@triveria/wallet 0.0.328 → 0.0.330

package/api.js

@@ -25,7 +25,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WmpEntityListEntityTypeEnum = exports.CredentialPayloadGetFormEnum = exports.CredentialListInteractionEnum = exports.CredentialClaimMetadataGetMetadataScopeEnum = exports.DefaultApi = exports.DefaultApiFactory = exports.DefaultApiFp = exports.DefaultApiAxiosParamCreator = exports.XadesSignatureType = exports.WmpRequestType = exports.WmpProvideIdentityAssertionTypeEnum = exports.WmpProcessVerificationRequestTypeEnum = exports.WmpProcessOfferRequestTypeEnum = exports.WmpMessageSendStatus = exports.WmpAuthenticateSessionTypeEnum = exports.WmpAckReadRequestTypeEnum = exports.WmpAckProcessedRequestTypeEnum = exports.WalletNotificationEventType = exports.WalletCapability = exports.VcdmVersion = exports.VaultType = exports.TrustListKind = exports.TrustFrameworkType = exports.SystemImpactStatusEnum = exports.StatusPurpose = exports.SigningKeyIdentifier = exports.RevokeAccreditationRequestTypeEnum = exports.PresentationDefinitionSubmissionRequirementsRuleEnum = exports.OidcRevisionOidc4vpEnum = exports.OidcRevisionOidc4vciEnum = exports.ObjectVerticalAlignment = exports.ObjectHorizontalAlignment = exports.ListSort = exports.InteractionAuthorizationRequirementsRequirementTypeEnum = exports.HealthStatusStatusEnum = exports.EntityAccreditationRequestTypeEnum = exports.DocumentSignatureValidityVerificationResultEnum = exports.DeferredStatusEnum = exports.CredentialSchemaType = exports.CredentialPropertyToVerify = exports.CredentialNotificationEventTypeEnum = exports.CredentialMetadataStatusEnum = exports.CredentialMetadataInteractionEnum = exports.CredentialIssuerDefinitionAuthorizationEnum = exports.CredentialIssuerDefinitionCredentialIssuerEnum = exports.CredentialFormat = exports.CertificateStatus = exports.AccreditationRequestTypeEnum = void 0;
+exports.CredentialListInteractionEnum = exports.CredentialClaimMetadataGetMetadataScopeEnum = exports.DefaultApi = exports.DefaultApiFactory = exports.DefaultApiFp = exports.DefaultApiAxiosParamCreator = exports.XadesSignatureType = exports.WmpRequestType = exports.WmpProvideIdentityAssertionTypeEnum = exports.WmpProcessVerificationRequestTypeEnum = exports.WmpProcessOfferRequestTypeEnum = exports.WmpMessageSendStatus = exports.WmpAuthenticateSessionTypeEnum = exports.WmpAckReadRequestTypeEnum = exports.WmpAckProcessedRequestTypeEnum = exports.WalletNotificationEventType = exports.WalletCapability = exports.VcdmVersion = exports.VaultType = exports.UntpRegistrarConfigStatusEnum = exports.UntpConfigurationRoleEnum = exports.TrustListKind = exports.TrustFrameworkType = exports.SystemImpactStatusEnum = exports.StatusPurpose = exports.SigningKeyIdentifier = exports.RevokeAccreditationRequestTypeEnum = exports.RenderSuite = exports.RenderMethodInfoKindEnum = exports.PresentationDefinitionSubmissionRequirementsRuleEnum = exports.OidcRevisionOidc4vpEnum = exports.OidcRevisionOidc4vciEnum = exports.ObjectVerticalAlignment = exports.ObjectHorizontalAlignment = exports.ListSort = exports.InteractionAuthorizationRequirementsRequirementTypeEnum = exports.HealthStatusStatusEnum = exports.EntityAccreditationRequestTypeEnum = exports.DocumentSignatureValidityVerificationResultEnum = exports.DeferredStatusEnum = exports.CredentialSchemaType = exports.CredentialPropertyToVerify = exports.CredentialNotificationEventTypeEnum = exports.CredentialMetadataStatusEnum = exports.CredentialMetadataInteractionEnum = exports.CredentialIssuerDefinitionAuthorizationEnum = exports.CredentialIssuerDefinitionCredentialIssuerEnum = exports.CredentialFormat = exports.CertificateStatus = exports.AccreditationRequestTypeEnum = void 0;
+exports.WmpEntityListEntityTypeEnum = exports.CredentialPayloadGetFormEnum = void 0;
 const axios_1 = __importDefault(require("axios"));
 // Some imports not used depending on template conditions
 // @ts-ignore
@@ -162,6 +163,19 @@ exports.PresentationDefinitionSubmissionRequirementsRuleEnum = {
     All: 'all',
     Pick: 'pick',
 };
+exports.RenderMethodInfoKindEnum = {
+    RenderTemplate2024: 'RenderTemplate2024',
+    TemplateRenderMethod: 'TemplateRenderMethod',
+    Unknown: 'unknown',
+};
+/**
+ * A render suite; `template2024` is a UNTP `RenderTemplate2024`.
+ */
+exports.RenderSuite = {
+    Html: 'html',
+    Card: 'card',
+    Template2024: 'template2024',
+};
 exports.RevokeAccreditationRequestTypeEnum = {
     TrustedIssuer: 'TrustedIssuer',
     TrustedAccreditationOrganisation: 'TrustedAccreditationOrganisation',
@@ -184,13 +198,14 @@ exports.SystemImpactStatusEnum = {
     Critical: 'critical',
 };
 /**
- * What trust framework should we use with this wallet. This property COULD NOT change later. Supported frameworks: EBSI - the European Blockchain Services Infrastructure, IDTL - IDUnion Trust List, EUDI - European Digital Identity wallet, Noop - personal key based no-op trust framework (mainly for the personal use)
+ * What trust framework should we use with this wallet. This property COULD NOT change later. Supported frameworks: EBSI - the European Blockchain Services Infrastructure, IDTL - IDUnion Trust List, EUDI - European Digital Identity wallet, Noop - personal key based no-op trust framework (mainly for the personal use), UNTP - UN Transparency Protocol: a self-hosted did:web, and every DID the wallet resolves a key of must be anchored by a Digital Identity Anchor of a trusted registrar.
  */
 exports.TrustFrameworkType = {
     Ebsi: 'EBSI',
     Idtl: 'IDTL',
     Noop: 'NOOP',
     Eudi: 'EUDI',
+    Untp: 'UNTP',
 };
 /**
  * What a trusted list URL names. A `lotl` is a List of Trusted Lists, whose pointers are followed to the lists it names; a `trustList` is a leaf list, holding trust services directly.
@@ -199,6 +214,15 @@ exports.TrustListKind = {
     TrustList: 'trustList',
     Lotl: 'lotl',
 };
+exports.UntpConfigurationRoleEnum = {
+    Member: 'member',
+    Registrar: 'registrar',
+};
+exports.UntpRegistrarConfigStatusEnum = {
+    Active: 'Active',
+    Suspended: 'Suspended',
+    KeyCompromised: 'KeyCompromised',
+};
 /**
  * Which key store backend holds this wallet\'s signing keys. This property COULD NOT change later: it is only read on wallet creation and is ignored on wallet patch. Leave unset to use the deployment\'s default backend. vaultPlaintext - locally generated and stored WITHOUT encryption, for development only and rejected when the deployment runs with production=true; vaultAwsKms / vaultOvhKms - locally generated, wrapped by AWS KMS / OVH KMS; vaultKmip - generated and held inside a KMIP-speaking appliance (e.g. OVHcloud KMS), never exported.
  */
@@ -482,6 +506,51 @@ const DefaultApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         }),
+        /**
+         * Issues a W3C VCDM draft as a credential of the wallet itself, with no holder and no OID4VCI: for a credential that is published rather than handed to anyone, such as a UNTP Digital Product Passport (EN 18246 Annex B.5). The credential gets the wallet\'s status list entry and envelope, and is stored issued on the same record. With `publish`, it is then published as a UNTP link, like `POST /untp/links`; if that fails the response is `502` with the issued `credentialId`, and publishing is retried with `POST /untp/links`.
+         * @param {string} credentialId Verifiable Credential Identifier
+         * @param {string} walletId
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with `Idempotent-Replayed: true`) for 24 hours. The same key with a different request is `422`. A `5xx` response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is `409`.
+         * @param {CredentialIssueDirectRequest} [credentialIssueDirectRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        credentialIssueDirect: (credentialId_1, walletId_1, idempotencyKey_1, credentialIssueDirectRequest_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, idempotencyKey_1, credentialIssueDirectRequest_1, ...args_1], void 0, function* (credentialId, walletId, idempotencyKey, credentialIssueDirectRequest, options = {}) {
+            // verify required parameter 'credentialId' is not null or undefined
+            (0, common_1.assertParamExists)('credentialIssueDirect', 'credentialId', credentialId);
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('credentialIssueDirect', 'walletId', walletId);
+            const localVarPath = `/credentials/{credential_id}/issue/direct`
+                .replace('{credential_id}', encodeURIComponent(String(credentialId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            if (idempotencyKey != null) {
+                localVarHeaderParameter['Idempotency-Key'] = String(idempotencyKey);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(credentialIssueDirectRequest, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
         /**
          * Retrieves a list of credentials.
          * @param {string} walletId
@@ -719,55 +788,68 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Requests a credential issuance from the issuer and retrieves requirements for holder authorization.
+         * Renders a W3C VCDM credential of the wallet with one of its `renderMethod` entries, as `POST /verifier/render` does. HTML is served with a `Content-Security-Policy` that sandboxes it.
+         * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
-         * @param {CredentialRequest} [credentialRequest] A Verifiable Credential request: types and URL of the issuer
+         * @param {number} [index] The index of the render method to use, in the credential\'s `renderMethod`.
+         * @param {RenderSuite} [suite] Use the first render method of this suite.
+         * @param {string} [mediaQuery] Use the first render method with exactly this `mediaQuery`.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialRequestInit: (walletId_1, credentialRequest_1, ...args_1) => __awaiter(this, [walletId_1, credentialRequest_1, ...args_1], void 0, function* (walletId, credentialRequest, options = {}) {
+        credentialRender: (credentialId_1, walletId_1, index_1, suite_1, mediaQuery_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, index_1, suite_1, mediaQuery_1, ...args_1], void 0, function* (credentialId, walletId, index, suite, mediaQuery, options = {}) {
+            // verify required parameter 'credentialId' is not null or undefined
+            (0, common_1.assertParamExists)('credentialRender', 'credentialId', credentialId);
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('credentialRequestInit', 'walletId', walletId);
-            const localVarPath = `/credentials/request/init`;
+            (0, common_1.assertParamExists)('credentialRender', 'walletId', walletId);
+            const localVarPath = `/credentials/{credential_id}/render`
+                .replace('{credential_id}', encodeURIComponent(String(credentialId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
-            localVarHeaderParameter['Content-Type'] = 'application/json';
-            localVarHeaderParameter['Accept'] = 'application/json';
+            if (index !== undefined) {
+                localVarQueryParameter['index'] = index;
+            }
+            if (suite !== undefined) {
+                localVarQueryParameter['suite'] = suite;
+            }
+            if (mediaQuery !== undefined) {
+                localVarQueryParameter['mediaQuery'] = mediaQuery;
+            }
+            localVarHeaderParameter['Accept'] = 'text/html,text/plain,application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
             }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(credentialRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Revoke a specific Verifiable Credential
+         * Lists the render methods of a W3C VCDM credential of the wallet, for a client to pick one by its media query: media queries are not evaluated by the wallet.
          * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialRevoke: (credentialId_1, walletId_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, ...args_1], void 0, function* (credentialId, walletId, options = {}) {
+        credentialRenderMethods: (credentialId_1, walletId_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, ...args_1], void 0, function* (credentialId, walletId, options = {}) {
             // verify required parameter 'credentialId' is not null or undefined
-            (0, common_1.assertParamExists)('credentialRevoke', 'credentialId', credentialId);
+            (0, common_1.assertParamExists)('credentialRenderMethods', 'credentialId', credentialId);
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('credentialRevoke', 'walletId', walletId);
-            const localVarPath = `/credentials/{credential_id}/revoke`
+            (0, common_1.assertParamExists)('credentialRenderMethods', 'walletId', walletId);
+            const localVarPath = `/credentials/{credential_id}/render/methods`
                 .replace('{credential_id}', encodeURIComponent(String(credentialId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
@@ -775,7 +857,7 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
@@ -794,19 +876,16 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Suspend a Verifiable Credential issued with the `suspension` status purpose (W3C Bitstring Status List v1.0). A suspension can be lifted with `DELETE`.
-         * @param {string} credentialId Verifiable Credential Identifier
+         * Requests a credential issuance from the issuer and retrieves requirements for holder authorization.
          * @param {string} walletId
+         * @param {CredentialRequest} [credentialRequest] A Verifiable Credential request: types and URL of the issuer
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialSuspend: (credentialId_1, walletId_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, ...args_1], void 0, function* (credentialId, walletId, options = {}) {
-            // verify required parameter 'credentialId' is not null or undefined
-            (0, common_1.assertParamExists)('credentialSuspend', 'credentialId', credentialId);
+        credentialRequestInit: (walletId_1, credentialRequest_1, ...args_1) => __awaiter(this, [walletId_1, credentialRequest_1, ...args_1], void 0, function* (walletId, credentialRequest, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('credentialSuspend', 'walletId', walletId);
-            const localVarPath = `/credentials/{credential_id}/suspend`
-                .replace('{credential_id}', encodeURIComponent(String(credentialId)));
+            (0, common_1.assertParamExists)('credentialRequestInit', 'walletId', walletId);
+            const localVarPath = `/credentials/request/init`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -819,6 +898,7 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
@@ -826,24 +906,26 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(credentialRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Lift the suspension of a Verifiable Credential.
+         * Revoke a specific Verifiable Credential. A credential published as a UNTP link stays published: a verifier following its link finds it and verifies it as revoked. `DELETE /untp/links/{service_id}` unpublishes it.
          * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with `Idempotent-Replayed: true`) for 24 hours. The same key with a different request is `422`. A `5xx` response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is `409`.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialUnsuspend: (credentialId_1, walletId_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, ...args_1], void 0, function* (credentialId, walletId, options = {}) {
+        credentialRevoke: (credentialId_1, walletId_1, idempotencyKey_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, idempotencyKey_1, ...args_1], void 0, function* (credentialId, walletId, idempotencyKey, options = {}) {
             // verify required parameter 'credentialId' is not null or undefined
-            (0, common_1.assertParamExists)('credentialUnsuspend', 'credentialId', credentialId);
+            (0, common_1.assertParamExists)('credentialRevoke', 'credentialId', credentialId);
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('credentialUnsuspend', 'walletId', walletId);
-            const localVarPath = `/credentials/{credential_id}/suspend`
+            (0, common_1.assertParamExists)('credentialRevoke', 'walletId', walletId);
+            const localVarPath = `/credentials/{credential_id}/revoke`
                 .replace('{credential_id}', encodeURIComponent(String(credentialId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
@@ -851,7 +933,7 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
@@ -861,6 +943,9 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
             }
+            if (idempotencyKey != null) {
+                localVarHeaderParameter['Idempotency-Key'] = String(idempotencyKey);
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -870,26 +955,26 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Polls the status of a deferred credential issuance. Returns `in_progress` while the operation is still pending, or `completed` with the resulting credential ID when done. Clients should poll this endpoint until a terminal status is reached.
-         * @param {string} deferredId Deferred token
+         * Suspend a Verifiable Credential issued with the `suspension` status purpose (W3C Bitstring Status List v1.0). A suspension can be lifted with `DELETE`.
+         * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        deferredStatus: (deferredId_1, walletId_1, ...args_1) => __awaiter(this, [deferredId_1, walletId_1, ...args_1], void 0, function* (deferredId, walletId, options = {}) {
-            // verify required parameter 'deferredId' is not null or undefined
-            (0, common_1.assertParamExists)('deferredStatus', 'deferredId', deferredId);
+        credentialSuspend: (credentialId_1, walletId_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, ...args_1], void 0, function* (credentialId, walletId, options = {}) {
+            // verify required parameter 'credentialId' is not null or undefined
+            (0, common_1.assertParamExists)('credentialSuspend', 'credentialId', credentialId);
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('deferredStatus', 'walletId', walletId);
-            const localVarPath = `/deferred/{deferred_id}`
-                .replace('{deferred_id}', encodeURIComponent(String(deferredId)));
+            (0, common_1.assertParamExists)('credentialSuspend', 'walletId', walletId);
+            const localVarPath = `/credentials/{credential_id}/suspend`
+                .replace('{credential_id}', encodeURIComponent(String(credentialId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
@@ -908,26 +993,35 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Gets the DID Document of the wallet.
+         * Lift the suspension of a Verifiable Credential.
+         * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        didDocumentGet: (walletId_1, ...args_1) => __awaiter(this, [walletId_1, ...args_1], void 0, function* (walletId, options = {}) {
+        credentialUnsuspend: (credentialId_1, walletId_1, ...args_1) => __awaiter(this, [credentialId_1, walletId_1, ...args_1], void 0, function* (credentialId, walletId, options = {}) {
+            // verify required parameter 'credentialId' is not null or undefined
+            (0, common_1.assertParamExists)('credentialUnsuspend', 'credentialId', credentialId);
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('didDocumentGet', 'walletId', walletId);
-            const localVarPath = `/{wallet_id}/did.json`
-                .replace('{wallet_id}', encodeURIComponent(String(walletId)));
+            (0, common_1.assertParamExists)('credentialUnsuspend', 'walletId', walletId);
+            const localVarPath = `/credentials/{credential_id}/suspend`
+                .replace('{credential_id}', encodeURIComponent(String(credentialId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -937,12 +1031,19 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Checks the health status of the service and its subsystems (database, storage, etc.). Used by load balancers and monitoring systems.
+         * Polls the status of a deferred credential issuance. Returns `in_progress` while the operation is still pending, or `completed` with the resulting credential ID when done. Clients should poll this endpoint until a terminal status is reached.
+         * @param {string} deferredId Deferred token
+         * @param {string} walletId
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        healthCheck: (...args_1) => __awaiter(this, [...args_1], void 0, function* (options = {}) {
-            const localVarPath = `/health`;
+        deferredStatus: (deferredId_1, walletId_1, ...args_1) => __awaiter(this, [deferredId_1, walletId_1, ...args_1], void 0, function* (deferredId, walletId, options = {}) {
+            // verify required parameter 'deferredId' is not null or undefined
+            (0, common_1.assertParamExists)('deferredStatus', 'deferredId', deferredId);
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('deferredStatus', 'walletId', walletId);
+            const localVarPath = `/deferred/{deferred_id}`
+                .replace('{deferred_id}', encodeURIComponent(String(deferredId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -952,7 +1053,13 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
@@ -962,70 +1069,56 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Creates an authorized credential offer (deferred or instant) for holder-initiated credential request using provided parameters. The offer is an URL that the creator should provide to the client via a redirect, link, or QR code.
+         * Gets the DID Document of the wallet.
          * @param {string} walletId
-         * @param {HolderAuthOfferCreationRequest} [holderAuthOfferCreationRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderCreateAuthOffer: (walletId_1, holderAuthOfferCreationRequest_1, ...args_1) => __awaiter(this, [walletId_1, holderAuthOfferCreationRequest_1, ...args_1], void 0, function* (walletId, holderAuthOfferCreationRequest, options = {}) {
+        didDocumentGet: (walletId_1, ...args_1) => __awaiter(this, [walletId_1, ...args_1], void 0, function* (walletId, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('holderCreateAuthOffer', 'walletId', walletId);
-            const localVarPath = `/offer/create/intime`;
+            (0, common_1.assertParamExists)('didDocumentGet', 'walletId', walletId);
+            const localVarPath = `/{wallet_id}/did.json`
+                .replace('{wallet_id}', encodeURIComponent(String(walletId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
-            // authentication accessToken required
-            // http bearer authentication required
-            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
-            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
-            if (walletId != null) {
-                localVarHeaderParameter['wallet-id'] = String(walletId);
-            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(holderAuthOfferCreationRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Completes a credential presentation flow: submits the selected credentials to the verifier after the holder\'s explicit consent. The `interaction_id` is obtained from `HolderPresentPassAuthInfo`.
+         * Returns the wallet\'s own DID document, as published at `/{wallet_id}/did.json` for a self-hosted did:web.
          * @param {string} walletId
-         * @param {string} interactionId
-         * @param {InteractionAuthorizationConsent} [interactionAuthorizationConsent]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderCredentialsPresentAfterConsent: (walletId_1, interactionId_1, interactionAuthorizationConsent_1, ...args_1) => __awaiter(this, [walletId_1, interactionId_1, interactionAuthorizationConsent_1, ...args_1], void 0, function* (walletId, interactionId, interactionAuthorizationConsent, options = {}) {
+        didDocumentLocalGet: (walletId_1, ...args_1) => __awaiter(this, [walletId_1, ...args_1], void 0, function* (walletId, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('holderCredentialsPresentAfterConsent', 'walletId', walletId);
-            // verify required parameter 'interactionId' is not null or undefined
-            (0, common_1.assertParamExists)('holderCredentialsPresentAfterConsent', 'interactionId', interactionId);
-            const localVarPath = `/holder/present/{interaction_id}`
-                .replace('{interaction_id}', encodeURIComponent(String(interactionId)));
+            (0, common_1.assertParamExists)('didDocumentLocalGet', 'walletId', walletId);
+            const localVarPath = `/did`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
-            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
@@ -1033,30 +1126,31 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(interactionAuthorizationConsent, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Responds to an ID token request
+         * Changes the wallet\'s DID document: removes the services in `removeServiceIds`, adds the services in `addServices` (a service with the same id is replaced), and, when `alsoKnownAs` is set, replaces the subject\'s other identifiers (an empty list removes them). UNTP identifies an entity\'s Digital Identity Anchor with a service of type `https://test.uncefact.org/vocabulary/link-type/dia` (`untp:dia` in UNTP 0.7) and registered identifiers with `alsoKnownAs`.  Only a self-hosted did:web document can be changed; services of an EBSI DID are written to the EBSI DID registry, which does not take `alsoKnownAs`.
          * @param {string} walletId
-         * @param {IdTokenSendRequest} [idTokenSendRequest]
+         * @param {DidDocumentPatch} didDocumentPatch
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderIdTokenSend: (walletId_1, idTokenSendRequest_1, ...args_1) => __awaiter(this, [walletId_1, idTokenSendRequest_1, ...args_1], void 0, function* (walletId, idTokenSendRequest, options = {}) {
+        didDocumentPatch: (walletId_1, didDocumentPatch_1, ...args_1) => __awaiter(this, [walletId_1, didDocumentPatch_1, ...args_1], void 0, function* (walletId, didDocumentPatch, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('holderIdTokenSend', 'walletId', walletId);
-            const localVarPath = `/holder/id-token/send`;
+            (0, common_1.assertParamExists)('didDocumentPatch', 'walletId', walletId);
+            // verify required parameter 'didDocumentPatch' is not null or undefined
+            (0, common_1.assertParamExists)('didDocumentPatch', 'didDocumentPatch', didDocumentPatch);
+            const localVarPath = `/did`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'PATCH' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
@@ -1070,75 +1164,61 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(idTokenSendRequest, localVarRequestOptions, configuration);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(didDocumentPatch, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Creates a new public Linked VP of specified credentials and adds it to the wallet\'s DID document
-         * @param {string} walletId
-         * @param {LinkedVpCreateRequest} [linkedVpCreateRequest]
+         * Checks the health status of the service and its subsystems (database, storage, etc.). Used by load balancers and monitoring systems.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpCreate: (walletId_1, linkedVpCreateRequest_1, ...args_1) => __awaiter(this, [walletId_1, linkedVpCreateRequest_1, ...args_1], void 0, function* (walletId, linkedVpCreateRequest, options = {}) {
-            // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('holderLinkedVpCreate', 'walletId', walletId);
-            const localVarPath = `/holder/linked-vp`;
+        healthCheck: (...args_1) => __awaiter(this, [...args_1], void 0, function* (options = {}) {
+            const localVarPath = `/health`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
-            // authentication accessToken required
-            // http bearer authentication required
-            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
-            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
-            if (walletId != null) {
-                localVarHeaderParameter['wallet-id'] = String(walletId);
-            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(linkedVpCreateRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Deletes a linked VP
+         * Creates an authorized credential offer (deferred or instant) for holder-initiated credential request using provided parameters. The offer is an URL that the creator should provide to the client via a redirect, link, or QR code.
          * @param {string} walletId
-         * @param {string} linkedVpId
+         * @param {HolderAuthOfferCreationRequest} [holderAuthOfferCreationRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpDelete: (walletId_1, linkedVpId_1, ...args_1) => __awaiter(this, [walletId_1, linkedVpId_1, ...args_1], void 0, function* (walletId, linkedVpId, options = {}) {
+        holderCreateAuthOffer: (walletId_1, holderAuthOfferCreationRequest_1, ...args_1) => __awaiter(this, [walletId_1, holderAuthOfferCreationRequest_1, ...args_1], void 0, function* (walletId, holderAuthOfferCreationRequest, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('holderLinkedVpDelete', 'walletId', walletId);
-            // verify required parameter 'linkedVpId' is not null or undefined
-            (0, common_1.assertParamExists)('holderLinkedVpDelete', 'linkedVpId', linkedVpId);
-            const localVarPath = `/holder/linked-vp/{linked_vp_id}`
-                .replace('{linked_vp_id}', encodeURIComponent(String(linkedVpId)));
+            (0, common_1.assertParamExists)('holderCreateAuthOffer', 'walletId', walletId);
+            const localVarPath = `/offer/create/intime`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
@@ -1146,37 +1226,40 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(holderAuthOfferCreationRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Returns metadata and content of a specific linked Verifiable Presentation, including the credentials it contains and its DID document service entry URL.
+         * Completes a credential presentation flow: submits the selected credentials to the verifier after the holder\'s explicit consent. The `interaction_id` is obtained from `HolderPresentPassAuthInfo`.
          * @param {string} walletId
-         * @param {string} linkedVpId
+         * @param {string} interactionId
+         * @param {InteractionAuthorizationConsent} [interactionAuthorizationConsent]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpGetDetails: (walletId_1, linkedVpId_1, ...args_1) => __awaiter(this, [walletId_1, linkedVpId_1, ...args_1], void 0, function* (walletId, linkedVpId, options = {}) {
+        holderCredentialsPresentAfterConsent: (walletId_1, interactionId_1, interactionAuthorizationConsent_1, ...args_1) => __awaiter(this, [walletId_1, interactionId_1, interactionAuthorizationConsent_1, ...args_1], void 0, function* (walletId, interactionId, interactionAuthorizationConsent, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('holderLinkedVpGetDetails', 'walletId', walletId);
-            // verify required parameter 'linkedVpId' is not null or undefined
-            (0, common_1.assertParamExists)('holderLinkedVpGetDetails', 'linkedVpId', linkedVpId);
-            const localVarPath = `/holder/linked-vp/{linked_vp_id}`
-                .replace('{linked_vp_id}', encodeURIComponent(String(linkedVpId)));
+            (0, common_1.assertParamExists)('holderCredentialsPresentAfterConsent', 'walletId', walletId);
+            // verify required parameter 'interactionId' is not null or undefined
+            (0, common_1.assertParamExists)('holderCredentialsPresentAfterConsent', 'interactionId', interactionId);
+            const localVarPath = `/holder/present/{interaction_id}`
+                .replace('{interaction_id}', encodeURIComponent(String(interactionId)));
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
@@ -1184,33 +1267,36 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(interactionAuthorizationConsent, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Returns all linked Verifiable Presentations published in the wallet\'s DID document,
+         * Responds to an ID token request
          * @param {string} walletId
+         * @param {IdTokenSendRequest} [idTokenSendRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpList: (walletId_1, ...args_1) => __awaiter(this, [walletId_1, ...args_1], void 0, function* (walletId, options = {}) {
+        holderIdTokenSend: (walletId_1, idTokenSendRequest_1, ...args_1) => __awaiter(this, [walletId_1, idTokenSendRequest_1, ...args_1], void 0, function* (walletId, idTokenSendRequest, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('holderLinkedVpList', 'walletId', walletId);
-            const localVarPath = `/holder/linked-vp`;
+            (0, common_1.assertParamExists)('holderIdTokenSend', 'walletId', walletId);
+            const localVarPath = `/holder/id-token/send`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
             if (configuration) {
                 baseOptions = configuration.baseOptions;
             }
-            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
             const localVarHeaderParameter = {};
             const localVarQueryParameter = {};
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
             localVarHeaderParameter['Accept'] = 'application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
@@ -1218,6 +1304,7 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(idTokenSendRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
@@ -1407,16 +1494,19 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Generates an authorized credential offer URL for the holder to initiate the credential issuance flow. The resulting offer URL is typically presented as a QR code or deep link. If `wmpEntityId` is provided, the offer is delivered directly via WMP and 204 is returned.
+         * Signs an opaque payload, such as an audit log entry, with the wallet\'s DID key, as a compact detached JWS with an unencoded payload (RFC 7515 Appendix F, RFC 7797: `b64: false`, `crit: [\"b64\"]`): `<protected header>..<signature>`. The signature is verified offline against the key in the wallet\'s DID document, with the payload put back. `typ` must be one the deployment allows, which no credential or presentation verifier accepts, so a signature from here never passes as a credential.
          * @param {string} walletId
-         * @param {InitAuthOffer} [initAuthOffer]
+         * @param {IssuerDetachedJwsSignRequest} issuerDetachedJwsSignRequest
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        issuerInitiateAuthOffer: (walletId_1, initAuthOffer_1, ...args_1) => __awaiter(this, [walletId_1, initAuthOffer_1, ...args_1], void 0, function* (walletId, initAuthOffer, options = {}) {
+        issuerDetachedJwsSign: (walletId_1, issuerDetachedJwsSignRequest_1, idempotencyKey_1, ...args_1) => __awaiter(this, [walletId_1, issuerDetachedJwsSignRequest_1, idempotencyKey_1, ...args_1], void 0, function* (walletId, issuerDetachedJwsSignRequest, idempotencyKey, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('issuerInitiateAuthOffer', 'walletId', walletId);
-            const localVarPath = `/issuer/offer/auth`;
+            (0, common_1.assertParamExists)('issuerDetachedJwsSign', 'walletId', walletId);
+            // verify required parameter 'issuerDetachedJwsSignRequest' is not null or undefined
+            (0, common_1.assertParamExists)('issuerDetachedJwsSign', 'issuerDetachedJwsSignRequest', issuerDetachedJwsSignRequest);
+            const localVarPath = `/issuer/jws/detached`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -1434,26 +1524,29 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
             }
+            if (idempotencyKey != null) {
+                localVarHeaderParameter['Idempotency-Key'] = String(idempotencyKey);
+            }
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(initAuthOffer, localVarRequestOptions, configuration);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(issuerDetachedJwsSignRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Generates a pre-authorized credential offer for the holder. Unlike the authorized flow, the holder does not need to authenticate with the issuer — instead a pre-authorized code (and optional PIN) is embedded in the offer URL. The resulting offer URL is returned and Generates a pre-authorized credential offer for the holder.  The resulting offer URL is returned and can be shared as a QR code or deep link.
+         * Generates an authorized credential offer URL for the holder to initiate the credential issuance flow. The resulting offer URL is typically presented as a QR code or deep link. If `wmpEntityId` is provided, the offer is delivered directly via WMP and 204 is returned.
          * @param {string} walletId
-         * @param {InitPreAuthOffer} [initPreAuthOffer]
+         * @param {InitAuthOffer} [initAuthOffer]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        issuerInitiatePreauthOffer: (walletId_1, initPreAuthOffer_1, ...args_1) => __awaiter(this, [walletId_1, initPreAuthOffer_1, ...args_1], void 0, function* (walletId, initPreAuthOffer, options = {}) {
+        issuerInitiateAuthOffer: (walletId_1, initAuthOffer_1, ...args_1) => __awaiter(this, [walletId_1, initAuthOffer_1, ...args_1], void 0, function* (walletId, initAuthOffer, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('issuerInitiatePreauthOffer', 'walletId', walletId);
-            const localVarPath = `/issuer/offer/preauth`;
+            (0, common_1.assertParamExists)('issuerInitiateAuthOffer', 'walletId', walletId);
+            const localVarPath = `/issuer/offer/auth`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -1474,17 +1567,54 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(initPreAuthOffer, localVarRequestOptions, configuration);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(initAuthOffer, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Signs an XML document with XAdES signature
+         * Generates a pre-authorized credential offer for the holder. Unlike the authorized flow, the holder does not need to authenticate with the issuer — instead a pre-authorized code (and optional PIN) is embedded in the offer URL. The resulting offer URL is returned and Generates a pre-authorized credential offer for the holder.  The resulting offer URL is returned and can be shared as a QR code or deep link.
          * @param {string} walletId
-         * @param {XadesSignatureType} xadesSignatureType
-         * @param {File} [xml]
+         * @param {InitPreAuthOffer} [initPreAuthOffer]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        issuerInitiatePreauthOffer: (walletId_1, initPreAuthOffer_1, ...args_1) => __awaiter(this, [walletId_1, initPreAuthOffer_1, ...args_1], void 0, function* (walletId, initPreAuthOffer, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('issuerInitiatePreauthOffer', 'walletId', walletId);
+            const localVarPath = `/issuer/offer/preauth`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(initPreAuthOffer, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Signs an XML document with XAdES signature
+         * @param {string} walletId
+         * @param {XadesSignatureType} xadesSignatureType
+         * @param {File} [xml]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
@@ -1692,6 +1822,147 @@ const DefaultApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         }),
+        /**
+         * Creates a wallet for the caller from a pending enrollment, in the tenant. A state can be used once. A caller whose token names another tenant is refused.
+         * @param {string} tenantId
+         * @param {string} state The enrollment state from TenantEnrollmentInit.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentEnroll: (tenantId_1, state_1, ...args_1) => __awaiter(this, [tenantId_1, state_1, ...args_1], void 0, function* (tenantId, state, options = {}) {
+            // verify required parameter 'tenantId' is not null or undefined
+            (0, common_1.assertParamExists)('tenantEnrollmentEnroll', 'tenantId', tenantId);
+            // verify required parameter 'state' is not null or undefined
+            (0, common_1.assertParamExists)('tenantEnrollmentEnroll', 'state', state);
+            const localVarPath = `/tenant/{tenant_id}/enrollment/{state}`
+                .replace('{tenant_id}', encodeURIComponent(String(tenantId)))
+                .replace('{state}', encodeURIComponent(String(state)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Prepares a wallet for the tenant and returns a one-time enrollment state. Whoever presents the state to POST /tenant/{tenant_id}/enrollment/{state} gets a wallet created from the payload, in the tenant. Only a Tenant Owner of the tenant may call it. The payload is validated now; a tenantId it carries is ignored. The state is returned only here: the wallet keeps only its hash, which is the enrollment id.
+         * @param {string} tenantId
+         * @param {EnrollmentInitPayload} enrollmentInitPayload
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentInit: (tenantId_1, enrollmentInitPayload_1, ...args_1) => __awaiter(this, [tenantId_1, enrollmentInitPayload_1, ...args_1], void 0, function* (tenantId, enrollmentInitPayload, options = {}) {
+            // verify required parameter 'tenantId' is not null or undefined
+            (0, common_1.assertParamExists)('tenantEnrollmentInit', 'tenantId', tenantId);
+            // verify required parameter 'enrollmentInitPayload' is not null or undefined
+            (0, common_1.assertParamExists)('tenantEnrollmentInit', 'enrollmentInitPayload', enrollmentInitPayload);
+            const localVarPath = `/tenant/{tenant_id}/enrollment/init`
+                .replace('{tenant_id}', encodeURIComponent(String(tenantId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(enrollmentInitPayload, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Lists the tenant\'s pending enrollments, oldest first. Only a Tenant Owner of the tenant may.
+         * @param {string} tenantId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentList: (tenantId_1, ...args_1) => __awaiter(this, [tenantId_1, ...args_1], void 0, function* (tenantId, options = {}) {
+            // verify required parameter 'tenantId' is not null or undefined
+            (0, common_1.assertParamExists)('tenantEnrollmentList', 'tenantId', tenantId);
+            const localVarPath = `/tenant/{tenant_id}/enrollments`
+                .replace('{tenant_id}', encodeURIComponent(String(tenantId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Revokes a pending enrollment, so that its state no longer creates a wallet.
+         * @param {string} tenantId
+         * @param {string} enrollmentId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentRevoke: (tenantId_1, enrollmentId_1, ...args_1) => __awaiter(this, [tenantId_1, enrollmentId_1, ...args_1], void 0, function* (tenantId, enrollmentId, options = {}) {
+            // verify required parameter 'tenantId' is not null or undefined
+            (0, common_1.assertParamExists)('tenantEnrollmentRevoke', 'tenantId', tenantId);
+            // verify required parameter 'enrollmentId' is not null or undefined
+            (0, common_1.assertParamExists)('tenantEnrollmentRevoke', 'enrollmentId', enrollmentId);
+            const localVarPath = `/tenant/{tenant_id}/enrollments/{enrollment_id}`
+                .replace('{tenant_id}', encodeURIComponent(String(tenantId)))
+                .replace('{enrollment_id}', encodeURIComponent(String(enrollmentId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
         /**
          * Accredits a legal entity as RTAO (Root Trust Anchor Organisation), TAO (Trust Anchor Organisation), or TI (Trusted Issuer) within the trust framework hierarchy by issuing the appropriate accreditation credential to their DID.
          * @param {string} walletId
@@ -2155,16 +2426,90 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
+         * Removes a UNTP link from the wallet\'s DID document and stops serving its credential.
          * @param {string} walletId
-         * @param {VerifyInitRequest} [verifyInitRequest]
+         * @param {string} serviceId The service id of the link, in full (&#x60;&lt;did&gt;#&lt;fragment&gt;&#x60;) or as its fragment.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        verifierInitUrlCreate: (walletId_1, verifyInitRequest_1, ...args_1) => __awaiter(this, [walletId_1, verifyInitRequest_1, ...args_1], void 0, function* (walletId, verifyInitRequest, options = {}) {
+        untpLinkDelete: (walletId_1, serviceId_1, ...args_1) => __awaiter(this, [walletId_1, serviceId_1, ...args_1], void 0, function* (walletId, serviceId, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('verifierInitUrlCreate', 'walletId', walletId);
-            const localVarPath = `/verifier/init`;
+            (0, common_1.assertParamExists)('untpLinkDelete', 'walletId', walletId);
+            // verify required parameter 'serviceId' is not null or undefined
+            (0, common_1.assertParamExists)('untpLinkDelete', 'serviceId', serviceId);
+            const localVarPath = `/untp/links/{service_id}`
+                .replace('{service_id}', encodeURIComponent(String(serviceId)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'DELETE' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * The UNTP links the wallet\'s DID document advertises for its published credentials.
+         * @param {string} walletId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpLinkList: (walletId_1, ...args_1) => __awaiter(this, [walletId_1, ...args_1], void 0, function* (walletId, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('untpLinkList', 'walletId', walletId);
+            const localVarPath = `/untp/links`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Publishes an issued, valid W3C VCDM credential as a UNTP link: it is served at its public URL (`/api/v1/{wallet_id}/vc/{credential_id}`) and the wallet\'s DID document gets a service of the link type, whose endpoint is a link target to that URL. Publishing a credential again as the same link type returns the existing link. The wallet\'s DID document must be one it hosts (a self-hosted did:web, or an EBSI DID).
+         * @param {string} walletId
+         * @param {UntpLinkPublishRequest} untpLinkPublishRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpLinkPublish: (walletId_1, untpLinkPublishRequest_1, ...args_1) => __awaiter(this, [walletId_1, untpLinkPublishRequest_1, ...args_1], void 0, function* (walletId, untpLinkPublishRequest, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('untpLinkPublish', 'walletId', walletId);
+            // verify required parameter 'untpLinkPublishRequest' is not null or undefined
+            (0, common_1.assertParamExists)('untpLinkPublish', 'untpLinkPublishRequest', untpLinkPublishRequest);
+            const localVarPath = `/untp/links`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -2185,25 +2530,59 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
-            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(verifyInitRequest, localVarRequestOptions, configuration);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(untpLinkPublishRequest, localVarRequestOptions, configuration);
             return {
                 url: (0, common_1.toPathString)(localVarUrlObj),
                 options: localVarRequestOptions,
             };
         }),
         /**
-         * Fetches linked presentations from DID document and verifies them.
+         * Lists the registrars the wallet trusts to issue Digital Identity Anchors, and whether the wallet\'s own DID is one of them.
          * @param {string} walletId
-         * @param {string} did
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        verifierLinkedVpVerify: (walletId_1, did_1, ...args_1) => __awaiter(this, [walletId_1, did_1, ...args_1], void 0, function* (walletId, did, options = {}) {
+        untpRegistryList: (walletId_1, ...args_1) => __awaiter(this, [walletId_1, ...args_1], void 0, function* (walletId, options = {}) {
             // verify required parameter 'walletId' is not null or undefined
-            (0, common_1.assertParamExists)('verifierLinkedVpVerify', 'walletId', walletId);
-            // verify required parameter 'did' is not null or undefined
-            (0, common_1.assertParamExists)('verifierLinkedVpVerify', 'did', did);
-            const localVarPath = `/verifier/linked-vp`;
+            (0, common_1.assertParamExists)('untpRegistryList', 'walletId', walletId);
+            const localVarPath = `/untp/registry`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Verifies a credential, given raw or by URL, with the wallet\'s trust framework, and reports each check: the signature (with the key the issuer\'s identifier resolves to), the validity dates, and, unless turned off, the JSON-LD document (W3C VCDM 2.0), the status, the schema and the issuer\'s trust. A credential that fails is still `200`, with `verified: false`; `code` reuses the error codes of `/verifier/untp/resolve`.  A `url` must be https, and is never fetched from a private, loopback or link-local address, so a localhost URL is refused too. It is fetched within 10 s, 5 MiB and 3 redirects on the same host, and only as a credential media type.
+         * @param {string} walletId
+         * @param {VerifierCredentialRequest} verifierCredentialRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierCredentialVerify: (walletId_1, verifierCredentialRequest_1, ...args_1) => __awaiter(this, [walletId_1, verifierCredentialRequest_1, ...args_1], void 0, function* (walletId, verifierCredentialRequest, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('verifierCredentialVerify', 'walletId', walletId);
+            // verify required parameter 'verifierCredentialRequest' is not null or undefined
+            (0, common_1.assertParamExists)('verifierCredentialVerify', 'verifierCredentialRequest', verifierCredentialRequest);
+            const localVarPath = `/verifier/credential`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
             let baseOptions;
@@ -2216,9 +2595,52 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             // authentication accessToken required
             // http bearer authentication required
             yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(verifierCredentialRequest, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Verifies whether the wallet\'s trust framework trusts a DID, beyond resolving its key.  A UNTP wallet requires a Digital Identity Anchor (UNTP 0.8.0, a profile of W3C Recognized Entities): the DID\'s DIA, found through its DID document\'s `https://test.uncefact.org/vocabulary/link-type/dia` service (or `untp:dia`), or a W3C `WhoisService`, is verified (signature, validity, status, the UNTP profile) and chained up, DIA by DIA, to a registrar the wallet trusts: its own (`UNTP.trustedRegistrars`), then the deployment\'s (`untp.dia.trustedRegistrars`, `untp.dia.registryUrl`). A registrar is itself trusted without a DIA. The details are in `untp`.  A DID that is not trusted is still `200`, with `trusted: false` and the reasons in `failures`. With `credentialType`, the issuer policy for that credential type is evaluated too. A wallet whose trust framework does not verify DIDs is `422`.
+         * @param {string} walletId
+         * @param {string} did The DID to verify.
+         * @param {string} [credentialType] Evaluate the issuer policy of this credential type, e.g. &#x60;DigitalProductPassport&#x60;.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierDidVerify: (walletId_1, did_1, credentialType_1, ...args_1) => __awaiter(this, [walletId_1, did_1, credentialType_1, ...args_1], void 0, function* (walletId, did, credentialType, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('verifierDidVerify', 'walletId', walletId);
+            // verify required parameter 'did' is not null or undefined
+            (0, common_1.assertParamExists)('verifierDidVerify', 'did', did);
+            const localVarPath = `/verifier/did`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
             if (did !== undefined) {
                 localVarQueryParameter['did'] = did;
             }
+            if (credentialType !== undefined) {
+                localVarQueryParameter['credentialType'] = credentialType;
+            }
             localVarHeaderParameter['Accept'] = 'application/json';
             if (walletId != null) {
                 localVarHeaderParameter['wallet-id'] = String(walletId);
@@ -2231,6 +2653,43 @@ const DefaultApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         }),
+        /**
+         * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
+         * @param {string} walletId
+         * @param {VerifyInitRequest} [verifyInitRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierInitUrlCreate: (walletId_1, verifyInitRequest_1, ...args_1) => __awaiter(this, [walletId_1, verifyInitRequest_1, ...args_1], void 0, function* (walletId, verifyInitRequest, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('verifierInitUrlCreate', 'walletId', walletId);
+            const localVarPath = `/verifier/init`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(verifyInitRequest, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
         /**
          * Verifies the signatures of uploaded PDF and extracts and verifies VP in the PDF document Maximum size of the PDF document is 50 MB.
          * @param {string} walletId
@@ -2290,6 +2749,101 @@ const DefaultApiAxiosParamCreator = function (configuration) {
                 options: localVarRequestOptions,
             };
         }),
+        /**
+         * Renders a credential for a human with one of its `renderMethod` entries: a UNTP `RenderTemplate2024` (Handlebars, the output in its `mediaType`: `text/html`, the default, or `text/plain`) or a W3C `TemplateRenderMethod` of the `html` suite (a wrapper document to show in an `iframe` with `sandbox=\"allow-scripts\"` and `srcdoc`) or the `card` suite (a JSON card). By default the first method that can be rendered is used.  A `signedVc` is verified (its signature, validity and status) before it is rendered, and `X-Credential-Verified` is `true`; one that fails is `422`. A `vc` is a credential document rendered as it is, with `X-Credential-Verified: false`.  A credential with no render method that matches, or a method that cannot be rendered (`nfc`, a template of another `mediaType`, or an unknown type), is `422` with `no render method` or `render suite unsupported`; an invalid one is `422` with `invalid render method`, a template that cannot be fetched or does not match its digest `render template unavailable`, and one that fails or runs too long `render failed`.  A remote template is fetched over https only, within 5 s and 1 MiB, and must match its `digestMultibase`. Rendering stops after 2 s or 1 MiB of output. A template that runs on past that still counts against the renderings the wallet runs at once (`render.maxConcurrent`); when none is free, the response is `503`.
+         * @param {string} walletId
+         * @param {VerifierRenderRequest} verifierRenderRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierRender: (walletId_1, verifierRenderRequest_1, ...args_1) => __awaiter(this, [walletId_1, verifierRenderRequest_1, ...args_1], void 0, function* (walletId, verifierRenderRequest, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('verifierRender', 'walletId', walletId);
+            // verify required parameter 'verifierRenderRequest' is not null or undefined
+            (0, common_1.assertParamExists)('verifierRender', 'verifierRenderRequest', verifierRenderRequest);
+            const localVarPath = `/verifier/render`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'POST' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+            localVarHeaderParameter['Accept'] = 'text/html,text/plain,application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            localVarRequestOptions.data = (0, common_1.serializeDataIfNeeded)(verifierRenderRequest, localVarRequestOptions, configuration);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
+        /**
+         * Resolves a DID into the RFC 9264 linkset of the UNTP links its DID document advertises and, with `fetch`, fetches the linked credentials and verifies them. A credential that fails is reported in `credentials` and `verification.failed`, with the response still 200: `verification.ok` is the verdict.
+         * @param {string} walletId
+         * @param {string} identifier The DID to resolve.
+         * @param {string} [linkType] The link types to fetch, comma separated (e.g. &#x60;dpp,dcc&#x60;), or &#x60;all&#x60; (the default). The linkset uses the UNTP 0.8.0 relations: &#x60;dpp&#x60;, &#x60;linkset&#x60; for an identity resolver, and &#x60;https://test.uncefact.org/vocabulary/link-type/&lt;type&gt;&#x60; for the others. A DID document\&#39;s UNTP 0.7 service types (&#x60;untp:dia&#x60;, bare &#x60;dcc&#x60;) are read as the same link types.
+         * @param {boolean} [fetch] Fetch and verify the linked credentials.
+         * @param {boolean} [verify] Verify the fetched credentials\&#39; dates, status and schema, besides their signature.
+         * @param {boolean} [verifyIssuer] Also verify whether the wallet\&#39;s trust framework trusts the DID, as &#x60;/verifier/did&#x60; does, and report it as &#x60;issuer&#x60;. A wallet whose trust framework does not verify DIDs reports no &#x60;issuer&#x60;, and is &#x60;422&#x60; when &#x60;verifyIssuer&#x60; is set explicitly. A UNTP wallet enforces the anchor on every signature anyway; this reports it.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierUntpResolve: (walletId_1, identifier_1, linkType_1, fetch_1, verify_1, verifyIssuer_1, ...args_1) => __awaiter(this, [walletId_1, identifier_1, linkType_1, fetch_1, verify_1, verifyIssuer_1, ...args_1], void 0, function* (walletId, identifier, linkType, fetch, verify, verifyIssuer, options = {}) {
+            // verify required parameter 'walletId' is not null or undefined
+            (0, common_1.assertParamExists)('verifierUntpResolve', 'walletId', walletId);
+            // verify required parameter 'identifier' is not null or undefined
+            (0, common_1.assertParamExists)('verifierUntpResolve', 'identifier', identifier);
+            const localVarPath = `/verifier/untp/resolve`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+            const localVarRequestOptions = Object.assign(Object.assign({ method: 'GET' }, baseOptions), options);
+            const localVarHeaderParameter = {};
+            const localVarQueryParameter = {};
+            // authentication accessToken required
+            // http bearer authentication required
+            yield (0, common_1.setBearerAuthToObject)(localVarHeaderParameter, configuration);
+            if (identifier !== undefined) {
+                localVarQueryParameter['identifier'] = identifier;
+            }
+            if (linkType !== undefined) {
+                localVarQueryParameter['linkType'] = linkType;
+            }
+            if (fetch !== undefined) {
+                localVarQueryParameter['fetch'] = fetch;
+            }
+            if (verify !== undefined) {
+                localVarQueryParameter['verify'] = verify;
+            }
+            if (verifyIssuer !== undefined) {
+                localVarQueryParameter['verifyIssuer'] = verifyIssuer;
+            }
+            localVarHeaderParameter['Accept'] = 'application/json';
+            if (walletId != null) {
+                localVarHeaderParameter['wallet-id'] = String(walletId);
+            }
+            (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = Object.assign(Object.assign(Object.assign({}, localVarHeaderParameter), headersFromBaseOptions), options.headers);
+            return {
+                url: (0, common_1.toPathString)(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        }),
         /**
          * Creates a new wallet for the authenticated client.
          * @param {WalletCreatePayload} [walletCreatePayload]
@@ -2455,10 +3009,11 @@ const DefaultApiAxiosParamCreator = function (configuration) {
          * Provides list of wallets owned by the authenticated client, sorted by wallet name in byte order (Unicode code point order of the UTF-8 name, so upper case sorts before lower case). Wallets with the same name are in the order they were created.
          * @param {string} [ownerId]
          * @param {string} [searchName] Wallet name to search using \&quot;begins-with\&quot; filter
+         * @param {string} [tenantId] Lists the wallets of every owner in this tenant instead, each with its ownerId. Only a Tenant Owner of the tenant may set it, and not together with ownerId.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        walletList: (ownerId_1, searchName_1, ...args_1) => __awaiter(this, [ownerId_1, searchName_1, ...args_1], void 0, function* (ownerId, searchName, options = {}) {
+        walletList: (ownerId_1, searchName_1, tenantId_1, ...args_1) => __awaiter(this, [ownerId_1, searchName_1, tenantId_1, ...args_1], void 0, function* (ownerId, searchName, tenantId, options = {}) {
             const localVarPath = `/wallets`;
             // use dummy base URL string because the URL constructor only accepts absolute URLs.
             const localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
@@ -2478,6 +3033,9 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             if (searchName !== undefined) {
                 localVarQueryParameter['searchName'] = searchName;
             }
+            if (tenantId !== undefined) {
+                localVarQueryParameter['tenantId'] = tenantId;
+            }
             localVarHeaderParameter['Accept'] = 'application/json';
             (0, common_1.setSearchParams)(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
@@ -2624,7 +3182,7 @@ const DefaultApiAxiosParamCreator = function (configuration) {
             };
         }),
         /**
-         * Update wallet metadata and configuration.
+         * Update wallet metadata and configuration.  The owner of the wallet patches its name, config and metadata; `config.tenant` is ignored for them. A Tenant Owner of the wallet\'s tenant patches `config.tenant.issuerProxyUrl`, also of wallets of other owners, and for those every other field of the body is ignored. `config.tenant.tenantId` never changes.
          * @param {string} walletId
          * @param {WalletPatchPayload} [walletPatchPayload]
          * @param {*} [options] Override http request option.
@@ -3498,16 +4056,34 @@ const DefaultApiFp = function (configuration) {
          * Prepares created Verifiable Credential draft for its issuance for a specific client.
          * @param {string} credentialId
          * @param {string} walletId
-         * @param {CredentialIssuanceInit} [credentialIssuanceInit]
+         * @param {CredentialIssuanceInit} [credentialIssuanceInit]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.credentialIssuanceInit']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Issues a W3C VCDM draft as a credential of the wallet itself, with no holder and no OID4VCI: for a credential that is published rather than handed to anyone, such as a UNTP Digital Product Passport (EN 18246 Annex B.5). The credential gets the wallet\'s status list entry and envelope, and is stored issued on the same record. With `publish`, it is then published as a UNTP link, like `POST /untp/links`; if that fails the response is `502` with the issued `credentialId`, and publishing is retried with `POST /untp/links`.
+         * @param {string} credentialId Verifiable Credential Identifier
+         * @param {string} walletId
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
+         * @param {CredentialIssueDirectRequest} [credentialIssueDirectRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options) {
+        credentialIssueDirect(credentialId, walletId, idempotencyKey, credentialIssueDirectRequest, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.credentialIssueDirect(credentialId, walletId, idempotencyKey, credentialIssueDirectRequest, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.credentialIssuanceInit']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.credentialIssueDirect']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
@@ -3603,6 +4179,41 @@ const DefaultApiFp = function (configuration) {
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
+        /**
+         * Renders a W3C VCDM credential of the wallet with one of its `renderMethod` entries, as `POST /verifier/render` does. HTML is served with a `Content-Security-Policy` that sandboxes it.
+         * @param {string} credentialId Verifiable Credential Identifier
+         * @param {string} walletId
+         * @param {number} [index] The index of the render method to use, in the credential\&#39;s &#x60;renderMethod&#x60;.
+         * @param {RenderSuite} [suite] Use the first render method of this suite.
+         * @param {string} [mediaQuery] Use the first render method with exactly this &#x60;mediaQuery&#x60;.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        credentialRender(credentialId, walletId, index, suite, mediaQuery, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.credentialRender(credentialId, walletId, index, suite, mediaQuery, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.credentialRender']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Lists the render methods of a W3C VCDM credential of the wallet, for a client to pick one by its media query: media queries are not evaluated by the wallet.
+         * @param {string} credentialId Verifiable Credential Identifier
+         * @param {string} walletId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        credentialRenderMethods(credentialId, walletId, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.credentialRenderMethods(credentialId, walletId, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.credentialRenderMethods']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
         /**
          * Requests a credential issuance from the issuer and retrieves requirements for holder authorization.
          * @param {string} walletId
@@ -3620,16 +4231,17 @@ const DefaultApiFp = function (configuration) {
             });
         },
         /**
-         * Revoke a specific Verifiable Credential
+         * Revoke a specific Verifiable Credential. A credential published as a UNTP link stays published: a verifier following its link finds it and verifies it as revoked. `DELETE /untp/links/{service_id}` unpublishes it.
          * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialRevoke(credentialId, walletId, options) {
+        credentialRevoke(credentialId, walletId, idempotencyKey, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.credentialRevoke(credentialId, walletId, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.credentialRevoke(credentialId, walletId, idempotencyKey, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
                 const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.credentialRevoke']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -3699,128 +4311,96 @@ const DefaultApiFp = function (configuration) {
             });
         },
         /**
-         * Checks the health status of the service and its subsystems (database, storage, etc.). Used by load balancers and monitoring systems.
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        healthCheck(options) {
-            return __awaiter(this, void 0, void 0, function* () {
-                var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.healthCheck(options);
-                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.healthCheck']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
-                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-            });
-        },
-        /**
-         * Creates an authorized credential offer (deferred or instant) for holder-initiated credential request using provided parameters. The offer is an URL that the creator should provide to the client via a redirect, link, or QR code.
-         * @param {string} walletId
-         * @param {HolderAuthOfferCreationRequest} [holderAuthOfferCreationRequest]
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        holderCreateAuthOffer(walletId, holderAuthOfferCreationRequest, options) {
-            return __awaiter(this, void 0, void 0, function* () {
-                var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderCreateAuthOffer(walletId, holderAuthOfferCreationRequest, options);
-                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderCreateAuthOffer']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
-                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
-            });
-        },
-        /**
-         * Completes a credential presentation flow: submits the selected credentials to the verifier after the holder\'s explicit consent. The `interaction_id` is obtained from `HolderPresentPassAuthInfo`.
+         * Returns the wallet\'s own DID document, as published at `/{wallet_id}/did.json` for a self-hosted did:web.
          * @param {string} walletId
-         * @param {string} interactionId
-         * @param {InteractionAuthorizationConsent} [interactionAuthorizationConsent]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderCredentialsPresentAfterConsent(walletId, interactionId, interactionAuthorizationConsent, options) {
+        didDocumentLocalGet(walletId, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderCredentialsPresentAfterConsent(walletId, interactionId, interactionAuthorizationConsent, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.didDocumentLocalGet(walletId, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderCredentialsPresentAfterConsent']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.didDocumentLocalGet']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
         /**
-         * Responds to an ID token request
+         * Changes the wallet\'s DID document: removes the services in `removeServiceIds`, adds the services in `addServices` (a service with the same id is replaced), and, when `alsoKnownAs` is set, replaces the subject\'s other identifiers (an empty list removes them). UNTP identifies an entity\'s Digital Identity Anchor with a service of type `https://test.uncefact.org/vocabulary/link-type/dia` (`untp:dia` in UNTP 0.7) and registered identifiers with `alsoKnownAs`.  Only a self-hosted did:web document can be changed; services of an EBSI DID are written to the EBSI DID registry, which does not take `alsoKnownAs`.
          * @param {string} walletId
-         * @param {IdTokenSendRequest} [idTokenSendRequest]
+         * @param {DidDocumentPatch} didDocumentPatch
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderIdTokenSend(walletId, idTokenSendRequest, options) {
+        didDocumentPatch(walletId, didDocumentPatch, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderIdTokenSend(walletId, idTokenSendRequest, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.didDocumentPatch(walletId, didDocumentPatch, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderIdTokenSend']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.didDocumentPatch']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
         /**
-         * Creates a new public Linked VP of specified credentials and adds it to the wallet\'s DID document
-         * @param {string} walletId
-         * @param {LinkedVpCreateRequest} [linkedVpCreateRequest]
+         * Checks the health status of the service and its subsystems (database, storage, etc.). Used by load balancers and monitoring systems.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpCreate(walletId, linkedVpCreateRequest, options) {
+        healthCheck(options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderLinkedVpCreate(walletId, linkedVpCreateRequest, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.healthCheck(options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderLinkedVpCreate']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.healthCheck']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
         /**
-         * Deletes a linked VP
+         * Creates an authorized credential offer (deferred or instant) for holder-initiated credential request using provided parameters. The offer is an URL that the creator should provide to the client via a redirect, link, or QR code.
          * @param {string} walletId
-         * @param {string} linkedVpId
+         * @param {HolderAuthOfferCreationRequest} [holderAuthOfferCreationRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpDelete(walletId, linkedVpId, options) {
+        holderCreateAuthOffer(walletId, holderAuthOfferCreationRequest, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderLinkedVpDelete(walletId, linkedVpId, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderCreateAuthOffer(walletId, holderAuthOfferCreationRequest, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderLinkedVpDelete']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderCreateAuthOffer']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
         /**
-         * Returns metadata and content of a specific linked Verifiable Presentation, including the credentials it contains and its DID document service entry URL.
+         * Completes a credential presentation flow: submits the selected credentials to the verifier after the holder\'s explicit consent. The `interaction_id` is obtained from `HolderPresentPassAuthInfo`.
          * @param {string} walletId
-         * @param {string} linkedVpId
+         * @param {string} interactionId
+         * @param {InteractionAuthorizationConsent} [interactionAuthorizationConsent]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpGetDetails(walletId, linkedVpId, options) {
+        holderCredentialsPresentAfterConsent(walletId, interactionId, interactionAuthorizationConsent, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderLinkedVpGetDetails(walletId, linkedVpId, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderCredentialsPresentAfterConsent(walletId, interactionId, interactionAuthorizationConsent, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderLinkedVpGetDetails']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderCredentialsPresentAfterConsent']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
         /**
-         * Returns all linked Verifiable Presentations published in the wallet\'s DID document,
+         * Responds to an ID token request
          * @param {string} walletId
+         * @param {IdTokenSendRequest} [idTokenSendRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        holderLinkedVpList(walletId, options) {
+        holderIdTokenSend(walletId, idTokenSendRequest, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderLinkedVpList(walletId, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.holderIdTokenSend(walletId, idTokenSendRequest, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderLinkedVpList']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.holderIdTokenSend']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
@@ -3903,6 +4483,23 @@ const DefaultApiFp = function (configuration) {
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
+        /**
+         * Signs an opaque payload, such as an audit log entry, with the wallet\'s DID key, as a compact detached JWS with an unencoded payload (RFC 7515 Appendix F, RFC 7797: `b64: false`, `crit: [\"b64\"]`): `<protected header>..<signature>`. The signature is verified offline against the key in the wallet\'s DID document, with the payload put back. `typ` must be one the deployment allows, which no credential or presentation verifier accepts, so a signature from here never passes as a credential.
+         * @param {string} walletId
+         * @param {IssuerDetachedJwsSignRequest} issuerDetachedJwsSignRequest
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        issuerDetachedJwsSign(walletId, issuerDetachedJwsSignRequest, idempotencyKey, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.issuerDetachedJwsSign(walletId, issuerDetachedJwsSignRequest, idempotencyKey, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.issuerDetachedJwsSign']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
         /**
          * Generates an authorized credential offer URL for the holder to initiate the credential issuance flow. The resulting offer URL is typically presented as a QR code or deep link. If `wmpEntityId` is provided, the offer is delivered directly via WMP and 204 is returned.
          * @param {string} walletId
@@ -4018,6 +4615,69 @@ const DefaultApiFp = function (configuration) {
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
+        /**
+         * Creates a wallet for the caller from a pending enrollment, in the tenant. A state can be used once. A caller whose token names another tenant is refused.
+         * @param {string} tenantId
+         * @param {string} state The enrollment state from TenantEnrollmentInit.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentEnroll(tenantId, state, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.tenantEnrollmentEnroll(tenantId, state, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.tenantEnrollmentEnroll']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Prepares a wallet for the tenant and returns a one-time enrollment state. Whoever presents the state to POST /tenant/{tenant_id}/enrollment/{state} gets a wallet created from the payload, in the tenant. Only a Tenant Owner of the tenant may call it. The payload is validated now; a tenantId it carries is ignored. The state is returned only here: the wallet keeps only its hash, which is the enrollment id.
+         * @param {string} tenantId
+         * @param {EnrollmentInitPayload} enrollmentInitPayload
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentInit(tenantId, enrollmentInitPayload, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.tenantEnrollmentInit(tenantId, enrollmentInitPayload, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.tenantEnrollmentInit']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Lists the tenant\'s pending enrollments, oldest first. Only a Tenant Owner of the tenant may.
+         * @param {string} tenantId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentList(tenantId, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.tenantEnrollmentList(tenantId, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.tenantEnrollmentList']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Revokes a pending enrollment, so that its state no longer creates a wallet.
+         * @param {string} tenantId
+         * @param {string} enrollmentId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentRevoke(tenantId, enrollmentId, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.tenantEnrollmentRevoke(tenantId, enrollmentId, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.tenantEnrollmentRevoke']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
         /**
          * Accredits a legal entity as RTAO (Root Trust Anchor Organisation), TAO (Trust Anchor Organisation), or TI (Trusted Issuer) within the trust framework hierarchy by issuing the appropriate accreditation credential to their DID.
          * @param {string} walletId
@@ -4222,34 +4882,113 @@ const DefaultApiFp = function (configuration) {
             });
         },
         /**
-         * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
+         * Removes a UNTP link from the wallet\'s DID document and stops serving its credential.
          * @param {string} walletId
-         * @param {VerifyInitRequest} [verifyInitRequest]
+         * @param {string} serviceId The service id of the link, in full (&#x60;&lt;did&gt;#&lt;fragment&gt;&#x60;) or as its fragment.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        verifierInitUrlCreate(walletId, verifyInitRequest, options) {
+        untpLinkDelete(walletId, serviceId, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.verifierInitUrlCreate(walletId, verifyInitRequest, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.untpLinkDelete(walletId, serviceId, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.verifierInitUrlCreate']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.untpLinkDelete']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * The UNTP links the wallet\'s DID document advertises for its published credentials.
+         * @param {string} walletId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpLinkList(walletId, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.untpLinkList(walletId, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.untpLinkList']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Publishes an issued, valid W3C VCDM credential as a UNTP link: it is served at its public URL (`/api/v1/{wallet_id}/vc/{credential_id}`) and the wallet\'s DID document gets a service of the link type, whose endpoint is a link target to that URL. Publishing a credential again as the same link type returns the existing link. The wallet\'s DID document must be one it hosts (a self-hosted did:web, or an EBSI DID).
+         * @param {string} walletId
+         * @param {UntpLinkPublishRequest} untpLinkPublishRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpLinkPublish(walletId, untpLinkPublishRequest, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.untpLinkPublish(walletId, untpLinkPublishRequest, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.untpLinkPublish']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Lists the registrars the wallet trusts to issue Digital Identity Anchors, and whether the wallet\'s own DID is one of them.
+         * @param {string} walletId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpRegistryList(walletId, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.untpRegistryList(walletId, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.untpRegistryList']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Verifies a credential, given raw or by URL, with the wallet\'s trust framework, and reports each check: the signature (with the key the issuer\'s identifier resolves to), the validity dates, and, unless turned off, the JSON-LD document (W3C VCDM 2.0), the status, the schema and the issuer\'s trust. A credential that fails is still `200`, with `verified: false`; `code` reuses the error codes of `/verifier/untp/resolve`.  A `url` must be https, and is never fetched from a private, loopback or link-local address, so a localhost URL is refused too. It is fetched within 10 s, 5 MiB and 3 redirects on the same host, and only as a credential media type.
+         * @param {string} walletId
+         * @param {VerifierCredentialRequest} verifierCredentialRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierCredentialVerify(walletId, verifierCredentialRequest, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.verifierCredentialVerify(walletId, verifierCredentialRequest, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.verifierCredentialVerify']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Verifies whether the wallet\'s trust framework trusts a DID, beyond resolving its key.  A UNTP wallet requires a Digital Identity Anchor (UNTP 0.8.0, a profile of W3C Recognized Entities): the DID\'s DIA, found through its DID document\'s `https://test.uncefact.org/vocabulary/link-type/dia` service (or `untp:dia`), or a W3C `WhoisService`, is verified (signature, validity, status, the UNTP profile) and chained up, DIA by DIA, to a registrar the wallet trusts: its own (`UNTP.trustedRegistrars`), then the deployment\'s (`untp.dia.trustedRegistrars`, `untp.dia.registryUrl`). A registrar is itself trusted without a DIA. The details are in `untp`.  A DID that is not trusted is still `200`, with `trusted: false` and the reasons in `failures`. With `credentialType`, the issuer policy for that credential type is evaluated too. A wallet whose trust framework does not verify DIDs is `422`.
+         * @param {string} walletId
+         * @param {string} did The DID to verify.
+         * @param {string} [credentialType] Evaluate the issuer policy of this credential type, e.g. &#x60;DigitalProductPassport&#x60;.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierDidVerify(walletId, did, credentialType, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.verifierDidVerify(walletId, did, credentialType, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.verifierDidVerify']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
         /**
-         * Fetches linked presentations from DID document and verifies them.
+         * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
          * @param {string} walletId
-         * @param {string} did
+         * @param {VerifyInitRequest} [verifyInitRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        verifierLinkedVpVerify(walletId, did, options) {
+        verifierInitUrlCreate(walletId, verifyInitRequest, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.verifierLinkedVpVerify(walletId, did, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.verifierInitUrlCreate(walletId, verifyInitRequest, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
-                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.verifierLinkedVpVerify']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.verifierInitUrlCreate']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
@@ -4273,6 +5012,42 @@ const DefaultApiFp = function (configuration) {
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
             });
         },
+        /**
+         * Renders a credential for a human with one of its `renderMethod` entries: a UNTP `RenderTemplate2024` (Handlebars, the output in its `mediaType`: `text/html`, the default, or `text/plain`) or a W3C `TemplateRenderMethod` of the `html` suite (a wrapper document to show in an `iframe` with `sandbox=\"allow-scripts\"` and `srcdoc`) or the `card` suite (a JSON card). By default the first method that can be rendered is used.  A `signedVc` is verified (its signature, validity and status) before it is rendered, and `X-Credential-Verified` is `true`; one that fails is `422`. A `vc` is a credential document rendered as it is, with `X-Credential-Verified: false`.  A credential with no render method that matches, or a method that cannot be rendered (`nfc`, a template of another `mediaType`, or an unknown type), is `422` with `no render method` or `render suite unsupported`; an invalid one is `422` with `invalid render method`, a template that cannot be fetched or does not match its digest `render template unavailable`, and one that fails or runs too long `render failed`.  A remote template is fetched over https only, within 5 s and 1 MiB, and must match its `digestMultibase`. Rendering stops after 2 s or 1 MiB of output. A template that runs on past that still counts against the renderings the wallet runs at once (`render.maxConcurrent`); when none is free, the response is `503`.
+         * @param {string} walletId
+         * @param {VerifierRenderRequest} verifierRenderRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierRender(walletId, verifierRenderRequest, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.verifierRender(walletId, verifierRenderRequest, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.verifierRender']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
+        /**
+         * Resolves a DID into the RFC 9264 linkset of the UNTP links its DID document advertises and, with `fetch`, fetches the linked credentials and verifies them. A credential that fails is reported in `credentials` and `verification.failed`, with the response still 200: `verification.ok` is the verdict.
+         * @param {string} walletId
+         * @param {string} identifier The DID to resolve.
+         * @param {string} [linkType] The link types to fetch, comma separated (e.g. &#x60;dpp,dcc&#x60;), or &#x60;all&#x60; (the default). The linkset uses the UNTP 0.8.0 relations: &#x60;dpp&#x60;, &#x60;linkset&#x60; for an identity resolver, and &#x60;https://test.uncefact.org/vocabulary/link-type/&lt;type&gt;&#x60; for the others. A DID document\&#39;s UNTP 0.7 service types (&#x60;untp:dia&#x60;, bare &#x60;dcc&#x60;) are read as the same link types.
+         * @param {boolean} [fetch] Fetch and verify the linked credentials.
+         * @param {boolean} [verify] Verify the fetched credentials\&#39; dates, status and schema, besides their signature.
+         * @param {boolean} [verifyIssuer] Also verify whether the wallet\&#39;s trust framework trusts the DID, as &#x60;/verifier/did&#x60; does, and report it as &#x60;issuer&#x60;. A wallet whose trust framework does not verify DIDs reports no &#x60;issuer&#x60;, and is &#x60;422&#x60; when &#x60;verifyIssuer&#x60; is set explicitly. A UNTP wallet enforces the anchor on every signature anyway; this reports it.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierUntpResolve(walletId, identifier, linkType, fetch, verify, verifyIssuer, options) {
+            return __awaiter(this, void 0, void 0, function* () {
+                var _a, _b, _c;
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.verifierUntpResolve(walletId, identifier, linkType, fetch, verify, verifyIssuer, options);
+                const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
+                const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.verifierUntpResolve']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
+                return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+            });
+        },
         /**
          * Creates a new wallet for the authenticated client.
          * @param {WalletCreatePayload} [walletCreatePayload]
@@ -4352,13 +5127,14 @@ const DefaultApiFp = function (configuration) {
          * Provides list of wallets owned by the authenticated client, sorted by wallet name in byte order (Unicode code point order of the UTF-8 name, so upper case sorts before lower case). Wallets with the same name are in the order they were created.
          * @param {string} [ownerId]
          * @param {string} [searchName] Wallet name to search using \&quot;begins-with\&quot; filter
+         * @param {string} [tenantId] Lists the wallets of every owner in this tenant instead, each with its ownerId. Only a Tenant Owner of the tenant may set it, and not together with ownerId.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        walletList(ownerId, searchName, options) {
+        walletList(ownerId, searchName, tenantId, options) {
             return __awaiter(this, void 0, void 0, function* () {
                 var _a, _b, _c;
-                const localVarAxiosArgs = yield localVarAxiosParamCreator.walletList(ownerId, searchName, options);
+                const localVarAxiosArgs = yield localVarAxiosParamCreator.walletList(ownerId, searchName, tenantId, options);
                 const localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
                 const localVarOperationServerBasePath = (_c = (_b = base_1.operationServerMap['DefaultApi.walletList']) === null || _b === void 0 ? void 0 : _b[localVarOperationServerIndex]) === null || _c === void 0 ? void 0 : _c.url;
                 return (axios, basePath) => (0, common_1.createRequestFunction)(localVarAxiosArgs, axios_1.default, base_1.BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
@@ -4420,7 +5196,7 @@ const DefaultApiFp = function (configuration) {
             });
         },
         /**
-         * Update wallet metadata and configuration.
+         * Update wallet metadata and configuration.  The owner of the wallet patches its name, config and metadata; `config.tenant` is ignored for them. A Tenant Owner of the wallet\'s tenant patches `config.tenant.issuerProxyUrl`, also of wallets of other owners, and for those every other field of the body is ignored. `config.tenant.tenantId` never changes.
          * @param {string} walletId
          * @param {WalletPatchPayload} [walletPatchPayload]
          * @param {*} [options] Override http request option.
@@ -4821,6 +5597,18 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
         credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options) {
             return localVarFp.credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Issues a W3C VCDM draft as a credential of the wallet itself, with no holder and no OID4VCI: for a credential that is published rather than handed to anyone, such as a UNTP Digital Product Passport (EN 18246 Annex B.5). The credential gets the wallet\'s status list entry and envelope, and is stored issued on the same record. With `publish`, it is then published as a UNTP link, like `POST /untp/links`; if that fails the response is `502` with the issued `credentialId`, and publishing is retried with `POST /untp/links`.
+         * @param {string} credentialId Verifiable Credential Identifier
+         * @param {string} walletId
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
+         * @param {CredentialIssueDirectRequest} [credentialIssueDirectRequest]
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        credentialIssueDirect(credentialId, walletId, idempotencyKey, credentialIssueDirectRequest, options) {
+            return localVarFp.credentialIssueDirect(credentialId, walletId, idempotencyKey, credentialIssueDirectRequest, options).then((request) => request(axios, basePath));
+        },
         /**
          * Retrieves a list of credentials.
          * @param {string} walletId
@@ -4861,27 +5649,50 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
             return localVarFp.credentialPatch(credentialId, walletId, credentialPatchPayload, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns raw credential payload, with format depending on credential format.
+         * Returns raw credential payload, with format depending on credential format.
+         * @param {string} credentialId Verifiable Credential Identifier
+         * @param {string} walletId
+         * @param {CredentialPayloadGetFormEnum} [form] Form of the returned credential payload (supported only with JSON-LD credentials)
+         * @param {Array<string>} [contexts] JSON-LD contexts to apply to the credential (supported only with JSON-LD credentials). The base VC context is always applied. When omitted, all contexts of the credential are applied.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        credentialPayloadGet(credentialId, walletId, form, contexts, options) {
+            return localVarFp.credentialPayloadGet(credentialId, walletId, form, contexts, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Returns raw signed credential, with format depending on credential format: - SD-JWT VC: application/dc+sd-jwt - W3C VCDM: application/sd-jwt when it has selectively disclosable claims, application/jwt otherwise - mdoc: CBOR encoded DeviceResponse (application/cbor)
+         * @param {string} credentialId Verifiable Credential Identifier
+         * @param {string} walletId
+         * @param {Array<string>} [disclosedClaims] List of json paths of claims disclosed in the returned credential (returns all disclosures by default).
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        credentialRawGet(credentialId, walletId, disclosedClaims, options) {
+            return localVarFp.credentialRawGet(credentialId, walletId, disclosedClaims, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Renders a W3C VCDM credential of the wallet with one of its `renderMethod` entries, as `POST /verifier/render` does. HTML is served with a `Content-Security-Policy` that sandboxes it.
          * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
-         * @param {CredentialPayloadGetFormEnum} [form] Form of the returned credential payload (supported only with JSON-LD credentials)
-         * @param {Array<string>} [contexts] JSON-LD contexts to apply to the credential (supported only with JSON-LD credentials). The base VC context is always applied. When omitted, all contexts of the credential are applied.
+         * @param {number} [index] The index of the render method to use, in the credential\&#39;s &#x60;renderMethod&#x60;.
+         * @param {RenderSuite} [suite] Use the first render method of this suite.
+         * @param {string} [mediaQuery] Use the first render method with exactly this &#x60;mediaQuery&#x60;.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialPayloadGet(credentialId, walletId, form, contexts, options) {
-            return localVarFp.credentialPayloadGet(credentialId, walletId, form, contexts, options).then((request) => request(axios, basePath));
+        credentialRender(credentialId, walletId, index, suite, mediaQuery, options) {
+            return localVarFp.credentialRender(credentialId, walletId, index, suite, mediaQuery, options).then((request) => request(axios, basePath));
         },
         /**
-         * Returns raw signed credential, with format depending on credential format: - SD-JWT VC: application/dc+sd-jwt - W3C VCDM: application/sd-jwt when it has selectively disclosable claims, application/jwt otherwise - mdoc: CBOR encoded DeviceResponse (application/cbor)
+         * Lists the render methods of a W3C VCDM credential of the wallet, for a client to pick one by its media query: media queries are not evaluated by the wallet.
          * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
-         * @param {Array<string>} [disclosedClaims] List of json paths of claims disclosed in the returned credential (returns all disclosures by default).
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialRawGet(credentialId, walletId, disclosedClaims, options) {
-            return localVarFp.credentialRawGet(credentialId, walletId, disclosedClaims, options).then((request) => request(axios, basePath));
+        credentialRenderMethods(credentialId, walletId, options) {
+            return localVarFp.credentialRenderMethods(credentialId, walletId, options).then((request) => request(axios, basePath));
         },
         /**
          * Requests a credential issuance from the issuer and retrieves requirements for holder authorization.
@@ -4894,14 +5705,15 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
             return localVarFp.credentialRequestInit(walletId, credentialRequest, options).then((request) => request(axios, basePath));
         },
         /**
-         * Revoke a specific Verifiable Credential
+         * Revoke a specific Verifiable Credential. A credential published as a UNTP link stays published: a verifier following its link finds it and verifies it as revoked. `DELETE /untp/links/{service_id}` unpublishes it.
          * @param {string} credentialId Verifiable Credential Identifier
          * @param {string} walletId
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        credentialRevoke(credentialId, walletId, options) {
-            return localVarFp.credentialRevoke(credentialId, walletId, options).then((request) => request(axios, basePath));
+        credentialRevoke(credentialId, walletId, idempotencyKey, options) {
+            return localVarFp.credentialRevoke(credentialId, walletId, idempotencyKey, options).then((request) => request(axios, basePath));
         },
         /**
          * Suspend a Verifiable Credential issued with the `suspension` status purpose (W3C Bitstring Status List v1.0). A suspension can be lifted with `DELETE`.
@@ -4942,6 +5754,25 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
         didDocumentGet(walletId, options) {
             return localVarFp.didDocumentGet(walletId, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Returns the wallet\'s own DID document, as published at `/{wallet_id}/did.json` for a self-hosted did:web.
+         * @param {string} walletId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        didDocumentLocalGet(walletId, options) {
+            return localVarFp.didDocumentLocalGet(walletId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Changes the wallet\'s DID document: removes the services in `removeServiceIds`, adds the services in `addServices` (a service with the same id is replaced), and, when `alsoKnownAs` is set, replaces the subject\'s other identifiers (an empty list removes them). UNTP identifies an entity\'s Digital Identity Anchor with a service of type `https://test.uncefact.org/vocabulary/link-type/dia` (`untp:dia` in UNTP 0.7) and registered identifiers with `alsoKnownAs`.  Only a self-hosted did:web document can be changed; services of an EBSI DID are written to the EBSI DID registry, which does not take `alsoKnownAs`.
+         * @param {string} walletId
+         * @param {DidDocumentPatch} didDocumentPatch
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        didDocumentPatch(walletId, didDocumentPatch, options) {
+            return localVarFp.didDocumentPatch(walletId, didDocumentPatch, options).then((request) => request(axios, basePath));
+        },
         /**
          * Checks the health status of the service and its subsystems (database, storage, etc.). Used by load balancers and monitoring systems.
          * @param {*} [options] Override http request option.
@@ -4981,45 +5812,6 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
         holderIdTokenSend(walletId, idTokenSendRequest, options) {
             return localVarFp.holderIdTokenSend(walletId, idTokenSendRequest, options).then((request) => request(axios, basePath));
         },
-        /**
-         * Creates a new public Linked VP of specified credentials and adds it to the wallet\'s DID document
-         * @param {string} walletId
-         * @param {LinkedVpCreateRequest} [linkedVpCreateRequest]
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        holderLinkedVpCreate(walletId, linkedVpCreateRequest, options) {
-            return localVarFp.holderLinkedVpCreate(walletId, linkedVpCreateRequest, options).then((request) => request(axios, basePath));
-        },
-        /**
-         * Deletes a linked VP
-         * @param {string} walletId
-         * @param {string} linkedVpId
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        holderLinkedVpDelete(walletId, linkedVpId, options) {
-            return localVarFp.holderLinkedVpDelete(walletId, linkedVpId, options).then((request) => request(axios, basePath));
-        },
-        /**
-         * Returns metadata and content of a specific linked Verifiable Presentation, including the credentials it contains and its DID document service entry URL.
-         * @param {string} walletId
-         * @param {string} linkedVpId
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        holderLinkedVpGetDetails(walletId, linkedVpId, options) {
-            return localVarFp.holderLinkedVpGetDetails(walletId, linkedVpId, options).then((request) => request(axios, basePath));
-        },
-        /**
-         * Returns all linked Verifiable Presentations published in the wallet\'s DID document,
-         * @param {string} walletId
-         * @param {*} [options] Override http request option.
-         * @throws {RequiredError}
-         */
-        holderLinkedVpList(walletId, options) {
-            return localVarFp.holderLinkedVpList(walletId, options).then((request) => request(axios, basePath));
-        },
         /**
          * Processes a credential offer URL (received from an issuer via QR code, deep link, or WMP) and returns what authorization is required to accept it - pin, credential presentation or a redirect to custom authorization flow. holder needs to present to the issuer, along with matching candidates from the wallet. The returned `interactionId` is used in the subsequent `HolderOfferProcessAfterConsent` call.
          * @param {string} walletId
@@ -5069,6 +5861,17 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
         issuerCredentialTypesList(url, options) {
             return localVarFp.issuerCredentialTypesList(url, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Signs an opaque payload, such as an audit log entry, with the wallet\'s DID key, as a compact detached JWS with an unencoded payload (RFC 7515 Appendix F, RFC 7797: `b64: false`, `crit: [\"b64\"]`): `<protected header>..<signature>`. The signature is verified offline against the key in the wallet\'s DID document, with the payload put back. `typ` must be one the deployment allows, which no credential or presentation verifier accepts, so a signature from here never passes as a credential.
+         * @param {string} walletId
+         * @param {IssuerDetachedJwsSignRequest} issuerDetachedJwsSignRequest
+         * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        issuerDetachedJwsSign(walletId, issuerDetachedJwsSignRequest, idempotencyKey, options) {
+            return localVarFp.issuerDetachedJwsSign(walletId, issuerDetachedJwsSignRequest, idempotencyKey, options).then((request) => request(axios, basePath));
+        },
         /**
          * Generates an authorized credential offer URL for the holder to initiate the credential issuance flow. The resulting offer URL is typically presented as a QR code or deep link. If `wmpEntityId` is provided, the offer is delivered directly via WMP and 204 is returned.
          * @param {string} walletId
@@ -5142,6 +5945,45 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
         pdfCredentialTwinUpload(credentialId, walletId, pdf, options) {
             return localVarFp.pdfCredentialTwinUpload(credentialId, walletId, pdf, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Creates a wallet for the caller from a pending enrollment, in the tenant. A state can be used once. A caller whose token names another tenant is refused.
+         * @param {string} tenantId
+         * @param {string} state The enrollment state from TenantEnrollmentInit.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentEnroll(tenantId, state, options) {
+            return localVarFp.tenantEnrollmentEnroll(tenantId, state, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Prepares a wallet for the tenant and returns a one-time enrollment state. Whoever presents the state to POST /tenant/{tenant_id}/enrollment/{state} gets a wallet created from the payload, in the tenant. Only a Tenant Owner of the tenant may call it. The payload is validated now; a tenantId it carries is ignored. The state is returned only here: the wallet keeps only its hash, which is the enrollment id.
+         * @param {string} tenantId
+         * @param {EnrollmentInitPayload} enrollmentInitPayload
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentInit(tenantId, enrollmentInitPayload, options) {
+            return localVarFp.tenantEnrollmentInit(tenantId, enrollmentInitPayload, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Lists the tenant\'s pending enrollments, oldest first. Only a Tenant Owner of the tenant may.
+         * @param {string} tenantId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentList(tenantId, options) {
+            return localVarFp.tenantEnrollmentList(tenantId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Revokes a pending enrollment, so that its state no longer creates a wallet.
+         * @param {string} tenantId
+         * @param {string} enrollmentId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        tenantEnrollmentRevoke(tenantId, enrollmentId, options) {
+            return localVarFp.tenantEnrollmentRevoke(tenantId, enrollmentId, options).then((request) => request(axios, basePath));
+        },
         /**
          * Accredits a legal entity as RTAO (Root Trust Anchor Organisation), TAO (Trust Anchor Organisation), or TI (Trusted Issuer) within the trust framework hierarchy by issuing the appropriate accreditation credential to their DID.
          * @param {string} walletId
@@ -5268,24 +6110,73 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
             return localVarFp.trustListsGet(options).then((request) => request(axios, basePath));
         },
         /**
-         * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
+         * Removes a UNTP link from the wallet\'s DID document and stops serving its credential.
          * @param {string} walletId
-         * @param {VerifyInitRequest} [verifyInitRequest]
+         * @param {string} serviceId The service id of the link, in full (&#x60;&lt;did&gt;#&lt;fragment&gt;&#x60;) or as its fragment.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        verifierInitUrlCreate(walletId, verifyInitRequest, options) {
-            return localVarFp.verifierInitUrlCreate(walletId, verifyInitRequest, options).then((request) => request(axios, basePath));
+        untpLinkDelete(walletId, serviceId, options) {
+            return localVarFp.untpLinkDelete(walletId, serviceId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * The UNTP links the wallet\'s DID document advertises for its published credentials.
+         * @param {string} walletId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpLinkList(walletId, options) {
+            return localVarFp.untpLinkList(walletId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Publishes an issued, valid W3C VCDM credential as a UNTP link: it is served at its public URL (`/api/v1/{wallet_id}/vc/{credential_id}`) and the wallet\'s DID document gets a service of the link type, whose endpoint is a link target to that URL. Publishing a credential again as the same link type returns the existing link. The wallet\'s DID document must be one it hosts (a self-hosted did:web, or an EBSI DID).
+         * @param {string} walletId
+         * @param {UntpLinkPublishRequest} untpLinkPublishRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpLinkPublish(walletId, untpLinkPublishRequest, options) {
+            return localVarFp.untpLinkPublish(walletId, untpLinkPublishRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Lists the registrars the wallet trusts to issue Digital Identity Anchors, and whether the wallet\'s own DID is one of them.
+         * @param {string} walletId
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        untpRegistryList(walletId, options) {
+            return localVarFp.untpRegistryList(walletId, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Verifies a credential, given raw or by URL, with the wallet\'s trust framework, and reports each check: the signature (with the key the issuer\'s identifier resolves to), the validity dates, and, unless turned off, the JSON-LD document (W3C VCDM 2.0), the status, the schema and the issuer\'s trust. A credential that fails is still `200`, with `verified: false`; `code` reuses the error codes of `/verifier/untp/resolve`.  A `url` must be https, and is never fetched from a private, loopback or link-local address, so a localhost URL is refused too. It is fetched within 10 s, 5 MiB and 3 redirects on the same host, and only as a credential media type.
+         * @param {string} walletId
+         * @param {VerifierCredentialRequest} verifierCredentialRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierCredentialVerify(walletId, verifierCredentialRequest, options) {
+            return localVarFp.verifierCredentialVerify(walletId, verifierCredentialRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Verifies whether the wallet\'s trust framework trusts a DID, beyond resolving its key.  A UNTP wallet requires a Digital Identity Anchor (UNTP 0.8.0, a profile of W3C Recognized Entities): the DID\'s DIA, found through its DID document\'s `https://test.uncefact.org/vocabulary/link-type/dia` service (or `untp:dia`), or a W3C `WhoisService`, is verified (signature, validity, status, the UNTP profile) and chained up, DIA by DIA, to a registrar the wallet trusts: its own (`UNTP.trustedRegistrars`), then the deployment\'s (`untp.dia.trustedRegistrars`, `untp.dia.registryUrl`). A registrar is itself trusted without a DIA. The details are in `untp`.  A DID that is not trusted is still `200`, with `trusted: false` and the reasons in `failures`. With `credentialType`, the issuer policy for that credential type is evaluated too. A wallet whose trust framework does not verify DIDs is `422`.
+         * @param {string} walletId
+         * @param {string} did The DID to verify.
+         * @param {string} [credentialType] Evaluate the issuer policy of this credential type, e.g. &#x60;DigitalProductPassport&#x60;.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierDidVerify(walletId, did, credentialType, options) {
+            return localVarFp.verifierDidVerify(walletId, did, credentialType, options).then((request) => request(axios, basePath));
         },
         /**
-         * Fetches linked presentations from DID document and verifies them.
+         * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
          * @param {string} walletId
-         * @param {string} did
+         * @param {VerifyInitRequest} [verifyInitRequest]
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        verifierLinkedVpVerify(walletId, did, options) {
-            return localVarFp.verifierLinkedVpVerify(walletId, did, options).then((request) => request(axios, basePath));
+        verifierInitUrlCreate(walletId, verifyInitRequest, options) {
+            return localVarFp.verifierInitUrlCreate(walletId, verifyInitRequest, options).then((request) => request(axios, basePath));
         },
         /**
          * Verifies the signatures of uploaded PDF and extracts and verifies VP in the PDF document Maximum size of the PDF document is 50 MB.
@@ -5301,6 +6192,30 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
         verifierPdfVerify(walletId, extractVp, pdf, trustedCertificates, trustedListsUrl, trustedListSigningCertificates, options) {
             return localVarFp.verifierPdfVerify(walletId, extractVp, pdf, trustedCertificates, trustedListsUrl, trustedListSigningCertificates, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Renders a credential for a human with one of its `renderMethod` entries: a UNTP `RenderTemplate2024` (Handlebars, the output in its `mediaType`: `text/html`, the default, or `text/plain`) or a W3C `TemplateRenderMethod` of the `html` suite (a wrapper document to show in an `iframe` with `sandbox=\"allow-scripts\"` and `srcdoc`) or the `card` suite (a JSON card). By default the first method that can be rendered is used.  A `signedVc` is verified (its signature, validity and status) before it is rendered, and `X-Credential-Verified` is `true`; one that fails is `422`. A `vc` is a credential document rendered as it is, with `X-Credential-Verified: false`.  A credential with no render method that matches, or a method that cannot be rendered (`nfc`, a template of another `mediaType`, or an unknown type), is `422` with `no render method` or `render suite unsupported`; an invalid one is `422` with `invalid render method`, a template that cannot be fetched or does not match its digest `render template unavailable`, and one that fails or runs too long `render failed`.  A remote template is fetched over https only, within 5 s and 1 MiB, and must match its `digestMultibase`. Rendering stops after 2 s or 1 MiB of output. A template that runs on past that still counts against the renderings the wallet runs at once (`render.maxConcurrent`); when none is free, the response is `503`.
+         * @param {string} walletId
+         * @param {VerifierRenderRequest} verifierRenderRequest
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierRender(walletId, verifierRenderRequest, options) {
+            return localVarFp.verifierRender(walletId, verifierRenderRequest, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Resolves a DID into the RFC 9264 linkset of the UNTP links its DID document advertises and, with `fetch`, fetches the linked credentials and verifies them. A credential that fails is reported in `credentials` and `verification.failed`, with the response still 200: `verification.ok` is the verdict.
+         * @param {string} walletId
+         * @param {string} identifier The DID to resolve.
+         * @param {string} [linkType] The link types to fetch, comma separated (e.g. &#x60;dpp,dcc&#x60;), or &#x60;all&#x60; (the default). The linkset uses the UNTP 0.8.0 relations: &#x60;dpp&#x60;, &#x60;linkset&#x60; for an identity resolver, and &#x60;https://test.uncefact.org/vocabulary/link-type/&lt;type&gt;&#x60; for the others. A DID document\&#39;s UNTP 0.7 service types (&#x60;untp:dia&#x60;, bare &#x60;dcc&#x60;) are read as the same link types.
+         * @param {boolean} [fetch] Fetch and verify the linked credentials.
+         * @param {boolean} [verify] Verify the fetched credentials\&#39; dates, status and schema, besides their signature.
+         * @param {boolean} [verifyIssuer] Also verify whether the wallet\&#39;s trust framework trusts the DID, as &#x60;/verifier/did&#x60; does, and report it as &#x60;issuer&#x60;. A wallet whose trust framework does not verify DIDs reports no &#x60;issuer&#x60;, and is &#x60;422&#x60; when &#x60;verifyIssuer&#x60; is set explicitly. A UNTP wallet enforces the anchor on every signature anyway; this reports it.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        verifierUntpResolve(walletId, identifier, linkType, fetch, verify, verifyIssuer, options) {
+            return localVarFp.verifierUntpResolve(walletId, identifier, linkType, fetch, verify, verifyIssuer, options).then((request) => request(axios, basePath));
+        },
         /**
          * Creates a new wallet for the authenticated client.
          * @param {WalletCreatePayload} [walletCreatePayload]
@@ -5350,11 +6265,12 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
          * Provides list of wallets owned by the authenticated client, sorted by wallet name in byte order (Unicode code point order of the UTF-8 name, so upper case sorts before lower case). Wallets with the same name are in the order they were created.
          * @param {string} [ownerId]
          * @param {string} [searchName] Wallet name to search using \&quot;begins-with\&quot; filter
+         * @param {string} [tenantId] Lists the wallets of every owner in this tenant instead, each with its ownerId. Only a Tenant Owner of the tenant may set it, and not together with ownerId.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        walletList(ownerId, searchName, options) {
-            return localVarFp.walletList(ownerId, searchName, options).then((request) => request(axios, basePath));
+        walletList(ownerId, searchName, tenantId, options) {
+            return localVarFp.walletList(ownerId, searchName, tenantId, options).then((request) => request(axios, basePath));
         },
         /**
          * Gets a specific notification by state
@@ -5394,7 +6310,7 @@ const DefaultApiFactory = function (configuration, basePath, axios) {
             return localVarFp.walletNotifications(walletId, eventType, state, lastEventID, options).then((request) => request(axios, basePath));
         },
         /**
-         * Update wallet metadata and configuration.
+         * Update wallet metadata and configuration.  The owner of the wallet patches its name, config and metadata; `config.tenant` is ignored for them. A Tenant Owner of the wallet\'s tenant patches `config.tenant.issuerProxyUrl`, also of wallets of other owners, and for those every other field of the body is ignored. `config.tenant.tenantId` never changes.
          * @param {string} walletId
          * @param {WalletPatchPayload} [walletPatchPayload]
          * @param {*} [options] Override http request option.
@@ -5667,6 +6583,18 @@ class DefaultApi extends base_1.BaseAPI {
     credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options) {
         return (0, exports.DefaultApiFp)(this.configuration).credentialIssuanceInit(credentialId, walletId, credentialIssuanceInit, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Issues a W3C VCDM draft as a credential of the wallet itself, with no holder and no OID4VCI: for a credential that is published rather than handed to anyone, such as a UNTP Digital Product Passport (EN 18246 Annex B.5). The credential gets the wallet\'s status list entry and envelope, and is stored issued on the same record. With `publish`, it is then published as a UNTP link, like `POST /untp/links`; if that fails the response is `502` with the issued `credentialId`, and publishing is retried with `POST /untp/links`.
+     * @param {string} credentialId Verifiable Credential Identifier
+     * @param {string} walletId
+     * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
+     * @param {CredentialIssueDirectRequest} [credentialIssueDirectRequest]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    credentialIssueDirect(credentialId, walletId, idempotencyKey, credentialIssueDirectRequest, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).credentialIssueDirect(credentialId, walletId, idempotencyKey, credentialIssueDirectRequest, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Retrieves a list of credentials.
      * @param {string} walletId
@@ -5729,6 +6657,29 @@ class DefaultApi extends base_1.BaseAPI {
     credentialRawGet(credentialId, walletId, disclosedClaims, options) {
         return (0, exports.DefaultApiFp)(this.configuration).credentialRawGet(credentialId, walletId, disclosedClaims, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Renders a W3C VCDM credential of the wallet with one of its `renderMethod` entries, as `POST /verifier/render` does. HTML is served with a `Content-Security-Policy` that sandboxes it.
+     * @param {string} credentialId Verifiable Credential Identifier
+     * @param {string} walletId
+     * @param {number} [index] The index of the render method to use, in the credential\&#39;s &#x60;renderMethod&#x60;.
+     * @param {RenderSuite} [suite] Use the first render method of this suite.
+     * @param {string} [mediaQuery] Use the first render method with exactly this &#x60;mediaQuery&#x60;.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    credentialRender(credentialId, walletId, index, suite, mediaQuery, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).credentialRender(credentialId, walletId, index, suite, mediaQuery, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Lists the render methods of a W3C VCDM credential of the wallet, for a client to pick one by its media query: media queries are not evaluated by the wallet.
+     * @param {string} credentialId Verifiable Credential Identifier
+     * @param {string} walletId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    credentialRenderMethods(credentialId, walletId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).credentialRenderMethods(credentialId, walletId, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Requests a credential issuance from the issuer and retrieves requirements for holder authorization.
      * @param {string} walletId
@@ -5740,14 +6691,15 @@ class DefaultApi extends base_1.BaseAPI {
         return (0, exports.DefaultApiFp)(this.configuration).credentialRequestInit(walletId, credentialRequest, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * Revoke a specific Verifiable Credential
+     * Revoke a specific Verifiable Credential. A credential published as a UNTP link stays published: a verifier following its link finds it and verifies it as revoked. `DELETE /untp/links/{service_id}` unpublishes it.
      * @param {string} credentialId Verifiable Credential Identifier
      * @param {string} walletId
+     * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    credentialRevoke(credentialId, walletId, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).credentialRevoke(credentialId, walletId, options).then((request) => request(this.axios, this.basePath));
+    credentialRevoke(credentialId, walletId, idempotencyKey, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).credentialRevoke(credentialId, walletId, idempotencyKey, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * Suspend a Verifiable Credential issued with the `suspension` status purpose (W3C Bitstring Status List v1.0). A suspension can be lifted with `DELETE`.
@@ -5788,6 +6740,25 @@ class DefaultApi extends base_1.BaseAPI {
     didDocumentGet(walletId, options) {
         return (0, exports.DefaultApiFp)(this.configuration).didDocumentGet(walletId, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Returns the wallet\'s own DID document, as published at `/{wallet_id}/did.json` for a self-hosted did:web.
+     * @param {string} walletId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    didDocumentLocalGet(walletId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).didDocumentLocalGet(walletId, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Changes the wallet\'s DID document: removes the services in `removeServiceIds`, adds the services in `addServices` (a service with the same id is replaced), and, when `alsoKnownAs` is set, replaces the subject\'s other identifiers (an empty list removes them). UNTP identifies an entity\'s Digital Identity Anchor with a service of type `https://test.uncefact.org/vocabulary/link-type/dia` (`untp:dia` in UNTP 0.7) and registered identifiers with `alsoKnownAs`.  Only a self-hosted did:web document can be changed; services of an EBSI DID are written to the EBSI DID registry, which does not take `alsoKnownAs`.
+     * @param {string} walletId
+     * @param {DidDocumentPatch} didDocumentPatch
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    didDocumentPatch(walletId, didDocumentPatch, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).didDocumentPatch(walletId, didDocumentPatch, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Checks the health status of the service and its subsystems (database, storage, etc.). Used by load balancers and monitoring systems.
      * @param {*} [options] Override http request option.
@@ -5827,45 +6798,6 @@ class DefaultApi extends base_1.BaseAPI {
     holderIdTokenSend(walletId, idTokenSendRequest, options) {
         return (0, exports.DefaultApiFp)(this.configuration).holderIdTokenSend(walletId, idTokenSendRequest, options).then((request) => request(this.axios, this.basePath));
     }
-    /**
-     * Creates a new public Linked VP of specified credentials and adds it to the wallet\'s DID document
-     * @param {string} walletId
-     * @param {LinkedVpCreateRequest} [linkedVpCreateRequest]
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    holderLinkedVpCreate(walletId, linkedVpCreateRequest, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).holderLinkedVpCreate(walletId, linkedVpCreateRequest, options).then((request) => request(this.axios, this.basePath));
-    }
-    /**
-     * Deletes a linked VP
-     * @param {string} walletId
-     * @param {string} linkedVpId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    holderLinkedVpDelete(walletId, linkedVpId, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).holderLinkedVpDelete(walletId, linkedVpId, options).then((request) => request(this.axios, this.basePath));
-    }
-    /**
-     * Returns metadata and content of a specific linked Verifiable Presentation, including the credentials it contains and its DID document service entry URL.
-     * @param {string} walletId
-     * @param {string} linkedVpId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    holderLinkedVpGetDetails(walletId, linkedVpId, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).holderLinkedVpGetDetails(walletId, linkedVpId, options).then((request) => request(this.axios, this.basePath));
-    }
-    /**
-     * Returns all linked Verifiable Presentations published in the wallet\'s DID document,
-     * @param {string} walletId
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     */
-    holderLinkedVpList(walletId, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).holderLinkedVpList(walletId, options).then((request) => request(this.axios, this.basePath));
-    }
     /**
      * Processes a credential offer URL (received from an issuer via QR code, deep link, or WMP) and returns what authorization is required to accept it - pin, credential presentation or a redirect to custom authorization flow. holder needs to present to the issuer, along with matching candidates from the wallet. The returned `interactionId` is used in the subsequent `HolderOfferProcessAfterConsent` call.
      * @param {string} walletId
@@ -5915,6 +6847,17 @@ class DefaultApi extends base_1.BaseAPI {
     issuerCredentialTypesList(url, options) {
         return (0, exports.DefaultApiFp)(this.configuration).issuerCredentialTypesList(url, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Signs an opaque payload, such as an audit log entry, with the wallet\'s DID key, as a compact detached JWS with an unencoded payload (RFC 7515 Appendix F, RFC 7797: `b64: false`, `crit: [\"b64\"]`): `<protected header>..<signature>`. The signature is verified offline against the key in the wallet\'s DID document, with the payload put back. `typ` must be one the deployment allows, which no credential or presentation verifier accepts, so a signature from here never passes as a credential.
+     * @param {string} walletId
+     * @param {IssuerDetachedJwsSignRequest} issuerDetachedJwsSignRequest
+     * @param {string} [idempotencyKey] Makes a retry safe: a repeat with the same key, for the same wallet, gets the first response (with &#x60;Idempotent-Replayed: true&#x60;) for 24 hours. The same key with a different request is &#x60;422&#x60;. A &#x60;5xx&#x60; response is not kept: a retry runs the request again. A repeat while the first request runs, or after it completed without its response being kept, is &#x60;409&#x60;.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    issuerDetachedJwsSign(walletId, issuerDetachedJwsSignRequest, idempotencyKey, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).issuerDetachedJwsSign(walletId, issuerDetachedJwsSignRequest, idempotencyKey, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Generates an authorized credential offer URL for the holder to initiate the credential issuance flow. The resulting offer URL is typically presented as a QR code or deep link. If `wmpEntityId` is provided, the offer is delivered directly via WMP and 204 is returned.
      * @param {string} walletId
@@ -5988,6 +6931,45 @@ class DefaultApi extends base_1.BaseAPI {
     pdfCredentialTwinUpload(credentialId, walletId, pdf, options) {
         return (0, exports.DefaultApiFp)(this.configuration).pdfCredentialTwinUpload(credentialId, walletId, pdf, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Creates a wallet for the caller from a pending enrollment, in the tenant. A state can be used once. A caller whose token names another tenant is refused.
+     * @param {string} tenantId
+     * @param {string} state The enrollment state from TenantEnrollmentInit.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    tenantEnrollmentEnroll(tenantId, state, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).tenantEnrollmentEnroll(tenantId, state, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Prepares a wallet for the tenant and returns a one-time enrollment state. Whoever presents the state to POST /tenant/{tenant_id}/enrollment/{state} gets a wallet created from the payload, in the tenant. Only a Tenant Owner of the tenant may call it. The payload is validated now; a tenantId it carries is ignored. The state is returned only here: the wallet keeps only its hash, which is the enrollment id.
+     * @param {string} tenantId
+     * @param {EnrollmentInitPayload} enrollmentInitPayload
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    tenantEnrollmentInit(tenantId, enrollmentInitPayload, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).tenantEnrollmentInit(tenantId, enrollmentInitPayload, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Lists the tenant\'s pending enrollments, oldest first. Only a Tenant Owner of the tenant may.
+     * @param {string} tenantId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    tenantEnrollmentList(tenantId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).tenantEnrollmentList(tenantId, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Revokes a pending enrollment, so that its state no longer creates a wallet.
+     * @param {string} tenantId
+     * @param {string} enrollmentId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    tenantEnrollmentRevoke(tenantId, enrollmentId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).tenantEnrollmentRevoke(tenantId, enrollmentId, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Accredits a legal entity as RTAO (Root Trust Anchor Organisation), TAO (Trust Anchor Organisation), or TI (Trusted Issuer) within the trust framework hierarchy by issuing the appropriate accreditation credential to their DID.
      * @param {string} walletId
@@ -6114,24 +7096,73 @@ class DefaultApi extends base_1.BaseAPI {
         return (0, exports.DefaultApiFp)(this.configuration).trustListsGet(options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
+     * Removes a UNTP link from the wallet\'s DID document and stops serving its credential.
      * @param {string} walletId
-     * @param {VerifyInitRequest} [verifyInitRequest]
+     * @param {string} serviceId The service id of the link, in full (&#x60;&lt;did&gt;#&lt;fragment&gt;&#x60;) or as its fragment.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    verifierInitUrlCreate(walletId, verifyInitRequest, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).verifierInitUrlCreate(walletId, verifyInitRequest, options).then((request) => request(this.axios, this.basePath));
+    untpLinkDelete(walletId, serviceId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).untpLinkDelete(walletId, serviceId, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * The UNTP links the wallet\'s DID document advertises for its published credentials.
+     * @param {string} walletId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    untpLinkList(walletId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).untpLinkList(walletId, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Publishes an issued, valid W3C VCDM credential as a UNTP link: it is served at its public URL (`/api/v1/{wallet_id}/vc/{credential_id}`) and the wallet\'s DID document gets a service of the link type, whose endpoint is a link target to that URL. Publishing a credential again as the same link type returns the existing link. The wallet\'s DID document must be one it hosts (a self-hosted did:web, or an EBSI DID).
+     * @param {string} walletId
+     * @param {UntpLinkPublishRequest} untpLinkPublishRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    untpLinkPublish(walletId, untpLinkPublishRequest, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).untpLinkPublish(walletId, untpLinkPublishRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Lists the registrars the wallet trusts to issue Digital Identity Anchors, and whether the wallet\'s own DID is one of them.
+     * @param {string} walletId
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    untpRegistryList(walletId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).untpRegistryList(walletId, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Verifies a credential, given raw or by URL, with the wallet\'s trust framework, and reports each check: the signature (with the key the issuer\'s identifier resolves to), the validity dates, and, unless turned off, the JSON-LD document (W3C VCDM 2.0), the status, the schema and the issuer\'s trust. A credential that fails is still `200`, with `verified: false`; `code` reuses the error codes of `/verifier/untp/resolve`.  A `url` must be https, and is never fetched from a private, loopback or link-local address, so a localhost URL is refused too. It is fetched within 10 s, 5 MiB and 3 redirects on the same host, and only as a credential media type.
+     * @param {string} walletId
+     * @param {VerifierCredentialRequest} verifierCredentialRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    verifierCredentialVerify(walletId, verifierCredentialRequest, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).verifierCredentialVerify(walletId, verifierCredentialRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Verifies whether the wallet\'s trust framework trusts a DID, beyond resolving its key.  A UNTP wallet requires a Digital Identity Anchor (UNTP 0.8.0, a profile of W3C Recognized Entities): the DID\'s DIA, found through its DID document\'s `https://test.uncefact.org/vocabulary/link-type/dia` service (or `untp:dia`), or a W3C `WhoisService`, is verified (signature, validity, status, the UNTP profile) and chained up, DIA by DIA, to a registrar the wallet trusts: its own (`UNTP.trustedRegistrars`), then the deployment\'s (`untp.dia.trustedRegistrars`, `untp.dia.registryUrl`). A registrar is itself trusted without a DIA. The details are in `untp`.  A DID that is not trusted is still `200`, with `trusted: false` and the reasons in `failures`. With `credentialType`, the issuer policy for that credential type is evaluated too. A wallet whose trust framework does not verify DIDs is `422`.
+     * @param {string} walletId
+     * @param {string} did The DID to verify.
+     * @param {string} [credentialType] Evaluate the issuer policy of this credential type, e.g. &#x60;DigitalProductPassport&#x60;.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    verifierDidVerify(walletId, did, credentialType, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).verifierDidVerify(walletId, did, credentialType, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * Fetches linked presentations from DID document and verifies them.
+     * Creates a verification session and returns a URL where the verifier accepts credential presentations from a holder. The URL is typically shared as a QR code or deep link. After the holder presents credentials, use `WalletVerifiedCredentialsByState` with the returned `state` to retrieve the verification result.
      * @param {string} walletId
-     * @param {string} did
+     * @param {VerifyInitRequest} [verifyInitRequest]
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    verifierLinkedVpVerify(walletId, did, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).verifierLinkedVpVerify(walletId, did, options).then((request) => request(this.axios, this.basePath));
+    verifierInitUrlCreate(walletId, verifyInitRequest, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).verifierInitUrlCreate(walletId, verifyInitRequest, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * Verifies the signatures of uploaded PDF and extracts and verifies VP in the PDF document Maximum size of the PDF document is 50 MB.
@@ -6147,6 +7178,30 @@ class DefaultApi extends base_1.BaseAPI {
     verifierPdfVerify(walletId, extractVp, pdf, trustedCertificates, trustedListsUrl, trustedListSigningCertificates, options) {
         return (0, exports.DefaultApiFp)(this.configuration).verifierPdfVerify(walletId, extractVp, pdf, trustedCertificates, trustedListsUrl, trustedListSigningCertificates, options).then((request) => request(this.axios, this.basePath));
     }
+    /**
+     * Renders a credential for a human with one of its `renderMethod` entries: a UNTP `RenderTemplate2024` (Handlebars, the output in its `mediaType`: `text/html`, the default, or `text/plain`) or a W3C `TemplateRenderMethod` of the `html` suite (a wrapper document to show in an `iframe` with `sandbox=\"allow-scripts\"` and `srcdoc`) or the `card` suite (a JSON card). By default the first method that can be rendered is used.  A `signedVc` is verified (its signature, validity and status) before it is rendered, and `X-Credential-Verified` is `true`; one that fails is `422`. A `vc` is a credential document rendered as it is, with `X-Credential-Verified: false`.  A credential with no render method that matches, or a method that cannot be rendered (`nfc`, a template of another `mediaType`, or an unknown type), is `422` with `no render method` or `render suite unsupported`; an invalid one is `422` with `invalid render method`, a template that cannot be fetched or does not match its digest `render template unavailable`, and one that fails or runs too long `render failed`.  A remote template is fetched over https only, within 5 s and 1 MiB, and must match its `digestMultibase`. Rendering stops after 2 s or 1 MiB of output. A template that runs on past that still counts against the renderings the wallet runs at once (`render.maxConcurrent`); when none is free, the response is `503`.
+     * @param {string} walletId
+     * @param {VerifierRenderRequest} verifierRenderRequest
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    verifierRender(walletId, verifierRenderRequest, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).verifierRender(walletId, verifierRenderRequest, options).then((request) => request(this.axios, this.basePath));
+    }
+    /**
+     * Resolves a DID into the RFC 9264 linkset of the UNTP links its DID document advertises and, with `fetch`, fetches the linked credentials and verifies them. A credential that fails is reported in `credentials` and `verification.failed`, with the response still 200: `verification.ok` is the verdict.
+     * @param {string} walletId
+     * @param {string} identifier The DID to resolve.
+     * @param {string} [linkType] The link types to fetch, comma separated (e.g. &#x60;dpp,dcc&#x60;), or &#x60;all&#x60; (the default). The linkset uses the UNTP 0.8.0 relations: &#x60;dpp&#x60;, &#x60;linkset&#x60; for an identity resolver, and &#x60;https://test.uncefact.org/vocabulary/link-type/&lt;type&gt;&#x60; for the others. A DID document\&#39;s UNTP 0.7 service types (&#x60;untp:dia&#x60;, bare &#x60;dcc&#x60;) are read as the same link types.
+     * @param {boolean} [fetch] Fetch and verify the linked credentials.
+     * @param {boolean} [verify] Verify the fetched credentials\&#39; dates, status and schema, besides their signature.
+     * @param {boolean} [verifyIssuer] Also verify whether the wallet\&#39;s trust framework trusts the DID, as &#x60;/verifier/did&#x60; does, and report it as &#x60;issuer&#x60;. A wallet whose trust framework does not verify DIDs reports no &#x60;issuer&#x60;, and is &#x60;422&#x60; when &#x60;verifyIssuer&#x60; is set explicitly. A UNTP wallet enforces the anchor on every signature anyway; this reports it.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    verifierUntpResolve(walletId, identifier, linkType, fetch, verify, verifyIssuer, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).verifierUntpResolve(walletId, identifier, linkType, fetch, verify, verifyIssuer, options).then((request) => request(this.axios, this.basePath));
+    }
     /**
      * Creates a new wallet for the authenticated client.
      * @param {WalletCreatePayload} [walletCreatePayload]
@@ -6196,11 +7251,12 @@ class DefaultApi extends base_1.BaseAPI {
      * Provides list of wallets owned by the authenticated client, sorted by wallet name in byte order (Unicode code point order of the UTF-8 name, so upper case sorts before lower case). Wallets with the same name are in the order they were created.
      * @param {string} [ownerId]
      * @param {string} [searchName] Wallet name to search using \&quot;begins-with\&quot; filter
+     * @param {string} [tenantId] Lists the wallets of every owner in this tenant instead, each with its ownerId. Only a Tenant Owner of the tenant may set it, and not together with ownerId.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    walletList(ownerId, searchName, options) {
-        return (0, exports.DefaultApiFp)(this.configuration).walletList(ownerId, searchName, options).then((request) => request(this.axios, this.basePath));
+    walletList(ownerId, searchName, tenantId, options) {
+        return (0, exports.DefaultApiFp)(this.configuration).walletList(ownerId, searchName, tenantId, options).then((request) => request(this.axios, this.basePath));
     }
     /**
      * Gets a specific notification by state
@@ -6240,7 +7296,7 @@ class DefaultApi extends base_1.BaseAPI {
         return (0, exports.DefaultApiFp)(this.configuration).walletNotifications(walletId, eventType, state, lastEventID, options).then((request) => request(this.axios, this.basePath));
     }
     /**
-     * Update wallet metadata and configuration.
+     * Update wallet metadata and configuration.  The owner of the wallet patches its name, config and metadata; `config.tenant` is ignored for them. A Tenant Owner of the wallet\'s tenant patches `config.tenant.issuerProxyUrl`, also of wallets of other owners, and for those every other field of the body is ignored. `config.tenant.tenantId` never changes.
      * @param {string} walletId
      * @param {WalletPatchPayload} [walletPatchPayload]
      * @param {*} [options] Override http request option.