'credential_config_deleted' | 'status_list_config_updated' | 'status_list_config_reset' | 'webhook_endpoint_created' | 'webhook_endpoint_updated' | 'webhook_endpoint_deleted' | 'attribute_provider_created' | 'attribute_provider_updated' | 'attribute_provider_deleted' | 'config_bundle_exported' | 'config_bundle_imported' | 'config_client_secret_generated' | 'config_resource_detached' | 'config_resource_reattached' | 'session_cancelled';
+    actionType: 'tenant_created' | 'tenant_updated' | 'tenant_deleted' | 'presentation_config_created' | 'presentation_config_updated' | 'presentation_config_deleted' | 'issuance_config_updated' | 'credential_config_created' | 'credential_config_updated' | 'credential_config_deleted' | 'status_list_config_updated' | 'status_list_config_reset' | 'webhook_endpoint_created' | 'webhook_endpoint_updated' | 'webhook_endpoint_deleted' | 'attribute_provider_created' | 'attribute_provider_updated' | 'attribute_provider_deleted' | 'federation_trust_anchor_created' | 'federation_trust_anchor_updated' | 'federation_trust_anchor_deleted' | 'config_bundle_exported' | 'config_bundle_imported' | 'config_client_secret_generated' | 'config_resource_detached' | 'config_resource_reattached' | 'config_resource_exported' | 'session_cancelled';
     actorType: 'user' | 'client' | 'system';
     actorId?: string;
     actorDisplay?: string;
@@ -424,7 +420,7 @@ type UpdateClientDto = {
     /**
      * Optional replacement roles for the client.
      */
-    roles?: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage'>;
+    roles?: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage'>;
     /**
      * Optional replacement allow-list of presentation config ids.
      */
@@ -450,7 +446,7 @@ type CreateClientDto = {
     /**
      * Roles assigned to the client. At least one role is required.
      */
-    roles: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage'>;
+    roles: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage'>;
     /**
      * Optional allow-list of presentation config ids this client can use.
      */
@@ -470,6 +466,20 @@ type RegistrationCertificateDefaults = {
      */
     support_uri?: string;
 };
+type RelyingPartyContact = {
+    /**
+     * https URL where the relying party can be contacted.
+     */
+    supportUri?: string;
+    /**
+     * Email address of the relying party.
+     */
+    email?: string;
+    /**
+     * Phone number of the relying party.
+     */
+    phone?: string;
+};
 type RegistrarConfigResponseDto = {
     /**
      * The base URL of the registrar API
@@ -491,6 +501,10 @@ type RegistrarConfigResponseDto = {
      * Optional default values merged into registration certificate creation requests (for example privacy_policy, support_uri)
      */
     registrationCertificateDefaults?: RegistrationCertificateDefaults | null;
+    /**
+     * Contact sent when EUDIPLO registers the relying party at the registrar. The registrar needs at least one value to issue access certificates. A relying party that is already registered keeps its contact.
+     */
+    relyingPartyContact?: RelyingPartyContact | null;
     /**
      * Indicates whether a password is configured (actual password is never returned)
      */
@@ -531,6 +545,23 @@ type CreateRegistrarConfigDto = {
     registrationCertificateDefaults?: {
         [key: string]: unknown;
     } | null;
+    /**
+     * Contact of the relying party, sent when EUDIPLO registers the relying party at the registrar. The registrar needs at least one contact value to issue access certificates. A relying party that is already registered keeps its contact.
+     */
+    relyingPartyContact?: {
+        /**
+         * https URL where the relying party can be contacted.
+         */
+        supportUri?: string;
+        /**
+         * Email address of the relying party.
+         */
+        email?: string;
+        /**
+         * Phone number of the relying party.
+         */
+        phone?: string;
+    } | null;
 };
 type UpdateRegistrarConfigDto = {
     /**
@@ -563,6 +594,23 @@ type UpdateRegistrarConfigDto = {
     registrationCertificateDefaults?: {
         [key: string]: unknown;
     } | null;
+    /**
+     * Contact of the relying party, sent when EUDIPLO registers the relying party at the registrar. The registrar needs at least one contact value to issue access certificates. A relying party that is already registered keeps its contact.
+     */
+    relyingPartyContact?: {
+        /**
+         * https URL where the relying party can be contacted.
+         */
+        supportUri?: string;
+        /**
+         * Email address of the relying party.
+         */
+        email?: string;
+        /**
+         * Phone number of the relying party.
+         */
+        phone?: string;
+    } | null;
 };
 type CreateAccessCertificateDto = {
     /**
@@ -570,12 +618,22 @@ type CreateAccessCertificateDto = {
      */
     keyId: string;
 };
+type CreateAccessKeyChainDto = {
+    /**
+     * Human-readable description for the new key chain.
+     */
+    description?: string;
+    /**
+     * KMS provider for the new key chain (defaults to the configured default provider).
+     */
+    kmsProvider?: string;
+};
 type ManagedUserDto = {
     id: string;
     username: string;
     email?: string;
     enabled: boolean;
-    roles: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage'>;
+    roles: Array<'presentation:manage' | 'presentation:request' | 'issuance:manage' | 'issuance:offer' | 'clients:manage' | 'users:manage' | 'tenants:manage' | 'tenant:admin' | 'registrar:manage' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage'>;
     tenantId?: string;
     /**
      * One-time temporary password returned only on user creation.
@@ -585,13 +643,13 @@ type ManagedUserDto = {
 type CreateUserDto = {
     username: string;
     email?: string;
-    roles: Array<'tenants:manage' | 'issuance:offer' | 'issuance:manage' | 'presentation:request' | 'presentation:manage' | 'clients:manage' | 'users:manage' | 'registrar:manage' | 'tenant:admin'>;
+    roles: Array<'tenants:manage' | 'issuance:offer' | 'issuance:manage' | 'presentation:request' | 'presentation:manage' | 'clients:manage' | 'users:manage' | 'registrar:manage' | 'tenant:admin' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage'>;
     enabled?: boolean;
 };
 type UpdateUserDto = {
     username?: string;
     email?: string;
-    roles?: Array<'tenants:manage' | 'issuance:offer' | 'issuance:manage' | 'presentation:request' | 'presentation:manage' | 'clients:manage' | 'users:manage' | 'registrar:manage' | 'tenant:admin'>;
+    roles?: Array<'tenants:manage' | 'issuance:offer' | 'issuance:manage' | 'presentation:request' | 'presentation:manage' | 'clients:manage' | 'users:manage' | 'registrar:manage' | 'tenant:admin' | 'audit:read' | 'sessions:read' | 'credentials:status' | 'keys:manage'>;
     enabled?: boolean;
     password?: string;
 };
@@ -609,11 +667,11 @@ type KmsProviderCapabilitiesDto = {
      */
     canDelete: boolean;
     /**
-     * Signing algorithms supported by the provider.
+     * Algorithms new and imported key chains of this provider may use (ES256, ES384, ES512), narrowed by algorithms in kms.json. Existing key chains keep their own algorithm.
      */
     supportedAlgs: Array<string>;
     /**
-     * Default signing algorithm used when caller does not specify one.
+     * Algorithm of a new key chain created without alg (defaultAlgorithm in kms.json).
      */
     defaultAlg: string;
 };
@@ -688,6 +746,14 @@ type KmsConfigDto = {
          * Human-readable description of this provider instance.
          */
         description?: string | string;
+        /**
+         * Signing algorithms new key chains of this provider may use: ES256 (P-256), ES384 (P-384), ES512 (P-521). Defaults to all three for db, vault and aws-kms. For pkcs11, http and csc, whose backends may not support every curve, it defaults to defaultAlgorithm (ES256 unless set). Existing keys keep signing with their own algorithm.
+         */
+        algorithms?: Array<'ES256' | 'ES384' | 'ES512'>;
+        /**
+         * Algorithm used when a key chain is created without one. Must be in algorithms. Defaults to ES256 if allowed, otherwise the first entry of algorithms.
+         */
+        defaultAlgorithm?: 'ES256' | 'ES384' | 'ES512';
     } | {
         /**
          * Unique identifier for this provider instance. Used when generating keys to specify which provider to use.
@@ -701,6 +767,14 @@ type KmsConfigDto = {
          * Human-readable description of this provider instance.
          */
         description?: string | string;
+        /**
+         * Signing algorithms new key chains of this provider may use: ES256 (P-256), ES384 (P-384), ES512 (P-521). Defaults to all three for db, vault and aws-kms. For pkcs11, http and csc, whose backends may not support every curve, it defaults to defaultAlgorithm (ES256 unless set). Existing keys keep signing with their own algorithm.
+         */
+        algorithms?: Array<'ES256' | 'ES384' | 'ES512'>;
+        /**
+         * Algorithm used when a key chain is created without one. Must be in algorithms. Defaults to ES256 if allowed, otherwise the first entry of algorithms.
+         */
+        defaultAlgorithm?: 'ES256' | 'ES384' | 'ES512';
         /**
          * URL of the HashiCorp Vault instance. Supports ${ENV_VAR} placeholders.
          */
@@ -722,6 +796,14 @@ type KmsConfigDto = {
          * Human-readable description of this provider instance.
          */
         description?: string | string;
+        /**
+         * Signing algorithms new key chains of this provider may use: ES256 (P-256), ES384 (P-384), ES512 (P-521). Defaults to all three for db, vault and aws-kms. For pkcs11, http and csc, whose backends may not support every curve, it defaults to defaultAlgorithm (ES256 unless set). Existing keys keep signing with their own algorithm.
+         */
+        algorithms?: Array<'ES256' | 'ES384' | 'ES512'>;
+        /**
+         * Algorithm used when a key chain is created without one. Must be in algorithms. Defaults to ES256 if allowed, otherwise the first entry of algorithms.
+         */
+        defaultAlgorithm?: 'ES256' | 'ES384' | 'ES512';
         /**
          * AWS region for KMS. Supports ${ENV_VAR} placeholders.
          */
@@ -747,6 +829,14 @@ type KmsConfigDto = {
          * Human-readable description of this provider instance.
          */
         description?: string | string;
+        /**
+         * Signing algorithms new key chains of this provider may use: ES256 (P-256), ES384 (P-384), ES512 (P-521). Defaults to all three for db, vault and aws-kms. For pkcs11, http and csc, whose backends may not support every curve, it defaults to defaultAlgorithm (ES256 unless set). Existing keys keep signing with their own algorithm.
+         */
+        algorithms?: Array<'ES256' | 'ES384' | 'ES512'>;
+        /**
+         * Algorithm used when a key chain is created without one. Must be in algorithms. Defaults to ES256 if allowed, otherwise the first entry of algorithms.
+         */
+        defaultAlgorithm?: 'ES256' | 'ES384' | 'ES512';
         /**
          * Absolute path to the PKCS#11 module library (.so/.dll/.dylib). Supports ${ENV_VAR} placeholders.
          */
@@ -776,6 +866,14 @@ type KmsConfigDto = {
          * Human-readable description of this provider instance.
          */
         description?: string | string;
+        /**
+         * Signing algorithms new key chains of this provider may use: ES256 (P-256), ES384 (P-384), ES512 (P-521). Defaults to all three for db, vault and aws-kms. For pkcs11, http and csc, whose backends may not support every curve, it defaults to defaultAlgorithm (ES256 unless set). Existing keys keep signing with their own algorithm.
+         */
+        algorithms?: Array<'ES256' | 'ES384' | 'ES512'>;
+        /**
+         * Algorithm used when a key chain is created without one. Must be in algorithms. Defaults to ES256 if allowed, otherwise the first entry of algorithms.
+         */
+        defaultAlgorithm?: 'ES256' | 'ES384' | 'ES512';
         /**
          * Base URL of the remote KMS microservice (no trailing slash). Supports ${ENV_VAR} placeholders.
          */
@@ -861,6 +959,14 @@ type KmsConfigDto = {
          * Human-readable description of this provider instance.
          */
         description?: string | string;
+        /**
+         * Signing algorithms new key chains of this provider may use: ES256 (P-256), ES384 (P-384), ES512 (P-521). Defaults to all three for db, vault and aws-kms. For pkcs11, http and csc, whose backends may not support every curve, it defaults to defaultAlgorithm (ES256 unless set). Existing keys keep signing with their own algorithm.
+         */
+        algorithms?: Array<'ES256' | 'ES384' | 'ES512'>;
+        /**
+         * Algorithm used when a key chain is created without one. Must be in algorithms. Defaults to ES256 if allowed, otherwise the first entry of algorithms.
+         */
+        defaultAlgorithm?: 'ES256' | 'ES384' | 'ES512';
         /**
          * Base URL of the CSC service (without trailing slash). Supports ${ENV_VAR} placeholders.
          */
@@ -974,9 +1080,25 @@ type PublicKeyInfoDto = {
      */
     kid?: string;
     /**
-     * Curve (for EC keys).
+     * Curve (for EC and OKP keys).
      */
     crv?: string;
+    /**
+     * Public key coordinate (base64url): x coordinate for EC keys, public key for OKP keys.
+     */
+    x?: string;
+    /**
+     * y coordinate (base64url, for EC keys).
+     */
+    y?: string;
+    /**
+     * Modulus (base64url, for RSA keys).
+     */
+    n?: string;
+    /**
+     * Public exponent (base64url, for RSA keys).
+     */
+    e?: string;
 };
 type RotationPolicyResponseDto = {
     /**
@@ -1004,7 +1126,7 @@ type KeyChainResponseDto = {
     /**
      * Usage type of the key chain.
      */
-    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
+    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'federation' | 'encrypt';
     /**
      * Type of key chain (standalone or internalChain).
      */
@@ -1017,6 +1139,10 @@ type KeyChainResponseDto = {
      * KMS provider used for this key chain.
      */
     kmsProvider: string;
+    /**
+     * Signing algorithm of the active key, following its curve: ES256 (P-256), ES384 (P-384) or ES512 (P-521). Absent for keys on other curves.
+     */
+    alg?: 'ES256' | 'ES384' | 'ES512';
     /**
      * Root CA certificate (only for internalChain type).
      */
@@ -1110,13 +1236,17 @@ type KeyChainExportDto = {
     /**
      * Usage type for this key chain.
      */
-    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
+    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'federation' | 'encrypt';
     /**
-     * The key in JWK format (EC). Contains the private key for database-held keys and only the public key for external KMS providers.
+     * Key chain type. For internalChain, key and crt are the root CA key and certificate; the import generates a new signing key.
+     */
+    type: 'standalone' | 'internalChain';
+    /**
+     * The key in JWK format (EC): the root CA key of an internal chain, otherwise the signing key. Contains the private key for database-held keys and only the public key for external KMS providers.
      */
     key: ExportEcJwk;
     /**
-     * Certificate chain in PEM format (leaf first, then intermediates/CA).
+     * Certificate chain in PEM format: the root CA certificate of an internal chain, otherwise the chain leaf first, then intermediates/CA.
      */
     crt?: Array<string>;
     /**
@@ -1138,7 +1268,7 @@ type RotationPolicyCreateDto = {
      */
     intervalDays?: number;
     /**
-     * Certificate validity in days. Defaults to rotation interval + 30 days grace period.
+     * Certificate validity in days. Defaults to 365.
      */
     certValidityDays?: number;
 };
@@ -1146,7 +1276,7 @@ type KeyChainCreateDto = {
     /**
      * Usage type determines the purpose of this key chain (access, attestation, etc.).
      */
-    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
+    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'federation' | 'encrypt';
     /**
      * Type of key chain to create.
      */
@@ -1159,6 +1289,10 @@ type KeyChainCreateDto = {
      * KMS provider to use (defaults to the configured default provider).
      */
     kmsProvider?: string;
+    /**
+     * Signing algorithm, which also selects the curve: ES256 (P-256), ES384 (P-384) or ES512 (P-521). Must be one of the KMS provider's supportedAlgs; defaults to its defaultAlg. Rotation keeps it. Wallets are only required to support ES256 (HAIP).
+     */
+    alg?: 'ES256' | 'ES384' | 'ES512';
     /**
      * Rotation policy configuration. Only applicable for the signing key (root CA never rotates).
      */
@@ -1168,7 +1302,7 @@ type KeyChainCreateDto = {
          */
         enabled?: boolean;
         /**
-         * Rotation interval in days.
+         * Rotation interval in days. Required when `enabled` is true.
          */
         intervalDays?: number;
         /**
@@ -1215,7 +1349,7 @@ type EcJwk = {
 };
 type RotationPolicyImportDto = {
     /**
-     * Whether rotation is enabled. When true, the imported key becomes a root CA signer.
+     * Whether rotation is enabled. Without type, true makes the imported key a root CA signer, unless crt is a single self-signed certificate that is not a CA.
      */
     enabled: boolean;
     /**
@@ -1276,9 +1410,13 @@ type KeyChainImportDto = {
     /**
      * Usage type for this key chain.
      */
-    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
+    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'federation' | 'encrypt';
+    /**
+     * Key chain type. standalone: key is the signing key and crt its chain, leaf first. internalChain: key is a CA key and the last crt entry its CA certificate (created if crt is omitted); a new signing key is generated with a certificate issued by it. Without type, key is a CA key only if rotationPolicy.enabled is true and crt is not a single self-signed certificate that is not a CA. The export writes it.
+     */
+    type?: 'standalone' | 'internalChain';
     /**
-     * Certificate chain (leaf first). Each entry may be PEM or base64-encoded DER; values are normalized to PEM during import. When rotationPolicy.enabled=true, the last certificate in the chain is treated as the root CA certificate.
+     * Certificate chain (leaf first). Each entry may be PEM or base64-encoded DER; values are normalized to PEM during import. For an internal chain (see type), the last certificate in the chain is treated as the root CA certificate.
      */
     crt?: Array<string>;
     /**
@@ -1286,7 +1424,7 @@ type KeyChainImportDto = {
      */
     kmsProvider?: string;
     /**
-     * Rotation policy. When enabled, the imported key becomes a root CA signer and a new leaf key is generated. If crt is provided, the selected root CA certificate must have CA=true and its public key must match the imported private key.
+     * Rotation policy. Without type, enabling it makes the imported key a root CA signer and a new leaf key is generated; if crt is provided, the selected root CA certificate must have CA=true and its public key must match the imported private key. Exception: if crt is a single self-signed certificate that is not a CA, as in the export of a standalone key chain, the imported key stays the signing key and is rotated like a standalone key chain. With rotation enabled, intervalDays defaults to 90 and certValidityDays to 365; without it, no intervals are stored.
      */
     rotationPolicy?: RotationPolicyImportDto & {
         /**
@@ -1305,7 +1443,7 @@ type KeyChainImportDto = {
 };
 type RotationPolicyUpdateDto = {
     /**
-     * Whether automatic key rotation is enabled.
+     * Whether automatic key rotation is enabled. Enabling it needs intervalDays, in the request or already set on the key chain.
      */
     enabled?: boolean;
     /**
@@ -1344,6 +1482,43 @@ type KeyChainUpdateDto = {
      */
     activeCertificate?: string;
 };
+type KeyChainReferenceDto = {
+    /**
+     * Kind of configuration that names the key chain.
+     */
+    kind: 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'StatusList' | 'TrustList';
+    /**
+     * ID of the configuration. Absent for the issuance configuration, of which a tenant has one, and for configurations the caller may not read.
+     */
+    id?: string;
+    /**
+     * Description of the configuration; absent for configurations the caller may not read.
+     */
+    description?: string;
+};
+type KeyChainInUseDto = {
+    /**
+     * HTTP status code.
+     */
+    statusCode: number;
+    /**
+     * Time of the response.
+     */
+    timestamp: string;
+    /**
+     * Path of the request.
+     */
+    path: string;
+    /**
+     * Configurations still name the key chain.
+     */
+    code: 'KEY_CHAIN_IN_USE';
+    /**
+     * Names the configurations the caller may read and counts the others.
+     */
+    message: string;
+    references: Array<KeyChainReferenceDto>;
+};
 type TenantEntity = {
     /**
      * Unique tenant identifier
@@ -1366,7 +1541,7 @@ type TenantEntity = {
      */
     sessionConfig?: SessionStorageConfig | null;
     /**
-     * Status list configuration for this tenant. Only affects newly created status lists.
+     * Status list configuration for this tenant. Capacity and bits apply to status lists created afterwards; TTL, update mode and aggregation apply to all status lists of the tenant.
      */
     statusListConfig?: StatusListConfig | null;
     /**
@@ -1606,7 +1781,7 @@ type SchemaUriEntry = {
 };
 type TrustAuthorityEntry = {
     /**
-     * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+     * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the active certificate of its key chain (the first one of a chain); the other fields are not needed.
      */
     trustListId?: string;
     /**
@@ -1614,7 +1789,7 @@ type TrustAuthorityEntry = {
      */
     frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
     /**
-     * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+     * Authority value, for example the trust list URL for `etsi_tl`, or for `x509` one root certificate in PEM or base64 DER. Publishing rejects an `x509` value that holds more than one certificate, such as a chain.
      */
     value?: string;
     /**
@@ -1673,11 +1848,11 @@ type SchemaMetaConfig = {
         };
     }>;
     /**
-     * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` with `x509Certificate`).
+     * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` whose `x509Certificate` is a single certificate).
      */
     trustedAuthorities?: Array<{
         /**
-         * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+         * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the active certificate of its key chain (the first one of a chain); the other fields are not needed.
          */
         trustListId?: string;
         /**
@@ -1685,7 +1860,7 @@ type SchemaMetaConfig = {
          */
         frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
         /**
-         * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+         * Authority value, for example the trust list URL for `etsi_tl`, or for `x509` one root certificate in PEM or base64 DER. Publishing rejects an `x509` value that holds more than one certificate, such as a chain.
          */
         value?: string;
         /**
@@ -1826,7 +2001,7 @@ type KeyChainEntity = {
     /**
      * The purpose/role of this key chain in the system.
      */
-    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
+    usageType: 'access' | 'attestation' | 'trustList' | 'statusList' | 'federation' | 'encrypt';
     /**
      * The usage type of the keys (sign or encrypt).
      */
@@ -1973,7 +2148,7 @@ type CredentialConfig = {
      * or use federation-based trust (iss claim).
      * Default: "x5c" (federation must be explicitly selected)
      */
-    sdJwtTrustFormat?: 'x5c' | 'federation' | null;
+    sdJwtTrustFormat?: 'federation' | 'x5c' | null;
     lifeTime?: number;
 };
 type CredentialConfigCreate = {
@@ -2036,7 +2211,7 @@ type CredentialConfigCreate = {
      * or use federation-based trust (iss claim).
      * Default: "x5c" (federation must be explicitly selected)
      */
-    sdJwtTrustFormat?: 'x5c' | 'federation' | null;
+    sdJwtTrustFormat?: 'federation' | 'x5c' | null;
     lifeTime?: number;
 };
 type CredentialConfigUpdate = {
@@ -2099,7 +2274,7 @@ type CredentialConfigUpdate = {
      * or use federation-based trust (iss claim).
      * Default: "x5c" (federation must be explicitly selected)
      */
-    sdJwtTrustFormat?: 'x5c' | 'federation' | null;
+    sdJwtTrustFormat?: 'federation' | 'x5c' | null;
     lifeTime?: number;
 };
 type TrustListRef = {
@@ -3415,6 +3590,43 @@ type TrustListVersion = {
     jwt: string;
     createdAt: string;
 };
+type TrustListReferenceDto = {
+    /**
+     * Kind of configuration that references the trust list.
+     */
+    kind: 'PresentationConfig' | 'CredentialConfig' | 'IssuanceConfig';
+    /**
+     * ID of the presentation or credential config. Absent for the issuance configuration, of which a tenant has one, and for configurations the caller may not read.
+     */
+    id?: string;
+    /**
+     * Description of the configuration; absent for configurations the caller may not read.
+     */
+    description?: string;
+};
+type TrustListInUseDto = {
+    /**
+     * HTTP status code.
+     */
+    statusCode: number;
+    /**
+     * Time of the response.
+     */
+    timestamp: string;
+    /**
+     * Path of the request.
+     */
+    path: string;
+    /**
+     * Configurations still reference the trust list.
+     */
+    code: 'TRUST_LIST_IN_USE';
+    /**
+     * Names the referencing configurations the caller may read and counts the others.
+     */
+    message: string;
+    references: Array<TrustListReferenceDto>;
+};
 type TrustListCacheStatsDto = {
     /**
      * Whether the trust list cache is populated
@@ -3439,6 +3651,214 @@ type CacheStatsResponseDto = {
     trustListCache: TrustListCacheStatsDto;
     statusListCache: StatusListCacheStatsDto;
 };
+type FederationTrustAnchorResponseDto = {
+    /**
+     * Identifier of the trust anchor
+     */
+    id: string;
+    /**
+     * Tenant identifier
+     */
+    tenantId: string;
+    /**
+     * Entity identifier of the trust anchor
+     */
+    entityId: string;
+    /**
+     * Description of the trust anchor
+     */
+    description?: string | null;
+    /**
+     * Pinned federation keys of the trust anchor as a JWK set (public keys only)
+     */
+    jwks: {
+        [key: string]: unknown;
+    };
+};
+type CreateFederationTrustAnchorDto = {
+    /**
+     * Unique identifier of the trust anchor in the tenant.
+     */
+    id: string;
+    /**
+     * Entity identifier of the trust anchor, exactly as configured in `federation.trustAnchors` and DCQL `openid_federation` values.
+     */
+    entityId: string;
+    /**
+     * Optional description of the trust anchor.
+     */
+    description?: string | null;
+    /**
+     * JWK set with the federation keys of the trust anchor, obtained out of band (OpenID Federation 1.0 Section 10.2).
+     */
+    jwks: {
+        /**
+         * The trust anchor's federation keys.
+         */
+        keys: Array<{
+            /**
+             * Key type of the public federation key.
+             */
+            kty: 'EC' | 'RSA' | 'OKP';
+            /**
+             * Key ID. Federation statements name their signing key with `kid`.
+             */
+            kid: string;
+            [key: string]: unknown;
+        }>;
+    };
+};
+type UpdateFederationTrustAnchorDto = {
+    /**
+     * Entity identifier of the trust anchor, exactly as configured in `federation.trustAnchors` and DCQL `openid_federation` values.
+     */
+    entityId?: string;
+    /**
+     * Optional description of the trust anchor.
+     */
+    description?: string | null;
+    /**
+     * JWK set with the federation keys of the trust anchor, obtained out of band (OpenID Federation 1.0 Section 10.2).
+     */
+    jwks?: {
+        /**
+         * The trust anchor's federation keys.
+         */
+        keys: Array<{
+            /**
+             * Key type of the public federation key.
+             */
+            kty: 'EC' | 'RSA' | 'OKP';
+            /**
+             * Key ID. Federation statements name their signing key with `kid`.
+             */
+            kid: string;
+            [key: string]: unknown;
+        }>;
+    };
+};
+type FederationTrustAnchorReferenceDto = {
+    /**
+     * Kind of configuration that names the trust anchor.
+     */
+    kind: 'PresentationConfig' | 'IssuanceConfig';
+    /**
+     * ID of the presentation config. Absent for the issuance configuration, of which a tenant has one, and for configurations the caller may not read.
+     */
+    id?: string;
+    /**
+     * Description of the configuration; absent for configurations the caller may not read.
+     */
+    description?: string;
+};
+type FederationTrustAnchorInUseDto = {
+    /**
+     * HTTP status code.
+     */
+    statusCode: number;
+    /**
+     * Time of the response.
+     */
+    timestamp: string;
+    /**
+     * Path of the request.
+     */
+    path: string;
+    /**
+     * Configurations still name the trust anchor's entity ID.
+     */
+    code: 'FEDERATION_TRUST_ANCHOR_IN_USE';
+    /**
+     * Names the configurations the caller may read and counts the others.
+     */
+    message: string;
+    references: Array<FederationTrustAnchorReferenceDto>;
+};
+type VerificationProvenanceDto = {
+    /**
+     * Matched trusted entity ID, or the issuance certificate subject.
+     */
+    matchedIssuer?: string;
+    /**
+     * Thumbprint of the matched issuance certificate.
+     */
+    issuanceThumbprint?: string;
+    /**
+     * How the chain matched a trusted entity, e.g. `ca` or `leaf-pinned`.
+     */
+    matchMode?: string;
+    /**
+     * Thumbprint of the entity's revocation certificate.
+     */
+    revocationThumbprint?: string;
+};
+type SessionOutcomeWarningDto = {
+    /**
+     * Machine-readable warning code.
+     */
+    code: string;
+    /**
+     * Short, safe message.
+     */
+    message: string;
+};
+type SessionOutcomeCredentialDto = {
+    /**
+     * Requested credential ID (DCQL).
+     */
+    id?: string;
+    /**
+     * Credential format, e.g. `mso_mdoc` or `dc+sd-jwt`.
+     */
+    format?: string;
+    /**
+     * mDOC docType or SD-JWT VC vct.
+     */
+    docType?: string;
+    /**
+     * Whether the credential was verified.
+     */
+    verified: boolean;
+    /**
+     * Machine-readable failure code.
+     */
+    error?: string;
+    /**
+     * Short, safe failure message.
+     */
+    message?: string;
+    /**
+     * Trust provenance of a verified credential.
+     */
+    trust?: VerificationProvenanceDto;
+    /**
+     * Reserved for non-fatal conditions observed during verification; currently never set.
+     */
+    warnings?: Array<SessionOutcomeWarningDto>;
+};
+type SessionOutcomeDto = {
+    result: 'success' | 'failed';
+    /**
+     * Who decided the result: the wallet (an error response or an OID4VCI notification) or EUDIPLO while verifying a presentation.
+     */
+    source?: 'wallet' | 'verifier';
+    /**
+     * Machine-readable failure code, as in `failureCode`.
+     */
+    error?: string;
+    /**
+     * Short, safe failure message.
+     */
+    message?: string;
+    /**
+     * Free text the wallet sent with its error or notification. Wallet-controlled: show it as plain text only.
+     */
+    description?: string;
+    /**
+     * Per credential query: on success every presented query, on a classified verification failure the credential that failed.
+     */
+    credentials?: Array<SessionOutcomeCredentialDto>;
+};
 type AuthorizeQueries = {
     issuer_state?: string;
     response_type?: string;
@@ -3573,6 +3993,13 @@ type Session = {
      * Status of the session.
      */
     status: 'active' | 'fetched' | 'completed' | 'expired' | 'failed' | 'cancelled';
+    /**
+     * Structured outcome (success or failure, who decided it, provenance and
+     * diagnostics, per credential). Set when a presentation is answered or a
+     * wallet sends its first OID4VCI notification; verbose detail stays in
+     * the session log only.
+     */
+    outcome?: SessionOutcomeDto | null;
     /**
      * Unique identifier for the session.
      */
@@ -3595,8 +4022,9 @@ type Session = {
      */
     useDcApi: boolean;
     /**
-     * DC API sub-protocol: "oid4vp" (OpenID4VP via DC API) or "iso-18013-7" (org.iso.mdoc).
-     * Null/undefined means the standard OID4VP flow (useDcApi=false).
+     * "iso-18013-7" for ISO 18013-7 Annex C (org.iso.mdoc via DC API); unset
+     * for OID4VP sessions, with or without DC API. Only unset sessions are
+     * answered at the OID4VP endpoints.
      */
     dcApiProtocol?: string;
     /**
@@ -3721,9 +4149,17 @@ type Session = {
      */
     clientId?: string;
     /**
-     * Cryptographic random nonce used in wallet-facing URLs (response_uri, request_uri, state).
-     * Per OID4VP spec Section 13.3, this separates the wallet-facing identifier (request-id)
-     * from the frontend-facing session ID (transaction-id) to prevent session fixation.
+     * Access key chain chosen when the OID4VP request was created. The
+     * request object is signed with this key chain, so it stays the one
+     * `clientId` was derived from when the tenant's default access key chain
+     * changes in between.
+     */
+    accessKeyChainId?: string;
+    /**
+     * Cryptographic random nonce with which the wallet names the session instead of its ID.
+     * Presentations use it in request_uri, response_uri and state (OID4VP Section 13.3:
+     * request-id separate from the transaction-id); issuance offers in the credential_offer_uri
+     * and as issuer_state. Issuance sessions created before 10.0 have their ID as walletNonce.
      */
     walletNonce?: string;
     /**
@@ -3770,21 +4206,19 @@ type Session = {
      * Error reason if the session failed.
      * Stores the error message when status is 'failed'.
      */
-    errorReason?: string;
+    errorReason?: string | null;
     /**
      * Machine-readable failure code when status is 'failed' (e.g.
      * `trust_chain_not_trusted`). Stable across credential and trust-list
      * formats; consumers branch on this rather than parsing {@link errorReason}.
      */
-    failureCode?: string;
+    failureCode?: string | null;
     /**
-     * Structured verification outcome (success or failure, provenance and
-     * diagnostics, per credential). Additive to {@link status} /
-     * {@link errorReason}; verbose detail stays in the session log only.
+     * Reason the operator gave when cancelling the session (status
+     * `cancelled`). Null when none was given or for sessions cancelled before
+     * the reason was stored; the session log keeps it as well.
      */
-    outcome?: {
-        [key: string]: unknown;
-    } | null;
+    cancelReason?: string | null;
     /**
      * Number of failed tx_code (transaction code) validation attempts.
      * Used to enforce brute-force protection in the pre-authorized code flow.
@@ -4019,23 +4453,23 @@ type StatusListAggregationDto = {
 };
 type UpdateStatusListConfigDto = {
     /**
-     * The capacity of the status list. Set to null to reset to global default.
+     * The capacity of new status lists. Omit or set to null to follow STATUS_CAPACITY of the instance.
      */
     capacity?: number | null | null;
     /**
-     * Bits per status entry. Set to null to reset to global default.
+     * Bits per status entry of new status lists. Omit or set to null to follow STATUS_BITS of the instance.
      */
     bits?: 1 | 2 | 4 | 8;
     /**
-     * TTL in seconds for the status list JWT. Set to null to reset to global default.
+     * TTL in seconds for the status list JWT. Omit or set to null to follow STATUS_TTL of the instance.
      */
     ttl?: number | null | null;
     /**
-     * If true, regenerate JWT on every status change. Set to null to reset to default (false).
+     * If true, regenerate JWT on every status change. Omit or set to null to follow STATUS_IMMEDIATE_UPDATE of the instance.
      */
     immediateUpdate?: boolean | null;
     /**
-     * If true, include aggregation_uri in status list JWTs for pre-fetching support. Set to null to reset to default (true).
+     * If true, include aggregation_uri in status list JWTs for pre-fetching support. Omit or set to null to follow STATUS_ENABLE_AGGREGATION of the instance.
      */
     enableAggregation?: boolean | null;
 };
@@ -4431,6 +4865,10 @@ type Oid4VpAuthorizationServerConfig = {
         verifierKeyPem?: string;
         verifierX509Der?: string;
     }>;
+    /**
+     * Status check mode for presented wallet attestations at this authorization server: strict, best_effort or disabled. Omit to inherit the issuance default.
+     */
+    walletAttestationStatusCheckMode?: 'strict' | 'best_effort' | 'disabled';
     label?: string;
     enabled?: boolean;
 };
@@ -4499,6 +4937,10 @@ type ChainedAuthorizationServerConfig = {
         verifierKeyPem?: string;
         verifierX509Der?: string;
     }>;
+    /**
+     * Status check mode for presented wallet attestations at this authorization server: strict, best_effort or disabled. Omit to inherit the issuance default.
+     */
+    walletAttestationStatusCheckMode?: 'strict' | 'best_effort' | 'disabled';
     label?: string;
     enabled?: boolean;
 };
@@ -4540,6 +4982,10 @@ type BuiltInAuthorizationServerConfig = {
         verifierKeyPem?: string;
         verifierX509Der?: string;
     }>;
+    /**
+     * Status check mode for presented wallet attestations at this authorization server: strict, best_effort or disabled. Omit to inherit the issuance default.
+     */
+    walletAttestationStatusCheckMode?: 'strict' | 'best_effort' | 'disabled';
     label?: string;
     enabled?: boolean;
 };
@@ -4553,6 +4999,13 @@ type FederationTrustAnchorConfig = {
      */
     entityConfigurationUri: string;
 };
+type FederationEntityMetadata = {
+    organization_name?: string;
+    contacts?: Array<string>;
+    logo_uri?: string;
+    policy_uri?: string;
+    homepage_uri?: string;
+};
 type FederationConfig = {
     /**
      * Role this tenant plays in the OpenID Federation topology.
@@ -4563,7 +5016,7 @@ type FederationConfig = {
      */
     mode?: 'federation-only' | 'hybrid';
     /**
-     * Entity identifier of this issuer/verifier in the federation.
+     * Entity Identifier of this issuer/verifier in the federation, usually {PUBLIC_URL}/issuers/{tenantId}: an https URL with a host and without query or fragment. http is accepted only when OUTBOUND_URL_ALLOW_HTTP is true.
      */
     entityId?: string;
     /**
@@ -4581,6 +5034,40 @@ type FederationConfig = {
         entityId: string;
         entityConfigurationUri: string;
     }>;
+    /**
+     * Roles the entity configuration publishes metadata for. openid_credential_issuer adds the credential issuer metadata (and the built-in authorization server metadata when it is used), openid_credential_verifier the OID4VP verifier metadata.
+     */
+    entityTypes?: Array<'openid_credential_issuer' | 'openid_credential_verifier'>;
+    /**
+     * authority_hints of the entity configuration: entity ids of the superiors that issue a subordinate statement about this entity. Defaults to the trust anchor entity ids.
+     */
+    authorityHints?: Array<string>;
+    /**
+     * Key chain with usage type 'federation' that signs the entity configuration. Without it, a federation key chain of the tenant is used; set it when the tenant has several.
+     */
+    entityKeyChainId?: string;
+    /**
+     * Lifetime (exp - iat) of the entity configuration in seconds.
+     */
+    entityConfigurationLifetimeSeconds?: number;
+    /**
+     * Trust mark JWTs issued to this entity, published in the entity configuration.
+     */
+    trustMarks?: Array<string>;
+    /**
+     * Informational federation_entity metadata of the entity configuration.
+     */
+    entityMetadata?: FederationEntityMetadata & {
+        organization_name?: string;
+        contacts?: Array<string>;
+        logo_uri?: string;
+        policy_uri?: string;
+        homepage_uri?: string;
+    };
+    /**
+     * Add the trust chain of this entity as trust_chain header to federation SD-JWT VCs and OID4VP request objects.
+     */
+    includeTrustChain?: boolean;
 };
 type IssuerRegistrationCertificateConfig = {
     /**
@@ -4642,6 +5129,10 @@ type IssuanceConfig = {
      * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
+    /**
+     * Default status check mode for presented wallet attestations at managed authorization servers. strict rejects when the status list cannot be fetched or read; best_effort (used when unset) accepts when the list cannot be fetched but rejects an unreadable list or an index outside it; disabled skips the status check. A revoked or suspended attestation is rejected unless the check is disabled.
+     */
+    walletAttestationStatusCheckMode?: 'strict' | 'best_effort' | 'disabled' | null;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -4720,6 +5211,10 @@ type UpdateIssuanceDto = {
      * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
+    /**
+     * Default status check mode for presented wallet attestations at managed authorization servers. strict rejects when the status list cannot be fetched or read; best_effort (used when unset) accepts when the list cannot be fetched but rejects an unreadable list or an index outside it; disabled skips the status check. A revoked or suspended attestation is rejected unless the check is disabled.
+     */
+    walletAttestationStatusCheckMode?: 'strict' | 'best_effort' | 'disabled' | null;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -4807,11 +5302,11 @@ type PublishSchemaMetaConfig = {
         };
     }>;
     /**
-     * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` with `x509Certificate`).
+     * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` whose `x509Certificate` is a single certificate).
      */
     trustedAuthorities?: Array<{
         /**
-         * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+         * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the active certificate of its key chain (the first one of a chain); the other fields are not needed.
          */
         trustListId?: string;
         /**
@@ -4819,7 +5314,7 @@ type PublishSchemaMetaConfig = {
          */
         frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
         /**
-         * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+         * Authority value, for example the trust list URL for `etsi_tl`, or for `x509` one root certificate in PEM or base64 DER. Publishing rejects an `x509` value that holds more than one certificate, such as a chain.
          */
         value?: string;
         /**
@@ -4915,11 +5410,11 @@ type SignSchemaMetaConfigDto = {
             };
         }>;
         /**
-         * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` with `x509Certificate`).
+         * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` whose `x509Certificate` is a single certificate).
          */
         trustedAuthorities?: Array<{
             /**
-             * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+             * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the active certificate of its key chain (the first one of a chain); the other fields are not needed.
              */
             trustListId?: string;
             /**
@@ -4927,7 +5422,7 @@ type SignSchemaMetaConfigDto = {
              */
             frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
             /**
-             * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+             * Authority value, for example the trust list URL for `etsi_tl`, or for `x509` one root certificate in PEM or base64 DER. Publishing rejects an `x509` value that holds more than one certificate, such as a chain.
              */
             value?: string;
             /**
@@ -5008,11 +5503,11 @@ type SignVersionSchemaMetaConfigDto = {
             };
         }>;
         /**
-         * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` with `x509Certificate`).
+         * Trusted authorities for issuers of this attestation. Required when publishing: at least one entry must provide an X.509 certificate (`trustListId`, an `x509` entry or a `verificationMethod` whose `x509Certificate` is a single certificate).
          */
         trustedAuthorities?: Array<{
             /**
-             * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the certificate of the trust list's key chain; the other fields are not needed.
+             * Trust list of the tenant. EUDIPLO publishes it as `etsi_tl` authority with its URL and the active certificate of its key chain (the first one of a chain); the other fields are not needed.
              */
             trustListId?: string;
             /**
@@ -5020,7 +5515,7 @@ type SignVersionSchemaMetaConfigDto = {
              */
             frameworkType?: 'aki' | 'etsi_tl' | 'openid_federation' | 'x509';
             /**
-             * Authority value, for example the trust list URL for `etsi_tl` or the base64 DER root certificate for `x509`.
+             * Authority value, for example the trust list URL for `etsi_tl`, or for `x509` one root certificate in PEM or base64 DER. Publishing rejects an `x509` value that holds more than one certificate, such as a chain.
              */
             value?: string;
             /**
@@ -5442,6 +5937,36 @@ type ChainedAsParRequestDto = {
         [key: string]: unknown;
     }>>;
 };
+type OrgIsoMdocRequest = {
+    /**
+     * base64url-encoded CBOR DeviceRequest
+     */
+    device_request: string;
+    /**
+     * base64url-encoded CBOR EncryptionInfo
+     */
+    encryption_info: string;
+    /**
+     * Where the page posts the wallet's encrypted response. Ends with the
+     * session's `walletNonce`; the session ID is not accepted there.
+     */
+    response_uri: string;
+};
+type Iso18013OfferResponse = {
+    /**
+     * Session ID, for the management API and webhooks.
+     */
+    session: string;
+    /**
+     * Always empty: the request goes through `org_iso_mdoc`.
+     */
+    uri: string;
+    /**
+     * Always empty: the request goes through `org_iso_mdoc`.
+     */
+    crossDeviceUri: string;
+    org_iso_mdoc: OrgIsoMdocRequest;
+};
 type PresentationRequest = {
     /**
      * Webhook configuration to receive the response.
@@ -5506,7 +6031,7 @@ type PresentationRequest = {
     /**
      * Client identifier scheme for the OID4VP request. Defaults to x509_hash.
      */
-    clientIdScheme?: 'x509_hash' | 'x509_san_dns';
+    clientIdScheme?: 'x509_hash' | 'x509_san_dns' | 'openid_federation';
     /**
      * The type of response expected from the presentation request.
      */
@@ -5583,7 +6108,7 @@ type ConfigImportRunEntity = {
 };
 type ConfigResourceMetadataEntity = {
     tenantId: string;
-    kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'StatusList';
+    kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'FederationTrustAnchor' | 'StatusList';
     resourceId: string;
     ownership: 'unmanaged' | 'file-managed' | 'detached';
     generation: number;
@@ -5597,7 +6122,7 @@ type ConfigResourceOwnershipDto = {
     /**
      * Resource kind, as in the config bundle format
      */
-    kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'StatusList';
+    kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'FederationTrustAnchor' | 'StatusList';
     /**
      * Resource ID, or the singleton ID such as `issuance`
      */
@@ -5619,6 +6144,29 @@ type ConfigResourceOwnershipDto = {
      */
     lastAppliedAt?: string;
 };
+type ConfigDocumentMetadataDto = {
+    /**
+     * Generation of the stored definition
+     */
+    generation?: number;
+    /**
+     * Who owns the resource
+     */
+    ownership?: 'unmanaged' | 'file-managed';
+};
+type ConfigDocumentDto = {
+    /**
+     * Canonical schema URL; names the kind and the format version
+     */
+    $schema: string;
+    metadata?: ConfigDocumentMetadataDto;
+    /**
+     * The resource configuration in the schema's format
+     */
+    spec: {
+        [key: string]: unknown;
+    };
+};
 type PresentationConfigWritable = {
     /**
      * Clock skew tolerance for credential JWT time validation, in seconds.
@@ -5705,6 +6253,10 @@ type IssuanceConfigWritable = {
      * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
+    /**
+     * Default status check mode for presented wallet attestations at managed authorization servers. strict rejects when the status list cannot be fetched or read; best_effort (used when unset) accepts when the list cannot be fetched but rejects an unreadable list or an index outside it; disabled skips the status check. A revoked or suspended attestation is rejected unless the check is disabled.
+     */
+    walletAttestationStatusCheckMode?: 'strict' | 'best_effort' | 'disabled' | null;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -5779,6 +6331,10 @@ type UpdateIssuanceDtoWritable = {
      * Each entry MUST include `verifierKey`, `verifierKeyPem` or `verifierX509Der`.
      */
     walletProviderTrustLists?: Array<WalletProviderTrustListRefDto>;
+    /**
+     * Default status check mode for presented wallet attestations at managed authorization servers. strict rejects when the status list cannot be fetched or read; best_effort (used when unset) accepts when the list cannot be fetched but rejects an unreadable list or an index outside it; disabled skips the status check. A revoked or suspended attestation is rejected unless the check is disabled.
+     */
+    walletAttestationStatusCheckMode?: 'strict' | 'best_effort' | 'disabled' | null;
     /**
      * Key ID for signing access tokens. If unset, the default signing key is used.
      */
@@ -6175,9 +6731,13 @@ type RegistrarControllerCreateAccessCertificateData = {
 };
 type RegistrarControllerCreateAccessCertificateErrors = {
     /**
-     * The registrar rejected the relying-party registration or the certificate request
+     * Authentication with the registrar failed (for example wrong credentials or an unreachable OIDC provider), the registrar or OIDC URL is blocked by the outbound URL policy, or the registrar rejected the relying-party lookup or registration or the certificate request
      */
     400: unknown;
+    /**
+     * The caller lacks the registrar:manage role
+     */
+    403: unknown;
     /**
      * No registrar configuration found or key not found
      */
@@ -6203,6 +6763,46 @@ type RegistrarControllerCreateAccessCertificateResponses = {
     };
 };
 type RegistrarControllerCreateAccessCertificateResponse = RegistrarControllerCreateAccessCertificateResponses[keyof RegistrarControllerCreateAccessCertificateResponses];
+type RegistrarControllerCreateAccessKeyChainData = {
+    body: CreateAccessKeyChainDto;
+    path?: never;
+    query?: never;
+    url: '/api/registrar/access-key-chain';
+};
+type RegistrarControllerCreateAccessKeyChainErrors = {
+    /**
+     * The registrar rejected the relying-party registration or the certificate request; no key chain was kept
+     */
+    400: unknown;
+    /**
+     * No registrar configuration found
+     */
+    404: unknown;
+    /**
+     * The enrollment failed and the new key chain could not be deleted; the message names it. Also returned when the registrar stops answering during the certificate request
+     */
+    500: unknown;
+};
+type RegistrarControllerCreateAccessKeyChainResponses = {
+    /**
+     * Access key chain created and enrolled
+     */
+    201: {
+        /**
+         * The certificate ID at the registrar
+         */
+        id: string;
+        /**
+         * ID of the key chain that now holds the certificate
+         */
+        certId: string;
+        /**
+         * The certificate in PEM format
+         */
+        crt: string;
+    };
+};
+type RegistrarControllerCreateAccessKeyChainResponse = RegistrarControllerCreateAccessKeyChainResponses[keyof RegistrarControllerCreateAccessKeyChainResponses];
 type UserControllerGetUsersData = {
     body?: never;
     path?: never;
@@ -6374,7 +6974,7 @@ type KeyChainControllerGetAllData = {
         /**
          * Optional usage type filter
          */
-        usageType?: 'access' | 'attestation' | 'trustList' | 'statusList' | 'encrypt';
+        usageType?: 'access' | 'attestation' | 'trustList' | 'statusList' | 'federation' | 'encrypt';
     };
     url: '/api/key-chain';
 };
@@ -6411,7 +7011,12 @@ type KeyChainControllerDeleteErrors = {
      * Key chain not found
      */
     404: unknown;
+    /**
+     * Configurations of the tenant still name the key chain; the response names those the caller may read and counts the others
+     */
+    409: KeyChainInUseDto;
 };
+type KeyChainControllerDeleteError = KeyChainControllerDeleteErrors[keyof KeyChainControllerDeleteErrors];
 type KeyChainControllerDeleteResponses = {
     /**
      * Key chain deleted successfully
@@ -6449,6 +7054,10 @@ type KeyChainControllerUpdateData = {
     url: '/api/key-chain/{id}';
 };
 type KeyChainControllerUpdateErrors = {
+    /**
+     * Invalid request, for example rotation enabled while neither the request nor the key chain has intervalDays
+     */
+    400: unknown;
     /**
      * Key chain not found
      */
@@ -6492,6 +7101,16 @@ type KeyChainControllerImportData = {
     query?: never;
     url: '/api/key-chain/import';
 };
+type KeyChainControllerImportErrors = {
+    /**
+     * The key material is invalid, or its algorithm is not one the KMS provider offers.
+     */
+    400: unknown;
+    /**
+     * The id belongs to a key chain that EUDIPLO manages itself, such as the tenant's encryption key chain.
+     */
+    409: unknown;
+};
 type KeyChainControllerImportResponses = {
     /**
      * Key chain imported successfully
@@ -6684,6 +7303,12 @@ type PresentationManagementControllerStorePresentationConfigData = {
     query?: never;
     url: '/api/verifier/config';
 };
+type PresentationManagementControllerStorePresentationConfigErrors = {
+    /**
+     * The configuration is invalid: a field fails validation, a DCQL credential query has no trusted_authorities (unless SKIP_TRUST_AUTHORITY is set), or the imported registration certificate (registration_cert.jwt) is refused because it is not a JWT, is expired or not yet valid, or does not authorize the requested DCQL credentials.
+     */
+    400: unknown;
+};
 type PresentationManagementControllerStorePresentationConfigResponses = {
     201: PresentationConfig;
 };
@@ -6793,6 +7418,12 @@ type PresentationManagementControllerUpdateConfigurationData = {
     query?: never;
     url: '/api/verifier/config/{id}';
 };
+type PresentationManagementControllerUpdateConfigurationErrors = {
+    /**
+     * The configuration is invalid: a field fails validation, a DCQL credential query has no trusted_authorities (unless SKIP_TRUST_AUTHORITY is set), or the imported registration certificate (registration_cert.jwt) is refused because it is not a JWT, is expired or not yet valid, or does not authorize the requested DCQL credentials.
+     */
+    400: unknown;
+};
 type PresentationManagementControllerUpdateConfigurationResponses = {
     200: PresentationConfig;
 };
@@ -6807,7 +7438,7 @@ type PresentationManagementControllerReissueRegistrationCertificateData = {
 };
 type PresentationManagementControllerReissueRegistrationCertificateErrors = {
     /**
-     * Config has no registrationCert spec or registrar is not enabled
+     * Config has no registrationCert spec, the spec needs the registrar (id or body) and none is enabled, or the certificate fails its checks
      */
     400: unknown;
 };
@@ -6846,6 +7477,13 @@ type TrustListControllerDeleteTrustListData = {
     query?: never;
     url: '/api/trust-list/{id}';
 };
+type TrustListControllerDeleteTrustListErrors = {
+    /**
+     * Presentation configs, credential configs or the issuance configuration of the tenant still reference the trust list; the response names those the caller may read and counts the others
+     */
+    409: TrustListInUseDto;
+};
+type TrustListControllerDeleteTrustListError = TrustListControllerDeleteTrustListErrors[keyof TrustListControllerDeleteTrustListErrors];
 type TrustListControllerDeleteTrustListResponses = {
     /**
      * Trust list deleted
@@ -6966,6 +7604,110 @@ type CacheControllerClearStatusListCacheResponses = {
     204: void;
 };
 type CacheControllerClearStatusListCacheResponse = CacheControllerClearStatusListCacheResponses[keyof CacheControllerClearStatusListCacheResponses];
+type FederationTrustAnchorControllerGetAllData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/api/federation-trust-anchor';
+};
+type FederationTrustAnchorControllerGetAllResponses = {
+    /**
+     * List of federation trust anchors
+     */
+    200: Array<FederationTrustAnchorResponseDto>;
+};
+type FederationTrustAnchorControllerGetAllResponse = FederationTrustAnchorControllerGetAllResponses[keyof FederationTrustAnchorControllerGetAllResponses];
+type FederationTrustAnchorControllerCreateData = {
+    body: CreateFederationTrustAnchorDto;
+    path?: never;
+    query?: never;
+    url: '/api/federation-trust-anchor';
+};
+type FederationTrustAnchorControllerCreateErrors = {
+    /**
+     * The ID or entity ID is already registered
+     */
+    409: unknown;
+};
+type FederationTrustAnchorControllerCreateResponses = {
+    /**
+     * Trust anchor registered
+     */
+    201: FederationTrustAnchorResponseDto;
+};
+type FederationTrustAnchorControllerCreateResponse = FederationTrustAnchorControllerCreateResponses[keyof FederationTrustAnchorControllerCreateResponses];
+type FederationTrustAnchorControllerDeleteData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: '/api/federation-trust-anchor/{id}';
+};
+type FederationTrustAnchorControllerDeleteErrors = {
+    /**
+     * Trust anchor not found
+     */
+    404: unknown;
+    /**
+     * Presentation configs or the issuance configuration of the tenant still name the trust anchor's entity ID; the response names those the caller may read and counts the others
+     */
+    409: FederationTrustAnchorInUseDto;
+};
+type FederationTrustAnchorControllerDeleteError = FederationTrustAnchorControllerDeleteErrors[keyof FederationTrustAnchorControllerDeleteErrors];
+type FederationTrustAnchorControllerDeleteResponses = {
+    /**
+     * Trust anchor deleted
+     */
+    204: void;
+};
+type FederationTrustAnchorControllerDeleteResponse = FederationTrustAnchorControllerDeleteResponses[keyof FederationTrustAnchorControllerDeleteResponses];
+type FederationTrustAnchorControllerGetByIdData = {
+    body?: never;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: '/api/federation-trust-anchor/{id}';
+};
+type FederationTrustAnchorControllerGetByIdErrors = {
+    /**
+     * Trust anchor not found
+     */
+    404: unknown;
+};
+type FederationTrustAnchorControllerGetByIdResponses = {
+    /**
+     * The federation trust anchor
+     */
+    200: FederationTrustAnchorResponseDto;
+};
+type FederationTrustAnchorControllerGetByIdResponse = FederationTrustAnchorControllerGetByIdResponses[keyof FederationTrustAnchorControllerGetByIdResponses];
+type FederationTrustAnchorControllerUpdateData = {
+    body: UpdateFederationTrustAnchorDto;
+    path: {
+        id: string;
+    };
+    query?: never;
+    url: '/api/federation-trust-anchor/{id}';
+};
+type FederationTrustAnchorControllerUpdateErrors = {
+    /**
+     * Trust anchor not found
+     */
+    404: unknown;
+    /**
+     * The entity ID is already registered (body with `message` only), or the update changes the entity ID while presentation configs or the issuance configuration of the tenant still name the old one (body as for DELETE, with code FEDERATION_TRUST_ANCHOR_IN_USE and `references`)
+     */
+    409: unknown;
+};
+type FederationTrustAnchorControllerUpdateResponses = {
+    /**
+     * Trust anchor updated
+     */
+    200: FederationTrustAnchorResponseDto;
+};
+type FederationTrustAnchorControllerUpdateResponse = FederationTrustAnchorControllerUpdateResponses[keyof FederationTrustAnchorControllerUpdateResponses];
 type SessionControllerGetAllSessionsData = {
     body?: never;
     path?: never;
@@ -7161,6 +7903,10 @@ type SessionControllerRevokeAllErrors = {
      * The status does not fit the status list's bits per entry
      */
     400: unknown;
+    /**
+     * The token has neither credentials:status nor issuance:manage
+     */
+    403: unknown;
     /**
      * No status entry for the session, or a revoked credential would be reinstated or suspended
      */
@@ -7736,9 +8482,9 @@ type VerifierOfferControllerGetOfferData = {
 };
 type VerifierOfferControllerGetOfferResponses = {
     /**
-     * JSON response
+     * JSON response; `Iso18013OfferResponse` for `response_type: "iso-18013-7"`
      */
-    201: OfferResponse;
+    201: OfferResponse | Iso18013OfferResponse;
 };
 type VerifierOfferControllerGetOfferResponse = VerifierOfferControllerGetOfferResponses[keyof VerifierOfferControllerGetOfferResponses];
 type StorageControllerUploadData = {
@@ -7889,7 +8635,7 @@ type ConfigPortabilityControllerResourcesResponse = ConfigPortabilityControllerR
 type ConfigPortabilityControllerResourcesOfKindData = {
     body?: never;
     path: {
-        kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'StatusList';
+        kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'FederationTrustAnchor' | 'StatusList';
     };
     query?: never;
     url: '/api/config-bundles/resources/{kind}';
@@ -7908,6 +8654,39 @@ type ConfigPortabilityControllerResourcesOfKindResponses = {
     200: Array<ConfigResourceOwnershipDto>;
 };
 type ConfigPortabilityControllerResourcesOfKindResponse = ConfigPortabilityControllerResourcesOfKindResponses[keyof ConfigPortabilityControllerResourcesOfKindResponses];
+type ConfigPortabilityControllerExportDocumentData = {
+    body?: never;
+    path: {
+        kind: 'Tenant' | 'Client' | 'KmsConfig' | 'KeyChain' | 'RegistrarConfig' | 'IssuanceConfig' | 'CredentialConfig' | 'PresentationConfig' | 'AttributeProvider' | 'WebhookEndpoint' | 'TrustList' | 'FederationTrustAnchor' | 'StatusList';
+        /**
+         * Resource ID
+         */
+        id: string;
+    };
+    query?: never;
+    url: '/api/config-bundles/resources/{kind}/{id}/document';
+};
+type ConfigPortabilityControllerExportDocumentErrors = {
+    /**
+     * Unknown resource kind.
+     */
+    400: unknown;
+    /**
+     * The token has no tenant or no role that may export this kind.
+     */
+    403: unknown;
+    /**
+     * The resource does not exist.
+     */
+    404: unknown;
+};
+type ConfigPortabilityControllerExportDocumentResponses = {
+    /**
+     * The configuration document
+     */
+    200: ConfigDocumentDto;
+};
+type ConfigPortabilityControllerExportDocumentResponse = ConfigPortabilityControllerExportDocumentResponses[keyof ConfigPortabilityControllerExportDocumentResponses];
 type ConfigPortabilityControllerDetachData = {
     body?: never;
     path: {
@@ -7957,4 +8736,4 @@ type ConfigPortabilityControllerReattachResponses = {
 };
 type ConfigPortabilityControllerReattachResponse = ConfigPortabilityControllerReattachResponses[keyof ConfigPortabilityControllerReattachResponses];
 
-export type { CacheControllerClearStatusListCacheResponses as $, AccessCertificateRefDto as A, AttributeProviderControllerUpdateResponse as B, ClientOptions as C, AttributeProviderControllerUpdateResponses as D, AttributeProviderEntity as E, AuditLogControllerGetAuditLogsData as F, AuditLogControllerGetAuditLogsResponse as G, AuditLogControllerGetAuditLogsResponses as H, AuditLogResponseDto as I, AuthControllerGetOAuth2TokenData as J, AuthControllerGetOAuth2TokenError as K, AuthControllerGetOAuth2TokenErrors as L, AuthControllerGetOAuth2TokenResponse as M, AuthControllerGetOAuth2TokenResponses as N, AuthenticationMethodAuth as O, AuthenticationMethodNone as P, AuthenticationMethodPresentation as Q, AuthenticationUrlConfig as R, Session as S, AuthorizationResponse as T, AuthorizeQueries as U, BuiltInAuthorizationServerConfig as V, CacheControllerClearAllCachesData as W, CacheControllerClearAllCachesResponse as X, CacheControllerClearAllCachesResponses as Y, CacheControllerClearStatusListCacheData as Z, CacheControllerClearStatusListCacheResponse as _, ActiveCredentialPolicy as a, ConfigPortabilityControllerOperationResponses as a$, CacheControllerClearTrustListCacheData as a0, CacheControllerClearTrustListCacheResponse as a1, CacheControllerClearTrustListCacheResponses as a2, CacheControllerGetStatsData as a3, CacheControllerGetStatsResponse as a4, CacheControllerGetStatsResponses as a5, CacheStatsResponseDto as a6, CancelSessionDto as a7, CertificateInfoDto as a8, ChainedAsErrorResponseDto as a9, ClientControllerRotateClientSecretResponses as aA, ClientControllerUpdateClientData as aB, ClientControllerUpdateClientErrors as aC, ClientControllerUpdateClientResponse as aD, ClientControllerUpdateClientResponses as aE, ClientCredentialsDto as aF, ClientEntity as aG, ClientSecretResponseDto as aH, CompleteDeferredDto as aI, ConfigImportRunEntity as aJ, ConfigPortabilityControllerAcknowledgeInterruptionData as aK, ConfigPortabilityControllerAcknowledgeInterruptionResponse as aL, ConfigPortabilityControllerAcknowledgeInterruptionResponses as aM, ConfigPortabilityControllerDetachData as aN, ConfigPortabilityControllerDetachResponse as aO, ConfigPortabilityControllerDetachResponses as aP, ConfigPortabilityControllerExportData as aQ, ConfigPortabilityControllerExportResponse as aR, ConfigPortabilityControllerExportResponses as aS, ConfigPortabilityControllerImportArchiveData as aT, ConfigPortabilityControllerImportArchiveResponse as aU, ConfigPortabilityControllerImportArchiveResponses as aV, ConfigPortabilityControllerImportData as aW, ConfigPortabilityControllerImportResponse as aX, ConfigPortabilityControllerImportResponses as aY, ConfigPortabilityControllerOperationData as aZ, ConfigPortabilityControllerOperationResponse as a_, ChainedAsParRequestDto as aa, ChainedAsParResponseDto as ab, ChainedAsTokenConfig as ac, ChainedAsTokenRequestDto as ad, ChainedAsTokenResponseDto as ae, ChainedAuthorizationServerConfig as af, ClaimFieldDefinitionDto as ag, ClaimsQuery as ah, ClientControllerCreateClientData as ai, ClientControllerCreateClientErrors as aj, ClientControllerCreateClientResponse as ak, ClientControllerCreateClientResponses as al, ClientControllerDeleteClientData as am, ClientControllerDeleteClientErrors as an, ClientControllerDeleteClientResponse as ao, ClientControllerDeleteClientResponses as ap, ClientControllerGetClientData as aq, ClientControllerGetClientErrors as ar, ClientControllerGetClientResponse as as, ClientControllerGetClientResponses as at, ClientControllerGetClientsData as au, ClientControllerGetClientsResponse as av, ClientControllerGetClientsResponses as aw, ClientControllerRotateClientSecretData as ax, ClientControllerRotateClientSecretErrors as ay, ClientControllerRotateClientSecretResponse as az, AllowListPolicy as b, DeferredControllerCompleteDeferredData as b$, ConfigPortabilityControllerOperationsData as b0, ConfigPortabilityControllerOperationsResponse as b1, ConfigPortabilityControllerOperationsResponses as b2, ConfigPortabilityControllerPlanArchiveData as b3, ConfigPortabilityControllerPlanArchiveResponse as b4, ConfigPortabilityControllerPlanArchiveResponses as b5, ConfigPortabilityControllerPlanData as b6, ConfigPortabilityControllerPlanReattachData as b7, ConfigPortabilityControllerPlanReattachResponse as b8, ConfigPortabilityControllerPlanReattachResponses as b9, CredentialConfigControllerDeleteIssuanceConfigurationResponse as bA, CredentialConfigControllerDeleteIssuanceConfigurationResponses as bB, CredentialConfigControllerGetConfigByIdData as bC, CredentialConfigControllerGetConfigByIdResponse as bD, CredentialConfigControllerGetConfigByIdResponses as bE, CredentialConfigControllerGetConfigsData as bF, CredentialConfigControllerGetConfigsResponse as bG, CredentialConfigControllerGetConfigsResponses as bH, CredentialConfigControllerStoreCredentialConfigurationData as bI, CredentialConfigControllerStoreCredentialConfigurationResponse as bJ, CredentialConfigControllerStoreCredentialConfigurationResponses as bK, CredentialConfigControllerUpdateCredentialConfigurationData as bL, CredentialConfigControllerUpdateCredentialConfigurationResponse as bM, CredentialConfigControllerUpdateCredentialConfigurationResponses as bN, CredentialConfigCreate as bO, CredentialConfigUpdate as bP, CredentialIssuerMetadataDto as bQ, CredentialOfferControllerGetOfferData as bR, CredentialOfferControllerGetOfferResponse as bS, CredentialOfferControllerGetOfferResponses as bT, CredentialQueryDcSdJwt as bU, CredentialQueryMsoMdoc as bV, CredentialReusePolicy as bW, CredentialSetQuery as bX, CredentialStatusDto as bY, DcSdJwtCredentialQueryMeta as bZ, Dcql as b_, ConfigPortabilityControllerPlanResponse as ba, ConfigPortabilityControllerPlanResponses as bb, ConfigPortabilityControllerReattachData as bc, ConfigPortabilityControllerReattachResponse as bd, ConfigPortabilityControllerReattachResponses as be, ConfigPortabilityControllerResourcesData as bf, ConfigPortabilityControllerResourcesOfKindData as bg, ConfigPortabilityControllerResourcesOfKindErrors as bh, ConfigPortabilityControllerResourcesOfKindResponse as bi, ConfigPortabilityControllerResourcesOfKindResponses as bj, ConfigPortabilityControllerResourcesResponse as bk, ConfigPortabilityControllerResourcesResponses as bl, ConfigPortabilityControllerUpgradeData as bm, ConfigPortabilityControllerUpgradeResponses as bn, ConfigResourceMetadataEntity as bo, ConfigResourceOwnershipDto as bp, CreateAccessCertificateDto as bq, CreateAttributeProviderDto as br, CreateClientDto as bs, CreateRegistrarConfigDto as bt, CreateStatusListDto as bu, CreateTenantDto as bv, CreateUserDto as bw, CreateWebhookEndpointDto as bx, CredentialConfig as by, CredentialConfigControllerDeleteIssuanceConfigurationData as bz, ApiKeyConfig as c, KeyChainControllerDeleteTenantKmsConfigResponses as c$, DeferredControllerCompleteDeferredErrors as c0, DeferredControllerCompleteDeferredResponse as c1, DeferredControllerCompleteDeferredResponses as c2, DeferredControllerFailDeferredData as c3, DeferredControllerFailDeferredErrors as c4, DeferredControllerFailDeferredResponse as c5, DeferredControllerFailDeferredResponses as c6, DeferredCredentialRequestDto as c7, DeferredOperationResponse as c8, DeprecateSchemaMetadataDto as c9, IssuanceConfigControllerGetIssuanceConfigurationsData as cA, IssuanceConfigControllerGetIssuanceConfigurationsResponse as cB, IssuanceConfigControllerGetIssuanceConfigurationsResponses as cC, IssuanceConfigControllerReissueRegistrationCertificateData as cD, IssuanceConfigControllerReissueRegistrationCertificateErrors as cE, IssuanceConfigControllerReissueRegistrationCertificateResponse as cF, IssuanceConfigControllerReissueRegistrationCertificateResponses as cG, IssuanceConfigControllerStoreIssuanceConfigurationData as cH, IssuanceConfigControllerStoreIssuanceConfigurationResponse as cI, IssuanceConfigControllerStoreIssuanceConfigurationResponses as cJ, IssuanceConfigWritable as cK, IssuerMetadataCredentialConfig as cL, IssuerOfferEntryDto as cM, IssuerRegistrationCertificateCache as cN, IssuerRegistrationCertificateConfig as cO, JwksResponseDto as cP, KeyAttestationsRequired as cQ, KeyChainControllerCreateData as cR, KeyChainControllerCreateResponse as cS, KeyChainControllerCreateResponses as cT, KeyChainControllerDeleteData as cU, KeyChainControllerDeleteErrors as cV, KeyChainControllerDeleteResponse as cW, KeyChainControllerDeleteResponses as cX, KeyChainControllerDeleteTenantKmsConfigData as cY, KeyChainControllerDeleteTenantKmsConfigErrors as cZ, KeyChainControllerDeleteTenantKmsConfigResponse as c_, Display as ca, DisplayImage as cb, DisplayInfo as cc, DisplayLogo as cd, EcJwk as ce, EcPublic as cf, EmbeddedDisclosurePolicy as cg, ExportEcJwk as ch, ExportRotationPolicyDto as ci, ExternalAuthorizationServerConfig as cj, ExternalTrustListEntity as ck, FailDeferredDto as cl, FederationConfig as cm, FederationTrustAnchorConfig as cn, FieldDisplayDto as co, FileUploadDto as cp, FrontendConfigResponseDto as cq, GrafanaConfigDto as cr, IaeActionOpenid4VpPresentation as cs, IaeActionRedirectToWeb as ct, ImportTenantDto as cu, InteractiveAuthorizationCodeResponseDto as cv, InteractiveAuthorizationErrorResponseDto as cw, InteractiveAuthorizationRequestDto as cx, InternalTrustListEntity as cy, IssuanceConfig as cz, AppControllerGetFrontendConfigData as d, PaginatedSessionResponseDto as d$, KeyChainControllerExportData as d0, KeyChainControllerExportErrors as d1, KeyChainControllerExportResponse as d2, KeyChainControllerExportResponses as d3, KeyChainControllerGetAllData as d4, KeyChainControllerGetAllResponse as d5, KeyChainControllerGetAllResponses as d6, KeyChainControllerGetByIdData as d7, KeyChainControllerGetByIdErrors as d8, KeyChainControllerGetByIdResponse as d9, KeyChainControllerUpdateTenantKmsConfigResponses as dA, KeyChainCreateDto as dB, KeyChainEntity as dC, KeyChainExportDto as dD, KeyChainIdResponseDto as dE, KeyChainImportDto as dF, KeyChainResponseDto as dG, KeyChainUpdateDto as dH, KeyResponseDto as dI, KmsConfigDto as dJ, KmsProviderCapabilitiesDto as dK, KmsProviderInfoDto as dL, KmsProvidersResponseDto as dM, KmsTenantConfigResponseDto as dN, ManagedAuthorizationServerConfig as dO, ManagedUserDto as dP, MetadataSchemaDto as dQ, MsoMdocClaimsQuery as dR, MsoMdocCredentialQueryMeta as dS, NoneTrustPolicy as dT, NotificationRequestDto as dU, OAuthTokenErrorResponseDto as dV, Object$1 as dW, ObjectWritable as dX, OfferRequestDto as dY, OfferResponse as dZ, Oid4VpAuthorizationServerConfig as d_, KeyChainControllerGetByIdResponses as da, KeyChainControllerGetProvidersData as db, KeyChainControllerGetProvidersHealthData as dc, KeyChainControllerGetProvidersHealthResponse as dd, KeyChainControllerGetProvidersHealthResponses as de, KeyChainControllerGetProvidersResponse as df, KeyChainControllerGetProvidersResponses as dg, KeyChainControllerGetTenantKmsConfigData as dh, KeyChainControllerGetTenantKmsConfigErrors as di, KeyChainControllerGetTenantKmsConfigResponse as dj, KeyChainControllerGetTenantKmsConfigResponses as dk, KeyChainControllerImportData as dl, KeyChainControllerImportResponse as dm, KeyChainControllerImportResponses as dn, KeyChainControllerRotateData as dp, KeyChainControllerRotateErrors as dq, KeyChainControllerRotateResponse as dr, KeyChainControllerRotateResponses as ds, KeyChainControllerUpdateData as dt, KeyChainControllerUpdateErrors as du, KeyChainControllerUpdateResponse as dv, KeyChainControllerUpdateResponses as dw, KeyChainControllerUpdateTenantKmsConfigData as dx, KeyChainControllerUpdateTenantKmsConfigErrors as dy, KeyChainControllerUpdateTenantKmsConfigResponse as dz, AppControllerGetFrontendConfigResponse as e, RegistrarControllerUpdateConfigErrors as e$, ParResponseDto as e0, PolicyCredential as e1, PresentationAttachment as e2, PresentationConfig as e3, PresentationConfigCreateDto as e4, PresentationConfigUpdateDto as e5, PresentationConfigWritable as e6, PresentationDuringIssuanceConfig as e7, PresentationManagementControllerConfigurationData as e8, PresentationManagementControllerConfigurationResponse as e9, PresentationManagementControllerStorePresentationConfigData as eA, PresentationManagementControllerStorePresentationConfigResponse as eB, PresentationManagementControllerStorePresentationConfigResponses as eC, PresentationManagementControllerUpdateConfigurationData as eD, PresentationManagementControllerUpdateConfigurationResponse as eE, PresentationManagementControllerUpdateConfigurationResponses as eF, PresentationRequest as eG, ProviderHealthResponseDto as eH, PublicKeyInfoDto as eI, PublishSchemaMetaConfig as eJ, RegistrarConfigResponseDto as eK, RegistrarControllerCreateAccessCertificateData as eL, RegistrarControllerCreateAccessCertificateErrors as eM, RegistrarControllerCreateAccessCertificateResponse as eN, RegistrarControllerCreateAccessCertificateResponses as eO, RegistrarControllerCreateConfigData as eP, RegistrarControllerCreateConfigErrors as eQ, RegistrarControllerCreateConfigResponse as eR, RegistrarControllerCreateConfigResponses as eS, RegistrarControllerDeleteConfigData as eT, RegistrarControllerDeleteConfigResponse as eU, RegistrarControllerDeleteConfigResponses as eV, RegistrarControllerGetConfigData as eW, RegistrarControllerGetConfigErrors as eX, RegistrarControllerGetConfigResponse as eY, RegistrarControllerGetConfigResponses as eZ, RegistrarControllerUpdateConfigData as e_, PresentationManagementControllerConfigurationResponses as ea, PresentationManagementControllerDeleteConfigurationData as eb, PresentationManagementControllerDeleteConfigurationResponse as ec, PresentationManagementControllerDeleteConfigurationResponses as ed, PresentationManagementControllerGetConfigurationData as ee, PresentationManagementControllerGetConfigurationResponse as ef, PresentationManagementControllerGetConfigurationResponses as eg, PresentationManagementControllerListSchemaMetadataCatalogData as eh, PresentationManagementControllerListSchemaMetadataCatalogResponse as ei, PresentationManagementControllerListSchemaMetadataCatalogResponses as ej, PresentationManagementControllerReissueRegistrationCertificateData as ek, PresentationManagementControllerReissueRegistrationCertificateErrors as el, PresentationManagementControllerReissueRegistrationCertificateResponse as em, PresentationManagementControllerReissueRegistrationCertificateResponses as en, PresentationManagementControllerResolveIssuerMetadataData as eo, PresentationManagementControllerResolveIssuerMetadataErrors as ep, PresentationManagementControllerResolveIssuerMetadataResponse as eq, PresentationManagementControllerResolveIssuerMetadataResponses as er, PresentationManagementControllerResolveSchemaMetadataData as es, PresentationManagementControllerResolveSchemaMetadataErrors as et, PresentationManagementControllerResolveSchemaMetadataJwtData as eu, PresentationManagementControllerResolveSchemaMetadataJwtErrors as ev, PresentationManagementControllerResolveSchemaMetadataJwtResponse as ew, PresentationManagementControllerResolveSchemaMetadataJwtResponses as ex, PresentationManagementControllerResolveSchemaMetadataResponse as ey, PresentationManagementControllerResolveSchemaMetadataResponses as ez, AppControllerGetFrontendConfigResponses as f, SchemaMetadataVocabulariesDto as f$, RegistrarControllerUpdateConfigResponse as f0, RegistrarControllerUpdateConfigResponses as f1, RegistrationCertificateBody as f2, RegistrationCertificateDefaults as f3, RegistrationCertificatePurpose as f4, RegistrationCertificateRequest as f5, ResolveIssuerMetadataDto as f6, ResolveSchemaMetadataDto as f7, ResolveSchemaMetadataJwtDto as f8, ResolvedSchemaMetadataReferenceDto as f9, SchemaMetadataControllerGetMineData as fA, SchemaMetadataControllerGetMineResponse as fB, SchemaMetadataControllerGetMineResponses as fC, SchemaMetadataControllerGetSchemaData as fD, SchemaMetadataControllerGetSchemaResponse as fE, SchemaMetadataControllerGetSchemaResponses as fF, SchemaMetadataControllerGetVersionsData as fG, SchemaMetadataControllerGetVersionsResponse as fH, SchemaMetadataControllerGetVersionsResponses as fI, SchemaMetadataControllerGetVocabulariesData as fJ, SchemaMetadataControllerGetVocabulariesResponse as fK, SchemaMetadataControllerGetVocabulariesResponses as fL, SchemaMetadataControllerPublishSchemaMetadataData as fM, SchemaMetadataControllerPublishSchemaMetadataErrors as fN, SchemaMetadataControllerPublishSchemaMetadataResponse as fO, SchemaMetadataControllerPublishSchemaMetadataResponses as fP, SchemaMetadataControllerPublishSchemaMetadataVersionData as fQ, SchemaMetadataControllerPublishSchemaMetadataVersionErrors as fR, SchemaMetadataControllerPublishSchemaMetadataVersionResponse as fS, SchemaMetadataControllerPublishSchemaMetadataVersionResponses as fT, SchemaMetadataControllerRemoveData as fU, SchemaMetadataControllerRemoveResponse as fV, SchemaMetadataControllerRemoveResponses as fW, SchemaMetadataControllerUpdateData as fX, SchemaMetadataControllerUpdateResponse as fY, SchemaMetadataControllerUpdateResponses as fZ, SchemaMetadataResponseDto as f_, ResolvedSchemaMetadataResponseDto as fa, ResolvedSchemaMetadataSchemaDto as fb, ResolvedSchemaMetadataSchemaUriDto as fc, ResolvedSchemaMetadataTrustedAuthorityDto as fd, RoleDto as fe, RootOfTrustPolicy as ff, RotationPolicyCreateDto as fg, RotationPolicyImportDto as fh, RotationPolicyResponseDto as fi, RotationPolicyUpdateDto as fj, SchemaMetaConfig as fk, SchemaMetadataControllerDeprecateVersionData as fl, SchemaMetadataControllerDeprecateVersionResponse as fm, SchemaMetadataControllerDeprecateVersionResponses as fn, SchemaMetadataControllerFindAllData as fo, SchemaMetadataControllerFindAllResponse as fp, SchemaMetadataControllerFindAllResponses as fq, SchemaMetadataControllerFindOneData as fr, SchemaMetadataControllerFindOneResponse as fs, SchemaMetadataControllerFindOneResponses as ft, SchemaMetadataControllerGetJwtData as fu, SchemaMetadataControllerGetJwtResponse as fv, SchemaMetadataControllerGetJwtResponses as fw, SchemaMetadataControllerGetLatestData as fx, SchemaMetadataControllerGetLatestResponse as fy, SchemaMetadataControllerGetLatestResponses as fz, AppControllerGetVersionData as g, StatusListImportDto as g$, SchemaUriEntry as g0, ServiceInfoResponseDto as g1, SessionConfigControllerGetConfigData as g2, SessionConfigControllerGetConfigResponse as g3, SessionConfigControllerGetConfigResponses as g4, SessionConfigControllerResetConfigData as g5, SessionConfigControllerResetConfigResponse as g6, SessionConfigControllerResetConfigResponses as g7, SessionConfigControllerUpdateConfigData as g8, SessionConfigControllerUpdateConfigResponse as g9, SessionControllerRevokeAllResponse as gA, SessionControllerRevokeAllResponses as gB, SessionEventsControllerSubscribeToSessionEventsData as gC, SessionEventsControllerSubscribeToSessionEventsErrors as gD, SessionEventsControllerSubscribeToSessionEventsResponse as gE, SessionEventsControllerSubscribeToSessionEventsResponses as gF, SessionFailureCodeCountDto as gG, SessionLogEntryResponseDto as gH, SessionRetentionDto as gI, SessionStatsResponseDto as gJ, SessionStatusCountsDto as gK, SessionStorageConfig as gL, SessionTypeStatsDto as gM, SignSchemaMetaConfigDto as gN, SignVersionSchemaMetaConfigDto as gO, StatusListAggregationDto as gP, StatusListCacheStatsDto as gQ, StatusListConfig as gR, StatusListConfigControllerGetConfigData as gS, StatusListConfigControllerGetConfigResponse as gT, StatusListConfigControllerGetConfigResponses as gU, StatusListConfigControllerResetConfigData as gV, StatusListConfigControllerResetConfigResponse as gW, StatusListConfigControllerResetConfigResponses as gX, StatusListConfigControllerUpdateConfigData as gY, StatusListConfigControllerUpdateConfigResponse as gZ, StatusListConfigControllerUpdateConfigResponses as g_, SessionConfigControllerUpdateConfigResponses as ga, SessionControllerCancelData as gb, SessionControllerCancelErrors as gc, SessionControllerCancelResponse as gd, SessionControllerCancelResponses as ge, SessionControllerDeleteSessionData as gf, SessionControllerDeleteSessionResponse as gg, SessionControllerDeleteSessionResponses as gh, SessionControllerGetAllSessionsData as gi, SessionControllerGetAllSessionsResponse as gj, SessionControllerGetAllSessionsResponses as gk, SessionControllerGetCredentialStatusData as gl, SessionControllerGetCredentialStatusErrors as gm, SessionControllerGetCredentialStatusResponse as gn, SessionControllerGetCredentialStatusResponses as go, SessionControllerGetSessionData as gp, SessionControllerGetSessionLogsData as gq, SessionControllerGetSessionLogsResponse as gr, SessionControllerGetSessionLogsResponses as gs, SessionControllerGetSessionResponse as gt, SessionControllerGetSessionResponses as gu, SessionControllerGetSessionStatsData as gv, SessionControllerGetSessionStatsResponse as gw, SessionControllerGetSessionStatsResponses as gx, SessionControllerRevokeAllData as gy, SessionControllerRevokeAllErrors as gz, AppControllerGetVersionResponse as h, TrustListControllerGetTrustListVersionResponse as h$, StatusListManagementControllerCreateListData as h0, StatusListManagementControllerCreateListResponse as h1, StatusListManagementControllerCreateListResponses as h2, StatusListManagementControllerDeleteListData as h3, StatusListManagementControllerDeleteListResponse as h4, StatusListManagementControllerDeleteListResponses as h5, StatusListManagementControllerGetListData as h6, StatusListManagementControllerGetListResponse as h7, StatusListManagementControllerGetListResponses as h8, StatusListManagementControllerGetListsData as h9, TenantControllerUpdateTenantResponse as hA, TenantControllerUpdateTenantResponses as hB, TenantCreateResponseDto as hC, TenantEntity as hD, TenantResponseDto as hE, TokenResponse as hF, TransactionData as hG, TrustAuthorityDto as hH, TrustAuthorityEntry as hI, TrustList as hJ, TrustListCacheStatsDto as hK, TrustListControllerCreateTrustListData as hL, TrustListControllerCreateTrustListResponse as hM, TrustListControllerCreateTrustListResponses as hN, TrustListControllerDeleteTrustListData as hO, TrustListControllerDeleteTrustListResponse as hP, TrustListControllerDeleteTrustListResponses as hQ, TrustListControllerExportTrustListData as hR, TrustListControllerExportTrustListResponse as hS, TrustListControllerExportTrustListResponses as hT, TrustListControllerGetAllTrustListsData as hU, TrustListControllerGetAllTrustListsResponse as hV, TrustListControllerGetAllTrustListsResponses as hW, TrustListControllerGetTrustListData as hX, TrustListControllerGetTrustListResponse as hY, TrustListControllerGetTrustListResponses as hZ, TrustListControllerGetTrustListVersionData as h_, StatusListManagementControllerGetListsResponse as ha, StatusListManagementControllerGetListsResponses as hb, StatusListManagementControllerUpdateListData as hc, StatusListManagementControllerUpdateListResponse as hd, StatusListManagementControllerUpdateListResponses as he, StatusListResponseDto as hf, StatusUpdateDto as hg, StorageControllerUploadData as hh, StorageControllerUploadResponse as hi, StorageControllerUploadResponses as hj, StoredObjectResponseDto as hk, TenantClientCredentialsDto as hl, TenantControllerDeleteTenantData as hm, TenantControllerDeleteTenantResponse as hn, TenantControllerDeleteTenantResponses as ho, TenantControllerGetTenantData as hp, TenantControllerGetTenantResponse as hq, TenantControllerGetTenantResponses as hr, TenantControllerGetTenantsData as hs, TenantControllerGetTenantsResponse as ht, TenantControllerGetTenantsResponses as hu, TenantControllerInitTenantData as hv, TenantControllerInitTenantErrors as hw, TenantControllerInitTenantResponse as hx, TenantControllerInitTenantResponses as hy, TenantControllerUpdateTenantData as hz, AppControllerGetVersionResponses as i, WebhookEndpointControllerDeleteResponses as i$, TrustListControllerGetTrustListVersionResponses as i0, TrustListControllerGetTrustListVersionsData as i1, TrustListControllerGetTrustListVersionsResponse as i2, TrustListControllerGetTrustListVersionsResponses as i3, TrustListControllerUpdateTrustListData as i4, TrustListControllerUpdateTrustListResponse as i5, TrustListControllerUpdateTrustListResponses as i6, TrustListCreateDto as i7, TrustListEntityInfo as i8, TrustListRef as i9, UserControllerDeleteUserResponses as iA, UserControllerGetUserData as iB, UserControllerGetUserResponse as iC, UserControllerGetUserResponses as iD, UserControllerGetUsersData as iE, UserControllerGetUsersResponse as iF, UserControllerGetUsersResponses as iG, UserControllerUpdateUserData as iH, UserControllerUpdateUserErrors as iI, UserControllerUpdateUserResponse as iJ, UserControllerUpdateUserResponses as iK, Vct as iL, VerifierOfferControllerGetOfferData as iM, VerifierOfferControllerGetOfferResponse as iN, VerifierOfferControllerGetOfferResponses as iO, VersionResponseDto as iP, VocabularyEntryDto as iQ, WalletProviderTrustListRefDto as iR, WebHookAuthConfigHeader as iS, WebHookAuthConfigNone as iT, WebhookConfig as iU, WebhookEndpointControllerCreateData as iV, WebhookEndpointControllerCreateResponse as iW, WebhookEndpointControllerCreateResponses as iX, WebhookEndpointControllerDeleteData as iY, WebhookEndpointControllerDeleteErrors as iZ, WebhookEndpointControllerDeleteResponse as i_, TrustListVersion as ia, TrustedAuthorityQueryEtsiTl as ib, TrustedAuthorityQueryOpenIdFederation as ic, UpdateAttributeProviderDto as id, UpdateClientDto as ie, UpdateIssuanceDto as ig, UpdateIssuanceDtoWritable as ih, UpdateIssuerOfferDto as ii, UpdateRegistrarConfigDto as ij, UpdateSchemaMetadataDto as ik, UpdateSessionConfigDto as il, UpdateStatusListConfigDto as im, UpdateStatusListDto as io, UpdateTenantDto as ip, UpdateUserDto as iq, UpdateWebhookEndpointDto as ir, UpstreamOidcConfig as is, UserControllerCreateUserData as it, UserControllerCreateUserErrors as iu, UserControllerCreateUserResponse as iv, UserControllerCreateUserResponses as iw, UserControllerDeleteUserData as ix, UserControllerDeleteUserErrors as iy, UserControllerDeleteUserResponse as iz, AttestationBasedPolicy as j, WebhookEndpointControllerGetAllData as j0, WebhookEndpointControllerGetAllResponse as j1, WebhookEndpointControllerGetAllResponses as j2, WebhookEndpointControllerGetByIdData as j3, WebhookEndpointControllerGetByIdErrors as j4, WebhookEndpointControllerGetByIdResponse as j5, WebhookEndpointControllerGetByIdResponses as j6, WebhookEndpointControllerUpdateData as j7, WebhookEndpointControllerUpdateErrors as j8, WebhookEndpointControllerUpdateResponse as j9, WebhookEndpointControllerUpdateResponses as ja, WebhookEndpointEntity as jb, AttributeProviderControllerCreateData as k, AttributeProviderControllerCreateResponse as l, AttributeProviderControllerCreateResponses as m, AttributeProviderControllerDeleteData as n, AttributeProviderControllerDeleteErrors as o, AttributeProviderControllerDeleteResponse as p, AttributeProviderControllerDeleteResponses as q, AttributeProviderControllerGetAllData as r, AttributeProviderControllerGetAllResponse as s, AttributeProviderControllerGetAllResponses as t, AttributeProviderControllerGetByIdData as u, AttributeProviderControllerGetByIdErrors as v, AttributeProviderControllerGetByIdResponse as w, AttributeProviderControllerGetByIdResponses as x, AttributeProviderControllerUpdateData as y, AttributeProviderControllerUpdateErrors as z };
+export type { CacheControllerClearStatusListCacheResponses as $, AccessCertificateRefDto as A, AttributeProviderControllerUpdateResponse as B, ClientOptions as C, AttributeProviderControllerUpdateResponses as D, AttributeProviderEntity as E, AuditLogControllerGetAuditLogsData as F, AuditLogControllerGetAuditLogsResponse as G, AuditLogControllerGetAuditLogsResponses as H, AuditLogResponseDto as I, AuthControllerGetOAuth2TokenData as J, AuthControllerGetOAuth2TokenError as K, AuthControllerGetOAuth2TokenErrors as L, AuthControllerGetOAuth2TokenResponse as M, AuthControllerGetOAuth2TokenResponses as N, AuthenticationMethodAuth as O, AuthenticationMethodNone as P, AuthenticationMethodPresentation as Q, AuthenticationUrlConfig as R, Session as S, AuthorizationResponse as T, AuthorizeQueries as U, BuiltInAuthorizationServerConfig as V, CacheControllerClearAllCachesData as W, CacheControllerClearAllCachesResponse as X, CacheControllerClearAllCachesResponses as Y, CacheControllerClearStatusListCacheData as Z, CacheControllerClearStatusListCacheResponse as _, ActiveCredentialPolicy as a, ConfigPortabilityControllerImportArchiveResponses as a$, CacheControllerClearTrustListCacheData as a0, CacheControllerClearTrustListCacheResponse as a1, CacheControllerClearTrustListCacheResponses as a2, CacheControllerGetStatsData as a3, CacheControllerGetStatsResponse as a4, CacheControllerGetStatsResponses as a5, CacheStatsResponseDto as a6, CancelSessionDto as a7, CertificateInfoDto as a8, ChainedAsErrorResponseDto as a9, ClientControllerRotateClientSecretResponses as aA, ClientControllerUpdateClientData as aB, ClientControllerUpdateClientErrors as aC, ClientControllerUpdateClientResponse as aD, ClientControllerUpdateClientResponses as aE, ClientCredentialsDto as aF, ClientEntity as aG, ClientSecretResponseDto as aH, CompleteDeferredDto as aI, ConfigDocumentDto as aJ, ConfigDocumentMetadataDto as aK, ConfigImportRunEntity as aL, ConfigPortabilityControllerAcknowledgeInterruptionData as aM, ConfigPortabilityControllerAcknowledgeInterruptionResponse as aN, ConfigPortabilityControllerAcknowledgeInterruptionResponses as aO, ConfigPortabilityControllerDetachData as aP, ConfigPortabilityControllerDetachResponse as aQ, ConfigPortabilityControllerDetachResponses as aR, ConfigPortabilityControllerExportData as aS, ConfigPortabilityControllerExportDocumentData as aT, ConfigPortabilityControllerExportDocumentErrors as aU, ConfigPortabilityControllerExportDocumentResponse as aV, ConfigPortabilityControllerExportDocumentResponses as aW, ConfigPortabilityControllerExportResponse as aX, ConfigPortabilityControllerExportResponses as aY, ConfigPortabilityControllerImportArchiveData as aZ, ConfigPortabilityControllerImportArchiveResponse as a_, ChainedAsParRequestDto as aa, ChainedAsParResponseDto as ab, ChainedAsTokenConfig as ac, ChainedAsTokenRequestDto as ad, ChainedAsTokenResponseDto as ae, ChainedAuthorizationServerConfig as af, ClaimFieldDefinitionDto as ag, ClaimsQuery as ah, ClientControllerCreateClientData as ai, ClientControllerCreateClientErrors as aj, ClientControllerCreateClientResponse as ak, ClientControllerCreateClientResponses as al, ClientControllerDeleteClientData as am, ClientControllerDeleteClientErrors as an, ClientControllerDeleteClientResponse as ao, ClientControllerDeleteClientResponses as ap, ClientControllerGetClientData as aq, ClientControllerGetClientErrors as ar, ClientControllerGetClientResponse as as, ClientControllerGetClientResponses as at, ClientControllerGetClientsData as au, ClientControllerGetClientsResponse as av, ClientControllerGetClientsResponses as aw, ClientControllerRotateClientSecretData as ax, ClientControllerRotateClientSecretErrors as ay, ClientControllerRotateClientSecretResponse as az, AllowListPolicy as b, CredentialOfferControllerGetOfferResponses as b$, ConfigPortabilityControllerImportData as b0, ConfigPortabilityControllerImportResponse as b1, ConfigPortabilityControllerImportResponses as b2, ConfigPortabilityControllerOperationData as b3, ConfigPortabilityControllerOperationResponse as b4, ConfigPortabilityControllerOperationResponses as b5, ConfigPortabilityControllerOperationsData as b6, ConfigPortabilityControllerOperationsResponse as b7, ConfigPortabilityControllerOperationsResponses as b8, ConfigPortabilityControllerPlanArchiveData as b9, CreateFederationTrustAnchorDto as bA, CreateRegistrarConfigDto as bB, CreateStatusListDto as bC, CreateTenantDto as bD, CreateUserDto as bE, CreateWebhookEndpointDto as bF, CredentialConfig as bG, CredentialConfigControllerDeleteIssuanceConfigurationData as bH, CredentialConfigControllerDeleteIssuanceConfigurationResponse as bI, CredentialConfigControllerDeleteIssuanceConfigurationResponses as bJ, CredentialConfigControllerGetConfigByIdData as bK, CredentialConfigControllerGetConfigByIdResponse as bL, CredentialConfigControllerGetConfigByIdResponses as bM, CredentialConfigControllerGetConfigsData as bN, CredentialConfigControllerGetConfigsResponse as bO, CredentialConfigControllerGetConfigsResponses as bP, CredentialConfigControllerStoreCredentialConfigurationData as bQ, CredentialConfigControllerStoreCredentialConfigurationResponse as bR, CredentialConfigControllerStoreCredentialConfigurationResponses as bS, CredentialConfigControllerUpdateCredentialConfigurationData as bT, CredentialConfigControllerUpdateCredentialConfigurationResponse as bU, CredentialConfigControllerUpdateCredentialConfigurationResponses as bV, CredentialConfigCreate as bW, CredentialConfigUpdate as bX, CredentialIssuerMetadataDto as bY, CredentialOfferControllerGetOfferData as bZ, CredentialOfferControllerGetOfferResponse as b_, ConfigPortabilityControllerPlanArchiveResponse as ba, ConfigPortabilityControllerPlanArchiveResponses as bb, ConfigPortabilityControllerPlanData as bc, ConfigPortabilityControllerPlanReattachData as bd, ConfigPortabilityControllerPlanReattachResponse as be, ConfigPortabilityControllerPlanReattachResponses as bf, ConfigPortabilityControllerPlanResponse as bg, ConfigPortabilityControllerPlanResponses as bh, ConfigPortabilityControllerReattachData as bi, ConfigPortabilityControllerReattachResponse as bj, ConfigPortabilityControllerReattachResponses as bk, ConfigPortabilityControllerResourcesData as bl, ConfigPortabilityControllerResourcesOfKindData as bm, ConfigPortabilityControllerResourcesOfKindErrors as bn, ConfigPortabilityControllerResourcesOfKindResponse as bo, ConfigPortabilityControllerResourcesOfKindResponses as bp, ConfigPortabilityControllerResourcesResponse as bq, ConfigPortabilityControllerResourcesResponses as br, ConfigPortabilityControllerUpgradeData as bs, ConfigPortabilityControllerUpgradeResponses as bt, ConfigResourceMetadataEntity as bu, ConfigResourceOwnershipDto as bv, CreateAccessCertificateDto as bw, CreateAccessKeyChainDto as bx, CreateAttributeProviderDto as by, CreateClientDto as bz, ApiKeyConfig as c, InteractiveAuthorizationCodeResponseDto as c$, CredentialQueryDcSdJwt as c0, CredentialQueryMsoMdoc as c1, CredentialReusePolicy as c2, CredentialSetQuery as c3, CredentialStatusDto as c4, DcSdJwtCredentialQueryMeta as c5, Dcql as c6, DeferredControllerCompleteDeferredData as c7, DeferredControllerCompleteDeferredErrors as c8, DeferredControllerCompleteDeferredResponse as c9, FederationTrustAnchorControllerCreateResponses as cA, FederationTrustAnchorControllerDeleteData as cB, FederationTrustAnchorControllerDeleteError as cC, FederationTrustAnchorControllerDeleteErrors as cD, FederationTrustAnchorControllerDeleteResponse as cE, FederationTrustAnchorControllerDeleteResponses as cF, FederationTrustAnchorControllerGetAllData as cG, FederationTrustAnchorControllerGetAllResponse as cH, FederationTrustAnchorControllerGetAllResponses as cI, FederationTrustAnchorControllerGetByIdData as cJ, FederationTrustAnchorControllerGetByIdErrors as cK, FederationTrustAnchorControllerGetByIdResponse as cL, FederationTrustAnchorControllerGetByIdResponses as cM, FederationTrustAnchorControllerUpdateData as cN, FederationTrustAnchorControllerUpdateErrors as cO, FederationTrustAnchorControllerUpdateResponse as cP, FederationTrustAnchorControllerUpdateResponses as cQ, FederationTrustAnchorInUseDto as cR, FederationTrustAnchorReferenceDto as cS, FederationTrustAnchorResponseDto as cT, FieldDisplayDto as cU, FileUploadDto as cV, FrontendConfigResponseDto as cW, GrafanaConfigDto as cX, IaeActionOpenid4VpPresentation as cY, IaeActionRedirectToWeb as cZ, ImportTenantDto as c_, DeferredControllerCompleteDeferredResponses as ca, DeferredControllerFailDeferredData as cb, DeferredControllerFailDeferredErrors as cc, DeferredControllerFailDeferredResponse as cd, DeferredControllerFailDeferredResponses as ce, DeferredCredentialRequestDto as cf, DeferredOperationResponse as cg, DeprecateSchemaMetadataDto as ch, Display as ci, DisplayImage as cj, DisplayInfo as ck, DisplayLogo as cl, EcJwk as cm, EcPublic as cn, EmbeddedDisclosurePolicy as co, ExportEcJwk as cp, ExportRotationPolicyDto as cq, ExternalAuthorizationServerConfig as cr, ExternalTrustListEntity as cs, FailDeferredDto as ct, FederationConfig as cu, FederationEntityMetadata as cv, FederationTrustAnchorConfig as cw, FederationTrustAnchorControllerCreateData as cx, FederationTrustAnchorControllerCreateErrors as cy, FederationTrustAnchorControllerCreateResponse as cz, AppControllerGetFrontendConfigData as d, KeyChainControllerRotateResponses as d$, InteractiveAuthorizationErrorResponseDto as d0, InteractiveAuthorizationRequestDto as d1, InternalTrustListEntity as d2, Iso18013OfferResponse as d3, IssuanceConfig as d4, IssuanceConfigControllerGetIssuanceConfigurationsData as d5, IssuanceConfigControllerGetIssuanceConfigurationsResponse as d6, IssuanceConfigControllerGetIssuanceConfigurationsResponses as d7, IssuanceConfigControllerReissueRegistrationCertificateData as d8, IssuanceConfigControllerReissueRegistrationCertificateErrors as d9, KeyChainControllerExportErrors as dA, KeyChainControllerExportResponse as dB, KeyChainControllerExportResponses as dC, KeyChainControllerGetAllData as dD, KeyChainControllerGetAllResponse as dE, KeyChainControllerGetAllResponses as dF, KeyChainControllerGetByIdData as dG, KeyChainControllerGetByIdErrors as dH, KeyChainControllerGetByIdResponse as dI, KeyChainControllerGetByIdResponses as dJ, KeyChainControllerGetProvidersData as dK, KeyChainControllerGetProvidersHealthData as dL, KeyChainControllerGetProvidersHealthResponse as dM, KeyChainControllerGetProvidersHealthResponses as dN, KeyChainControllerGetProvidersResponse as dO, KeyChainControllerGetProvidersResponses as dP, KeyChainControllerGetTenantKmsConfigData as dQ, KeyChainControllerGetTenantKmsConfigErrors as dR, KeyChainControllerGetTenantKmsConfigResponse as dS, KeyChainControllerGetTenantKmsConfigResponses as dT, KeyChainControllerImportData as dU, KeyChainControllerImportErrors as dV, KeyChainControllerImportResponse as dW, KeyChainControllerImportResponses as dX, KeyChainControllerRotateData as dY, KeyChainControllerRotateErrors as dZ, KeyChainControllerRotateResponse as d_, IssuanceConfigControllerReissueRegistrationCertificateResponse as da, IssuanceConfigControllerReissueRegistrationCertificateResponses as db, IssuanceConfigControllerStoreIssuanceConfigurationData as dc, IssuanceConfigControllerStoreIssuanceConfigurationResponse as dd, IssuanceConfigControllerStoreIssuanceConfigurationResponses as de, IssuanceConfigWritable as df, IssuerMetadataCredentialConfig as dg, IssuerOfferEntryDto as dh, IssuerRegistrationCertificateCache as di, IssuerRegistrationCertificateConfig as dj, JwksResponseDto as dk, KeyAttestationsRequired as dl, KeyChainControllerCreateData as dm, KeyChainControllerCreateResponse as dn, KeyChainControllerCreateResponses as dp, KeyChainControllerDeleteData as dq, KeyChainControllerDeleteError as dr, KeyChainControllerDeleteErrors as ds, KeyChainControllerDeleteResponse as dt, KeyChainControllerDeleteResponses as du, KeyChainControllerDeleteTenantKmsConfigData as dv, KeyChainControllerDeleteTenantKmsConfigErrors as dw, KeyChainControllerDeleteTenantKmsConfigResponse as dx, KeyChainControllerDeleteTenantKmsConfigResponses as dy, KeyChainControllerExportData as dz, AppControllerGetFrontendConfigResponse as e, PresentationManagementControllerResolveIssuerMetadataErrors as e$, KeyChainControllerUpdateData as e0, KeyChainControllerUpdateErrors as e1, KeyChainControllerUpdateResponse as e2, KeyChainControllerUpdateResponses as e3, KeyChainControllerUpdateTenantKmsConfigData as e4, KeyChainControllerUpdateTenantKmsConfigErrors as e5, KeyChainControllerUpdateTenantKmsConfigResponse as e6, KeyChainControllerUpdateTenantKmsConfigResponses as e7, KeyChainCreateDto as e8, KeyChainEntity as e9, OrgIsoMdocRequest as eA, PaginatedSessionResponseDto as eB, ParResponseDto as eC, PolicyCredential as eD, PresentationAttachment as eE, PresentationConfig as eF, PresentationConfigCreateDto as eG, PresentationConfigUpdateDto as eH, PresentationConfigWritable as eI, PresentationDuringIssuanceConfig as eJ, PresentationManagementControllerConfigurationData as eK, PresentationManagementControllerConfigurationResponse as eL, PresentationManagementControllerConfigurationResponses as eM, PresentationManagementControllerDeleteConfigurationData as eN, PresentationManagementControllerDeleteConfigurationResponse as eO, PresentationManagementControllerDeleteConfigurationResponses as eP, PresentationManagementControllerGetConfigurationData as eQ, PresentationManagementControllerGetConfigurationResponse as eR, PresentationManagementControllerGetConfigurationResponses as eS, PresentationManagementControllerListSchemaMetadataCatalogData as eT, PresentationManagementControllerListSchemaMetadataCatalogResponse as eU, PresentationManagementControllerListSchemaMetadataCatalogResponses as eV, PresentationManagementControllerReissueRegistrationCertificateData as eW, PresentationManagementControllerReissueRegistrationCertificateErrors as eX, PresentationManagementControllerReissueRegistrationCertificateResponse as eY, PresentationManagementControllerReissueRegistrationCertificateResponses as eZ, PresentationManagementControllerResolveIssuerMetadataData as e_, KeyChainExportDto as ea, KeyChainIdResponseDto as eb, KeyChainImportDto as ec, KeyChainInUseDto as ed, KeyChainReferenceDto as ee, KeyChainResponseDto as ef, KeyChainUpdateDto as eg, KeyResponseDto as eh, KmsConfigDto as ei, KmsProviderCapabilitiesDto as ej, KmsProviderInfoDto as ek, KmsProvidersResponseDto as el, KmsTenantConfigResponseDto as em, ManagedAuthorizationServerConfig as en, ManagedUserDto as eo, MetadataSchemaDto as ep, MsoMdocClaimsQuery as eq, MsoMdocCredentialQueryMeta as er, NoneTrustPolicy as es, NotificationRequestDto as et, OAuthTokenErrorResponseDto as eu, Object$1 as ev, ObjectWritable as ew, OfferRequestDto as ex, OfferResponse as ey, Oid4VpAuthorizationServerConfig as ez, AppControllerGetFrontendConfigResponses as f, RotationPolicyResponseDto as f$, PresentationManagementControllerResolveIssuerMetadataResponse as f0, PresentationManagementControllerResolveIssuerMetadataResponses as f1, PresentationManagementControllerResolveSchemaMetadataData as f2, PresentationManagementControllerResolveSchemaMetadataErrors as f3, PresentationManagementControllerResolveSchemaMetadataJwtData as f4, PresentationManagementControllerResolveSchemaMetadataJwtErrors as f5, PresentationManagementControllerResolveSchemaMetadataJwtResponse as f6, PresentationManagementControllerResolveSchemaMetadataJwtResponses as f7, PresentationManagementControllerResolveSchemaMetadataResponse as f8, PresentationManagementControllerResolveSchemaMetadataResponses as f9, RegistrarControllerDeleteConfigResponse as fA, RegistrarControllerDeleteConfigResponses as fB, RegistrarControllerGetConfigData as fC, RegistrarControllerGetConfigErrors as fD, RegistrarControllerGetConfigResponse as fE, RegistrarControllerGetConfigResponses as fF, RegistrarControllerUpdateConfigData as fG, RegistrarControllerUpdateConfigErrors as fH, RegistrarControllerUpdateConfigResponse as fI, RegistrarControllerUpdateConfigResponses as fJ, RegistrationCertificateBody as fK, RegistrationCertificateDefaults as fL, RegistrationCertificatePurpose as fM, RegistrationCertificateRequest as fN, RelyingPartyContact as fO, ResolveIssuerMetadataDto as fP, ResolveSchemaMetadataDto as fQ, ResolveSchemaMetadataJwtDto as fR, ResolvedSchemaMetadataReferenceDto as fS, ResolvedSchemaMetadataResponseDto as fT, ResolvedSchemaMetadataSchemaDto as fU, ResolvedSchemaMetadataSchemaUriDto as fV, ResolvedSchemaMetadataTrustedAuthorityDto as fW, RoleDto as fX, RootOfTrustPolicy as fY, RotationPolicyCreateDto as fZ, RotationPolicyImportDto as f_, PresentationManagementControllerStorePresentationConfigData as fa, PresentationManagementControllerStorePresentationConfigErrors as fb, PresentationManagementControllerStorePresentationConfigResponse as fc, PresentationManagementControllerStorePresentationConfigResponses as fd, PresentationManagementControllerUpdateConfigurationData as fe, PresentationManagementControllerUpdateConfigurationErrors as ff, PresentationManagementControllerUpdateConfigurationResponse as fg, PresentationManagementControllerUpdateConfigurationResponses as fh, PresentationRequest as fi, ProviderHealthResponseDto as fj, PublicKeyInfoDto as fk, PublishSchemaMetaConfig as fl, RegistrarConfigResponseDto as fm, RegistrarControllerCreateAccessCertificateData as fn, RegistrarControllerCreateAccessCertificateErrors as fo, RegistrarControllerCreateAccessCertificateResponse as fp, RegistrarControllerCreateAccessCertificateResponses as fq, RegistrarControllerCreateAccessKeyChainData as fr, RegistrarControllerCreateAccessKeyChainErrors as fs, RegistrarControllerCreateAccessKeyChainResponse as ft, RegistrarControllerCreateAccessKeyChainResponses as fu, RegistrarControllerCreateConfigData as fv, RegistrarControllerCreateConfigErrors as fw, RegistrarControllerCreateConfigResponse as fx, RegistrarControllerCreateConfigResponses as fy, RegistrarControllerDeleteConfigData as fz, AppControllerGetVersionData as g, SessionControllerGetAllSessionsData as g$, RotationPolicyUpdateDto as g0, SchemaMetaConfig as g1, SchemaMetadataControllerDeprecateVersionData as g2, SchemaMetadataControllerDeprecateVersionResponse as g3, SchemaMetadataControllerDeprecateVersionResponses as g4, SchemaMetadataControllerFindAllData as g5, SchemaMetadataControllerFindAllResponse as g6, SchemaMetadataControllerFindAllResponses as g7, SchemaMetadataControllerFindOneData as g8, SchemaMetadataControllerFindOneResponse as g9, SchemaMetadataControllerPublishSchemaMetadataVersionResponses as gA, SchemaMetadataControllerRemoveData as gB, SchemaMetadataControllerRemoveResponse as gC, SchemaMetadataControllerRemoveResponses as gD, SchemaMetadataControllerUpdateData as gE, SchemaMetadataControllerUpdateResponse as gF, SchemaMetadataControllerUpdateResponses as gG, SchemaMetadataResponseDto as gH, SchemaMetadataVocabulariesDto as gI, SchemaUriEntry as gJ, ServiceInfoResponseDto as gK, SessionConfigControllerGetConfigData as gL, SessionConfigControllerGetConfigResponse as gM, SessionConfigControllerGetConfigResponses as gN, SessionConfigControllerResetConfigData as gO, SessionConfigControllerResetConfigResponse as gP, SessionConfigControllerResetConfigResponses as gQ, SessionConfigControllerUpdateConfigData as gR, SessionConfigControllerUpdateConfigResponse as gS, SessionConfigControllerUpdateConfigResponses as gT, SessionControllerCancelData as gU, SessionControllerCancelErrors as gV, SessionControllerCancelResponse as gW, SessionControllerCancelResponses as gX, SessionControllerDeleteSessionData as gY, SessionControllerDeleteSessionResponse as gZ, SessionControllerDeleteSessionResponses as g_, SchemaMetadataControllerFindOneResponses as ga, SchemaMetadataControllerGetJwtData as gb, SchemaMetadataControllerGetJwtResponse as gc, SchemaMetadataControllerGetJwtResponses as gd, SchemaMetadataControllerGetLatestData as ge, SchemaMetadataControllerGetLatestResponse as gf, SchemaMetadataControllerGetLatestResponses as gg, SchemaMetadataControllerGetMineData as gh, SchemaMetadataControllerGetMineResponse as gi, SchemaMetadataControllerGetMineResponses as gj, SchemaMetadataControllerGetSchemaData as gk, SchemaMetadataControllerGetSchemaResponse as gl, SchemaMetadataControllerGetSchemaResponses as gm, SchemaMetadataControllerGetVersionsData as gn, SchemaMetadataControllerGetVersionsResponse as go, SchemaMetadataControllerGetVersionsResponses as gp, SchemaMetadataControllerGetVocabulariesData as gq, SchemaMetadataControllerGetVocabulariesResponse as gr, SchemaMetadataControllerGetVocabulariesResponses as gs, SchemaMetadataControllerPublishSchemaMetadataData as gt, SchemaMetadataControllerPublishSchemaMetadataErrors as gu, SchemaMetadataControllerPublishSchemaMetadataResponse as gv, SchemaMetadataControllerPublishSchemaMetadataResponses as gw, SchemaMetadataControllerPublishSchemaMetadataVersionData as gx, SchemaMetadataControllerPublishSchemaMetadataVersionErrors as gy, SchemaMetadataControllerPublishSchemaMetadataVersionResponse as gz, AppControllerGetVersionResponse as h, StatusListResponseDto as h$, SessionControllerGetAllSessionsResponse as h0, SessionControllerGetAllSessionsResponses as h1, SessionControllerGetCredentialStatusData as h2, SessionControllerGetCredentialStatusErrors as h3, SessionControllerGetCredentialStatusResponse as h4, SessionControllerGetCredentialStatusResponses as h5, SessionControllerGetSessionData as h6, SessionControllerGetSessionLogsData as h7, SessionControllerGetSessionLogsResponse as h8, SessionControllerGetSessionLogsResponses as h9, StatusListCacheStatsDto as hA, StatusListConfig as hB, StatusListConfigControllerGetConfigData as hC, StatusListConfigControllerGetConfigResponse as hD, StatusListConfigControllerGetConfigResponses as hE, StatusListConfigControllerResetConfigData as hF, StatusListConfigControllerResetConfigResponse as hG, StatusListConfigControllerResetConfigResponses as hH, StatusListConfigControllerUpdateConfigData as hI, StatusListConfigControllerUpdateConfigResponse as hJ, StatusListConfigControllerUpdateConfigResponses as hK, StatusListImportDto as hL, StatusListManagementControllerCreateListData as hM, StatusListManagementControllerCreateListResponse as hN, StatusListManagementControllerCreateListResponses as hO, StatusListManagementControllerDeleteListData as hP, StatusListManagementControllerDeleteListResponse as hQ, StatusListManagementControllerDeleteListResponses as hR, StatusListManagementControllerGetListData as hS, StatusListManagementControllerGetListResponse as hT, StatusListManagementControllerGetListResponses as hU, StatusListManagementControllerGetListsData as hV, StatusListManagementControllerGetListsResponse as hW, StatusListManagementControllerGetListsResponses as hX, StatusListManagementControllerUpdateListData as hY, StatusListManagementControllerUpdateListResponse as hZ, StatusListManagementControllerUpdateListResponses as h_, SessionControllerGetSessionResponse as ha, SessionControllerGetSessionResponses as hb, SessionControllerGetSessionStatsData as hc, SessionControllerGetSessionStatsResponse as hd, SessionControllerGetSessionStatsResponses as he, SessionControllerRevokeAllData as hf, SessionControllerRevokeAllErrors as hg, SessionControllerRevokeAllResponse as hh, SessionControllerRevokeAllResponses as hi, SessionEventsControllerSubscribeToSessionEventsData as hj, SessionEventsControllerSubscribeToSessionEventsErrors as hk, SessionEventsControllerSubscribeToSessionEventsResponse as hl, SessionEventsControllerSubscribeToSessionEventsResponses as hm, SessionFailureCodeCountDto as hn, SessionLogEntryResponseDto as ho, SessionOutcomeCredentialDto as hp, SessionOutcomeDto as hq, SessionOutcomeWarningDto as hr, SessionRetentionDto as hs, SessionStatsResponseDto as ht, SessionStatusCountsDto as hu, SessionStorageConfig as hv, SessionTypeStatsDto as hw, SignSchemaMetaConfigDto as hx, SignVersionSchemaMetaConfigDto as hy, StatusListAggregationDto as hz, AppControllerGetVersionResponses as i, TrustListReferenceDto as i$, StatusUpdateDto as i0, StorageControllerUploadData as i1, StorageControllerUploadResponse as i2, StorageControllerUploadResponses as i3, StoredObjectResponseDto as i4, TenantClientCredentialsDto as i5, TenantControllerDeleteTenantData as i6, TenantControllerDeleteTenantResponse as i7, TenantControllerDeleteTenantResponses as i8, TenantControllerGetTenantData as i9, TrustListControllerDeleteTrustListData as iA, TrustListControllerDeleteTrustListError as iB, TrustListControllerDeleteTrustListErrors as iC, TrustListControllerDeleteTrustListResponse as iD, TrustListControllerDeleteTrustListResponses as iE, TrustListControllerExportTrustListData as iF, TrustListControllerExportTrustListResponse as iG, TrustListControllerExportTrustListResponses as iH, TrustListControllerGetAllTrustListsData as iI, TrustListControllerGetAllTrustListsResponse as iJ, TrustListControllerGetAllTrustListsResponses as iK, TrustListControllerGetTrustListData as iL, TrustListControllerGetTrustListResponse as iM, TrustListControllerGetTrustListResponses as iN, TrustListControllerGetTrustListVersionData as iO, TrustListControllerGetTrustListVersionResponse as iP, TrustListControllerGetTrustListVersionResponses as iQ, TrustListControllerGetTrustListVersionsData as iR, TrustListControllerGetTrustListVersionsResponse as iS, TrustListControllerGetTrustListVersionsResponses as iT, TrustListControllerUpdateTrustListData as iU, TrustListControllerUpdateTrustListResponse as iV, TrustListControllerUpdateTrustListResponses as iW, TrustListCreateDto as iX, TrustListEntityInfo as iY, TrustListInUseDto as iZ, TrustListRef as i_, TenantControllerGetTenantResponse as ia, TenantControllerGetTenantResponses as ib, TenantControllerGetTenantsData as ic, TenantControllerGetTenantsResponse as id, TenantControllerGetTenantsResponses as ie, TenantControllerInitTenantData as ig, TenantControllerInitTenantErrors as ih, TenantControllerInitTenantResponse as ii, TenantControllerInitTenantResponses as ij, TenantControllerUpdateTenantData as ik, TenantControllerUpdateTenantResponse as il, TenantControllerUpdateTenantResponses as im, TenantCreateResponseDto as io, TenantEntity as ip, TenantResponseDto as iq, TokenResponse as ir, TransactionData as is, TrustAuthorityDto as it, TrustAuthorityEntry as iu, TrustList as iv, TrustListCacheStatsDto as iw, TrustListControllerCreateTrustListData as ix, TrustListControllerCreateTrustListResponse as iy, TrustListControllerCreateTrustListResponses as iz, AttestationBasedPolicy as j, WebhookEndpointControllerUpdateResponse as j$, TrustListVersion as j0, TrustedAuthorityQueryEtsiTl as j1, TrustedAuthorityQueryOpenIdFederation as j2, UpdateAttributeProviderDto as j3, UpdateClientDto as j4, UpdateFederationTrustAnchorDto as j5, UpdateIssuanceDto as j6, UpdateIssuanceDtoWritable as j7, UpdateIssuerOfferDto as j8, UpdateRegistrarConfigDto as j9, Vct as jA, VerificationProvenanceDto as jB, VerifierOfferControllerGetOfferData as jC, VerifierOfferControllerGetOfferResponse as jD, VerifierOfferControllerGetOfferResponses as jE, VersionResponseDto as jF, VocabularyEntryDto as jG, WalletProviderTrustListRefDto as jH, WebHookAuthConfigHeader as jI, WebHookAuthConfigNone as jJ, WebhookConfig as jK, WebhookEndpointControllerCreateData as jL, WebhookEndpointControllerCreateResponse as jM, WebhookEndpointControllerCreateResponses as jN, WebhookEndpointControllerDeleteData as jO, WebhookEndpointControllerDeleteErrors as jP, WebhookEndpointControllerDeleteResponse as jQ, WebhookEndpointControllerDeleteResponses as jR, WebhookEndpointControllerGetAllData as jS, WebhookEndpointControllerGetAllResponse as jT, WebhookEndpointControllerGetAllResponses as jU, WebhookEndpointControllerGetByIdData as jV, WebhookEndpointControllerGetByIdErrors as jW, WebhookEndpointControllerGetByIdResponse as jX, WebhookEndpointControllerGetByIdResponses as jY, WebhookEndpointControllerUpdateData as jZ, WebhookEndpointControllerUpdateErrors as j_, UpdateSchemaMetadataDto as ja, UpdateSessionConfigDto as jb, UpdateStatusListConfigDto as jc, UpdateStatusListDto as jd, UpdateTenantDto as je, UpdateUserDto as jf, UpdateWebhookEndpointDto as jg, UpstreamOidcConfig as jh, UserControllerCreateUserData as ji, UserControllerCreateUserErrors as jj, UserControllerCreateUserResponse as jk, UserControllerCreateUserResponses as jl, UserControllerDeleteUserData as jm, UserControllerDeleteUserErrors as jn, UserControllerDeleteUserResponse as jo, UserControllerDeleteUserResponses as jp, UserControllerGetUserData as jq, UserControllerGetUserResponse as jr, UserControllerGetUserResponses as js, UserControllerGetUsersData as jt, UserControllerGetUsersResponse as ju, UserControllerGetUsersResponses as jv, UserControllerUpdateUserData as jw, UserControllerUpdateUserErrors as jx, UserControllerUpdateUserResponse as jy, UserControllerUpdateUserResponses as jz, AttributeProviderControllerCreateData as k, WebhookEndpointControllerUpdateResponses as k0, WebhookEndpointEntity as k1, AttributeProviderControllerCreateResponse as l, AttributeProviderControllerCreateResponses as m, AttributeProviderControllerDeleteData as n, AttributeProviderControllerDeleteErrors as o, AttributeProviderControllerDeleteResponse as p, AttributeProviderControllerDeleteResponses as q, AttributeProviderControllerGetAllData as r, AttributeProviderControllerGetAllResponse as s, AttributeProviderControllerGetAllResponses as t, AttributeProviderControllerGetByIdData as u, AttributeProviderControllerGetByIdErrors as v, AttributeProviderControllerGetByIdResponse as w, AttributeProviderControllerGetByIdResponses as x, AttributeProviderControllerUpdateData as y, AttributeProviderControllerUpdateErrors as z };