@triveria/wallet 0.0.296 → 0.0.298

package/api.d.ts

@@ -151,6 +151,10 @@ export interface CredentialIssuerDefinition {
      * JSON paths of credential claims which will support being disclosed partially.
      */
     'disclosableClaims'?: Array<string>;
+    /**
+     * When true, credential issuance for this issuer requires the wallet to present a valid EUDI Wallet Instance Attestation (WIA, TS3). The issuer verifies the WIA signature, expiry, status and key binding before issuing. Defaults to false (no WIA check).
+     */
+    'requiresWalletInstanceAttestation'?: boolean;
 }
 export declare const CredentialIssuerDefinitionCredentialIssuerEnum: {
     readonly CtWalletSame: "CtWalletSame";
@@ -1103,6 +1107,9 @@ export declare const WalletNotificationEventType: {
     readonly WmpCredentialOffer: "wmp.credential_offer";
     readonly WmpCredentialVerificationRequest: "wmp.credential_verification_request";
     readonly WmpError: "wmp.error";
+    readonly WmpMessage: "wmp.message";
+    readonly WmpIdentityAssertionRequest: "wmp.identity_assertion_request";
+    readonly WmpIdentityAssertionReceived: "wmp.identity_assertion_received";
 };
 export type WalletNotificationEventType = typeof WalletNotificationEventType[keyof typeof WalletNotificationEventType];
 export interface WalletNotificationHistory {
@@ -1122,12 +1129,49 @@ export interface WalletPatchPayload {
         [key: string]: any;
     };
 }
+export interface WalletProviderCertificateRequest {
+    /**
+     * PEM-encoded certificate chain (leaf first) issued for the provider key.
+     */
+    'certificate_chain': Array<string>;
+}
+export interface WalletProviderCsrResponse {
+    /**
+     * PEM-encoded PKCS#10 certificate signing request.
+     */
+    'csr': string;
+}
 export interface WmpAcceptInvitationPayload {
     /**
      * URL of the invitation JWT
      */
     'invitationUrl': string;
 }
+/**
+ * Open (authenticate) the session after the identity assertion exchange.
+ */
+export interface WmpAuthenticateSession {
+    'type': WmpAuthenticateSessionTypeEnum;
+    /**
+     * Set true to mark the session fully authenticated and open it for traffic.
+     */
+    'authenticated': boolean;
+}
+export declare const WmpAuthenticateSessionTypeEnum: {
+    readonly Authenticate: "authenticate";
+};
+export type WmpAuthenticateSessionTypeEnum = typeof WmpAuthenticateSessionTypeEnum[keyof typeof WmpAuthenticateSessionTypeEnum];
+/**
+ * @type WmpClientRequestBody
+ * Action to take on a pending WMP client request, discriminated by `type`: `process` an offer/verification request, `identity_assertion` to present a credential, or `authenticate` to open the session.
+ */
+export type WmpClientRequestBody = {
+    type: 'authenticate';
+} & WmpAuthenticateSession | {
+    type: 'identity_assertion';
+} & WmpProvideIdentityAssertion | {
+    type: 'process';
+} & WmpProcessClientRequest;
 export interface WmpCreateInvitationResponse {
     /**
      * URL at which the invitation can be downloaded
@@ -1178,7 +1222,32 @@ export interface WmpNotification {
     'invitationUrl'?: string;
     'id': string;
     'error'?: string;
+    'identityAssertion'?: CredentialWrapper;
+}
+/**
+ * Process a pending credential offer or verification request identified by the path id.
+ */
+export interface WmpProcessClientRequest {
+    'type': WmpProcessClientRequestTypeEnum;
 }
+export declare const WmpProcessClientRequestTypeEnum: {
+    readonly Process: "process";
+};
+export type WmpProcessClientRequestTypeEnum = typeof WmpProcessClientRequestTypeEnum[keyof typeof WmpProcessClientRequestTypeEnum];
+/**
+ * Provide a credential to present as the identity assertion for the session.
+ */
+export interface WmpProvideIdentityAssertion {
+    'type': WmpProvideIdentityAssertionTypeEnum;
+    /**
+     * Id of the wallet credential to present as the identity assertion VP.
+     */
+    'credentialId': string;
+}
+export declare const WmpProvideIdentityAssertionTypeEnum: {
+    readonly IdentityAssertion: "identity_assertion";
+};
+export type WmpProvideIdentityAssertionTypeEnum = typeof WmpProvideIdentityAssertionTypeEnum[keyof typeof WmpProvideIdentityAssertionTypeEnum];
 export interface WmpRequest {
     'type': WmpRequestType;
     'requestUrl': string;
@@ -1609,6 +1678,19 @@ export declare const DefaultApiAxiosParamCreator: (configuration?: Configuration
      * @throws {RequiredError}
      */
     walletPatch: (walletId: string, walletPatchPayload?: WalletPatchPayload, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+     * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCertificateImport: (walletProviderCertificateRequest?: WalletProviderCertificateRequest, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    /**
+     * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCsrGenerate: (options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
      * @param {string} walletId Wallet ID
@@ -1664,13 +1746,14 @@ export declare const DefaultApiAxiosParamCreator: (configuration?: Configuration
      */
     wmpClientGetPendingRequests: (walletId: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+     * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
      * @param {string} walletId
      * @param {string} requestId
+     * @param {WmpClientRequestBody} wmpClientRequestBody
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    wmpClientProcessRequest: (walletId: string, requestId: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    wmpClientProcessRequest: (walletId: string, requestId: string, wmpClientRequestBody: WmpClientRequestBody, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Creates a WMP (Wallet Messaging Protocol) invitation URL that can be shared with another wallet to establish a secure peer-to-peer communication channel. Issuers and verifiers use this to connect with holder wallets for direct credential delivery and verification without requiring QR codes or redirects on each interaction.
      * @param {string} walletId
@@ -2137,6 +2220,19 @@ export declare const DefaultApiFp: (configuration?: Configuration) => {
      * @throws {RequiredError}
      */
     walletPatch(walletId: string, walletPatchPayload?: WalletPatchPayload, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<WalletIdObject>>;
+    /**
+     * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+     * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCertificateImport(walletProviderCertificateRequest?: WalletProviderCertificateRequest, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
+    /**
+     * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCsrGenerate(options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<WalletProviderCsrResponse>>;
     /**
      * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
      * @param {string} walletId Wallet ID
@@ -2192,13 +2288,14 @@ export declare const DefaultApiFp: (configuration?: Configuration) => {
      */
     wmpClientGetPendingRequests(walletId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<WmpRequest>>>;
     /**
-     * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+     * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
      * @param {string} walletId
      * @param {string} requestId
+     * @param {WmpClientRequestBody} wmpClientRequestBody
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    wmpClientProcessRequest(walletId: string, requestId: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<InteractionAuthorizationRequirements>>;
+    wmpClientProcessRequest(walletId: string, requestId: string, wmpClientRequestBody: WmpClientRequestBody, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<InteractionAuthorizationRequirements>>;
     /**
      * Creates a WMP (Wallet Messaging Protocol) invitation URL that can be shared with another wallet to establish a secure peer-to-peer communication channel. Issuers and verifiers use this to connect with holder wallets for direct credential delivery and verification without requiring QR codes or redirects on each interaction.
      * @param {string} walletId
@@ -2665,6 +2762,19 @@ export declare const DefaultApiFactory: (configuration?: Configuration, basePath
      * @throws {RequiredError}
      */
     walletPatch(walletId: string, walletPatchPayload?: WalletPatchPayload, options?: RawAxiosRequestConfig): AxiosPromise<WalletIdObject>;
+    /**
+     * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+     * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCertificateImport(walletProviderCertificateRequest?: WalletProviderCertificateRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+    /**
+     * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCsrGenerate(options?: RawAxiosRequestConfig): AxiosPromise<WalletProviderCsrResponse>;
     /**
      * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
      * @param {string} walletId Wallet ID
@@ -2720,13 +2830,14 @@ export declare const DefaultApiFactory: (configuration?: Configuration, basePath
      */
     wmpClientGetPendingRequests(walletId: string, options?: RawAxiosRequestConfig): AxiosPromise<Array<WmpRequest>>;
     /**
-     * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+     * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
      * @param {string} walletId
      * @param {string} requestId
+     * @param {WmpClientRequestBody} wmpClientRequestBody
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    wmpClientProcessRequest(walletId: string, requestId: string, options?: RawAxiosRequestConfig): AxiosPromise<InteractionAuthorizationRequirements>;
+    wmpClientProcessRequest(walletId: string, requestId: string, wmpClientRequestBody: WmpClientRequestBody, options?: RawAxiosRequestConfig): AxiosPromise<InteractionAuthorizationRequirements>;
     /**
      * Creates a WMP (Wallet Messaging Protocol) invitation URL that can be shared with another wallet to establish a secure peer-to-peer communication channel. Issuers and verifiers use this to connect with holder wallets for direct credential delivery and verification without requiring QR codes or redirects on each interaction.
      * @param {string} walletId
@@ -3193,6 +3304,19 @@ export declare class DefaultApi extends BaseAPI {
      * @throws {RequiredError}
      */
     walletPatch(walletId: string, walletPatchPayload?: WalletPatchPayload, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<WalletIdObject, any, {}>>;
+    /**
+     * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+     * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCertificateImport(walletProviderCertificateRequest?: WalletProviderCertificateRequest, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<void, any, {}>>;
+    /**
+     * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCsrGenerate(options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<WalletProviderCsrResponse, any, {}>>;
     /**
      * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
      * @param {string} walletId Wallet ID
@@ -3248,13 +3372,14 @@ export declare class DefaultApi extends BaseAPI {
      */
     wmpClientGetPendingRequests(walletId: string, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<WmpRequest[], any, {}>>;
     /**
-     * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+     * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
      * @param {string} walletId
      * @param {string} requestId
+     * @param {WmpClientRequestBody} wmpClientRequestBody
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    wmpClientProcessRequest(walletId: string, requestId: string, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<InteractionAuthorizationRequirements, any, {}>>;
+    wmpClientProcessRequest(walletId: string, requestId: string, wmpClientRequestBody: WmpClientRequestBody, options?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<InteractionAuthorizationRequirements, any, {}>>;
     /**
      * Creates a WMP (Wallet Messaging Protocol) invitation URL that can be shared with another wallet to establish a secure peer-to-peer communication channel. Issuers and verifiers use this to connect with holder wallets for direct credential delivery and verification without requiring QR codes or redirects on each interaction.
      * @param {string} walletId

package/api.js

@@ -25,7 +25,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WmpEntityListEntityTypeEnum = exports.CredentialListInteractionEnum = exports.DefaultApi = exports.DefaultApiFactory = exports.DefaultApiFp = exports.DefaultApiAxiosParamCreator = exports.XadesSignatureType = exports.WmpRequestType = exports.WalletNotificationEventType = exports.WalletCapability = exports.TrustFrameworkType = exports.SystemImpactStatusEnum = exports.SigningKeyIdentifier = exports.RevokeAccreditationRequestTypeEnum = exports.PresentationDefinitionSubmissionRequirementsRuleEnum = exports.OidcRevisionOidc4vpEnum = exports.OidcRevisionOidc4vciEnum = exports.ObjectVerticalAlignment = exports.ObjectHorizontalAlignment = exports.ListSort = exports.InteractionAuthorizationRequirementsRequirementTypeEnum = exports.HealthStatusStatusEnum = exports.EntityAccreditationRequestTypeEnum = exports.DocumentSignatureValidityVerificationResultEnum = exports.DeferredStatusEnum = exports.CredentialPropertyToVerify = exports.CredentialNotificationEventTypeEnum = exports.CredentialMetadataStatusEnum = exports.CredentialMetadataInteractionEnum = exports.CredentialIssuerDefinitionAuthorizationEnum = exports.CredentialIssuerDefinitionCredentialIssuerEnum = exports.CredentialFormat = exports.AccreditationRequestTypeEnum = void 0;
+exports.WmpEntityListEntityTypeEnum = exports.CredentialListInteractionEnum = exports.DefaultApi = exports.DefaultApiFactory = exports.DefaultApiFp = exports.DefaultApiAxiosParamCreator = exports.XadesSignatureType = exports.WmpRequestType = exports.WmpProvideIdentityAssertionTypeEnum = exports.WmpProcessClientRequestTypeEnum = exports.WmpAuthenticateSessionTypeEnum = exports.WalletNotificationEventType = exports.WalletCapability = exports.TrustFrameworkType = exports.SystemImpactStatusEnum = exports.SigningKeyIdentifier = exports.RevokeAccreditationRequestTypeEnum = exports.PresentationDefinitionSubmissionRequirementsRuleEnum = exports.OidcRevisionOidc4vpEnum = exports.OidcRevisionOidc4vciEnum = exports.ObjectVerticalAlignment = exports.ObjectHorizontalAlignment = exports.ListSort = exports.InteractionAuthorizationRequirementsRequirementTypeEnum = exports.HealthStatusStatusEnum = exports.EntityAccreditationRequestTypeEnum = exports.DocumentSignatureValidityVerificationResultEnum = exports.DeferredStatusEnum = exports.CredentialPropertyToVerify = exports.CredentialNotificationEventTypeEnum = exports.CredentialMetadataStatusEnum = exports.CredentialMetadataInteractionEnum = exports.CredentialIssuerDefinitionAuthorizationEnum = exports.CredentialIssuerDefinitionCredentialIssuerEnum = exports.CredentialFormat = exports.AccreditationRequestTypeEnum = void 0;
 const axios_1 = __importDefault(require("axios"));
 // Some imports not used depending on template conditions
 // @ts-ignore
@@ -188,6 +188,18 @@ exports.WalletNotificationEventType = {
     WmpCredentialOffer: 'wmp.credential_offer',
     WmpCredentialVerificationRequest: 'wmp.credential_verification_request',
     WmpError: 'wmp.error',
+    WmpMessage: 'wmp.message',
+    WmpIdentityAssertionRequest: 'wmp.identity_assertion_request',
+    WmpIdentityAssertionReceived: 'wmp.identity_assertion_received',
+};
+exports.WmpAuthenticateSessionTypeEnum = {
+    Authenticate: 'authenticate',
+};
+exports.WmpProcessClientRequestTypeEnum = {
+    Process: 'process',
+};
+exports.WmpProvideIdentityAssertionTypeEnum = {
+    IdentityAssertion: 'identity_assertion',
 };
 exports.WmpRequestType = {
     CredentialOffer: 'credentialOffer',
@@ -2115,6 +2127,65 @@ const DefaultApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         }),
+        /**
+         * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+         * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        walletProviderCertificateImport: (walletProviderCertificateRequest_1, ...args_1) => __awaiter(this, [walletProviderCertificateRequest_1, ...args_1], void 0, function* (walletProviderCertificateRequest, options = {}) {
+            const localVarPath = `/admin/wallet-provider/certificate`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(walletProviderCertificateRequest, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        walletProviderCsrGenerate: (...args_1) => __awaiter(this, [...args_1], void 0, function* (options = {}) {
+            const localVarPath = `/admin/wallet-provider/csr`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
         /**
          * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
          * @param {string} walletId Wallet ID
@@ -2358,17 +2429,20 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+         * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
          * @param {string} walletId
          * @param {string} requestId
+         * @param {WmpClientRequestBody} wmpClientRequestBody
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        wmpClientProcessRequest: (walletId_1, requestId_1, ...args_1) => __awaiter(this, [walletId_1, requestId_1, ...args_1], void 0, function* (walletId, requestId, options = {}) {
+        wmpClientProcessRequest: (walletId_1, requestId_1, wmpClientRequestBody_1, ...args_1) => __awaiter(this, [walletId_1, requestId_1, wmpClientRequestBody_1, ...args_1], void 0, function* (walletId, requestId, wmpClientRequestBody, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
             (0, common_1.assertParamExists)('wmpClientProcessRequest', 'walletId', walletId);
             // verify required parameter 'requestId' is not null or undefined
             (0, common_1.assertParamExists)('wmpClientProcessRequest', 'requestId', requestId);
+            // verify required parameter 'wmpClientRequestBody' is not null or undefined
+            (0, common_1.assertParamExists)('wmpClientProcessRequest', 'wmpClientRequestBody', wmpClientRequestBody);
             const localVarPath = `/wmp/client/requests/{request_id}`
                 .replace('{request_id}', encodeURIComponent(String(requestId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
@@ -2383,6 +2457,7 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
@@ -2390,6 +2465,7 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(wmpClientRequestBody, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
@@ -3442,6 +3518,35 @@ const DefaultApiFp = function (configuration) {
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
+        /**
+         * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+         * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        walletProviderCertificateImport(walletProviderCertificateRequest, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.walletProviderCertificateImport(walletProviderCertificateRequest, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.walletProviderCertificateImport']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        walletProviderCsrGenerate(options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.walletProviderCsrGenerate(options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.walletProviderCsrGenerate']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
         /**
          * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
          * @param {string} walletId Wallet ID
@@ -3553,16 +3658,17 @@ const DefaultApiFp = function (configuration) {
             });
         },
         /**
-         * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+         * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
          * @param {string} walletId
          * @param {string} requestId
+         * @param {WmpClientRequestBody} wmpClientRequestBody
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        wmpClientProcessRequest(walletId, requestId, options) {
+        wmpClientProcessRequest(walletId, requestId, wmpClientRequestBody, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.wmpClientProcessRequest(walletId, requestId, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.wmpClientProcessRequest(walletId, requestId, wmpClientRequestBody, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
                 const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.wmpClientProcessRequest']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -4184,6 +4290,23 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
         walletPatch(walletId, walletPatchPayload, options) {
             return localVarFp.walletPatch(walletId, walletPatchPayload, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+         * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        walletProviderCertificateImport(walletProviderCertificateRequest, options) {
+            return localVarFp.walletProviderCertificateImport(walletProviderCertificateRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        walletProviderCsrGenerate(options) {
+            return localVarFp.walletProviderCsrGenerate(options).then((request) => request(axios, basePath));
+        },
         /**
          * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
          * @param {string} walletId Wallet ID
@@ -4253,14 +4376,15 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
             return localVarFp.wmpClientGetPendingRequests(walletId, options).then((request) => request(axios, basePath));
         },
         /**
-         * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+         * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
          * @param {string} walletId
          * @param {string} requestId
+         * @param {WmpClientRequestBody} wmpClientRequestBody
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        wmpClientProcessRequest(walletId, requestId, options) {
-            return localVarFp.wmpClientProcessRequest(walletId, requestId, options).then((request) => request(axios, basePath));
+        wmpClientProcessRequest(walletId, requestId, wmpClientRequestBody, options) {
+            return localVarFp.wmpClientProcessRequest(walletId, requestId, wmpClientRequestBody, options).then((request) => request(axios, basePath));
         },
         /**
          * Creates a WMP (Wallet Messaging Protocol) invitation URL that can be shared with another wallet to establish a secure peer-to-peer communication channel. Issuers and verifiers use this to connect with holder wallets for direct credential delivery and verification without requiring QR codes or redirects on each interaction.
@@ -4840,6 +4964,23 @@ class DefaultApi extends base_1.BaseAPI {
     walletPatch(walletId, walletPatchPayload, options) {
         return (0, exports.DefaultApiFp)(this.configuration).walletPatch(walletId, walletPatchPayload, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Installs the externally-issued certificate chain for the Wallet Provider key. Requires the `admin` role. After this succeeds the Wallet Provider can sign WIAs with an x5c header.
+     * @param {WalletProviderCertificateRequest} [walletProviderCertificateRequest]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCertificateImport(walletProviderCertificateRequest, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).walletProviderCertificateImport(walletProviderCertificateRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Generates a PKCS#10 certificate signing request (CSR) for the Wallet Provider key used to sign Wallet Instance Attestations. Requires the `admin` role. The provider key is generated on first call if it does not exist yet.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    walletProviderCsrGenerate(options) {
+        return (0, exports.DefaultApiFp)(this.configuration).walletProviderCsrGenerate(options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Retrieves the result of a credential verification session identified by the verifier state. Called by the verifier after a holder has presented credentials in response to a `VerifierInitUrlCreate` request. Returns 204 if the holder has not yet presented.
      * @param {string} walletId Wallet ID
@@ -4909,14 +5050,15 @@ class DefaultApi extends base_1.BaseAPI {
         return (0, exports.DefaultApiFp)(this.configuration).wmpClientGetPendingRequests(walletId, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * Processes a pending WMP request (credential offer or credential verification request) received from a connected WMP server entity. Returns the authorization requirements that must be satisfied — used as the entry point into the offer or presentation flow instead of passing a URL to `HolderOfferPassAuthInfo` or `HolderPresentPassAuthInfo`.
+     * Acts on a pending WMP client request identified by `request_id`. The body\'s `type` selects the action: `process` a credential offer / verification request (returns its authorization requirements), `identity_assertion` to present a credential as the session identity assertion, or `authenticate` to open the session after the assertion exchange.
      * @param {string} walletId
      * @param {string} requestId
+     * @param {WmpClientRequestBody} wmpClientRequestBody
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    wmpClientProcessRequest(walletId, requestId, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).wmpClientProcessRequest(walletId, requestId, options).then((request) => request(this.axios, this.basePath));
+    wmpClientProcessRequest(walletId, requestId, wmpClientRequestBody, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).wmpClientProcessRequest(walletId, requestId, wmpClientRequestBody, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * Creates a WMP (Wallet Messaging Protocol) invitation URL that can be shared with another wallet to establish a secure peer-to-peer communication channel. Issuers and verifiers use this to connect with holder wallets for direct credential delivery and verification without requiring QR codes or redirects on each interaction.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@triveria/wallet",
   "private": false,
-  "version": "0.0.296",
+  "version": "0.0.298",
   "description": "",
   "main": "index.js",
   "scripts": {