humanos 1.0.5 → 1.0.7

package/dist/index.d.mts

@@ -706,7 +706,7 @@ interface ContactEntity {
  */
 interface CreatePresentationDto {
     /**
-     * DID of the intended verifier. When provided, the VP is bound to this audience via proof.domain and a challenge nonce.
+     * Domain or subdomain of the intended verifier (e.g. \"organization.com\").        When provided, the VP is bound to this audience via proof.domain and a challenge nonce.
      * @type {string}
      * @memberof CreatePresentationDto
      */
@@ -940,7 +940,7 @@ interface PartialSubjectEntity {
  */
 interface CreateSubjectEntity {
     /**
-     * HTTP status code indicating the result of the operation for this specific subject:   - 200: Success   - 201: Success, but nothing was updated   - 400: Invalid body payload. Information will be at the message field   - 402: Invalid identity due to invalid countryAlpha3   - 407: This call contained this contact more than once   - 408: This call contained this identity more than once   - 409: Duplicate Identity   - 410: Duplicate Identity. This user already has an identity with this countryAlpha3
+     * HTTP status code indicating the result of the operation for this specific subject:   - 201: Success — subject created or updated (the message distinguishes: \"Subject created\" vs updated)   - 400: Invalid body payload. Information will be at the message field   - 409: Duplicate contact within the request body   - 410: Contact maps to a subject with inconsistent references (the same subject appears through more than one contact in this request)   - 500: Unexpected processing error
      * @type {number}
      * @memberof CreateSubjectEntity
      */
@@ -959,14 +959,11 @@ interface CreateSubjectEntity {
     'user': PartialSubjectEntity;
 }
 declare const CreateSubjectEntityStatusEnum: {
-    readonly NUMBER_200: 200;
     readonly NUMBER_201: 201;
     readonly NUMBER_400: 400;
-    readonly NUMBER_402: 402;
-    readonly NUMBER_407: 407;
-    readonly NUMBER_408: 408;
     readonly NUMBER_409: 409;
     readonly NUMBER_410: 410;
+    readonly NUMBER_500: 500;
 };
 type CreateSubjectEntityStatusEnum = typeof CreateSubjectEntityStatusEnum[keyof typeof CreateSubjectEntityStatusEnum];
 
@@ -1219,11 +1216,11 @@ interface CredentialEntity {
      */
     'w3cCredential': object;
     /**
-     * Whether each grantor accepted or rejected the credential and information about the grantor contact. The `id` field carries the decision URN.
+     * Whether each grantor accepted or rejected the credential and information about the grantor contact. The `id` field carries the grantor\'s DID. Always an array (empty when there are no decisions yet).
      * @type {Array<Array<any>>}
      * @memberof CredentialEntity
      */
-    'decisions'?: Array<Array<any>>;
+    'decisions': Array<Array<any>>;
 }
 declare const CredentialEntityStatusEnum: {
     readonly Draft: "DRAFT";
@@ -1399,6 +1396,74 @@ declare const CredentialEventEventTypeEnum: {
 };
 type CredentialEventEventTypeEnum = typeof CredentialEventEventTypeEnum[keyof typeof CredentialEventEventTypeEnum];
 
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface CredentialProof
+ */
+interface CredentialProof {
+    [key: string]: any;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'action': string;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'actionProof': string;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'type': string;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'cryptosuite': string;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'verificationMethod': string;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'created': string;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'proofPurpose': string;
+    /**
+     *
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'proofValue': string;
+}
+
 /**
  * Humanos API
  * Humanos API
@@ -1858,6 +1923,125 @@ interface GenerateCredentialEntity {
     'internalId'?: string;
 }
 
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface GenerateRequestIFrameCookieDto
+ */
+interface GenerateRequestIFrameCookieDto {
+    /**
+     * Opt into a trusted browser session for this request (HUM-6): when true, a valid session cookie lets the subject skip the OTP on future approvals. Default false.
+     * @type {boolean}
+     * @memberof GenerateRequestIFrameCookieDto
+     */
+    'allow'?: boolean;
+    /**
+     * Trusted-session lifespan in seconds. Used ONLY when `allow` is true (ignored otherwise — no error). Clamped to [3600 (1h), 86400 (24h)]; default 3600.
+     * @type {number}
+     * @memberof GenerateRequestIFrameCookieDto
+     */
+    'duration'?: number;
+}
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+/**
+ *
+ * @export
+ * @interface GenerateRequestIFrameDto
+ */
+interface GenerateRequestIFrameDto {
+    /**
+     * Base64-encoded P-256 SPKI public key to pre-register for postMessage payload encryption.
+     * @type {string}
+     * @memberof GenerateRequestIFrameDto
+     */
+    'pubKey': string;
+    /**
+     * Trusted browser session config — skip the OTP for high-frequency approvals (HUM-6).
+     * @type {GenerateRequestIFrameCookieDto}
+     * @memberof GenerateRequestIFrameDto
+     */
+    'cookie'?: GenerateRequestIFrameCookieDto;
+}
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface GenerateRequestUserDto
+ */
+interface GenerateRequestUserDto {
+    /**
+     * Contact email or phone number
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'contact': string;
+    /**
+     * Secondary contact email or phone number. When present, first contact will receive the OTP code and the secondary contact will receive the link to complete the request.
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'secondaryContact'?: string;
+    /**
+     * Known document ID of the user, expected to be returned by the KYC verification
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'docId'?: string;
+    /**
+     * Language for OTP notifications. Defaults to the contact phone nationality, or ENG.
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'language'?: GenerateRequestUserDtoLanguageEnum;
+    /**
+     * Signer quality for this request. Free text; if omitted for an existing member, the member quality is propagated.
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'signerQuality'?: string;
+}
+declare const GenerateRequestUserDtoLanguageEnum: {
+    readonly Eng: "ENG";
+    readonly Prt: "PRT";
+    readonly Spa: "SPA";
+    readonly Fra: "FRA";
+};
+type GenerateRequestUserDtoLanguageEnum = typeof GenerateRequestUserDtoLanguageEnum[keyof typeof GenerateRequestUserDtoLanguageEnum];
+
 /**
  * Humanos API
  * Humanos API
@@ -1883,11 +2067,17 @@ interface GenerateRequestDto {
      */
     'name'?: string;
     /**
-     * Array of contact emails or phone numbers
-     * @type {Array<string>}
+     * Array of users to be included in the request
+     * @type {Array<GenerateRequestUserDto>}
      * @memberof GenerateRequestDto
      */
-    'contacts': Array<string>;
+    'users': Array<GenerateRequestUserDto>;
+    /**
+     * IFrame configuration for the request
+     * @type {GenerateRequestIFrameDto}
+     * @memberof GenerateRequestDto
+     */
+    'iframe'?: GenerateRequestIFrameDto;
     /**
      * Security level for the request
      * @type {string}
@@ -1912,42 +2102,18 @@ interface GenerateRequestDto {
      * @memberof GenerateRequestDto
      */
     'credentials'?: Array<CredentialDto>;
-    /**
-     * What language to use when sending notifications to the user
-     * @type {string}
-     * @memberof GenerateRequestDto
-     */
-    'language'?: string;
-    /**
-     * URL to redirect the subject after completing the request
-     * @type {string}
-     * @memberof GenerateRequestDto
-     */
-    'redirectUrl'?: string;
     /**
      * Internal identifier for the request
      * @type {string}
      * @memberof GenerateRequestDto
      */
     'internalId'?: string;
-    /**
-     * Base64-encoded P-256 SPKI public key to pre-register for postMessage payload encryption.
-     * @type {string}
-     * @memberof GenerateRequestDto
-     */
-    'pubKey'?: string;
     /**
      * Grants 3 types of access to the request:  1. READ access to request detail, credentials, and corresponding evidences.  2. Allows to create Verifiable Presentations (VPs) from mandates associated with this request  3. Allows to verify Verifiable Presentations (VPs) from mandates associated with this request  By default, the requester DID are automatically appended to this list.
      * @type {Array<string>}
      * @memberof GenerateRequestDto
      */
     'authorizedDIDs'?: Array<string>;
-    /**
-     * List of known document IDs of the users This will force a KYC verification for each user if none of its Humanos identities match the document ID Will make sure the received identity from the KYC verification matches the document ID, and update the user\'s Humanos identities if needed
-     * @type {Array<string>}
-     * @memberof GenerateRequestDto
-     */
-    'expectedDocIds'?: Array<string>;
 }
 declare const GenerateRequestDtoSecurityLevelEnum: {
     readonly Contact: "CONTACT";
@@ -1987,11 +2153,11 @@ interface GenerateSubjectEntity {
      */
     'id': string;
     /**
-     * Code for the subject-OTP link.     Only present if the issuer is configured to not send the OTP.
+     * Secondary contact (phone or email) used in 2FA mode to receive the signing link.
      * @type {string}
      * @memberof GenerateSubjectEntity
      */
-    'code'?: string;
+    'secondaryContact'?: string;
     /**
      * Link to the subject-OTP link.     Only present if the issuer is configured to not send the OTP.
      * @type {string}
@@ -2091,7 +2257,6 @@ declare const ResourceMinimalEntityTypeEnum: {
     readonly Form: "FORM";
     readonly Document: "DOCUMENT";
     readonly Json: "JSON";
-    readonly Payment: "PAYMENT";
     readonly Policy: "POLICY";
 };
 type ResourceMinimalEntityTypeEnum = typeof ResourceMinimalEntityTypeEnum[keyof typeof ResourceMinimalEntityTypeEnum];
@@ -2207,30 +2372,12 @@ interface IdentityEventDecision {
      * @memberof IdentityEventDecision
      */
     'success': boolean;
-    /**
-     *
-     * @type {boolean}
-     * @memberof IdentityEventDecision
-     */
-    'isFraud': boolean;
-    /**
-     *
-     * @type {number}
-     * @memberof IdentityEventDecision
-     */
-    'riskScore'?: number;
     /**
      *
      * @type {string}
      * @memberof IdentityEventDecision
      */
     'message'?: string;
-    /**
-     *
-     * @type {string}
-     * @memberof IdentityEventDecision
-     */
-    'outcome'?: string;
     /**
      *
      * @type {string}
@@ -2290,67 +2437,117 @@ interface IdentityEventUser {
 /**
  *
  * @export
- * @interface IdentityPayload
+ * @interface IdentityWebhookIssueDate
+ */
+interface IdentityWebhookIssueDate {
+}
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+/**
+ *
+ * @export
+ * @interface IdentityWebhook
  */
-interface IdentityPayload {
+interface IdentityWebhook {
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'fullName': string;
+    'nationality'?: string;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
+     */
+    'placeOfBirth'?: string;
+    /**
+     *
+     * @type {Array<string>}
+     * @memberof IdentityWebhook
      */
-    'gender': string;
+    'addresses'?: Array<string>;
+    /**
+     *
+     * @type {number}
+     * @memberof IdentityWebhook
+     */
+    'height'?: number;
+    /**
+     *
+     * @type {number}
+     * @memberof IdentityWebhook
+     */
+    'weight'?: number;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'birth': string;
+    'documentType'?: string;
+    /**
+     *
+     * @type {IdentityWebhookIssueDate}
+     * @memberof IdentityWebhook
+     */
+    'issueDate'?: IdentityWebhookIssueDate;
+    /**
+     *
+     * @type {IdentityWebhookIssueDate}
+     * @memberof IdentityWebhook
+     */
+    'expiresAt'?: IdentityWebhookIssueDate;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'docId': string;
+    'placeOfIssue'?: string;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'fullDocId': string;
+    'fullName': string;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'expiresAt': string;
+    'gender'?: string;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'issueDate': string;
+    'birth': string;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'placeOfBirth': string;
+    'docId': string;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
-    'documentType': string;
+    'fullDocId': string;
     /**
      *
      * @type {string}
-     * @memberof IdentityPayload
+     * @memberof IdentityWebhook
      */
     'countryAlpha3': string;
 }
@@ -2412,21 +2609,157 @@ interface IdentityEvent {
     'api_version': string;
     /**
      *
-     * @type {IdentityPayload}
+     * @type {IdentityWebhook}
      * @memberof IdentityEvent
      */
-    'identity'?: IdentityPayload;
+    'identity'?: IdentityWebhook;
     /**
      *
      * @type {IdentityEventDecision}
      * @memberof IdentityEvent
      */
-    'decision': IdentityEventDecision;
+    'decision': IdentityEventDecision;
+}
+declare const IdentityEventEventTypeEnum: {
+    readonly Identity: "identity";
+};
+type IdentityEventEventTypeEnum = typeof IdentityEventEventTypeEnum[keyof typeof IdentityEventEventTypeEnum];
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface MandateAction
+ */
+interface MandateAction {
+    [key: string]: any;
+    /**
+     *
+     * @type {string}
+     * @memberof MandateAction
+     */
+    'id': string;
+    /**
+     *
+     * @type {string}
+     * @memberof MandateAction
+     */
+    'digestSRI': string;
+    /**
+     *
+     * @type {string}
+     * @memberof MandateAction
+     */
+    'location': string;
+}
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface MandateContext
+ */
+interface MandateContext {
+    [key: string]: any;
+    /**
+     *
+     * @type {Array<string>}
+     * @memberof MandateContext
+     */
+    'authorizedDIDs': Array<string>;
+}
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface MandateGrantor
+ */
+interface MandateGrantor {
+}
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+/**
+ *
+ * @export
+ * @interface Mandate
+ */
+interface Mandate {
+    [key: string]: any;
+    /**
+     *
+     * @type {MandateGrantor}
+     * @memberof Mandate
+     */
+    'grantor': MandateGrantor;
+    /**
+     *
+     * @type {string}
+     * @memberof Mandate
+     */
+    'scope': string;
+    /**
+     *
+     * @type {MandateContext}
+     * @memberof Mandate
+     */
+    'context': MandateContext;
+    /**
+     *
+     * @type {MandateAction}
+     * @memberof Mandate
+     */
+    'action'?: MandateAction;
+    /**
+     *
+     * @type {{ [key: string]: any; }}
+     * @memberof Mandate
+     */
+    'userParams'?: {
+        [key: string]: any;
+    };
 }
-declare const IdentityEventEventTypeEnum: {
-    readonly Identity: "identity";
-};
-type IdentityEventEventTypeEnum = typeof IdentityEventEventTypeEnum[keyof typeof IdentityEventEventTypeEnum];
 
 /**
  * Humanos API
@@ -2629,19 +2962,25 @@ interface ReceiptEntity {
 /**
  *
  * @export
- * @interface PresentationResponseEntity
+ * @interface PresentationEntity
  */
-interface PresentationResponseEntity {
+interface PresentationEntity {
     /**
-     * Signed W3C Verifiable Presentation. Includes @context, type, holder, verifiableCredential[], and proof. Pass this object as `presentation` to POST /credential/verify.
+     * Signed W3C Verifiable Presentation (@context, type, holder, verifiableCredential, proof), exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Provide this or `presentationEncoded` (at least one is required; `presentationEncoded` overrides and is recommended, since a base64 string avoids JSON formatting changes that can break the signature).
      * @type {object}
-     * @memberof PresentationResponseEntity
+     * @memberof PresentationEntity
      */
     'presentation': object;
+    /**
+     * Base64-encoded JSON of the signed Verifiable Presentation above. Pass it back to POST /credential/verify as `presentationEncoded` (recommended) to avoid signature failures caused by JSON re-serialization in some HTTP clients.
+     * @type {string}
+     * @memberof PresentationEntity
+     */
+    'presentationEncoded': string;
     /**
      * VP_CREATED receipt issued for this presentation
      * @type {ReceiptEntity}
-     * @memberof PresentationResponseEntity
+     * @memberof PresentationEntity
      */
     'receipt': ReceiptEntity;
 }
@@ -2776,6 +3115,12 @@ interface RequestDetailSubjectEntity {
      * @memberof RequestDetailSubjectEntity
      */
     'kyc'?: string;
+    /**
+     * Secondary contact (email or phone) used for two-factor authentication in this request. Present when the request was created with a secondary contact for 2FA.
+     * @type {string}
+     * @memberof RequestDetailSubjectEntity
+     */
+    'secondaryContact'?: string;
 }
 declare const RequestDetailSubjectEntityIdentityStatusEnum: {
     readonly None: "NONE";
@@ -2918,6 +3263,12 @@ interface RequestSubjectEntity {
      * @memberof RequestSubjectEntity
      */
     'kyc'?: string;
+    /**
+     * Secondary contact (email or phone) used for two-factor authentication in this request. Present when the request was created with a secondary contact for 2FA.
+     * @type {string}
+     * @memberof RequestSubjectEntity
+     */
+    'secondaryContact'?: string;
 }
 declare const RequestSubjectEntityIdentityStatusEnum: {
     readonly None: "NONE";
@@ -3124,6 +3475,80 @@ interface RequestsCreate400Response {
     'error'?: string;
 }
 
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface RequestsCreate402Response
+ */
+interface RequestsCreate402Response {
+    /**
+     *
+     * @type {number}
+     * @memberof RequestsCreate402Response
+     */
+    'statusCode'?: number;
+    /**
+     *
+     * @type {string}
+     * @memberof RequestsCreate402Response
+     */
+    'message'?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof RequestsCreate402Response
+     */
+    'error'?: string;
+}
+
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ *
+ * @export
+ * @interface RequestsCreate409Response
+ */
+interface RequestsCreate409Response {
+    /**
+     *
+     * @type {number}
+     * @memberof RequestsCreate409Response
+     */
+    'statusCode'?: number;
+    /**
+     *
+     * @type {string}
+     * @memberof RequestsCreate409Response
+     */
+    'message'?: string;
+    /**
+     *
+     * @type {string}
+     * @memberof RequestsCreate409Response
+     */
+    'error'?: string;
+}
+
 /**
  * Humanos API
  * Humanos API
@@ -3319,7 +3744,6 @@ declare const ResourceEntityTypeEnum: {
     readonly Form: "FORM";
     readonly Document: "DOCUMENT";
     readonly Json: "JSON";
-    readonly Payment: "PAYMENT";
     readonly Policy: "POLICY";
 };
 type ResourceEntityTypeEnum = typeof ResourceEntityTypeEnum[keyof typeof ResourceEntityTypeEnum];
@@ -3383,7 +3807,6 @@ declare const ResourceQueryTypesEnum: {
     readonly Form: "FORM";
     readonly Document: "DOCUMENT";
     readonly Json: "JSON";
-    readonly Payment: "PAYMENT";
     readonly Policy: "POLICY";
 };
 type ResourceQueryTypesEnum = typeof ResourceQueryTypesEnum[keyof typeof ResourceQueryTypesEnum];
@@ -3456,7 +3879,6 @@ interface RevokeCredentialDto {
  * https://openapi-generator.tech
  * Do not edit the class manually.
  */
-
 /**
  *
  * @export
@@ -3481,12 +3903,6 @@ interface RevokeCredentialEntity {
      * @memberof RevokeCredentialEntity
      */
     'revokedAt': string;
-    /**
-     * MANDATE_REVOKED receipt issued for this revocation
-     * @type {ReceiptEntity}
-     * @memberof RevokeCredentialEntity
-     */
-    'receipt': ReceiptEntity;
 }
 declare const RevokeCredentialEntityStatusEnum: {
     readonly Draft: "DRAFT";
@@ -3969,11 +4385,17 @@ type VerifyDenyResponseEntityDecisionEnum = typeof VerifyDenyResponseEntityDecis
  */
 interface VerifyPresentationDto {
     /**
-     * Signed W3C Verifiable Presentation. Includes @context, type, holder, verifiableCredential[], and proof. Pass this object as `presentation` to POST /credential/verify.
+     * Signed W3C Verifiable Presentation (@context, type, holder, verifiableCredential, proof), exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Provide this or `presentationEncoded` (at least one is required; `presentationEncoded` overrides and is recommended, since a base64 string avoids JSON formatting changes that can break the signature).
      * @type {object}
      * @memberof VerifyPresentationDto
      */
-    'presentation': object;
+    'presentation'?: object;
+    /**
+     * Base64-encoded JSON of the signed Verifiable Presentation above. Pass it back to POST /credential/verify as `presentationEncoded` (recommended) to avoid signature failures caused by JSON re-serialization in some HTTP clients.
+     * @type {string}
+     * @memberof VerifyPresentationDto
+     */
+    'presentationEncoded'?: string;
     /**
      * Params the agent intends to supply when invoking the action. Validated against the action\'s declared `executionParams` shape and exposed to CEL rules as `executionParams.<field>`.
      * @type {object}
@@ -3982,142 +4404,6 @@ interface VerifyPresentationDto {
     'executionParams'?: object;
 }
 
-/**
- * Humanos API
- * Humanos API
- *
- * The version of the OpenAPI document: 1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-/**
- *
- * @export
- * @interface W3CVerifiableCredentialCredentialSubjectMandateAction
- */
-interface W3CVerifiableCredentialCredentialSubjectMandateAction {
-    [key: string]: any;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandateAction
-     */
-    'id': string;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandateAction
-     */
-    'digestSRI': string;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandateAction
-     */
-    'location': string;
-}
-
-/**
- * Humanos API
- * Humanos API
- *
- * The version of the OpenAPI document: 1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-/**
- *
- * @export
- * @interface W3CVerifiableCredentialCredentialSubjectMandateContext
- */
-interface W3CVerifiableCredentialCredentialSubjectMandateContext {
-    [key: string]: any;
-    /**
-     *
-     * @type {Array<string>}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandateContext
-     */
-    'authorizedDIDs': Array<string>;
-}
-
-/**
- * Humanos API
- * Humanos API
- *
- * The version of the OpenAPI document: 1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-/**
- *
- * @export
- * @interface W3CVerifiableCredentialCredentialSubjectMandateGrantor
- */
-interface W3CVerifiableCredentialCredentialSubjectMandateGrantor {
-}
-
-/**
- * Humanos API
- * Humanos API
- *
- * The version of the OpenAPI document: 1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-
-/**
- *
- * @export
- * @interface W3CVerifiableCredentialCredentialSubjectMandate
- */
-interface W3CVerifiableCredentialCredentialSubjectMandate {
-    [key: string]: any;
-    /**
-     *
-     * @type {W3CVerifiableCredentialCredentialSubjectMandateGrantor}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandate
-     */
-    'grantor': W3CVerifiableCredentialCredentialSubjectMandateGrantor;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandate
-     */
-    'scope': string;
-    /**
-     *
-     * @type {W3CVerifiableCredentialCredentialSubjectMandateContext}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandate
-     */
-    'context': W3CVerifiableCredentialCredentialSubjectMandateContext;
-    /**
-     *
-     * @type {W3CVerifiableCredentialCredentialSubjectMandateAction}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandate
-     */
-    'action'?: W3CVerifiableCredentialCredentialSubjectMandateAction;
-    /**
-     *
-     * @type {{ [key: string]: any; }}
-     * @memberof W3CVerifiableCredentialCredentialSubjectMandate
-     */
-    'userParams'?: {
-        [key: string]: any;
-    };
-}
-
 /**
  * Humanos API
  * Humanos API
@@ -4145,66 +4431,10 @@ interface W3CVerifiableCredentialCredentialSubject {
     'id': string;
     /**
      *
-     * @type {W3CVerifiableCredentialCredentialSubjectMandate}
+     * @type {Mandate}
      * @memberof W3CVerifiableCredentialCredentialSubject
      */
-    'mandate': W3CVerifiableCredentialCredentialSubjectMandate;
-}
-
-/**
- * Humanos API
- * Humanos API
- *
- * The version of the OpenAPI document: 1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-/**
- *
- * @export
- * @interface W3CVerifiableCredentialProofsInner
- */
-interface W3CVerifiableCredentialProofsInner {
-    [key: string]: any;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
-     */
-    'type': string;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
-     */
-    'cryptosuite': string;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
-     */
-    'verificationMethod': string;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
-     */
-    'created': string;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
-     */
-    'proofPurpose': string;
-    /**
-     *
-     * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
-     */
-    'proofValue': string;
+    'mandate': Mandate;
 }
 
 /**
@@ -4276,10 +4506,10 @@ interface W3CVerifiableCredential {
     'evidences': Array<Evidence>;
     /**
      *
-     * @type {Array<W3CVerifiableCredentialProofsInner>}
+     * @type {Array<CredentialProof>}
      * @memberof W3CVerifiableCredential
      */
-    'proofs': Array<W3CVerifiableCredentialProofsInner>;
+    'proofs'?: Array<CredentialProof>;
 }
 
 /**
@@ -4699,7 +4929,6 @@ declare const ListTypesEnum: {
     readonly Form: "FORM";
     readonly Document: "DOCUMENT";
     readonly Json: "JSON";
-    readonly Payment: "PAYMENT";
     readonly Policy: "POLICY";
 };
 type ListTypesEnum = typeof ListTypesEnum[keyof typeof ListTypesEnum];
@@ -4711,7 +4940,6 @@ declare const WorkflowsTypesEnum: {
     readonly Form: "FORM";
     readonly Document: "DOCUMENT";
     readonly Json: "JSON";
-    readonly Payment: "PAYMENT";
     readonly Policy: "POLICY";
 };
 type WorkflowsTypesEnum = typeof WorkflowsTypesEnum[keyof typeof WorkflowsTypesEnum];
@@ -4742,7 +4970,7 @@ declare const CredentialsApiAxiosParamCreator: (configuration?: Configuration) =
     /**
      * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
      * @summary Issue VP
-     * @param {string} vcId DID of the credential to present.
+     * @param {string} vcId URN of the credential to present.
      * @param {CreatePresentationDto} createPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
      * @param {*} [options] Override http request option.
@@ -4750,7 +4978,7 @@ declare const CredentialsApiAxiosParamCreator: (configuration?: Configuration) =
      */
     issueVP: (vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
      * @summary Revoke Credential
      * @param {string} credentialId URN of the credential to revoke
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -4760,7 +4988,7 @@ declare const CredentialsApiAxiosParamCreator: (configuration?: Configuration) =
      */
     revoke: (credentialId: string, aPIVersion?: string, revokeCredentialDto?: RevokeCredentialDto, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+     * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
      * @summary Verify VP
      * @param {VerifyPresentationDto} verifyPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -4795,15 +5023,15 @@ declare const CredentialsApiFp: (configuration?: Configuration) => {
     /**
      * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
      * @summary Issue VP
-     * @param {string} vcId DID of the credential to present.
+     * @param {string} vcId URN of the credential to present.
      * @param {CreatePresentationDto} createPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PresentationResponseEntity>>;
+    issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PresentationEntity>>;
     /**
-     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
      * @summary Revoke Credential
      * @param {string} credentialId URN of the credential to revoke
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -4813,7 +5041,7 @@ declare const CredentialsApiFp: (configuration?: Configuration) => {
      */
     revoke(credentialId: string, aPIVersion?: string, revokeCredentialDto?: RevokeCredentialDto, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RevokeCredentialEntity>>;
     /**
-     * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+     * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
      * @summary Verify VP
      * @param {VerifyPresentationDto} verifyPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -4848,15 +5076,15 @@ declare const CredentialsApiFactory: (configuration?: Configuration, basePath?:
     /**
      * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
      * @summary Issue VP
-     * @param {string} vcId DID of the credential to present.
+     * @param {string} vcId URN of the credential to present.
      * @param {CreatePresentationDto} createPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      */
-    issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): AxiosPromise<PresentationResponseEntity>;
+    issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): AxiosPromise<PresentationEntity>;
     /**
-     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
      * @summary Revoke Credential
      * @param {string} credentialId URN of the credential to revoke
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -4866,7 +5094,7 @@ declare const CredentialsApiFactory: (configuration?: Configuration, basePath?:
      */
     revoke(credentialId: string, aPIVersion?: string, revokeCredentialDto?: RevokeCredentialDto, options?: RawAxiosRequestConfig): AxiosPromise<RevokeCredentialEntity>;
     /**
-     * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+     * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
      * @summary Verify VP
      * @param {VerifyPresentationDto} verifyPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -4905,16 +5133,16 @@ declare class CredentialsApi extends BaseAPI {
     /**
      * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
      * @summary Issue VP
-     * @param {string} vcId DID of the credential to present.
+     * @param {string} vcId URN of the credential to present.
      * @param {CreatePresentationDto} createPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
      * @param {*} [options] Override http request option.
      * @throws {RequiredError}
      * @memberof CredentialsApi
      */
-    issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<axios.AxiosResponse<PresentationResponseEntity, any, {}>>;
+    issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<axios.AxiosResponse<PresentationEntity, any, {}>>;
     /**
-     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
      * @summary Revoke Credential
      * @param {string} credentialId URN of the credential to revoke
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -4925,7 +5153,7 @@ declare class CredentialsApi extends BaseAPI {
      */
     revoke(credentialId: string, aPIVersion?: string, revokeCredentialDto?: RevokeCredentialDto, options?: RawAxiosRequestConfig): Promise<axios.AxiosResponse<RevokeCredentialEntity, any, {}>>;
     /**
-     * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+     * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
      * @summary Verify VP
      * @param {VerifyPresentationDto} verifyPresentationDto
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -5050,7 +5278,7 @@ declare const RequestsApiAxiosParamCreator: (configuration?: Configuration) => {
      */
     list: (pageIndex?: number, pageSize?: number, search?: string, dateFrom?: string, dateTo?: string, subject?: string, internalId?: string, securityLevel?: Array<ListSecurityLevelEnum>, aPIVersion?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
      * @summary Resend OTP
      * @param {string} requestId Unique identifier of the  request.
      * @param {string} [contact] Verified contact value (email or phone)
@@ -5113,7 +5341,7 @@ declare const RequestsApiFp: (configuration?: Configuration) => {
      */
     list(pageIndex?: number, pageSize?: number, search?: string, dateFrom?: string, dateTo?: string, subject?: string, internalId?: string, securityLevel?: Array<ListSecurityLevelEnum>, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<RequestsEntity>>;
     /**
-     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
      * @summary Resend OTP
      * @param {string} requestId Unique identifier of the  request.
      * @param {string} [contact] Verified contact value (email or phone)
@@ -5176,7 +5404,7 @@ declare const RequestsApiFactory: (configuration?: Configuration, basePath?: str
      */
     list(pageIndex?: number, pageSize?: number, search?: string, dateFrom?: string, dateTo?: string, subject?: string, internalId?: string, securityLevel?: Array<ListSecurityLevelEnum>, aPIVersion?: string, options?: RawAxiosRequestConfig): AxiosPromise<RequestsEntity>;
     /**
-     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
      * @summary Resend OTP
      * @param {string} requestId Unique identifier of the  request.
      * @param {string} [contact] Verified contact value (email or phone)
@@ -5245,7 +5473,7 @@ declare class RequestsApi extends BaseAPI {
      */
     list(pageIndex?: number, pageSize?: number, search?: string, dateFrom?: string, dateTo?: string, subject?: string, internalId?: string, securityLevel?: Array<ListSecurityLevelEnum>, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<axios.AxiosResponse<RequestsEntity, any, {}>>;
     /**
-     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
      * @summary Resend OTP
      * @param {string} requestId Unique identifier of the  request.
      * @param {string} [contact] Verified contact value (email or phone)
@@ -5407,7 +5635,7 @@ declare const WebhooksApiAxiosParamCreator: (configuration?: Configuration) => {
      */
     identity: (identityEvent: IdentityEvent, aPIVersion?: string, options?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
-     * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+     * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
      * @summary OTP Failed Event
      * @param {OtpFailedEvent} otpFailedEvent
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -5449,7 +5677,7 @@ declare const WebhooksApiFp: (configuration?: Configuration) => {
      */
     identity(identityEvent: IdentityEvent, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>>;
     /**
-     * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+     * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
      * @summary OTP Failed Event
      * @param {OtpFailedEvent} otpFailedEvent
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -5491,7 +5719,7 @@ declare const WebhooksApiFactory: (configuration?: Configuration, basePath?: str
      */
     identity(identityEvent: IdentityEvent, aPIVersion?: string, options?: RawAxiosRequestConfig): AxiosPromise<void>;
     /**
-     * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+     * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
      * @summary OTP Failed Event
      * @param {OtpFailedEvent} otpFailedEvent
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -5537,7 +5765,7 @@ declare class WebhooksApi extends BaseAPI {
      */
     identity(identityEvent: IdentityEvent, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<axios.AxiosResponse<void, any, {}>>;
     /**
-     * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+     * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
      * @summary OTP Failed Event
      * @param {OtpFailedEvent} otpFailedEvent
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -5559,7 +5787,7 @@ declare class WebhooksApi extends BaseAPI {
 }
 
 /** The API version this SDK release is pinned to (YYYY-MM-DD). */
-declare const API_VERSION = "2026-05-20";
+declare const API_VERSION = "2026-07-07";
 /** Identifies this SDK's language in request headers. */
 declare const SDK_LANGUAGE = "typescript";
 interface HumanosClientConfig {
@@ -5701,4 +5929,4 @@ declare function processWebhook<T = unknown>(rawBody: string, headers: WebhookHe
  */
 declare function createWebhookHandler<T = unknown>(config: WebhookConfig, handler: (payload: T) => void | Promise<void>): (req: any, res: any) => Promise<void>;
 
-export { API_VERSION, type ActionDto, type ActionEntity, type ActionListEntity, type ActionQuery, type ActionVersionDetailEntity, type ActionVersionListEntity, type ActionVersionSummaryEntity, ActionsApi, ActionsApiAxiosParamCreator, ActionsApiFactory, ActionsApiFp, type ActivitiesEntity, ActivityApi, ActivityApiAxiosParamCreator, ActivityApiFactory, ActivityApiFp, type ActivityEntity, ActivityEntityTypeEnum, type ActivityQuery, ActivityQueryTypeEnum, ApprovalApi, ApprovalApiAxiosParamCreator, ApprovalApiFactory, ApprovalApiFp, type CONSENT, Configuration, type ConfigurationParameters, type ContactEntity, type CreatePresentationDto, type CreateSubjectDto, type CreateSubjectEntity, CreateSubjectEntityStatusEnum, type CredentialDto, type CredentialDtoData, CredentialDtoTypeEnum, type CredentialEntity, CredentialEntityStatusEnum, type CredentialEvent, type CredentialEventDecision, CredentialEventEventTypeEnum, type CredentialEventUser, type CredentialPlacementDto, CredentialPlacementDtoTypeEnum, CredentialStatus, CredentialsApi, CredentialsApiAxiosParamCreator, CredentialsApiFactory, CredentialsApiFp, type CredentialsDetail404Response, type CredentialsEvidence404Response, type CredentialsIssueVP400Response, type CredentialsIssueVP403Response, type CredentialsIssueVP404Response, type CredentialsRevoke400Response, type CredentialsRevoke409Response, DIDApi, DIDApiAxiosParamCreator, DIDApiFactory, DIDApiFp, DeliveryActionType, type DidDocumentEntity, type EncryptedPayload, type Evidence, type GenerateCredentialEntity, type GenerateRequestDto, GenerateRequestDtoSecurityLevelEnum, type GenerateRequestEntity, type GenerateSubjectEntity, type GroupEntity, type GroupsEntity, HumanosClient, type HumanosClientConfig, type IdentityDto, type IdentityEvent, type IdentityEventDecision, IdentityEventEventTypeEnum, type IdentityEventUser, type IdentityPayload, ListSecurityLevelEnum, ListTypeEnum, ListTypesEnum, type OrganizationDataEntity, type OtpError, type OtpFailedEvent, OtpFailedEventEventTypeEnum, type OtpFailedEventOtp, type PartialSubjectEntity, type PresentationResponseEntity, type ReceiptEntity, type RequestCredentialEntity, RequestCredentialEntityStatusEnum, type RequestDetailEntity, RequestDetailEntitySecurityLevelEnum, type RequestDetailSubjectEntity, RequestDetailSubjectEntityIdentityStatusEnum, type RequestEntity, RequestEntitySecurityLevelEnum, type RequestQuery, RequestQuerySecurityLevelEnum, type RequestSubjectEntity, RequestSubjectEntityIdentityStatusEnum, RequestsApi, RequestsApiAxiosParamCreator, RequestsApiFactory, RequestsApiFp, type RequestsCreate400Response, type RequestsDetail404Response, type RequestsEntity, type RequestsResendOtp403Response, type ResourceEntity, ResourceEntityTypeEnum, type ResourceMinimalEntity, ResourceMinimalEntityTypeEnum, type ResourceQuery, ResourceQueryTypesEnum, type ResourcesEntity, type RevokeCredentialDto, type RevokeCredentialEntity, RevokeCredentialEntityStatusEnum, SDK_LANGUAGE, type SubjectIssuerEntity, SubjectIssuerEntityIdentityStatusEnum, type SubjectQuery, type SuccessEntity, type TestEvent, TestEventEventTypeEnum, UserApi, UserApiAxiosParamCreator, UserApiFactory, UserApiFp, type UserCreate400Response, type UserDetail400Response, type UserDetail404Response, type VerificationMethodEntity, type VerifyAllowResponseEntity, VerifyAllowResponseEntityDecisionEnum, type VerifyDenyResponseEntity, VerifyDenyResponseEntityDecisionEnum, type VerifyEvaluationEntity, VerifyEvaluationEntityResultEnum, type VerifyPresentationDto, type W3CVerifiableCredential, type W3CVerifiableCredentialCredentialSubject, type W3CVerifiableCredentialCredentialSubjectMandate, type W3CVerifiableCredentialCredentialSubjectMandateAction, type W3CVerifiableCredentialCredentialSubjectMandateContext, type W3CVerifiableCredentialCredentialSubjectMandateGrantor, type W3CVerifiableCredentialProofsInner, type WebhookCallEvent, type WebhookConfig, type WebhookHeaders, WebhooksApi, WebhooksApiAxiosParamCreator, WebhooksApiFactory, WebhooksApiFp, WorkflowsTypesEnum, applySignatureInterceptor, createHumanosClient, createSignatureInterceptor, createWebhookHandler, decryptWebhookPayload, generateSignature, processWebhook, verifyWebhookSignature };
+export { API_VERSION, type ActionDto, type ActionEntity, type ActionListEntity, type ActionQuery, type ActionVersionDetailEntity, type ActionVersionListEntity, type ActionVersionSummaryEntity, ActionsApi, ActionsApiAxiosParamCreator, ActionsApiFactory, ActionsApiFp, type ActivitiesEntity, ActivityApi, ActivityApiAxiosParamCreator, ActivityApiFactory, ActivityApiFp, type ActivityEntity, ActivityEntityTypeEnum, type ActivityQuery, ActivityQueryTypeEnum, ApprovalApi, ApprovalApiAxiosParamCreator, ApprovalApiFactory, ApprovalApiFp, type CONSENT, Configuration, type ConfigurationParameters, type ContactEntity, type CreatePresentationDto, type CreateSubjectDto, type CreateSubjectEntity, CreateSubjectEntityStatusEnum, type CredentialDto, type CredentialDtoData, CredentialDtoTypeEnum, type CredentialEntity, CredentialEntityStatusEnum, type CredentialEvent, type CredentialEventDecision, CredentialEventEventTypeEnum, type CredentialEventUser, type CredentialPlacementDto, CredentialPlacementDtoTypeEnum, type CredentialProof, CredentialStatus, CredentialsApi, CredentialsApiAxiosParamCreator, CredentialsApiFactory, CredentialsApiFp, type CredentialsDetail404Response, type CredentialsEvidence404Response, type CredentialsIssueVP400Response, type CredentialsIssueVP403Response, type CredentialsIssueVP404Response, type CredentialsRevoke400Response, type CredentialsRevoke409Response, DIDApi, DIDApiAxiosParamCreator, DIDApiFactory, DIDApiFp, DeliveryActionType, type DidDocumentEntity, type EncryptedPayload, type Evidence, type GenerateCredentialEntity, type GenerateRequestDto, GenerateRequestDtoSecurityLevelEnum, type GenerateRequestEntity, type GenerateRequestIFrameCookieDto, type GenerateRequestIFrameDto, type GenerateRequestUserDto, GenerateRequestUserDtoLanguageEnum, type GenerateSubjectEntity, type GroupEntity, type GroupsEntity, HumanosClient, type HumanosClientConfig, type IdentityDto, type IdentityEvent, type IdentityEventDecision, IdentityEventEventTypeEnum, type IdentityEventUser, type IdentityWebhook, type IdentityWebhookIssueDate, ListSecurityLevelEnum, ListTypeEnum, ListTypesEnum, type Mandate, type MandateAction, type MandateContext, type MandateGrantor, type OrganizationDataEntity, type OtpError, type OtpFailedEvent, OtpFailedEventEventTypeEnum, type OtpFailedEventOtp, type PartialSubjectEntity, type PresentationEntity, type ReceiptEntity, type RequestCredentialEntity, RequestCredentialEntityStatusEnum, type RequestDetailEntity, RequestDetailEntitySecurityLevelEnum, type RequestDetailSubjectEntity, RequestDetailSubjectEntityIdentityStatusEnum, type RequestEntity, RequestEntitySecurityLevelEnum, type RequestQuery, RequestQuerySecurityLevelEnum, type RequestSubjectEntity, RequestSubjectEntityIdentityStatusEnum, RequestsApi, RequestsApiAxiosParamCreator, RequestsApiFactory, RequestsApiFp, type RequestsCreate400Response, type RequestsCreate402Response, type RequestsCreate409Response, type RequestsDetail404Response, type RequestsEntity, type RequestsResendOtp403Response, type ResourceEntity, ResourceEntityTypeEnum, type ResourceMinimalEntity, ResourceMinimalEntityTypeEnum, type ResourceQuery, ResourceQueryTypesEnum, type ResourcesEntity, type RevokeCredentialDto, type RevokeCredentialEntity, RevokeCredentialEntityStatusEnum, SDK_LANGUAGE, type SubjectIssuerEntity, SubjectIssuerEntityIdentityStatusEnum, type SubjectQuery, type SuccessEntity, type TestEvent, TestEventEventTypeEnum, UserApi, UserApiAxiosParamCreator, UserApiFactory, UserApiFp, type UserCreate400Response, type UserDetail400Response, type UserDetail404Response, type VerificationMethodEntity, type VerifyAllowResponseEntity, VerifyAllowResponseEntityDecisionEnum, type VerifyDenyResponseEntity, VerifyDenyResponseEntityDecisionEnum, type VerifyEvaluationEntity, VerifyEvaluationEntityResultEnum, type VerifyPresentationDto, type W3CVerifiableCredential, type W3CVerifiableCredentialCredentialSubject, type WebhookCallEvent, type WebhookConfig, type WebhookHeaders, WebhooksApi, WebhooksApiAxiosParamCreator, WebhooksApiFactory, WebhooksApiFp, WorkflowsTypesEnum, applySignatureInterceptor, createHumanosClient, createSignatureInterceptor, createWebhookHandler, decryptWebhookPayload, generateSignature, processWebhook, verifyWebhookSignature };