{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "minLength": 1,
      "description": "Credential configuration identifier."
    },
    "description": {
      "description": "Optional description for operators and tooling.",
      "type": [
        "string",
        "null"
      ]
    },
    "config": {
      "type": "object",
      "properties": {
        "format": {
          "type": "string",
          "enum": [
            "mso_mdoc",
            "dc+sd-jwt"
          ],
          "description": "Credential format emitted by this configuration."
        },
        "display": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "locale": {
                "type": "string",
                "minLength": 1,
                "description": "Locale tag for the display entry."
              },
              "name": {
                "type": "string",
                "minLength": 1,
                "description": "Human-readable field name."
              },
              "description": {
                "description": "Optional field description for this locale.",
                "type": "string"
              },
              "background_color": {
                "description": "Optional background color for card-style rendering.",
                "type": "string"
              },
              "text_color": {
                "description": "Optional text color for card-style rendering.",
                "type": "string"
              },
              "background_image": {
                "description": "Optional background image.",
                "type": "object",
                "properties": {
                  "uri": {
                    "type": "string",
                    "minLength": 1,
                    "description": "Image URI."
                  }
                },
                "required": [
                  "uri"
                ],
                "additionalProperties": false
              },
              "logo": {
                "description": "Optional logo image.",
                "type": "object",
                "properties": {
                  "uri": {
                    "type": "string",
                    "minLength": 1,
                    "description": "Image URI."
                  }
                },
                "required": [
                  "uri"
                ],
                "additionalProperties": false
              }
            },
            "required": [
              "locale",
              "name"
            ],
            "additionalProperties": false
          },
          "description": "Display metadata shown by wallets."
        },
        "scope": {
          "description": "Optional OAuth scope associated with this credential type.",
          "type": "string"
        },
        "docType": {
          "description": "Optional mDoc document type.",
          "type": "string"
        },
        "keyAttestationsRequired": {
          "description": "Optional key attestation requirements.",
          "type": "object",
          "properties": {
            "key_storage": {
              "description": "Required key storage attestations.",
              "type": "array",
              "items": {
                "type": "string"
              }
            },
            "user_authentication": {
              "description": "Required user authentication attestations.",
              "type": "array",
              "items": {
                "type": "string"
              }
            }
          },
          "additionalProperties": false
        },
        "proofTypesSupported": {
          "description": "Supported proof types for issuance requests.",
          "type": "array",
          "items": {
            "type": "string",
            "enum": [
              "jwt",
              "attestation"
            ]
          }
        },
        "credentialReusePolicy": {
          "description": "Optional PID/EAA reuse policy published in credential metadata.",
          "type": "object",
          "properties": {
            "id": {
              "type": "string",
              "minLength": 1
            },
            "options": {
              "type": "array",
              "items": {
                "type": "object",
                "properties": {
                  "details": {
                    "minItems": 1,
                    "type": "array",
                    "items": {
                      "type": "string",
                      "enum": [
                        "once_only",
                        "limited_time",
                        "limited-time",
                        "rotating-batch",
                        "per-relying-party"
                      ]
                    }
                  },
                  "batch_size": {
                    "type": "integer",
                    "minimum": 2,
                    "maximum": 9007199254740991
                  },
                  "reissue_trigger_unused": {
                    "type": "integer",
                    "minimum": 0,
                    "maximum": 9007199254740991
                  },
                  "reissue_trigger_lifetime_left": {
                    "type": "integer",
                    "minimum": 0,
                    "maximum": 9007199254740991
                  }
                },
                "required": [
                  "details"
                ],
                "additionalProperties": false
              }
            }
          },
          "required": [
            "id"
          ],
          "additionalProperties": false
        }
      },
      "required": [
        "format",
        "display"
      ],
      "additionalProperties": false,
      "description": "Issuer metadata-facing credential configuration."
    },
    "fields": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/__schema0"
      },
      "description": "Claim field definitions for credential issuance."
    },
    "attributeProviderId": {
      "description": "Optional attribute provider id used to resolve claim values.",
      "type": [
        "string",
        "null"
      ]
    },
    "webhookEndpointId": {
      "description": "Optional webhook endpoint id notified during issuance events.",
      "type": [
        "string",
        "null"
      ]
    },
    "vct": {
      "description": "Optional VCT value or structured VCT metadata.",
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "object",
          "properties": {
            "vct": {
              "description": "VCT identifier.",
              "type": "string"
            },
            "name": {
              "description": "Human-readable VCT name.",
              "type": "string"
            },
            "description": {
              "description": "Optional VCT description.",
              "type": "string"
            },
            "extends": {
              "description": "Optional base VCT reference.",
              "type": "string"
            },
            "extends#integrity": {
              "description": "Integrity hash for the extends reference.",
              "type": "string"
            },
            "schema_uri": {
              "description": "Optional schema URI for the VCT.",
              "type": "string"
            },
            "schema_uri#integrity": {
              "description": "Integrity hash for schema_uri.",
              "type": "string"
            }
          },
          "additionalProperties": false
        },
        {
          "type": "null"
        }
      ]
    },
    "keyBinding": {
      "description": "Enable key binding requirements.",
      "type": "boolean"
    },
    "keyChainId": {
      "description": "Optional key chain id used for credential signing.",
      "type": "string",
      "minLength": 1
    },
    "statusManagement": {
      "description": "Enable status management for issued credentials.",
      "type": "boolean"
    },
    "activeCredentials": {
      "description": "Optional issuer-side policy limiting simultaneously active credentials per subject. Requires statusManagement.",
      "anyOf": [
        {
          "type": "object",
          "properties": {
            "enabled": {
              "type": "boolean",
              "description": "Ensure a subject has at most one active credential of this configuration."
            },
            "tracking": {
              "description": "How the subject's active credential set is tracked. Only 'internal' (pseudonymous, issuer-side) is currently supported.",
              "type": "string",
              "enum": [
                "internal"
              ]
            }
          },
          "required": [
            "enabled"
          ],
          "additionalProperties": false,
          "description": "Issuer-side policy limiting the number of simultaneously active credentials per subject."
        },
        {
          "type": "null"
        }
      ]
    },
    "iaeActions": {
      "description": "Optional in-app experience actions for wallet flows.",
      "anyOf": [
        {
          "type": "array",
          "items": {
            "oneOf": [
              {
                "type": "object",
                "properties": {
                  "type": {
                    "type": "string",
                    "const": "openid4vp_presentation",
                    "description": "Trigger an OpenID4VP presentation action."
                  },
                  "label": {
                    "description": "Optional UI label for the action.",
                    "type": "string"
                  },
                  "presentationConfigId": {
                    "type": "string",
                    "minLength": 1,
                    "description": "Presentation configuration id to execute."
                  }
                },
                "required": [
                  "type",
                  "presentationConfigId"
                ],
                "additionalProperties": false
              },
              {
                "type": "object",
                "properties": {
                  "type": {
                    "type": "string",
                    "const": "redirect_to_web",
                    "description": "Trigger a redirect-to-web action."
                  },
                  "label": {
                    "description": "Optional UI label for the action.",
                    "type": "string"
                  },
                  "url": {
                    "type": "string",
                    "format": "uri",
                    "description": "Destination URL for the redirect action."
                  },
                  "callbackUrl": {
                    "description": "Optional callback URL after redirect completion.",
                    "type": "string",
                    "format": "uri"
                  },
                  "description": {
                    "description": "Optional action description.",
                    "type": "string"
                  }
                },
                "required": [
                  "type",
                  "url"
                ],
                "additionalProperties": false
              }
            ],
            "description": "In-app experience action definitions."
          }
        },
        {
          "type": "null"
        }
      ]
    },
    "sdJwtTrustFormat": {
      "description": "Trust format used for SD-JWT verification metadata.",
      "anyOf": [
        {
          "type": "string",
          "enum": [
            "x5c",
            "federation"
          ]
        },
        {
          "type": "null"
        }
      ]
    },
    "lifeTime": {
      "description": "Credential lifetime in seconds.",
      "type": "integer",
      "minimum": 1,
      "maximum": 9007199254740991
    },
    "schemaMeta": {
      "description": "Optional schema metadata and trust bindings.",
      "anyOf": [
        {
          "type": "object",
          "properties": {
            "id": {
              "description": "Optional schema metadata identifier.",
              "type": "string"
            },
            "name": {
              "description": "Optional schema metadata name.",
              "type": "string"
            },
            "version": {
              "type": "string",
              "description": "Schema metadata version."
            },
            "rulebookURI": {
              "description": "Optional rulebook URI reference.",
              "type": "string"
            },
            "attestationLoS": {
              "type": "string",
              "enum": [
                "iso_18045_high",
                "iso_18045_moderate",
                "iso_18045_enhanced-basic",
                "iso_18045_basic"
              ],
              "description": "Assurance level for attestation requirements."
            },
            "bindingType": {
              "type": "string",
              "enum": [
                "claim",
                "key",
                "biometric",
                "none"
              ],
              "description": "Subject binding type."
            },
            "schemaURIs": {
              "description": "Optional schema URI entries.",
              "type": "array",
              "items": {
                "type": "object",
                "properties": {
                  "credentialConfigId": {
                    "description": "Optional credential configuration id this schema URI applies to.",
                    "type": "string"
                  },
                  "format": {
                    "description": "Optional credential format for this schema URI.",
                    "type": "string"
                  },
                  "uri": {
                    "description": "Schema URI reference.",
                    "type": "string"
                  },
                  "meta": {
                    "description": "Optional metadata attached to the schema URI.",
                    "type": "object",
                    "propertyNames": {
                      "type": "string"
                    },
                    "additionalProperties": {}
                  }
                },
                "additionalProperties": false
              }
            },
            "trustedAuthorities": {
              "description": "Optional trusted authority entries.",
              "type": "array",
              "items": {
                "type": "object",
                "properties": {
                  "trustListId": {
                    "description": "Optional trust list id.",
                    "type": "string"
                  },
                  "frameworkType": {
                    "description": "Trust framework type.",
                    "type": "string",
                    "enum": [
                      "aki",
                      "etsi_tl",
                      "openid_federation"
                    ]
                  },
                  "value": {
                    "description": "Framework-specific authority value.",
                    "type": "string"
                  },
                  "verificationMethod": {
                    "description": "Verification method descriptor.",
                    "anyOf": [
                      {
                        "type": "object",
                        "propertyNames": {
                          "type": "string"
                        },
                        "additionalProperties": {}
                      },
                      {
                        "type": "string"
                      }
                    ]
                  }
                },
                "additionalProperties": false
              }
            }
          },
          "required": [
            "version",
            "attestationLoS",
            "bindingType"
          ],
          "additionalProperties": false
        },
        {
          "type": "null"
        }
      ]
    },
    "embeddedDisclosurePolicy": {
      "description": "Optional embedded disclosure policy.",
      "anyOf": [
        {
          "oneOf": [
            {
              "type": "object",
              "properties": {
                "policy": {
                  "type": "string",
                  "const": "attestationBased",
                  "description": "Attestation-based policy discriminator."
                },
                "values": {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "properties": {
                      "claims": {
                        "description": "Claims constraints considered by policy evaluation.",
                        "type": "array",
                        "items": {}
                      },
                      "credentials": {
                        "type": "array",
                        "items": {},
                        "description": "Credential constraints considered by policy evaluation."
                      },
                      "credential_sets": {
                        "description": "Optional credential set constraints.",
                        "type": "array",
                        "items": {}
                      }
                    },
                    "required": [
                      "credentials"
                    ],
                    "additionalProperties": false
                  },
                  "description": "Attestation requirements used for policy enforcement."
                }
              },
              "required": [
                "policy",
                "values"
              ],
              "additionalProperties": false
            },
            {
              "type": "object",
              "properties": {
                "policy": {
                  "type": "string",
                  "const": "none",
                  "description": "No disclosure policy enforcement."
                }
              },
              "required": [
                "policy"
              ],
              "additionalProperties": false
            },
            {
              "type": "object",
              "properties": {
                "policy": {
                  "type": "string",
                  "const": "allowList",
                  "description": "Allow-list based policy discriminator."
                },
                "values": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  },
                  "description": "Allowed values for policy checks."
                }
              },
              "required": [
                "policy",
                "values"
              ],
              "additionalProperties": false
            },
            {
              "type": "object",
              "properties": {
                "policy": {
                  "type": "string",
                  "const": "rootOfTrust",
                  "description": "Root-of-trust policy discriminator."
                },
                "values": {
                  "type": "string",
                  "description": "Root-of-trust identifier or reference."
                }
              },
              "required": [
                "policy",
                "values"
              ],
              "additionalProperties": false
            }
          ],
          "description": "Embedded disclosure policy configuration."
        },
        {
          "type": "null"
        }
      ]
    }
  },
  "required": [
    "id",
    "config",
    "fields"
  ],
  "additionalProperties": false,
  "description": "Payload for creating credential issuance configuration.",
  "$defs": {
    "__schema0": {
      "type": "object",
      "properties": {
        "path": {
          "type": "array",
          "items": {
            "type": [
              "string",
              "number",
              "null"
            ]
          },
          "description": "Path to this claim inside the credential payload."
        },
        "type": {
          "type": "string",
          "enum": [
            "string",
            "number",
            "integer",
            "boolean",
            "object",
            "array"
          ],
          "description": "Data type of the claim value."
        },
        "defaultValue": {
          "description": "Optional default value for this field."
        },
        "mandatory": {
          "description": "Whether the field is required at issuance time.",
          "type": "boolean"
        },
        "disclosable": {
          "description": "Whether the claim is selectively disclosable.",
          "type": "boolean"
        },
        "namespace": {
          "description": "Optional namespace for claim grouping.",
          "type": "string"
        },
        "display": {
          "description": "Localized display metadata for this field.",
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "locale": {
                "type": "string",
                "minLength": 1,
                "description": "Locale tag for the display entry."
              },
              "name": {
                "type": "string",
                "minLength": 1,
                "description": "Human-readable field name."
              },
              "description": {
                "description": "Optional field description for this locale.",
                "type": "string"
              }
            },
            "required": [
              "locale",
              "name"
            ],
            "additionalProperties": false
          }
        },
        "constraints": {
          "description": "Optional validation constraints for the claim value.",
          "type": "object",
          "propertyNames": {
            "type": "string"
          },
          "additionalProperties": {}
        },
        "children": {
          "description": "Nested child claim definitions for object or array fields.",
          "type": "array",
          "items": {
            "$ref": "#/$defs/__schema0"
          }
        }
      },
      "required": [
        "path",
        "type"
      ],
      "additionalProperties": false
    }
  },
  "$id": "./CredentialConfigCreate.schema.json",
  "title": "CredentialConfigCreate"
}