humanos 1.0.5 → 1.0.7

package/generated/api/credentials-api.ts

@@ -40,7 +40,7 @@ import type { CredentialsRevoke400Response } from '../models';
 // @ts-ignore
 import type { CredentialsRevoke409Response } from '../models';
 // @ts-ignore
-import type { PresentationResponseEntity } from '../models';
+import type { PresentationEntity } from '../models';
 // @ts-ignore
 import type { RevokeCredentialDto } from '../models';
 // @ts-ignore
@@ -136,7 +136,7 @@ export const CredentialsApiAxiosParamCreator = function (configuration?: Configu
         /**
          * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
          * @summary Issue VP
-         * @param {string} vcId DID of the credential to present.
+         * @param {string} vcId URN of the credential to present.
          * @param {CreatePresentationDto} createPresentationDto 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
          * @param {*} [options] Override http request option.
@@ -178,7 +178,7 @@ export const CredentialsApiAxiosParamCreator = function (configuration?: Configu
             };
         },
         /**
-         * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+         * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
          * @summary Revoke Credential
          * @param {string} credentialId URN of the credential to revoke
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
@@ -220,7 +220,7 @@ export const CredentialsApiAxiosParamCreator = function (configuration?: Configu
             };
         },
         /**
-         * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+         * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
          * @summary Verify VP
          * @param {VerifyPresentationDto} verifyPresentationDto 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
@@ -300,20 +300,20 @@ export const CredentialsApiFp = function(configuration?: Configuration) {
         /**
          * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
          * @summary Issue VP
-         * @param {string} vcId DID of the credential to present.
+         * @param {string} vcId URN of the credential to present.
          * @param {CreatePresentationDto} createPresentationDto 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        async issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PresentationResponseEntity>> {
+        async issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<PresentationEntity>> {
             const localVarAxiosArgs = await localVarAxiosParamCreator.issueVP(vcId, createPresentationDto, aPIVersion, options);
             const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
             const localVarOperationServerBasePath = operationServerMap['CredentialsApi.issueVP']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+         * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
          * @summary Revoke Credential
          * @param {string} credentialId URN of the credential to revoke
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -328,7 +328,7 @@ export const CredentialsApiFp = function(configuration?: Configuration) {
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+         * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
          * @summary Verify VP
          * @param {VerifyPresentationDto} verifyPresentationDto 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -376,17 +376,17 @@ export const CredentialsApiFactory = function (configuration?: Configuration, ba
         /**
          * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
          * @summary Issue VP
-         * @param {string} vcId DID of the credential to present.
+         * @param {string} vcId URN of the credential to present.
          * @param {CreatePresentationDto} createPresentationDto 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
          * @param {*} [options] Override http request option.
          * @throws {RequiredError}
          */
-        issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): AxiosPromise<PresentationResponseEntity> {
+        issueVP(vcId: string, createPresentationDto: CreatePresentationDto, aPIVersion?: string, options?: RawAxiosRequestConfig): AxiosPromise<PresentationEntity> {
             return localVarFp.issueVP(vcId, createPresentationDto, aPIVersion, options).then((request) => request(axios, basePath));
         },
         /**
-         * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+         * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
          * @summary Revoke Credential
          * @param {string} credentialId URN of the credential to revoke
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -398,7 +398,7 @@ export const CredentialsApiFactory = function (configuration?: Configuration, ba
             return localVarFp.revoke(credentialId, aPIVersion, revokeCredentialDto, options).then((request) => request(axios, basePath));
         },
         /**
-         * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+         * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
          * @summary Verify VP
          * @param {VerifyPresentationDto} verifyPresentationDto 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -447,7 +447,7 @@ export class CredentialsApi extends BaseAPI {
     /**
      * Build and sign a W3C Verifiable Presentation for a stored credential. The API key must belong to the credential owner.
      * @summary Issue VP
-     * @param {string} vcId DID of the credential to present.
+     * @param {string} vcId URN of the credential to present.
      * @param {CreatePresentationDto} createPresentationDto 
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
      * @param {*} [options] Override http request option.
@@ -459,7 +459,7 @@ export class CredentialsApi extends BaseAPI {
     }
 
     /**
-     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Issues a MANDATE_REVOKED receipt, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
+     * Permanently revoke an active credential. Flips status to REVOKED, records revokedAt and revocationReason, Appends a REVOKE proof to the credential, and emits a MANDATE_REVOKED activity event. Subsequent /vp and /verify calls for this credential are denied with reason credential_revoked.
      * @summary Revoke Credential
      * @param {string} credentialId URN of the credential to revoke
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.
@@ -473,7 +473,7 @@ export class CredentialsApi extends BaseAPI {
     }
 
     /**
-     * Evaluate a VP against runtime context. On allow, returns 200 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.
+     * Evaluate a VP against runtime context. On allow, returns 201 with the signed receipt. On deny, returns 403 with the reason, evaluations, and receipt in the error body. If the mandate has no constraint schema, only signatures, verifier access, and validity are checked.  Supply the presentation exactly as returned by POST /credential/vp/:vcId — do not re-serialize or modify it. Pass it as either `presentation` (the signed VP object) or `presentationEncoded` (its base64 string); at least one is required (400 otherwise), and if both are sent `presentationEncoded` wins. `presentationEncoded` is the recommended field: being an opaque string it is immune to JSON re-serialization / formatting changes (e.g. some HTTP clients reformatting date strings) that would otherwise break the signature.
      * @summary Verify VP
      * @param {VerifyPresentationDto} verifyPresentationDto 
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\&#39;s date.

package/generated/api/requests-api.ts

@@ -30,6 +30,10 @@ import type { RequestDetailEntity } from '../models';
 // @ts-ignore
 import type { RequestsCreate400Response } from '../models';
 // @ts-ignore
+import type { RequestsCreate402Response } from '../models';
+// @ts-ignore
+import type { RequestsCreate409Response } from '../models';
+// @ts-ignore
 import type { RequestsDetail404Response } from '../models';
 // @ts-ignore
 import type { RequestsEntity } from '../models';
@@ -242,7 +246,7 @@ export const RequestsApiAxiosParamCreator = function (configuration?: Configurat
             };
         },
         /**
-         * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+         * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
          * @summary Resend OTP
          * @param {string} requestId Unique identifier of the  request.
          * @param {string} [contact] Verified contact value (email or phone)
@@ -373,7 +377,7 @@ export const RequestsApiFp = function(configuration?: Configuration) {
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+         * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
          * @summary Resend OTP
          * @param {string} requestId Unique identifier of the  request.
          * @param {string} [contact] Verified contact value (email or phone)
@@ -453,7 +457,7 @@ export const RequestsApiFactory = function (configuration?: Configuration, baseP
             return localVarFp.list(pageIndex, pageSize, search, dateFrom, dateTo, subject, internalId, securityLevel, aPIVersion, options).then((request) => request(axios, basePath));
         },
         /**
-         * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+         * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
          * @summary Resend OTP
          * @param {string} requestId Unique identifier of the  request.
          * @param {string} [contact] Verified contact value (email or phone)
@@ -538,7 +542,7 @@ export class RequestsApi extends BaseAPI {
     }
 
     /**
-     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS (depending on their contact type) with a code and a signing URL.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
+     * Resend a One-Time Password (OTP) to a subject for credential approval, via email or SMS.      The endpoint validates:   - The request is not canceled   - Maximum attempts have not been reached, only successful OTP sends count towards resend limits   - Sufficient time has passed since the last successful resend   - Billing restrictions apply
      * @summary Resend OTP
      * @param {string} requestId Unique identifier of the  request.
      * @param {string} [contact] Verified contact value (email or phone)

package/generated/api/webhooks-api.ts

@@ -116,7 +116,7 @@ export const WebhooksApiAxiosParamCreator = function (configuration?: Configurat
             };
         },
         /**
-         * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+         * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
          * @summary OTP Failed Event
          * @param {OtpFailedEvent} otpFailedEvent 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
@@ -234,7 +234,7 @@ export const WebhooksApiFp = function(configuration?: Configuration) {
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
         /**
-         * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+         * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
          * @summary OTP Failed Event
          * @param {OtpFailedEvent} otpFailedEvent 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
@@ -294,7 +294,7 @@ export const WebhooksApiFactory = function (configuration?: Configuration, baseP
             return localVarFp.identity(identityEvent, aPIVersion, options).then((request) => request(axios, basePath));
         },
         /**
-         * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+         * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
          * @summary OTP Failed Event
          * @param {OtpFailedEvent} otpFailedEvent 
          * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.
@@ -352,7 +352,7 @@ export class WebhooksApi extends BaseAPI {
     }
 
     /**
-     * Fired when an OTP delivery to the subject fails.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
+     * Fired when an OTP **SMS** could not be delivered: every eligible SMS provider was tried (synchronously or via carrier delivery reports) and none succeeded. Email OTP failures do not emit this event. Carrier delivery reports are asynchronous and occasionally corrected to \"delivered\" afterwards, so treat this event as *Humanos stopped retrying*, not as a guarantee the SMS never arrived. The safe reaction is to `PATCH` the `otp.resendEndpoint` URL exactly as delivered — a resend issues a fresh code and invalidates the old one, so it is harmless even if the original message did arrive late.  **Inbound webhook callback** — Humanos POSTs this payload to your registered webhook URL. This is not an endpoint you call; it is documented as a path so SDK code generators emit a typed payload model.
      * @summary OTP Failed Event
      * @param {OtpFailedEvent} otpFailedEvent 
      * @param {string} [aPIVersion] Pin responses to a specific API version (YYYY-MM-DD). When omitted, defaults to the version stored in your issuer config or today\'s date.

package/generated/models/create-presentation-dto.ts

@@ -21,7 +21,7 @@
  */
 export interface CreatePresentationDto {
     /**
-     * DID of the intended verifier. When provided, the VP is bound to this audience via proof.domain and a challenge nonce.
+     * Domain or subdomain of the intended verifier (e.g. \"organization.com\").        When provided, the VP is bound to this audience via proof.domain and a challenge nonce.
      * @type {string}
      * @memberof CreatePresentationDto
      */

package/generated/models/create-subject-entity.ts

@@ -24,7 +24,7 @@ import type { PartialSubjectEntity } from './partial-subject-entity';
  */
 export interface CreateSubjectEntity {
     /**
-     * HTTP status code indicating the result of the operation for this specific subject:   - 200: Success   - 201: Success, but nothing was updated   - 400: Invalid body payload. Information will be at the message field   - 402: Invalid identity due to invalid countryAlpha3   - 407: This call contained this contact more than once   - 408: This call contained this identity more than once   - 409: Duplicate Identity   - 410: Duplicate Identity. This user already has an identity with this countryAlpha3
+     * HTTP status code indicating the result of the operation for this specific subject:   - 201: Success — subject created or updated (the message distinguishes: \"Subject created\" vs updated)   - 400: Invalid body payload. Information will be at the message field   - 409: Duplicate contact within the request body   - 410: Contact maps to a subject with inconsistent references (the same subject appears through more than one contact in this request)   - 500: Unexpected processing error
      * @type {number}
      * @memberof CreateSubjectEntity
      */
@@ -44,14 +44,11 @@ export interface CreateSubjectEntity {
 }
 
 export const CreateSubjectEntityStatusEnum = {
-    NUMBER_200: 200,
     NUMBER_201: 201,
     NUMBER_400: 400,
-    NUMBER_402: 402,
-    NUMBER_407: 407,
-    NUMBER_408: 408,
     NUMBER_409: 409,
-    NUMBER_410: 410
+    NUMBER_410: 410,
+    NUMBER_500: 500
 } as const;
 
 export type CreateSubjectEntityStatusEnum = typeof CreateSubjectEntityStatusEnum[keyof typeof CreateSubjectEntityStatusEnum];

package/generated/models/credential-entity.ts

@@ -69,11 +69,11 @@ export interface CredentialEntity {
      */
     'w3cCredential': object;
     /**
-     * Whether each grantor accepted or rejected the credential and information about the grantor contact. The `id` field carries the decision URN.
+     * Whether each grantor accepted or rejected the credential and information about the grantor contact. The `id` field carries the grantor\'s DID. Always an array (empty when there are no decisions yet).
      * @type {Array<Array<any>>}
      * @memberof CredentialEntity
      */
-    'decisions'?: Array<Array<any>>;
+    'decisions': Array<Array<any>>;
 }
 
 export const CredentialEntityStatusEnum = {

package/generated/models/{w3-cverifiable-credential-proofs-inner.ts → credential-proof.ts}

@@ -17,45 +17,57 @@
 /**
  * 
  * @export
- * @interface W3CVerifiableCredentialProofsInner
+ * @interface CredentialProof
  */
-export interface W3CVerifiableCredentialProofsInner {
+export interface CredentialProof {
     [key: string]: any;
 
     /**
      * 
      * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
+     * @memberof CredentialProof
+     */
+    'action': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof CredentialProof
+     */
+    'actionProof': string;
+    /**
+     * 
+     * @type {string}
+     * @memberof CredentialProof
      */
     'type': string;
     /**
      * 
      * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
+     * @memberof CredentialProof
      */
     'cryptosuite': string;
     /**
      * 
      * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
+     * @memberof CredentialProof
      */
     'verificationMethod': string;
     /**
      * 
      * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
+     * @memberof CredentialProof
      */
     'created': string;
     /**
      * 
      * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
+     * @memberof CredentialProof
      */
     'proofPurpose': string;
     /**
      * 
      * @type {string}
-     * @memberof W3CVerifiableCredentialProofsInner
+     * @memberof CredentialProof
      */
     'proofValue': string;
 }

package/generated/models/generate-request-dto.ts

@@ -16,6 +16,12 @@
 // May contain unused imports in some cases
 // @ts-ignore
 import type { CredentialDto } from './credential-dto';
+// May contain unused imports in some cases
+// @ts-ignore
+import type { GenerateRequestIFrameDto } from './generate-request-iframe-dto';
+// May contain unused imports in some cases
+// @ts-ignore
+import type { GenerateRequestUserDto } from './generate-request-user-dto';
 
 /**
  * 
@@ -30,11 +36,17 @@ export interface GenerateRequestDto {
      */
     'name'?: string;
     /**
-     * Array of contact emails or phone numbers
-     * @type {Array<string>}
+     * Array of users to be included in the request
+     * @type {Array<GenerateRequestUserDto>}
+     * @memberof GenerateRequestDto
+     */
+    'users': Array<GenerateRequestUserDto>;
+    /**
+     * IFrame configuration for the request
+     * @type {GenerateRequestIFrameDto}
      * @memberof GenerateRequestDto
      */
-    'contacts': Array<string>;
+    'iframe'?: GenerateRequestIFrameDto;
     /**
      * Security level for the request
      * @type {string}
@@ -59,42 +71,18 @@ export interface GenerateRequestDto {
      * @memberof GenerateRequestDto
      */
     'credentials'?: Array<CredentialDto>;
-    /**
-     * What language to use when sending notifications to the user
-     * @type {string}
-     * @memberof GenerateRequestDto
-     */
-    'language'?: string;
-    /**
-     * URL to redirect the subject after completing the request
-     * @type {string}
-     * @memberof GenerateRequestDto
-     */
-    'redirectUrl'?: string;
     /**
      * Internal identifier for the request
      * @type {string}
      * @memberof GenerateRequestDto
      */
     'internalId'?: string;
-    /**
-     * Base64-encoded P-256 SPKI public key to pre-register for postMessage payload encryption.
-     * @type {string}
-     * @memberof GenerateRequestDto
-     */
-    'pubKey'?: string;
     /**
      * Grants 3 types of access to the request:  1. READ access to request detail, credentials, and corresponding evidences.  2. Allows to create Verifiable Presentations (VPs) from mandates associated with this request  3. Allows to verify Verifiable Presentations (VPs) from mandates associated with this request  By default, the requester DID are automatically appended to this list.
      * @type {Array<string>}
      * @memberof GenerateRequestDto
      */
     'authorizedDIDs'?: Array<string>;
-    /**
-     * List of known document IDs of the users This will force a KYC verification for each user if none of its Humanos identities match the document ID Will make sure the received identity from the KYC verification matches the document ID, and update the user\'s Humanos identities if needed
-     * @type {Array<string>}
-     * @memberof GenerateRequestDto
-     */
-    'expectedDocIds'?: Array<string>;
 }
 
 export const GenerateRequestDtoSecurityLevelEnum = {

package/generated/models/generate-request-iframe-cookie-dto.ts

@@ -0,0 +1,36 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+
+/**
+ * 
+ * @export
+ * @interface GenerateRequestIFrameCookieDto
+ */
+export interface GenerateRequestIFrameCookieDto {
+    /**
+     * Opt into a trusted browser session for this request (HUM-6): when true, a valid session cookie lets the subject skip the OTP on future approvals. Default false.
+     * @type {boolean}
+     * @memberof GenerateRequestIFrameCookieDto
+     */
+    'allow'?: boolean;
+    /**
+     * Trusted-session lifespan in seconds. Used ONLY when `allow` is true (ignored otherwise — no error). Clamped to [3600 (1h), 86400 (24h)]; default 3600.
+     * @type {number}
+     * @memberof GenerateRequestIFrameCookieDto
+     */
+    'duration'?: number;
+}
+

package/generated/models/generate-request-iframe-dto.ts

@@ -0,0 +1,39 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+// May contain unused imports in some cases
+// @ts-ignore
+import type { GenerateRequestIFrameCookieDto } from './generate-request-iframe-cookie-dto';
+
+/**
+ * 
+ * @export
+ * @interface GenerateRequestIFrameDto
+ */
+export interface GenerateRequestIFrameDto {
+    /**
+     * Base64-encoded P-256 SPKI public key to pre-register for postMessage payload encryption.
+     * @type {string}
+     * @memberof GenerateRequestIFrameDto
+     */
+    'pubKey': string;
+    /**
+     * Trusted browser session config — skip the OTP for high-frequency approvals (HUM-6).
+     * @type {GenerateRequestIFrameCookieDto}
+     * @memberof GenerateRequestIFrameDto
+     */
+    'cookie'?: GenerateRequestIFrameCookieDto;
+}
+

package/generated/models/generate-request-user-dto.ts

@@ -0,0 +1,64 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Humanos API
+ * Humanos API
+ *
+ * The version of the OpenAPI document: 1.0
+ * 
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+
+/**
+ * 
+ * @export
+ * @interface GenerateRequestUserDto
+ */
+export interface GenerateRequestUserDto {
+    /**
+     * Contact email or phone number
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'contact': string;
+    /**
+     * Secondary contact email or phone number. When present, first contact will receive the OTP code and the secondary contact will receive the link to complete the request.
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'secondaryContact'?: string;
+    /**
+     * Known document ID of the user, expected to be returned by the KYC verification
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'docId'?: string;
+    /**
+     * Language for OTP notifications. Defaults to the contact phone nationality, or ENG.
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'language'?: GenerateRequestUserDtoLanguageEnum;
+    /**
+     * Signer quality for this request. Free text; if omitted for an existing member, the member quality is propagated.
+     * @type {string}
+     * @memberof GenerateRequestUserDto
+     */
+    'signerQuality'?: string;
+}
+
+export const GenerateRequestUserDtoLanguageEnum = {
+    Eng: 'ENG',
+    Prt: 'PRT',
+    Spa: 'SPA',
+    Fra: 'FRA'
+} as const;
+
+export type GenerateRequestUserDtoLanguageEnum = typeof GenerateRequestUserDtoLanguageEnum[keyof typeof GenerateRequestUserDtoLanguageEnum];
+
+

package/generated/models/generate-subject-entity.ts

@@ -33,11 +33,11 @@ export interface GenerateSubjectEntity {
      */
     'id': string;
     /**
-     * Code for the subject-OTP link.     Only present if the issuer is configured to not send the OTP.
+     * Secondary contact (phone or email) used in 2FA mode to receive the signing link.
      * @type {string}
      * @memberof GenerateSubjectEntity
      */
-    'code'?: string;
+    'secondaryContact'?: string;
     /**
      * Link to the subject-OTP link.     Only present if the issuer is configured to not send the OTP.
      * @type {string}

package/generated/models/identity-event-decision.ts

@@ -26,30 +26,12 @@ export interface IdentityEventDecision {
      * @memberof IdentityEventDecision
      */
     'success': boolean;
-    /**
-     * 
-     * @type {boolean}
-     * @memberof IdentityEventDecision
-     */
-    'isFraud': boolean;
-    /**
-     * 
-     * @type {number}
-     * @memberof IdentityEventDecision
-     */
-    'riskScore'?: number;
     /**
      * 
      * @type {string}
      * @memberof IdentityEventDecision
      */
     'message'?: string;
-    /**
-     * 
-     * @type {string}
-     * @memberof IdentityEventDecision
-     */
-    'outcome'?: string;
     /**
      * 
      * @type {string}

package/generated/models/identity-event.ts

@@ -21,7 +21,7 @@ import type { IdentityEventDecision } from './identity-event-decision';
 import type { IdentityEventUser } from './identity-event-user';
 // May contain unused imports in some cases
 // @ts-ignore
-import type { IdentityPayload } from './identity-payload';
+import type { IdentityWebhook } from './identity-webhook';
 
 /**
  * 
@@ -69,10 +69,10 @@ export interface IdentityEvent {
     'api_version': string;
     /**
      * 
-     * @type {IdentityPayload}
+     * @type {IdentityWebhook}
      * @memberof IdentityEvent
      */
-    'identity'?: IdentityPayload;
+    'identity'?: IdentityWebhook;
     /**
      * 
      * @type {IdentityEventDecision}

package/generated/models/{w3-cverifiable-credential-valid-from.ts → identity-webhook-issue-date.ts}

@@ -17,8 +17,8 @@
 /**
  * 
  * @export
- * @interface W3CVerifiableCredentialValidFrom
+ * @interface IdentityWebhookIssueDate
  */
-export interface W3CVerifiableCredentialValidFrom {
+export interface IdentityWebhookIssueDate {
 }