humanos 1.0.1

package/dist/index.js

@@ -0,0 +1,1526 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  API_VERSION: () => API_VERSION,
+  ActionType: () => ActionType,
+  Configuration: () => Configuration,
+  CreateSubjectEntityStatusEnum: () => CreateSubjectEntityStatusEnum,
+  CredentialEntityStatusEnum: () => CredentialEntityStatusEnum,
+  CredentialFullEntityStatusEnum: () => CredentialFullEntityStatusEnum,
+  CredentialStatus: () => CredentialStatus,
+  CredentialsApi: () => CredentialsApi,
+  CredentialsApiAxiosParamCreator: () => CredentialsApiAxiosParamCreator,
+  CredentialsApiFactory: () => CredentialsApiFactory,
+  CredentialsApiFp: () => CredentialsApiFp,
+  DeliveryActionType: () => DeliveryActionType,
+  GenerateRequestDtoSecurityLevelEnum: () => GenerateRequestDtoSecurityLevelEnum,
+  GetGroupsTypesEnum: () => GetGroupsTypesEnum,
+  GetRequestsSecurityLevelEnum: () => GetRequestsSecurityLevelEnum,
+  GetResourcesTypesEnum: () => GetResourcesTypesEnum,
+  GroupResourceEntityTypeEnum: () => GroupResourceEntityTypeEnum,
+  HumanosClient: () => HumanosClient,
+  IdentityFieldType: () => IdentityFieldType,
+  MandateDataDtoTypeEnum: () => MandateDataDtoTypeEnum,
+  MandateDataType: () => MandateDataType,
+  RequestDetailEntitySecurityLevelEnum: () => RequestDetailEntitySecurityLevelEnum,
+  RequestEntitySecurityLevelEnum: () => RequestEntitySecurityLevelEnum,
+  RequestQuerySecurityLevelEnum: () => RequestQuerySecurityLevelEnum,
+  RequestsApi: () => RequestsApi,
+  RequestsApiAxiosParamCreator: () => RequestsApiAxiosParamCreator,
+  RequestsApiFactory: () => RequestsApiFactory,
+  RequestsApiFp: () => RequestsApiFp,
+  ResourceApi: () => ResourceApi,
+  ResourceApiAxiosParamCreator: () => ResourceApiAxiosParamCreator,
+  ResourceApiFactory: () => ResourceApiFactory,
+  ResourceApiFp: () => ResourceApiFp,
+  ResourceEntityTypeEnum: () => ResourceEntityTypeEnum,
+  ResourceQueryTypesEnum: () => ResourceQueryTypesEnum,
+  SDK_LANGUAGE: () => SDK_LANGUAGE,
+  UserApi: () => UserApi,
+  UserApiAxiosParamCreator: () => UserApiAxiosParamCreator,
+  UserApiFactory: () => UserApiFactory,
+  UserApiFp: () => UserApiFp,
+  W3CProofActionTypeEnum: () => W3CProofActionTypeEnum,
+  WebhookEventType: () => WebhookEventType,
+  WebhookEventTypeCREDENTIAL: () => WebhookEventTypeCREDENTIAL,
+  WebhookEventTypeIDENTITY: () => WebhookEventTypeIDENTITY,
+  WebhookEventTypeOTPFAILED: () => WebhookEventTypeOTPFAILED,
+  WebhookEventTypeTEST: () => WebhookEventTypeTEST,
+  applySignatureInterceptor: () => applySignatureInterceptor,
+  createHumanosClient: () => createHumanosClient,
+  createSignatureInterceptor: () => createSignatureInterceptor,
+  createWebhookHandler: () => createWebhookHandler,
+  decryptWebhookPayload: () => decryptWebhookPayload,
+  generateSignature: () => generateSignature,
+  processWebhook: () => processWebhook,
+  verifyWebhookSignature: () => verifyWebhookSignature
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/client.ts
+var import_axios6 = __toESM(require("axios"));
+
+// generated/api/credentials-api.ts
+var import_axios2 = __toESM(require("axios"));
+
+// generated/base.ts
+var import_axios = __toESM(require("axios"));
+var BASE_PATH = "http://localhost".replace(/\/+$/, "");
+var BaseAPI = class {
+  constructor(configuration, basePath = BASE_PATH, axios2 = import_axios.default) {
+    this.basePath = basePath;
+    this.axios = axios2;
+    if (configuration) {
+      this.configuration = configuration;
+      this.basePath = configuration.basePath ?? basePath;
+    }
+  }
+};
+var RequiredError = class extends Error {
+  constructor(field, msg) {
+    super(msg);
+    this.field = field;
+    this.name = "RequiredError";
+  }
+};
+var operationServerMap = {};
+
+// generated/common.ts
+var DUMMY_BASE_URL = "https://example.com";
+var assertParamExists = function(functionName, paramName, paramValue) {
+  if (paramValue === null || paramValue === void 0) {
+    throw new RequiredError(paramName, `Required parameter ${paramName} was null or undefined when calling ${functionName}.`);
+  }
+};
+function setFlattenedQueryParams(urlSearchParams, parameter, key = "") {
+  if (parameter == null) return;
+  if (typeof parameter === "object") {
+    if (Array.isArray(parameter)) {
+      parameter.forEach((item) => setFlattenedQueryParams(urlSearchParams, item, key));
+    } else {
+      Object.keys(parameter).forEach(
+        (currentKey) => setFlattenedQueryParams(urlSearchParams, parameter[currentKey], `${key}${key !== "" ? "." : ""}${currentKey}`)
+      );
+    }
+  } else {
+    if (urlSearchParams.has(key)) {
+      urlSearchParams.append(key, parameter);
+    } else {
+      urlSearchParams.set(key, parameter);
+    }
+  }
+}
+var setSearchParams = function(url, ...objects) {
+  const searchParams = new URLSearchParams(url.search);
+  setFlattenedQueryParams(searchParams, objects);
+  url.search = searchParams.toString();
+};
+var serializeDataIfNeeded = function(value, requestOptions, configuration) {
+  const nonString = typeof value !== "string";
+  const needsSerialization = nonString && configuration && configuration.isJsonMime ? configuration.isJsonMime(requestOptions.headers["Content-Type"]) : nonString;
+  return needsSerialization ? JSON.stringify(value !== void 0 ? value : {}) : value || "";
+};
+var toPathString = function(url) {
+  return url.pathname + url.search + url.hash;
+};
+var createRequestFunction = function(axiosArgs, globalAxios6, BASE_PATH2, configuration) {
+  return (axios2 = globalAxios6, basePath = BASE_PATH2) => {
+    const axiosRequestArgs = { ...axiosArgs.options, url: (axios2.defaults.baseURL ? "" : configuration?.basePath ?? basePath) + axiosArgs.url };
+    return axios2.request(axiosRequestArgs);
+  };
+};
+
+// generated/api/credentials-api.ts
+var CredentialsApiAxiosParamCreator = function(configuration) {
+  return {
+    /**
+     * Retrieve a specific credential by its ID Returns the W3C Verifiable Credential data structure including cryptographic proofs Optionally includes the PDF content for document type credentials
+     * @summary Get Credential
+     * @param {string} credentialId Unique identifier of the credential. Must be a valid MongoDB ObjectId.
+     * @param {boolean} [includePdf] Whether to include the PDF content for document type credentials
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getCredential: async (credentialId, includePdf, aPIVersion, options = {}) => {
+      assertParamExists("getCredential", "credentialId", credentialId);
+      const localVarPath = `/credential/{credentialId}`.replace(`{${"credentialId"}}`, encodeURIComponent(String(credentialId)));
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "GET", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (includePdf !== void 0) {
+        localVarQueryParameter["includePdf"] = includePdf;
+      }
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    }
+  };
+};
+var CredentialsApiFp = function(configuration) {
+  const localVarAxiosParamCreator = CredentialsApiAxiosParamCreator(configuration);
+  return {
+    /**
+     * Retrieve a specific credential by its ID Returns the W3C Verifiable Credential data structure including cryptographic proofs Optionally includes the PDF content for document type credentials
+     * @summary Get Credential
+     * @param {string} credentialId Unique identifier of the credential. Must be a valid MongoDB ObjectId.
+     * @param {boolean} [includePdf] Whether to include the PDF content for document type credentials
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async getCredential(credentialId, includePdf, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.getCredential(credentialId, includePdf, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["CredentialsApi.getCredential"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios2.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    }
+  };
+};
+var CredentialsApiFactory = function(configuration, basePath, axios2) {
+  const localVarFp = CredentialsApiFp(configuration);
+  return {
+    /**
+     * Retrieve a specific credential by its ID Returns the W3C Verifiable Credential data structure including cryptographic proofs Optionally includes the PDF content for document type credentials
+     * @summary Get Credential
+     * @param {string} credentialId Unique identifier of the credential. Must be a valid MongoDB ObjectId.
+     * @param {boolean} [includePdf] Whether to include the PDF content for document type credentials
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getCredential(credentialId, includePdf, aPIVersion, options) {
+      return localVarFp.getCredential(credentialId, includePdf, aPIVersion, options).then((request) => request(axios2, basePath));
+    }
+  };
+};
+var CredentialsApi = class extends BaseAPI {
+  /**
+   * Retrieve a specific credential by its ID Returns the W3C Verifiable Credential data structure including cryptographic proofs Optionally includes the PDF content for document type credentials
+   * @summary Get Credential
+   * @param {string} credentialId Unique identifier of the credential. Must be a valid MongoDB ObjectId.
+   * @param {boolean} [includePdf] Whether to include the PDF content for document type credentials
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof CredentialsApi
+   */
+  getCredential(credentialId, includePdf, aPIVersion, options) {
+    return CredentialsApiFp(this.configuration).getCredential(credentialId, includePdf, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+};
+
+// generated/api/requests-api.ts
+var import_axios3 = __toESM(require("axios"));
+var RequestsApiAxiosParamCreator = function(configuration) {
+  return {
+    /**
+     * This action will cancel a credential request, by setting the canceledAt timestamp on the request.   This operation is irreversible, and will prevent the request from being processed further by the subjects
+     * @summary Cancel
+     * @param {string} requestId Unique identifier of the credential request to cancel. Must be a valid MongoDB ObjectId.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    cancelRequest: async (requestId, aPIVersion, options = {}) => {
+      assertParamExists("cancelRequest", "requestId", requestId);
+      const localVarPath = `/request/{requestId}`.replace(`{${"requestId"}}`, encodeURIComponent(String(requestId)));
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "DELETE", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    },
+    /**
+     * Create a new credential request for one or more subjects (users).      This endpoint will:   - Create credentials from resources or inline JSON data   - Associate credentials with subjects   - Generate and send OTPs for approval via email or SMS      Request details:   - Resources can be specified via group IDs, resource IDs, or as inline JSON credentials   - Maximum 30 credentials per request   - Maximum 20 contacts per request   - OTPs are automatically sent to all subjects after creation
+     * @summary Create
+     * @param {GenerateRequestDto} generateRequestDto Request body containing contacts (subjects), security level, and resources to create credentials from.   Resources can be specified via groupIds, resourcesIds, or inline credentials array.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    generate: async (generateRequestDto, aPIVersion, options = {}) => {
+      assertParamExists("generate", "generateRequestDto", generateRequestDto);
+      const localVarPath = `/request`;
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "POST", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      localVarHeaderParameter["Content-Type"] = "application/json";
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      localVarRequestOptions.data = serializeDataIfNeeded(generateRequestDto, localVarRequestOptions, configuration);
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    },
+    /**
+     * Retrieve detailed information about a specific credential request   This includes complete W3C Verifiable Credential data for each credential, subject information, agent details (if applicable), and issuer information   The credentials are returned in W3C-compliant format and can be cryptographically verified
+     * @summary Get Detail
+     * @param {string} requestId Unique identifier of the credential request. Must be a valid MongoDB ObjectId.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRequestDetail: async (requestId, aPIVersion, options = {}) => {
+      assertParamExists("getRequestDetail", "requestId", requestId);
+      const localVarPath = `/request/{requestId}`.replace(`{${"requestId"}}`, encodeURIComponent(String(requestId)));
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "GET", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    },
+    /**
+     * Retrieve a paginated list of credential requests for your organization   Each request includes information about the credentials, subjects (users), security level, and creation date.   One exact search query must be provided
+     * @summary Get
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [subjectInternalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [internalId] Filter by internal ID.
+     * @param {string} [credentialInternalId] Filter by credential internal ID.
+     * @param {Array<GetRequestsSecurityLevelEnum>} [securityLevel] Filter by security level. Can be a single value or array
+     * @param {string} [dateFrom] Filter from date (will be converted to start of day)
+     * @param {string} [dateTo] Filter to date (will be converted to end of day). Requires dateFrom.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRequests: async (pageIndex, pageSize, search, contact, did, subjectInternalId, internalId, credentialInternalId, securityLevel, dateFrom, dateTo, aPIVersion, options = {}) => {
+      const localVarPath = `/request`;
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "GET", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (pageIndex !== void 0) {
+        localVarQueryParameter["pageIndex"] = pageIndex;
+      }
+      if (pageSize !== void 0) {
+        localVarQueryParameter["pageSize"] = pageSize;
+      }
+      if (search !== void 0) {
+        localVarQueryParameter["search"] = search;
+      }
+      if (contact !== void 0) {
+        localVarQueryParameter["contact"] = contact;
+      }
+      if (did !== void 0) {
+        localVarQueryParameter["did"] = did;
+      }
+      if (subjectInternalId !== void 0) {
+        localVarQueryParameter["subjectInternalId"] = subjectInternalId;
+      }
+      if (internalId !== void 0) {
+        localVarQueryParameter["internalId"] = internalId;
+      }
+      if (credentialInternalId !== void 0) {
+        localVarQueryParameter["credentialInternalId"] = credentialInternalId;
+      }
+      if (securityLevel) {
+        localVarQueryParameter["securityLevel"] = securityLevel;
+      }
+      if (dateFrom !== void 0) {
+        localVarQueryParameter["dateFrom"] = dateFrom instanceof Date ? dateFrom.toISOString() : dateFrom;
+      }
+      if (dateTo !== void 0) {
+        localVarQueryParameter["dateTo"] = dateTo instanceof Date ? dateTo.toISOString() : dateTo;
+      }
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    },
+    /**
+     * Resend a One-Time Password (OTP) to a subject for credential approval,  via email or SMS (depending on their contact type) with a code and a signing URL   One exact search query must be provided      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * @summary Resend OTP
+     * @param {string} requestId Unique identifier of the  request.
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    resendOtp: async (requestId, contact, did, internalId, aPIVersion, options = {}) => {
+      assertParamExists("resendOtp", "requestId", requestId);
+      const localVarPath = `/request/resend/{requestId}`.replace(`{${"requestId"}}`, encodeURIComponent(String(requestId)));
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "PATCH", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (contact !== void 0) {
+        localVarQueryParameter["contact"] = contact;
+      }
+      if (did !== void 0) {
+        localVarQueryParameter["did"] = did;
+      }
+      if (internalId !== void 0) {
+        localVarQueryParameter["internalId"] = internalId;
+      }
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    }
+  };
+};
+var RequestsApiFp = function(configuration) {
+  const localVarAxiosParamCreator = RequestsApiAxiosParamCreator(configuration);
+  return {
+    /**
+     * This action will cancel a credential request, by setting the canceledAt timestamp on the request.   This operation is irreversible, and will prevent the request from being processed further by the subjects
+     * @summary Cancel
+     * @param {string} requestId Unique identifier of the credential request to cancel. Must be a valid MongoDB ObjectId.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async cancelRequest(requestId, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.cancelRequest(requestId, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["RequestsApi.cancelRequest"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios3.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    },
+    /**
+     * Create a new credential request for one or more subjects (users).      This endpoint will:   - Create credentials from resources or inline JSON data   - Associate credentials with subjects   - Generate and send OTPs for approval via email or SMS      Request details:   - Resources can be specified via group IDs, resource IDs, or as inline JSON credentials   - Maximum 30 credentials per request   - Maximum 20 contacts per request   - OTPs are automatically sent to all subjects after creation
+     * @summary Create
+     * @param {GenerateRequestDto} generateRequestDto Request body containing contacts (subjects), security level, and resources to create credentials from.   Resources can be specified via groupIds, resourcesIds, or inline credentials array.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async generate(generateRequestDto, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.generate(generateRequestDto, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["RequestsApi.generate"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios3.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    },
+    /**
+     * Retrieve detailed information about a specific credential request   This includes complete W3C Verifiable Credential data for each credential, subject information, agent details (if applicable), and issuer information   The credentials are returned in W3C-compliant format and can be cryptographically verified
+     * @summary Get Detail
+     * @param {string} requestId Unique identifier of the credential request. Must be a valid MongoDB ObjectId.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async getRequestDetail(requestId, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.getRequestDetail(requestId, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["RequestsApi.getRequestDetail"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios3.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    },
+    /**
+     * Retrieve a paginated list of credential requests for your organization   Each request includes information about the credentials, subjects (users), security level, and creation date.   One exact search query must be provided
+     * @summary Get
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [subjectInternalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [internalId] Filter by internal ID.
+     * @param {string} [credentialInternalId] Filter by credential internal ID.
+     * @param {Array<GetRequestsSecurityLevelEnum>} [securityLevel] Filter by security level. Can be a single value or array
+     * @param {string} [dateFrom] Filter from date (will be converted to start of day)
+     * @param {string} [dateTo] Filter to date (will be converted to end of day). Requires dateFrom.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async getRequests(pageIndex, pageSize, search, contact, did, subjectInternalId, internalId, credentialInternalId, securityLevel, dateFrom, dateTo, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.getRequests(pageIndex, pageSize, search, contact, did, subjectInternalId, internalId, credentialInternalId, securityLevel, dateFrom, dateTo, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["RequestsApi.getRequests"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios3.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    },
+    /**
+     * Resend a One-Time Password (OTP) to a subject for credential approval,  via email or SMS (depending on their contact type) with a code and a signing URL   One exact search query must be provided      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * @summary Resend OTP
+     * @param {string} requestId Unique identifier of the  request.
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async resendOtp(requestId, contact, did, internalId, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.resendOtp(requestId, contact, did, internalId, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["RequestsApi.resendOtp"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios3.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    }
+  };
+};
+var RequestsApiFactory = function(configuration, basePath, axios2) {
+  const localVarFp = RequestsApiFp(configuration);
+  return {
+    /**
+     * This action will cancel a credential request, by setting the canceledAt timestamp on the request.   This operation is irreversible, and will prevent the request from being processed further by the subjects
+     * @summary Cancel
+     * @param {string} requestId Unique identifier of the credential request to cancel. Must be a valid MongoDB ObjectId.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    cancelRequest(requestId, aPIVersion, options) {
+      return localVarFp.cancelRequest(requestId, aPIVersion, options).then((request) => request(axios2, basePath));
+    },
+    /**
+     * Create a new credential request for one or more subjects (users).      This endpoint will:   - Create credentials from resources or inline JSON data   - Associate credentials with subjects   - Generate and send OTPs for approval via email or SMS      Request details:   - Resources can be specified via group IDs, resource IDs, or as inline JSON credentials   - Maximum 30 credentials per request   - Maximum 20 contacts per request   - OTPs are automatically sent to all subjects after creation
+     * @summary Create
+     * @param {GenerateRequestDto} generateRequestDto Request body containing contacts (subjects), security level, and resources to create credentials from.   Resources can be specified via groupIds, resourcesIds, or inline credentials array.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    generate(generateRequestDto, aPIVersion, options) {
+      return localVarFp.generate(generateRequestDto, aPIVersion, options).then((request) => request(axios2, basePath));
+    },
+    /**
+     * Retrieve detailed information about a specific credential request   This includes complete W3C Verifiable Credential data for each credential, subject information, agent details (if applicable), and issuer information   The credentials are returned in W3C-compliant format and can be cryptographically verified
+     * @summary Get Detail
+     * @param {string} requestId Unique identifier of the credential request. Must be a valid MongoDB ObjectId.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRequestDetail(requestId, aPIVersion, options) {
+      return localVarFp.getRequestDetail(requestId, aPIVersion, options).then((request) => request(axios2, basePath));
+    },
+    /**
+     * Retrieve a paginated list of credential requests for your organization   Each request includes information about the credentials, subjects (users), security level, and creation date.   One exact search query must be provided
+     * @summary Get
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [subjectInternalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [internalId] Filter by internal ID.
+     * @param {string} [credentialInternalId] Filter by credential internal ID.
+     * @param {Array<GetRequestsSecurityLevelEnum>} [securityLevel] Filter by security level. Can be a single value or array
+     * @param {string} [dateFrom] Filter from date (will be converted to start of day)
+     * @param {string} [dateTo] Filter to date (will be converted to end of day). Requires dateFrom.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getRequests(pageIndex, pageSize, search, contact, did, subjectInternalId, internalId, credentialInternalId, securityLevel, dateFrom, dateTo, aPIVersion, options) {
+      return localVarFp.getRequests(pageIndex, pageSize, search, contact, did, subjectInternalId, internalId, credentialInternalId, securityLevel, dateFrom, dateTo, aPIVersion, options).then((request) => request(axios2, basePath));
+    },
+    /**
+     * Resend a One-Time Password (OTP) to a subject for credential approval,  via email or SMS (depending on their contact type) with a code and a signing URL   One exact search query must be provided      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * @summary Resend OTP
+     * @param {string} requestId Unique identifier of the  request.
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    resendOtp(requestId, contact, did, internalId, aPIVersion, options) {
+      return localVarFp.resendOtp(requestId, contact, did, internalId, aPIVersion, options).then((request) => request(axios2, basePath));
+    }
+  };
+};
+var RequestsApi = class extends BaseAPI {
+  /**
+   * This action will cancel a credential request, by setting the canceledAt timestamp on the request.   This operation is irreversible, and will prevent the request from being processed further by the subjects
+   * @summary Cancel
+   * @param {string} requestId Unique identifier of the credential request to cancel. Must be a valid MongoDB ObjectId.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof RequestsApi
+   */
+  cancelRequest(requestId, aPIVersion, options) {
+    return RequestsApiFp(this.configuration).cancelRequest(requestId, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+  /**
+   * Create a new credential request for one or more subjects (users).      This endpoint will:   - Create credentials from resources or inline JSON data   - Associate credentials with subjects   - Generate and send OTPs for approval via email or SMS      Request details:   - Resources can be specified via group IDs, resource IDs, or as inline JSON credentials   - Maximum 30 credentials per request   - Maximum 20 contacts per request   - OTPs are automatically sent to all subjects after creation
+   * @summary Create
+   * @param {GenerateRequestDto} generateRequestDto Request body containing contacts (subjects), security level, and resources to create credentials from.   Resources can be specified via groupIds, resourcesIds, or inline credentials array.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof RequestsApi
+   */
+  generate(generateRequestDto, aPIVersion, options) {
+    return RequestsApiFp(this.configuration).generate(generateRequestDto, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+  /**
+   * Retrieve detailed information about a specific credential request   This includes complete W3C Verifiable Credential data for each credential, subject information, agent details (if applicable), and issuer information   The credentials are returned in W3C-compliant format and can be cryptographically verified
+   * @summary Get Detail
+   * @param {string} requestId Unique identifier of the credential request. Must be a valid MongoDB ObjectId.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof RequestsApi
+   */
+  getRequestDetail(requestId, aPIVersion, options) {
+    return RequestsApiFp(this.configuration).getRequestDetail(requestId, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+  /**
+   * Retrieve a paginated list of credential requests for your organization   Each request includes information about the credentials, subjects (users), security level, and creation date.   One exact search query must be provided
+   * @summary Get
+   * @param {number} [pageIndex] Page number
+   * @param {number} [pageSize] Number of items per page
+   * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+   * @param {string} [contact] Contact value (email or phone)
+   * @param {string} [did] Public Decentralized Identifier (DID) of the user
+   * @param {string} [subjectInternalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+   * @param {string} [internalId] Filter by internal ID.
+   * @param {string} [credentialInternalId] Filter by credential internal ID.
+   * @param {Array<GetRequestsSecurityLevelEnum>} [securityLevel] Filter by security level. Can be a single value or array
+   * @param {string} [dateFrom] Filter from date (will be converted to start of day)
+   * @param {string} [dateTo] Filter to date (will be converted to end of day). Requires dateFrom.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof RequestsApi
+   */
+  getRequests(pageIndex, pageSize, search, contact, did, subjectInternalId, internalId, credentialInternalId, securityLevel, dateFrom, dateTo, aPIVersion, options) {
+    return RequestsApiFp(this.configuration).getRequests(pageIndex, pageSize, search, contact, did, subjectInternalId, internalId, credentialInternalId, securityLevel, dateFrom, dateTo, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+  /**
+   * Resend a One-Time Password (OTP) to a subject for credential approval,  via email or SMS (depending on their contact type) with a code and a signing URL   One exact search query must be provided      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+   * @summary Resend OTP
+   * @param {string} requestId Unique identifier of the  request.
+   * @param {string} [contact] Contact value (email or phone)
+   * @param {string} [did] Public Decentralized Identifier (DID) of the user
+   * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof RequestsApi
+   */
+  resendOtp(requestId, contact, did, internalId, aPIVersion, options) {
+    return RequestsApiFp(this.configuration).resendOtp(requestId, contact, did, internalId, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+};
+var GetRequestsSecurityLevelEnum = {
+  Contact: "CONTACT",
+  OrganizationKyc: "ORGANIZATION_KYC",
+  HumanosKyc: "HUMANOS_KYC",
+  HumanosRevalidation: "HUMANOS_REVALIDATION"
+};
+
+// generated/api/resource-api.ts
+var import_axios4 = __toESM(require("axios"));
+var ResourceApiAxiosParamCreator = function(configuration) {
+  return {
+    /**
+     * Retrieve information about the existing groups, including its resources, and the total number of pages.         Resource groups allow to pack resources together and easily request them.
+     * @summary Get Groups
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+     * @param {Array<GetGroupsTypesEnum>} [types] Filter by resource types. Can be a single value or array
+     * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getGroups: async (pageIndex, pageSize, search, active, types, internalId, aPIVersion, options = {}) => {
+      const localVarPath = `/resource/group`;
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "GET", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (pageIndex !== void 0) {
+        localVarQueryParameter["pageIndex"] = pageIndex;
+      }
+      if (pageSize !== void 0) {
+        localVarQueryParameter["pageSize"] = pageSize;
+      }
+      if (search !== void 0) {
+        localVarQueryParameter["search"] = search;
+      }
+      if (active !== void 0) {
+        localVarQueryParameter["active"] = active;
+      }
+      if (types) {
+        localVarQueryParameter["types"] = types;
+      }
+      if (internalId !== void 0) {
+        localVarQueryParameter["internalId"] = internalId;
+      }
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    },
+    /**
+     * Retrieve a paginated list of resources for your organization. Resources can be documents, consents, forms.
+     * @summary Get Resources
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+     * @param {Array<GetResourcesTypesEnum>} [types] Filter by resource types. Can be a single value or array
+     * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getResources: async (pageIndex, pageSize, search, active, types, internalId, aPIVersion, options = {}) => {
+      const localVarPath = `/resource`;
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "GET", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (pageIndex !== void 0) {
+        localVarQueryParameter["pageIndex"] = pageIndex;
+      }
+      if (pageSize !== void 0) {
+        localVarQueryParameter["pageSize"] = pageSize;
+      }
+      if (search !== void 0) {
+        localVarQueryParameter["search"] = search;
+      }
+      if (active !== void 0) {
+        localVarQueryParameter["active"] = active;
+      }
+      if (types) {
+        localVarQueryParameter["types"] = types;
+      }
+      if (internalId !== void 0) {
+        localVarQueryParameter["internalId"] = internalId;
+      }
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    }
+  };
+};
+var ResourceApiFp = function(configuration) {
+  const localVarAxiosParamCreator = ResourceApiAxiosParamCreator(configuration);
+  return {
+    /**
+     * Retrieve information about the existing groups, including its resources, and the total number of pages.         Resource groups allow to pack resources together and easily request them.
+     * @summary Get Groups
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+     * @param {Array<GetGroupsTypesEnum>} [types] Filter by resource types. Can be a single value or array
+     * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async getGroups(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.getGroups(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["ResourceApi.getGroups"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios4.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    },
+    /**
+     * Retrieve a paginated list of resources for your organization. Resources can be documents, consents, forms.
+     * @summary Get Resources
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+     * @param {Array<GetResourcesTypesEnum>} [types] Filter by resource types. Can be a single value or array
+     * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async getResources(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.getResources(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["ResourceApi.getResources"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios4.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    }
+  };
+};
+var ResourceApiFactory = function(configuration, basePath, axios2) {
+  const localVarFp = ResourceApiFp(configuration);
+  return {
+    /**
+     * Retrieve information about the existing groups, including its resources, and the total number of pages.         Resource groups allow to pack resources together and easily request them.
+     * @summary Get Groups
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+     * @param {Array<GetGroupsTypesEnum>} [types] Filter by resource types. Can be a single value or array
+     * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getGroups(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options) {
+      return localVarFp.getGroups(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options).then((request) => request(axios2, basePath));
+    },
+    /**
+     * Retrieve a paginated list of resources for your organization. Resources can be documents, consents, forms.
+     * @summary Get Resources
+     * @param {number} [pageIndex] Page number
+     * @param {number} [pageSize] Number of items per page
+     * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+     * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+     * @param {Array<GetResourcesTypesEnum>} [types] Filter by resource types. Can be a single value or array
+     * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getResources(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options) {
+      return localVarFp.getResources(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options).then((request) => request(axios2, basePath));
+    }
+  };
+};
+var ResourceApi = class extends BaseAPI {
+  /**
+   * Retrieve information about the existing groups, including its resources, and the total number of pages.         Resource groups allow to pack resources together and easily request them.
+   * @summary Get Groups
+   * @param {number} [pageIndex] Page number
+   * @param {number} [pageSize] Number of items per page
+   * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+   * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+   * @param {Array<GetGroupsTypesEnum>} [types] Filter by resource types. Can be a single value or array
+   * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof ResourceApi
+   */
+  getGroups(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options) {
+    return ResourceApiFp(this.configuration).getGroups(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+  /**
+   * Retrieve a paginated list of resources for your organization. Resources can be documents, consents, forms.
+   * @summary Get Resources
+   * @param {number} [pageIndex] Page number
+   * @param {number} [pageSize] Number of items per page
+   * @param {string} [search] Search query to filter by. Is case-insensitive and does not need to match the entire value.
+   * @param {boolean} [active] Filter by active status. Accepts true/false as string or boolean.
+   * @param {Array<GetResourcesTypesEnum>} [types] Filter by resource types. Can be a single value or array
+   * @param {string} [internalId] Identifier to help you identify the resource in your own system. We recommend using a unique value.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof ResourceApi
+   */
+  getResources(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options) {
+    return ResourceApiFp(this.configuration).getResources(pageIndex, pageSize, search, active, types, internalId, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+};
+var GetGroupsTypesEnum = {
+  Consent: "CONSENT",
+  Form: "FORM",
+  Document: "DOCUMENT",
+  Json: "JSON"
+};
+var GetResourcesTypesEnum = {
+  Consent: "CONSENT",
+  Form: "FORM",
+  Document: "DOCUMENT",
+  Json: "JSON"
+};
+
+// generated/api/user-api.ts
+var import_axios5 = __toESM(require("axios"));
+var UserApiAxiosParamCreator = function(configuration) {
+  return {
+    /**
+     * This endpoint allows organizations to import their existing users information into Humanos, for better management and control.      - Multiple users can be created in a call.   - A user can be created with just a contact (email or phone).   - Optionally, additional identity information (KYC) can be included.   - Optionally, organizations can attach an internal Id to allow mapping users within their database.
+     * @summary Create User
+     * @param {Array<CreateSubjectDto>} createSubjectDto Array of subjects to create. Each subject represents a user to be imported into Humanos
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    create: async (createSubjectDto, aPIVersion, options = {}) => {
+      assertParamExists("create", "createSubjectDto", createSubjectDto);
+      const localVarPath = `/user`;
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "POST", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      localVarHeaderParameter["Content-Type"] = "application/json";
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      localVarRequestOptions.data = serializeDataIfNeeded(createSubjectDto, localVarRequestOptions, configuration);
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    },
+    /**
+     * Retrieves detailed information about a user.   Can and must be searched by only one of the following: contact, did, or internalId
+     * @summary Get User
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getSubject: async (contact, did, internalId, aPIVersion, options = {}) => {
+      const localVarPath = `/user`;
+      const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+      let baseOptions;
+      if (configuration) {
+        baseOptions = configuration.baseOptions;
+      }
+      const localVarRequestOptions = { method: "GET", ...baseOptions, ...options };
+      const localVarHeaderParameter = {};
+      const localVarQueryParameter = {};
+      if (contact !== void 0) {
+        localVarQueryParameter["contact"] = contact;
+      }
+      if (did !== void 0) {
+        localVarQueryParameter["did"] = did;
+      }
+      if (internalId !== void 0) {
+        localVarQueryParameter["internalId"] = internalId;
+      }
+      if (aPIVersion != null) {
+        localVarHeaderParameter["API-Version"] = String(aPIVersion);
+      }
+      setSearchParams(localVarUrlObj, localVarQueryParameter);
+      let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+      localVarRequestOptions.headers = { ...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers };
+      return {
+        url: toPathString(localVarUrlObj),
+        options: localVarRequestOptions
+      };
+    }
+  };
+};
+var UserApiFp = function(configuration) {
+  const localVarAxiosParamCreator = UserApiAxiosParamCreator(configuration);
+  return {
+    /**
+     * This endpoint allows organizations to import their existing users information into Humanos, for better management and control.      - Multiple users can be created in a call.   - A user can be created with just a contact (email or phone).   - Optionally, additional identity information (KYC) can be included.   - Optionally, organizations can attach an internal Id to allow mapping users within their database.
+     * @summary Create User
+     * @param {Array<CreateSubjectDto>} createSubjectDto Array of subjects to create. Each subject represents a user to be imported into Humanos
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async create(createSubjectDto, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.create(createSubjectDto, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["UserApi.create"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios5.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    },
+    /**
+     * Retrieves detailed information about a user.   Can and must be searched by only one of the following: contact, did, or internalId
+     * @summary Get User
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    async getSubject(contact, did, internalId, aPIVersion, options) {
+      const localVarAxiosArgs = await localVarAxiosParamCreator.getSubject(contact, did, internalId, aPIVersion, options);
+      const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+      const localVarOperationServerBasePath = operationServerMap["UserApi.getSubject"]?.[localVarOperationServerIndex]?.url;
+      return (axios2, basePath) => createRequestFunction(localVarAxiosArgs, import_axios5.default, BASE_PATH, configuration)(axios2, localVarOperationServerBasePath || basePath);
+    }
+  };
+};
+var UserApiFactory = function(configuration, basePath, axios2) {
+  const localVarFp = UserApiFp(configuration);
+  return {
+    /**
+     * This endpoint allows organizations to import their existing users information into Humanos, for better management and control.      - Multiple users can be created in a call.   - A user can be created with just a contact (email or phone).   - Optionally, additional identity information (KYC) can be included.   - Optionally, organizations can attach an internal Id to allow mapping users within their database.
+     * @summary Create User
+     * @param {Array<CreateSubjectDto>} createSubjectDto Array of subjects to create. Each subject represents a user to be imported into Humanos
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    create(createSubjectDto, aPIVersion, options) {
+      return localVarFp.create(createSubjectDto, aPIVersion, options).then((request) => request(axios2, basePath));
+    },
+    /**
+     * Retrieves detailed information about a user.   Can and must be searched by only one of the following: contact, did, or internalId
+     * @summary Get User
+     * @param {string} [contact] Contact value (email or phone)
+     * @param {string} [did] Public Decentralized Identifier (DID) of the user
+     * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+     * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     */
+    getSubject(contact, did, internalId, aPIVersion, options) {
+      return localVarFp.getSubject(contact, did, internalId, aPIVersion, options).then((request) => request(axios2, basePath));
+    }
+  };
+};
+var UserApi = class extends BaseAPI {
+  /**
+   * This endpoint allows organizations to import their existing users information into Humanos, for better management and control.      - Multiple users can be created in a call.   - A user can be created with just a contact (email or phone).   - Optionally, additional identity information (KYC) can be included.   - Optionally, organizations can attach an internal Id to allow mapping users within their database.
+   * @summary Create User
+   * @param {Array<CreateSubjectDto>} createSubjectDto Array of subjects to create. Each subject represents a user to be imported into Humanos
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof UserApi
+   */
+  create(createSubjectDto, aPIVersion, options) {
+    return UserApiFp(this.configuration).create(createSubjectDto, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+  /**
+   * Retrieves detailed information about a user.   Can and must be searched by only one of the following: contact, did, or internalId
+   * @summary Get User
+   * @param {string} [contact] Contact value (email or phone)
+   * @param {string} [did] Public Decentralized Identifier (DID) of the user
+   * @param {string} [internalId] Identifier to help you identify the user in your own system. We recommend using a unique value.
+   * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
+   * @param {*} [options] Override http request option.
+   * @throws {RequiredError}
+   * @memberof UserApi
+   */
+  getSubject(contact, did, internalId, aPIVersion, options) {
+    return UserApiFp(this.configuration).getSubject(contact, did, internalId, aPIVersion, options).then((request) => request(this.axios, this.basePath));
+  }
+};
+
+// generated/configuration.ts
+var Configuration = class {
+  constructor(param = {}) {
+    this.apiKey = param.apiKey;
+    this.username = param.username;
+    this.password = param.password;
+    this.accessToken = param.accessToken;
+    this.basePath = param.basePath;
+    this.serverIndex = param.serverIndex;
+    this.baseOptions = param.baseOptions;
+    this.formDataCtor = param.formDataCtor;
+  }
+  /**
+   * Check if the given MIME is a JSON MIME.
+   * JSON MIME examples:
+   *   application/json
+   *   application/json; charset=UTF8
+   *   APPLICATION/JSON
+   *   application/vnd.company+json
+   * @param mime - MIME (Multipurpose Internet Mail Extensions)
+   * @return True if the given MIME is JSON, false otherwise.
+   */
+  isJsonMime(mime) {
+    const jsonMime = new RegExp("^(application/json|[^;/ 	]+/[^;/ 	]+[+]json)[ 	]*(;.*)?$", "i");
+    return mime !== null && (jsonMime.test(mime) || mime.toLowerCase() === "application/json-patch+json");
+  }
+};
+
+// generated/models/action-type.ts
+var ActionType = {
+  Issue: "ISSUE",
+  Accept: "ACCEPT",
+  Reject: "REJECT",
+  Revoke: "REVOKE"
+};
+
+// generated/models/create-subject-entity.ts
+var CreateSubjectEntityStatusEnum = {
+  NUMBER_200: 200,
+  NUMBER_201: 201,
+  NUMBER_400: 400,
+  NUMBER_402: 402,
+  NUMBER_407: 407,
+  NUMBER_408: 408,
+  NUMBER_409: 409,
+  NUMBER_410: 410
+};
+
+// generated/models/credential-entity.ts
+var CredentialEntityStatusEnum = {
+  Pending: "PENDING",
+  Approved: "APPROVED",
+  Rejected: "REJECTED",
+  Revoked: "REVOKED"
+};
+
+// generated/models/credential-full-entity.ts
+var CredentialFullEntityStatusEnum = {
+  Pending: "PENDING",
+  Approved: "APPROVED",
+  Rejected: "REJECTED",
+  Revoked: "REVOKED"
+};
+
+// generated/models/credential-status.ts
+var CredentialStatus = {
+  Pending: "PENDING",
+  Approved: "APPROVED",
+  Rejected: "REJECTED",
+  Revoked: "REVOKED"
+};
+
+// generated/models/delivery-action-type.ts
+var DeliveryActionType = {
+  Accept: "accept",
+  Reject: "reject"
+};
+
+// generated/models/generate-request-dto.ts
+var GenerateRequestDtoSecurityLevelEnum = {
+  Contact: "CONTACT",
+  OrganizationKyc: "ORGANIZATION_KYC",
+  HumanosKyc: "HUMANOS_KYC",
+  HumanosRevalidation: "HUMANOS_REVALIDATION"
+};
+
+// generated/models/group-resource-entity.ts
+var GroupResourceEntityTypeEnum = {
+  Consent: "CONSENT",
+  Form: "FORM",
+  Document: "DOCUMENT",
+  Json: "JSON"
+};
+
+// generated/models/identity-field-type.ts
+var IdentityFieldType = {
+  FullName: "FULL_NAME",
+  Birth: "BIRTH",
+  HealthNumber: "HEALTH_NUMBER",
+  TaxNumber: "TAX_NUMBER",
+  DocId: "DOC_ID",
+  CountryAlpha3: "COUNTRY_ALPHA3",
+  SocialSecurityNumber: "SOCIAL_SECURITY_NUMBER",
+  Email: "EMAIL",
+  Phone: "PHONE"
+};
+
+// generated/models/mandate-data-dto.ts
+var MandateDataDtoTypeEnum = {
+  String: "string",
+  Number: "number",
+  Boolean: "boolean",
+  Object: "object",
+  Array: "array",
+  Date: "date",
+  Pdf: "pdf",
+  Url: "url"
+};
+
+// generated/models/mandate-data-type.ts
+var MandateDataType = {
+  String: "string",
+  Number: "number",
+  Boolean: "boolean",
+  Object: "object",
+  Array: "array",
+  Date: "date",
+  Pdf: "pdf",
+  Url: "url"
+};
+
+// generated/models/request-detail-entity.ts
+var RequestDetailEntitySecurityLevelEnum = {
+  Contact: "CONTACT",
+  OrganizationKyc: "ORGANIZATION_KYC",
+  HumanosKyc: "HUMANOS_KYC",
+  HumanosRevalidation: "HUMANOS_REVALIDATION"
+};
+
+// generated/models/request-entity.ts
+var RequestEntitySecurityLevelEnum = {
+  Contact: "CONTACT",
+  OrganizationKyc: "ORGANIZATION_KYC",
+  HumanosKyc: "HUMANOS_KYC",
+  HumanosRevalidation: "HUMANOS_REVALIDATION"
+};
+
+// generated/models/request-query.ts
+var RequestQuerySecurityLevelEnum = {
+  Contact: "CONTACT",
+  OrganizationKyc: "ORGANIZATION_KYC",
+  HumanosKyc: "HUMANOS_KYC",
+  HumanosRevalidation: "HUMANOS_REVALIDATION"
+};
+
+// generated/models/resource-entity.ts
+var ResourceEntityTypeEnum = {
+  Consent: "CONSENT",
+  Form: "FORM",
+  Document: "DOCUMENT",
+  Json: "JSON"
+};
+
+// generated/models/resource-query.ts
+var ResourceQueryTypesEnum = {
+  Consent: "CONSENT",
+  Form: "FORM",
+  Document: "DOCUMENT",
+  Json: "JSON"
+};
+
+// generated/models/w3-cproof.ts
+var W3CProofActionTypeEnum = {
+  Issue: "ISSUE",
+  Accept: "ACCEPT",
+  Reject: "REJECT",
+  Revoke: "REVOKE"
+};
+
+// generated/models/webhook-event-type.ts
+var WebhookEventType = {
+  Credential: "credential",
+  Identity: "identity",
+  OtpFailed: "otp.failed",
+  Test: "test"
+};
+
+// generated/models/webhook-event-type-credential.ts
+var WebhookEventTypeCREDENTIAL = {
+  Credential: "credential"
+};
+
+// generated/models/webhook-event-type-identity.ts
+var WebhookEventTypeIDENTITY = {
+  Identity: "identity"
+};
+
+// generated/models/webhook-event-type-otpfailed.ts
+var WebhookEventTypeOTPFAILED = {
+  OtpFailed: "otp.failed"
+};
+
+// generated/models/webhook-event-type-test.ts
+var WebhookEventTypeTEST = {
+  Test: "test"
+};
+
+// src/signature.ts
+var import_crypto = __toESM(require("crypto"));
+function generateSignature(body, signatureSecret, timestamp) {
+  const hmac = import_crypto.default.createHmac("sha256", signatureSecret);
+  let bodyString = "";
+  if (body !== void 0 && body !== null) {
+    const stringified = typeof body === "string" ? body : JSON.stringify(body);
+    bodyString = stringified === "{}" ? "" : stringified;
+  }
+  const toSign = bodyString ? `${timestamp}.${bodyString}` : timestamp.toString();
+  hmac.update(toSign);
+  return hmac.digest("hex");
+}
+function createSignatureInterceptor(signatureSecret) {
+  return (config) => {
+    const timestamp = Date.now();
+    const signature = generateSignature(
+      config.data,
+      signatureSecret,
+      timestamp
+    );
+    config.headers = config.headers || {};
+    config.headers["X-Timestamp"] = timestamp.toString();
+    config.headers["X-Signature"] = signature;
+    return config;
+  };
+}
+function applySignatureInterceptor(axiosInstance, signatureSecret) {
+  axiosInstance.interceptors.request.use(
+    createSignatureInterceptor(signatureSecret)
+  );
+}
+
+// src/client.ts
+var API_VERSION = "2026-03-24";
+var SDK_LANGUAGE = "typescript";
+var HumanosClient = class {
+  constructor(clientConfig) {
+    const { basePath, apiKey, signatureSecret, axiosConfig } = clientConfig;
+    this.axios = import_axios6.default.create({
+      baseURL: basePath,
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        "Content-Type": "application/json",
+        "api-version": API_VERSION,
+        "X-SDK-Language": SDK_LANGUAGE
+      },
+      ...axiosConfig
+    });
+    applySignatureInterceptor(this.axios, signatureSecret);
+    this.config = new Configuration({
+      basePath,
+      accessToken: apiKey
+    });
+    this.requests = new RequestsApi(this.config, basePath, this.axios);
+    this.resources = new ResourceApi(this.config, basePath, this.axios);
+    this.users = new UserApi(this.config, basePath, this.axios);
+  }
+};
+function createHumanosClient(config) {
+  return new HumanosClient(config);
+}
+
+// src/webhooks.ts
+var import_crypto2 = __toESM(require("crypto"));
+function verifyWebhookSignature(payload, signature, timestamp, signatureSecret, toleranceMs = 5 * 60 * 1e3) {
+  const now = Date.now();
+  if (Math.abs(now - timestamp) > toleranceMs) {
+    return false;
+  }
+  const hmac = import_crypto2.default.createHmac("sha256", signatureSecret);
+  hmac.update(payload ? `${timestamp}.${payload}` : timestamp.toString());
+  const expectedSignature = hmac.digest("hex");
+  try {
+    return import_crypto2.default.timingSafeEqual(
+      Buffer.from(signature),
+      Buffer.from(expectedSignature)
+    );
+  } catch {
+    return false;
+  }
+}
+function decryptWebhookPayload(encryptedPayload, encryptionSecret, encryptionSalt) {
+  const { iv, data, tag } = encryptedPayload;
+  const key = import_crypto2.default.pbkdf2Sync(
+    Buffer.from(encryptionSecret, "base64"),
+    encryptionSalt,
+    1e4,
+    32,
+    "sha256"
+  );
+  const decipher = import_crypto2.default.createDecipheriv(
+    "aes-256-gcm",
+    key,
+    Buffer.from(iv, "base64")
+  );
+  decipher.setAuthTag(Buffer.from(tag, "base64"));
+  const decrypted = Buffer.concat([
+    decipher.update(Buffer.from(data, "base64")),
+    decipher.final()
+  ]).toString("utf8");
+  return JSON.parse(decrypted);
+}
+function processWebhook(rawBody, headers, config) {
+  const signature = headers["x-signature"];
+  const timestamp = parseInt(headers["x-timestamp"], 10);
+  if (!signature || !timestamp) {
+    throw new Error(
+      "Missing required webhook headers: x-signature or x-timestamp"
+    );
+  }
+  const isValid = verifyWebhookSignature(
+    rawBody,
+    signature,
+    timestamp,
+    config.signatureSecret,
+    config.toleranceMs
+  );
+  if (!isValid) {
+    throw new Error("Invalid webhook signature");
+  }
+  const encryptedPayload = JSON.parse(rawBody);
+  return decryptWebhookPayload(
+    encryptedPayload,
+    config.encryptionSecret,
+    config.encryptionSalt
+  );
+}
+function createWebhookHandler(config, handler) {
+  return async (req, res) => {
+    try {
+      const rawBody = typeof req.body === "string" ? req.body : JSON.stringify(req.body);
+      const payload = processWebhook(rawBody, req.headers, config);
+      await handler(payload);
+      res.sendStatus(200);
+    } catch (error) {
+      console.error("Webhook processing error:", error);
+      if (error instanceof Error && error.message.includes("signature")) {
+        res.status(401).send("Invalid signature");
+      } else {
+        res.status(500).send("Webhook processing failed");
+      }
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  API_VERSION,
+  ActionType,
+  Configuration,
+  CreateSubjectEntityStatusEnum,
+  CredentialEntityStatusEnum,
+  CredentialFullEntityStatusEnum,
+  CredentialStatus,
+  CredentialsApi,
+  CredentialsApiAxiosParamCreator,
+  CredentialsApiFactory,
+  CredentialsApiFp,
+  DeliveryActionType,
+  GenerateRequestDtoSecurityLevelEnum,
+  GetGroupsTypesEnum,
+  GetRequestsSecurityLevelEnum,
+  GetResourcesTypesEnum,
+  GroupResourceEntityTypeEnum,
+  HumanosClient,
+  IdentityFieldType,
+  MandateDataDtoTypeEnum,
+  MandateDataType,
+  RequestDetailEntitySecurityLevelEnum,
+  RequestEntitySecurityLevelEnum,
+  RequestQuerySecurityLevelEnum,
+  RequestsApi,
+  RequestsApiAxiosParamCreator,
+  RequestsApiFactory,
+  RequestsApiFp,
+  ResourceApi,
+  ResourceApiAxiosParamCreator,
+  ResourceApiFactory,
+  ResourceApiFp,
+  ResourceEntityTypeEnum,
+  ResourceQueryTypesEnum,
+  SDK_LANGUAGE,
+  UserApi,
+  UserApiAxiosParamCreator,
+  UserApiFactory,
+  UserApiFp,
+  W3CProofActionTypeEnum,
+  WebhookEventType,
+  WebhookEventTypeCREDENTIAL,
+  WebhookEventTypeIDENTITY,
+  WebhookEventTypeOTPFAILED,
+  WebhookEventTypeTEST,
+  applySignatureInterceptor,
+  createHumanosClient,
+  createSignatureInterceptor,
+  createWebhookHandler,
+  decryptWebhookPayload,
+  generateSignature,
+  processWebhook,
+  verifyWebhookSignature
+});