import * as zod from 'zod';
import { z } from 'zod';
import { ItWalletSpecsVersion, HashCallback, JwtSignerJwk, CallbackContext } from '@pagopa/io-wallet-utils';
import * as zod_v4_core from 'zod/v4/core';

/**
 *
 * {@link https://italia.github.io/eid-wallet-it-docs/releases/1.3.3/en/credential-issuer-solution.html#metadata-for-oauth-authorization-server}
 *
 */
declare const itWalletAuthorizationServerMetadata$1: z.ZodObject<{
    acr_values_supported: z.ZodArray<z.ZodString>;
    authorization_endpoint: z.ZodURL;
    authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    client_attestation_pop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    client_attestation_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
    code_challenge_methods_supported: z.ZodArray<z.ZodString>;
    dpop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    grant_types_supported: z.ZodArray<z.ZodString>;
    issuer: z.ZodURL;
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    pushed_authorization_request_endpoint: z.ZodURL;
    request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    require_signed_request_object: z.ZodLiteral<true>;
    response_types_supported: z.ZodArray<z.ZodString>;
    scopes_supported: z.ZodArray<z.ZodString>;
    token_endpoint: z.ZodURL;
    token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
    token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
}, z.core.$loose>;
type ItWalletAuthorizationServerMetadata$2 = z.input<typeof itWalletAuthorizationServerMetadata$1>;
declare const itWalletAuthorizationServerIdentifier$1 = "oauth_authorization_server";

/**
 *
 * {@link https://italia.github.io/eid-wallet-it-docs/releases/1.1.0/en/credential-issuer-solution.html#metadata-for-oauth-authorization-server}
 *
 */
declare const itWalletAuthorizationServerMetadata: z.ZodObject<{
    acr_values_supported: z.ZodArray<z.ZodString>;
    authorization_endpoint: z.ZodURL;
    authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
    code_challenge_methods_supported: z.ZodArray<z.ZodString>;
    grant_types_supported: z.ZodArray<z.ZodString>;
    issuer: z.ZodURL;
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    pushed_authorization_request_endpoint: z.ZodURL;
    request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    require_signed_request_object: z.ZodOptional<z.ZodBoolean>;
    response_modes_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"query">, z.ZodLiteral<"form_post.jwt">]>>;
    response_types_supported: z.ZodArray<z.ZodString>;
    scopes_supported: z.ZodArray<z.ZodString>;
    token_endpoint: z.ZodURL;
    token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
    token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
}, z.core.$loose>;
type ItWalletAuthorizationServerMetadata$1 = z.input<typeof itWalletAuthorizationServerMetadata>;
declare const itWalletAuthorizationServerIdentifier = "oauth_authorization_server";

declare const jsonWebKeySchema: z.ZodObject<{
    alg: z.ZodOptional<z.ZodString>;
    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
    kid: z.ZodString;
    kty: z.ZodString;
    use: z.ZodOptional<z.ZodString>;
    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
    x5t: z.ZodOptional<z.ZodString>;
    "x5t#S256": z.ZodOptional<z.ZodString>;
    x5u: z.ZodOptional<z.ZodString>;
}, z.core.$loose>;
type JsonWebKey = z.input<typeof jsonWebKeySchema>;
declare const jsonWebKeySetSchema: z.ZodObject<{
    keys: z.ZodArray<z.ZodObject<{
        alg: z.ZodOptional<z.ZodString>;
        key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
        kid: z.ZodString;
        kty: z.ZodString;
        use: z.ZodOptional<z.ZodString>;
        x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
        x5t: z.ZodOptional<z.ZodString>;
        "x5t#S256": z.ZodOptional<z.ZodString>;
        x5u: z.ZodOptional<z.ZodString>;
    }, z.core.$loose>>;
}, z.core.$strip>;
type jsonWebKeySet = z.infer<typeof jsonWebKeySetSchema>;

type SignCallback = (options: {
    jwk: JsonWebKey;
    toBeSigned: Uint8Array;
}) => Promise<Uint8Array>;

declare const itWalletMetadataV1_0: z.ZodObject<{
    oauth_authorization_server: z.ZodOptional<z.ZodObject<{
        acr_values_supported: z.ZodArray<z.ZodString>;
        authorization_endpoint: z.ZodURL;
        authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
        code_challenge_methods_supported: z.ZodArray<z.ZodString>;
        grant_types_supported: z.ZodArray<z.ZodString>;
        issuer: z.ZodURL;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        pushed_authorization_request_endpoint: z.ZodURL;
        request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        require_signed_request_object: z.ZodOptional<z.ZodBoolean>;
        response_modes_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"query">, z.ZodLiteral<"form_post.jwt">]>>;
        response_types_supported: z.ZodArray<z.ZodString>;
        scopes_supported: z.ZodArray<z.ZodString>;
        token_endpoint: z.ZodURL;
        token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
        token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    }, z.core.$loose>>;
    openid_credential_issuer: z.ZodOptional<z.ZodObject<{
        authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
        batch_credential_issuance: z.ZodObject<{
            batch_size: z.ZodNumber;
        }, z.core.$strip>;
        credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            format: z.ZodLiteral<"dc+sd-jwt">;
            vct: z.ZodString;
        }, z.core.$strip>, z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
            doctype: z.ZodString;
            format: z.ZodLiteral<"mso_mdoc">;
        }, z.core.$strip>], "format">, z.ZodObject<{
            claims: z.ZodArray<z.ZodObject<{
                display: z.ZodArray<z.ZodObject<{
                    locale: z.ZodString;
                    name: z.ZodString;
                }, z.core.$strip>>;
                path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
            }, z.core.$strip>>;
            cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
            display: z.ZodArray<z.ZodObject<{
                locale: z.ZodString;
                name: z.ZodString;
            }, z.core.$strip>>;
            proof_types_supported: z.ZodObject<{
                jwt: z.ZodObject<{
                    proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                }, z.core.$strip>;
            }, z.core.$strip>;
            scope: z.ZodString;
        }, z.core.$strip>>>;
        credential_endpoint: z.ZodURL;
        credential_hash_alg_supported: z.ZodString;
        credential_issuer: z.ZodURL;
        deferred_credential_endpoint: z.ZodURL;
        display: z.ZodArray<z.ZodObject<{
            locale: z.ZodString;
            name: z.ZodString;
        }, z.core.$strip>>;
        evidence_supported: z.ZodArray<z.ZodString>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        nonce_endpoint: z.ZodURL;
        notification_endpoint: z.ZodURL;
        revocation_endpoint: z.ZodURL;
        status_assertion_endpoint: z.ZodURL;
        status_attestation_endpoint: z.ZodURL;
        trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"eudi_wallet">]>>;
    }, z.core.$loose>>;
    openid_credential_verifier: z.ZodOptional<z.ZodObject<{
        application_type: z.ZodLiteral<"web">;
        authorization_encrypted_response_alg: z.ZodString;
        authorization_encrypted_response_enc: z.ZodString;
        authorization_signed_response_alg: z.ZodString;
        client_id: z.ZodURL;
        client_name: z.ZodString;
        erasure_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        request_uris: z.ZodArray<z.ZodURL>;
        response_uris: z.ZodArray<z.ZodURL>;
        vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<{
            alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
            "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$loose>>;
    federation_entity: z.ZodOptional<z.ZodObject<{
        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
        homepage_uri: z.ZodOptional<z.ZodURL>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        logo_uri: z.ZodOptional<z.ZodURL>;
        organization_name: z.ZodOptional<z.ZodString>;
        policy_uri: z.ZodOptional<z.ZodURL>;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
        federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
        federation_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        tos_uri: z.ZodOptional<z.ZodURL>;
    }, z.core.$loose>>;
    wallet_provider: z.ZodOptional<z.ZodObject<{
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
    }, z.core.$loose>>;
}, z.core.$strict>;
declare const itWalletMetadataV1_3: z.ZodObject<{
    oauth_authorization_server: z.ZodOptional<z.ZodObject<{
        acr_values_supported: z.ZodArray<z.ZodString>;
        authorization_endpoint: z.ZodURL;
        authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_attestation_pop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_attestation_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
        code_challenge_methods_supported: z.ZodArray<z.ZodString>;
        dpop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        grant_types_supported: z.ZodArray<z.ZodString>;
        issuer: z.ZodURL;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        pushed_authorization_request_endpoint: z.ZodURL;
        request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        require_signed_request_object: z.ZodLiteral<true>;
        response_types_supported: z.ZodArray<z.ZodString>;
        scopes_supported: z.ZodArray<z.ZodString>;
        token_endpoint: z.ZodURL;
        token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
        token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    }, z.core.$loose>>;
    openid_credential_issuer: z.ZodOptional<z.ZodObject<{
        authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
        batch_credential_issuance: z.ZodOptional<z.ZodObject<{
            batch_size: z.ZodNumber;
        }, z.core.$strip>>;
        credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            format: z.ZodLiteral<"dc+sd-jwt">;
            vct: z.ZodString;
        }, z.core.$strip>, z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
            doctype: z.ZodString;
            format: z.ZodLiteral<"mso_mdoc">;
        }, z.core.$strip>], "format">, z.ZodObject<{
            authentic_sources: z.ZodObject<{
                dataset_id: z.ZodString;
                entity_id: z.ZodString;
            }, z.core.$strip>;
            credential_metadata: z.ZodObject<{
                claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        description: z.ZodOptional<z.ZodString>;
                        locale: z.ZodString;
                        name: z.ZodString;
                    }, z.core.$strip>>>;
                    mandatory: z.ZodOptional<z.ZodBoolean>;
                    path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
                    sd: z.ZodOptional<z.ZodEnum<{
                        never: "never";
                        always: "always";
                    }>>;
                }, z.core.$strip>>>;
                display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    background_color: z.ZodOptional<z.ZodString>;
                    background_image: z.ZodOptional<z.ZodObject<{
                        alt_text: z.ZodOptional<z.ZodString>;
                        uri: z.ZodURL;
                        "uri#integrity": z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>;
                    description: z.ZodOptional<z.ZodString>;
                    locale: z.ZodString;
                    logo: z.ZodOptional<z.ZodObject<{
                        alt_text: z.ZodOptional<z.ZodString>;
                        uri: z.ZodURL;
                        "uri#integrity": z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>;
                    name: z.ZodString;
                    watermark_image: z.ZodOptional<z.ZodObject<{
                        alt_text: z.ZodOptional<z.ZodString>;
                        uri: z.ZodURL;
                        "uri#integrity": z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>;
                }, z.core.$strip>>>;
            }, z.core.$strip>;
            cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
            proof_types_supported: z.ZodObject<{
                jwt: z.ZodObject<{
                    key_attestations_required: z.ZodOptional<z.ZodObject<{
                        key_storage: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                            iso_18045_high: "iso_18045_high";
                            iso_18045_moderate: "iso_18045_moderate";
                            "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                            iso_18045_basic: "iso_18045_basic";
                        }>>>;
                        user_authentication: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                            iso_18045_high: "iso_18045_high";
                            iso_18045_moderate: "iso_18045_moderate";
                            "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                            iso_18045_basic: "iso_18045_basic";
                        }>>>;
                    }, z.core.$strip>>;
                    proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                }, z.core.$strip>;
            }, z.core.$strip>;
            schema_id: z.ZodString;
            scope: z.ZodString;
        }, z.core.$strip>>>;
        credential_endpoint: z.ZodURL;
        credential_issuer: z.ZodURL;
        deferred_credential_endpoint: z.ZodOptional<z.ZodURL>;
        display: z.ZodOptional<z.ZodArray<z.ZodObject<{
            background_color: z.ZodOptional<z.ZodString>;
            background_image: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
            description: z.ZodOptional<z.ZodString>;
            locale: z.ZodString;
            logo: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
            name: z.ZodString;
            watermark_image: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
        }, z.core.$strip>>>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        nonce_endpoint: z.ZodOptional<z.ZodURL>;
        notification_endpoint: z.ZodOptional<z.ZodURL>;
        status_list_aggregation_endpoint: z.ZodOptional<z.ZodURL>;
        trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"eudi_wallet">, z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"it_l2+document_proof">, z.ZodLiteral<"it_spid">]>>;
    }, z.core.$loose>>;
    openid_credential_verifier: z.ZodOptional<z.ZodObject<{
        application_type: z.ZodLiteral<"web">;
        client_id: z.ZodURL;
        client_name: z.ZodString;
        encrypted_response_enc_values_supported: z.ZodArray<z.ZodString>;
        erasure_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        logo_uri: z.ZodURL;
        request_uris: z.ZodArray<z.ZodURL>;
        response_uris: z.ZodArray<z.ZodURL>;
        vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
            alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
            deviceauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
            issuerauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
            "kb-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
            "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$loose>>;
    federation_entity: z.ZodOptional<z.ZodObject<{
        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
        homepage_uri: z.ZodOptional<z.ZodURL>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        logo_uri: z.ZodOptional<z.ZodURL>;
        organization_name: z.ZodOptional<z.ZodString>;
        policy_uri: z.ZodOptional<z.ZodURL>;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
        federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
        federation_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        tos_uri: z.ZodOptional<z.ZodURL>;
    }, z.core.$loose>>;
    wallet_solution: z.ZodOptional<z.ZodObject<{
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        logo_uri: z.ZodURL;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        wallet_metadata: z.ZodObject<{
            authorization_endpoint: z.ZodURL;
            client_id_prefixes_supported: z.ZodArray<z.ZodEnum<{
                openid_federation: "openid_federation";
                x509_hash: "x509_hash";
            }>>;
            credential_offer_endpoint: z.ZodURL;
            request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            response_modes_supported: z.ZodArray<z.ZodLiteral<"query">>;
            response_types_supported: z.ZodArray<z.ZodString>;
            vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{}, z.core.$loose>>;
            wallet_name: z.ZodString;
        }, z.core.$loose>;
    }, z.core.$loose>>;
}, z.core.$strict>;
declare const itWalletMetadataSchema: z.ZodUnion<[z.ZodObject<{
    oauth_authorization_server: z.ZodOptional<z.ZodObject<{
        acr_values_supported: z.ZodArray<z.ZodString>;
        authorization_endpoint: z.ZodURL;
        authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_attestation_pop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_attestation_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
        code_challenge_methods_supported: z.ZodArray<z.ZodString>;
        dpop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        grant_types_supported: z.ZodArray<z.ZodString>;
        issuer: z.ZodURL;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        pushed_authorization_request_endpoint: z.ZodURL;
        request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        require_signed_request_object: z.ZodLiteral<true>;
        response_types_supported: z.ZodArray<z.ZodString>;
        scopes_supported: z.ZodArray<z.ZodString>;
        token_endpoint: z.ZodURL;
        token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
        token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    }, z.core.$loose>>;
    openid_credential_issuer: z.ZodOptional<z.ZodObject<{
        authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
        batch_credential_issuance: z.ZodOptional<z.ZodObject<{
            batch_size: z.ZodNumber;
        }, z.core.$strip>>;
        credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            format: z.ZodLiteral<"dc+sd-jwt">;
            vct: z.ZodString;
        }, z.core.$strip>, z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
            doctype: z.ZodString;
            format: z.ZodLiteral<"mso_mdoc">;
        }, z.core.$strip>], "format">, z.ZodObject<{
            authentic_sources: z.ZodObject<{
                dataset_id: z.ZodString;
                entity_id: z.ZodString;
            }, z.core.$strip>;
            credential_metadata: z.ZodObject<{
                claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        description: z.ZodOptional<z.ZodString>;
                        locale: z.ZodString;
                        name: z.ZodString;
                    }, z.core.$strip>>>;
                    mandatory: z.ZodOptional<z.ZodBoolean>;
                    path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
                    sd: z.ZodOptional<z.ZodEnum<{
                        never: "never";
                        always: "always";
                    }>>;
                }, z.core.$strip>>>;
                display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    background_color: z.ZodOptional<z.ZodString>;
                    background_image: z.ZodOptional<z.ZodObject<{
                        alt_text: z.ZodOptional<z.ZodString>;
                        uri: z.ZodURL;
                        "uri#integrity": z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>;
                    description: z.ZodOptional<z.ZodString>;
                    locale: z.ZodString;
                    logo: z.ZodOptional<z.ZodObject<{
                        alt_text: z.ZodOptional<z.ZodString>;
                        uri: z.ZodURL;
                        "uri#integrity": z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>;
                    name: z.ZodString;
                    watermark_image: z.ZodOptional<z.ZodObject<{
                        alt_text: z.ZodOptional<z.ZodString>;
                        uri: z.ZodURL;
                        "uri#integrity": z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>;
                }, z.core.$strip>>>;
            }, z.core.$strip>;
            cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
            proof_types_supported: z.ZodObject<{
                jwt: z.ZodObject<{
                    key_attestations_required: z.ZodOptional<z.ZodObject<{
                        key_storage: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                            iso_18045_high: "iso_18045_high";
                            iso_18045_moderate: "iso_18045_moderate";
                            "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                            iso_18045_basic: "iso_18045_basic";
                        }>>>;
                        user_authentication: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                            iso_18045_high: "iso_18045_high";
                            iso_18045_moderate: "iso_18045_moderate";
                            "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                            iso_18045_basic: "iso_18045_basic";
                        }>>>;
                    }, z.core.$strip>>;
                    proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                }, z.core.$strip>;
            }, z.core.$strip>;
            schema_id: z.ZodString;
            scope: z.ZodString;
        }, z.core.$strip>>>;
        credential_endpoint: z.ZodURL;
        credential_issuer: z.ZodURL;
        deferred_credential_endpoint: z.ZodOptional<z.ZodURL>;
        display: z.ZodOptional<z.ZodArray<z.ZodObject<{
            background_color: z.ZodOptional<z.ZodString>;
            background_image: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
            description: z.ZodOptional<z.ZodString>;
            locale: z.ZodString;
            logo: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
            name: z.ZodString;
            watermark_image: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
        }, z.core.$strip>>>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        nonce_endpoint: z.ZodOptional<z.ZodURL>;
        notification_endpoint: z.ZodOptional<z.ZodURL>;
        status_list_aggregation_endpoint: z.ZodOptional<z.ZodURL>;
        trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"eudi_wallet">, z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"it_l2+document_proof">, z.ZodLiteral<"it_spid">]>>;
    }, z.core.$loose>>;
    openid_credential_verifier: z.ZodOptional<z.ZodObject<{
        application_type: z.ZodLiteral<"web">;
        client_id: z.ZodURL;
        client_name: z.ZodString;
        encrypted_response_enc_values_supported: z.ZodArray<z.ZodString>;
        erasure_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        logo_uri: z.ZodURL;
        request_uris: z.ZodArray<z.ZodURL>;
        response_uris: z.ZodArray<z.ZodURL>;
        vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
            alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
            deviceauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
            issuerauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
            "kb-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
            "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$loose>>;
    federation_entity: z.ZodOptional<z.ZodObject<{
        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
        homepage_uri: z.ZodOptional<z.ZodURL>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        logo_uri: z.ZodOptional<z.ZodURL>;
        organization_name: z.ZodOptional<z.ZodString>;
        policy_uri: z.ZodOptional<z.ZodURL>;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
        federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
        federation_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        tos_uri: z.ZodOptional<z.ZodURL>;
    }, z.core.$loose>>;
    wallet_solution: z.ZodOptional<z.ZodObject<{
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        logo_uri: z.ZodURL;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        wallet_metadata: z.ZodObject<{
            authorization_endpoint: z.ZodURL;
            client_id_prefixes_supported: z.ZodArray<z.ZodEnum<{
                openid_federation: "openid_federation";
                x509_hash: "x509_hash";
            }>>;
            credential_offer_endpoint: z.ZodURL;
            request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            response_modes_supported: z.ZodArray<z.ZodLiteral<"query">>;
            response_types_supported: z.ZodArray<z.ZodString>;
            vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{}, z.core.$loose>>;
            wallet_name: z.ZodString;
        }, z.core.$loose>;
    }, z.core.$loose>>;
}, z.core.$strict>, z.ZodObject<{
    oauth_authorization_server: z.ZodOptional<z.ZodObject<{
        acr_values_supported: z.ZodArray<z.ZodString>;
        authorization_endpoint: z.ZodURL;
        authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
        code_challenge_methods_supported: z.ZodArray<z.ZodString>;
        grant_types_supported: z.ZodArray<z.ZodString>;
        issuer: z.ZodURL;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        pushed_authorization_request_endpoint: z.ZodURL;
        request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        require_signed_request_object: z.ZodOptional<z.ZodBoolean>;
        response_modes_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"query">, z.ZodLiteral<"form_post.jwt">]>>;
        response_types_supported: z.ZodArray<z.ZodString>;
        scopes_supported: z.ZodArray<z.ZodString>;
        token_endpoint: z.ZodURL;
        token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
        token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    }, z.core.$loose>>;
    openid_credential_issuer: z.ZodOptional<z.ZodObject<{
        authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
        batch_credential_issuance: z.ZodObject<{
            batch_size: z.ZodNumber;
        }, z.core.$strip>;
        credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            format: z.ZodLiteral<"dc+sd-jwt">;
            vct: z.ZodString;
        }, z.core.$strip>, z.ZodObject<{
            credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
            doctype: z.ZodString;
            format: z.ZodLiteral<"mso_mdoc">;
        }, z.core.$strip>], "format">, z.ZodObject<{
            claims: z.ZodArray<z.ZodObject<{
                display: z.ZodArray<z.ZodObject<{
                    locale: z.ZodString;
                    name: z.ZodString;
                }, z.core.$strip>>;
                path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
            }, z.core.$strip>>;
            cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
            display: z.ZodArray<z.ZodObject<{
                locale: z.ZodString;
                name: z.ZodString;
            }, z.core.$strip>>;
            proof_types_supported: z.ZodObject<{
                jwt: z.ZodObject<{
                    proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                }, z.core.$strip>;
            }, z.core.$strip>;
            scope: z.ZodString;
        }, z.core.$strip>>>;
        credential_endpoint: z.ZodURL;
        credential_hash_alg_supported: z.ZodString;
        credential_issuer: z.ZodURL;
        deferred_credential_endpoint: z.ZodURL;
        display: z.ZodArray<z.ZodObject<{
            locale: z.ZodString;
            name: z.ZodString;
        }, z.core.$strip>>;
        evidence_supported: z.ZodArray<z.ZodString>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        nonce_endpoint: z.ZodURL;
        notification_endpoint: z.ZodURL;
        revocation_endpoint: z.ZodURL;
        status_assertion_endpoint: z.ZodURL;
        status_attestation_endpoint: z.ZodURL;
        trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"eudi_wallet">]>>;
    }, z.core.$loose>>;
    openid_credential_verifier: z.ZodOptional<z.ZodObject<{
        application_type: z.ZodLiteral<"web">;
        authorization_encrypted_response_alg: z.ZodString;
        authorization_encrypted_response_enc: z.ZodString;
        authorization_signed_response_alg: z.ZodString;
        client_id: z.ZodURL;
        client_name: z.ZodString;
        erasure_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        request_uris: z.ZodArray<z.ZodURL>;
        response_uris: z.ZodArray<z.ZodURL>;
        vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<{
            alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
            "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$loose>>;
    federation_entity: z.ZodOptional<z.ZodObject<{
        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
        homepage_uri: z.ZodOptional<z.ZodURL>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        logo_uri: z.ZodOptional<z.ZodURL>;
        organization_name: z.ZodOptional<z.ZodString>;
        policy_uri: z.ZodOptional<z.ZodURL>;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
        federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
        federation_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        tos_uri: z.ZodOptional<z.ZodURL>;
    }, z.core.$loose>>;
    wallet_provider: z.ZodOptional<z.ZodObject<{
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
    }, z.core.$loose>>;
}, z.core.$strict>]>;
type ItWalletMetadataV1_0 = z.output<typeof itWalletMetadataV1_0>;
type ItWalletMetadataV1_3 = z.output<typeof itWalletMetadataV1_3>;
type ItWalletMetadata = ItWalletMetadataV1_0 | ItWalletMetadataV1_3;
type ItWalletMetadataByVersion<V extends ItWalletSpecsVersion> = V extends ItWalletSpecsVersion.V1_0 ? ItWalletMetadataV1_0 : V extends ItWalletSpecsVersion.V1_3 | ItWalletSpecsVersion.V1_4 ? ItWalletMetadataV1_3 : never;
/**
 * Checks whether a metadata object matches the schema for a specific IT-Wallet version.
 *
 * @param metadata - Metadata object to inspect.
 * @param version - IT-Wallet specification version to validate against.
 * @returns True when the metadata satisfies the version-specific schema.
 * @throws {ItWalletSpecsVersionError} If the version is unsupported.
 */
declare function isItWalletMetadataVersion<V extends ItWalletSpecsVersion>(metadata: unknown, version: V): metadata is ItWalletMetadataByVersion<V>;
/**
 * Parses metadata using the schema for a specific IT-Wallet version.
 *
 * @param metadata - Metadata object to parse.
 * @param version - IT-Wallet specification version to validate against.
 * @returns Version-specific IT-Wallet metadata.
 * @throws {ValidationError} If metadata does not satisfy the selected schema.
 * @throws {ItWalletSpecsVersionError} If the version is unsupported.
 */
declare function parseItWalletMetadataForVersion<V extends ItWalletSpecsVersion>(metadata: unknown, version: V): ItWalletMetadataByVersion<V>;

declare const baseSchema: z.ZodObject<{
    authority_hints: z.ZodOptional<z.ZodArray<z.ZodURL>>;
    constraints: z.ZodOptional<z.ZodObject<{
        allowed_entity_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
        max_path_length: z.ZodOptional<z.ZodNumber>;
        naming_constraints: z.ZodOptional<z.ZodObject<{
            excluded: z.ZodOptional<z.ZodArray<z.ZodString>>;
            permitted: z.ZodOptional<z.ZodArray<z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$strip>>;
    crit: z.ZodOptional<z.ZodArray<z.ZodString>>;
    exp: z.ZodNumber;
    iat: z.ZodNumber;
    iss: z.ZodString;
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    metadata: z.ZodOptional<z.ZodUnion<[z.ZodObject<{
        oauth_authorization_server: z.ZodOptional<z.ZodObject<{
            acr_values_supported: z.ZodArray<z.ZodString>;
            authorization_endpoint: z.ZodURL;
            authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            client_attestation_pop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            client_attestation_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
            code_challenge_methods_supported: z.ZodArray<z.ZodString>;
            dpop_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            grant_types_supported: z.ZodArray<z.ZodString>;
            issuer: z.ZodURL;
            jwks: z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>;
            pushed_authorization_request_endpoint: z.ZodURL;
            request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            require_signed_request_object: z.ZodLiteral<true>;
            response_types_supported: z.ZodArray<z.ZodString>;
            scopes_supported: z.ZodArray<z.ZodString>;
            token_endpoint: z.ZodURL;
            token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
            token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        }, z.core.$loose>>;
        openid_credential_issuer: z.ZodOptional<z.ZodObject<{
            authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
            batch_credential_issuance: z.ZodOptional<z.ZodObject<{
                batch_size: z.ZodNumber;
            }, z.core.$strip>>;
            credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
                credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                format: z.ZodLiteral<"dc+sd-jwt">;
                vct: z.ZodString;
            }, z.core.$strip>, z.ZodObject<{
                credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
                doctype: z.ZodString;
                format: z.ZodLiteral<"mso_mdoc">;
            }, z.core.$strip>], "format">, z.ZodObject<{
                authentic_sources: z.ZodObject<{
                    dataset_id: z.ZodString;
                    entity_id: z.ZodString;
                }, z.core.$strip>;
                credential_metadata: z.ZodObject<{
                    claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            description: z.ZodOptional<z.ZodString>;
                            locale: z.ZodString;
                            name: z.ZodString;
                        }, z.core.$strip>>>;
                        mandatory: z.ZodOptional<z.ZodBoolean>;
                        path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
                        sd: z.ZodOptional<z.ZodEnum<{
                            never: "never";
                            always: "always";
                        }>>;
                    }, z.core.$strip>>>;
                    display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        background_color: z.ZodOptional<z.ZodString>;
                        background_image: z.ZodOptional<z.ZodObject<{
                            alt_text: z.ZodOptional<z.ZodString>;
                            uri: z.ZodURL;
                            "uri#integrity": z.ZodOptional<z.ZodString>;
                        }, z.core.$strip>>;
                        description: z.ZodOptional<z.ZodString>;
                        locale: z.ZodString;
                        logo: z.ZodOptional<z.ZodObject<{
                            alt_text: z.ZodOptional<z.ZodString>;
                            uri: z.ZodURL;
                            "uri#integrity": z.ZodOptional<z.ZodString>;
                        }, z.core.$strip>>;
                        name: z.ZodString;
                        watermark_image: z.ZodOptional<z.ZodObject<{
                            alt_text: z.ZodOptional<z.ZodString>;
                            uri: z.ZodURL;
                            "uri#integrity": z.ZodOptional<z.ZodString>;
                        }, z.core.$strip>>;
                    }, z.core.$strip>>>;
                }, z.core.$strip>;
                cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
                proof_types_supported: z.ZodObject<{
                    jwt: z.ZodObject<{
                        key_attestations_required: z.ZodOptional<z.ZodObject<{
                            key_storage: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                                iso_18045_high: "iso_18045_high";
                                iso_18045_moderate: "iso_18045_moderate";
                                "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                                iso_18045_basic: "iso_18045_basic";
                            }>>>;
                            user_authentication: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                                iso_18045_high: "iso_18045_high";
                                iso_18045_moderate: "iso_18045_moderate";
                                "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                                iso_18045_basic: "iso_18045_basic";
                            }>>>;
                        }, z.core.$strip>>;
                        proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                    }, z.core.$strip>;
                }, z.core.$strip>;
                schema_id: z.ZodString;
                scope: z.ZodString;
            }, z.core.$strip>>>;
            credential_endpoint: z.ZodURL;
            credential_issuer: z.ZodURL;
            deferred_credential_endpoint: z.ZodOptional<z.ZodURL>;
            display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                background_color: z.ZodOptional<z.ZodString>;
                background_image: z.ZodOptional<z.ZodObject<{
                    alt_text: z.ZodOptional<z.ZodString>;
                    uri: z.ZodURL;
                    "uri#integrity": z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                description: z.ZodOptional<z.ZodString>;
                locale: z.ZodString;
                logo: z.ZodOptional<z.ZodObject<{
                    alt_text: z.ZodOptional<z.ZodString>;
                    uri: z.ZodURL;
                    "uri#integrity": z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                name: z.ZodString;
                watermark_image: z.ZodOptional<z.ZodObject<{
                    alt_text: z.ZodOptional<z.ZodString>;
                    uri: z.ZodURL;
                    "uri#integrity": z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
            jwks: z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>;
            nonce_endpoint: z.ZodOptional<z.ZodURL>;
            notification_endpoint: z.ZodOptional<z.ZodURL>;
            status_list_aggregation_endpoint: z.ZodOptional<z.ZodURL>;
            trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"eudi_wallet">, z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"it_l2+document_proof">, z.ZodLiteral<"it_spid">]>>;
        }, z.core.$loose>>;
        openid_credential_verifier: z.ZodOptional<z.ZodObject<{
            application_type: z.ZodLiteral<"web">;
            client_id: z.ZodURL;
            client_name: z.ZodString;
            encrypted_response_enc_values_supported: z.ZodArray<z.ZodString>;
            erasure_endpoint: z.ZodOptional<z.ZodURL>;
            jwks: z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>;
            logo_uri: z.ZodURL;
            request_uris: z.ZodArray<z.ZodURL>;
            response_uris: z.ZodArray<z.ZodURL>;
            vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
                alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
                deviceauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
                issuerauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
                "kb-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
                "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>>;
        }, z.core.$loose>>;
        federation_entity: z.ZodOptional<z.ZodObject<{
            contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
            homepage_uri: z.ZodOptional<z.ZodURL>;
            jwks_uri: z.ZodOptional<z.ZodURL>;
            logo_uri: z.ZodOptional<z.ZodURL>;
            organization_name: z.ZodOptional<z.ZodString>;
            policy_uri: z.ZodOptional<z.ZodURL>;
            signed_jwks_uri: z.ZodOptional<z.ZodURL>;
            federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
            federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
            federation_list_endpoint: z.ZodOptional<z.ZodURL>;
            federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
            federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
            federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
            federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
            jwks: z.ZodOptional<z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>>;
            tos_uri: z.ZodOptional<z.ZodURL>;
        }, z.core.$loose>>;
        wallet_solution: z.ZodOptional<z.ZodObject<{
            jwks: z.ZodOptional<z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>>;
            jwks_uri: z.ZodOptional<z.ZodURL>;
            logo_uri: z.ZodURL;
            signed_jwks_uri: z.ZodOptional<z.ZodURL>;
            wallet_metadata: z.ZodObject<{
                authorization_endpoint: z.ZodURL;
                client_id_prefixes_supported: z.ZodArray<z.ZodEnum<{
                    openid_federation: "openid_federation";
                    x509_hash: "x509_hash";
                }>>;
                credential_offer_endpoint: z.ZodURL;
                request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                response_modes_supported: z.ZodArray<z.ZodLiteral<"query">>;
                response_types_supported: z.ZodArray<z.ZodString>;
                vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{}, z.core.$loose>>;
                wallet_name: z.ZodString;
            }, z.core.$loose>;
        }, z.core.$loose>>;
    }, z.core.$strict>, z.ZodObject<{
        oauth_authorization_server: z.ZodOptional<z.ZodObject<{
            acr_values_supported: z.ZodArray<z.ZodString>;
            authorization_endpoint: z.ZodURL;
            authorization_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            client_registration_types_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"automatic">, z.ZodLiteral<"explicit">]>>;
            code_challenge_methods_supported: z.ZodArray<z.ZodString>;
            grant_types_supported: z.ZodArray<z.ZodString>;
            issuer: z.ZodURL;
            jwks: z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>;
            pushed_authorization_request_endpoint: z.ZodURL;
            request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            require_signed_request_object: z.ZodOptional<z.ZodBoolean>;
            response_modes_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"query">, z.ZodLiteral<"form_post.jwt">]>>;
            response_types_supported: z.ZodArray<z.ZodString>;
            scopes_supported: z.ZodArray<z.ZodString>;
            token_endpoint: z.ZodURL;
            token_endpoint_auth_methods_supported: z.ZodArray<z.ZodString>;
            token_endpoint_auth_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        }, z.core.$loose>>;
        openid_credential_issuer: z.ZodOptional<z.ZodObject<{
            authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
            batch_credential_issuance: z.ZodObject<{
                batch_size: z.ZodNumber;
            }, z.core.$strip>;
            credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
                credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                format: z.ZodLiteral<"dc+sd-jwt">;
                vct: z.ZodString;
            }, z.core.$strip>, z.ZodObject<{
                credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
                doctype: z.ZodString;
                format: z.ZodLiteral<"mso_mdoc">;
            }, z.core.$strip>], "format">, z.ZodObject<{
                claims: z.ZodArray<z.ZodObject<{
                    display: z.ZodArray<z.ZodObject<{
                        locale: z.ZodString;
                        name: z.ZodString;
                    }, z.core.$strip>>;
                    path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
                }, z.core.$strip>>;
                cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
                display: z.ZodArray<z.ZodObject<{
                    locale: z.ZodString;
                    name: z.ZodString;
                }, z.core.$strip>>;
                proof_types_supported: z.ZodObject<{
                    jwt: z.ZodObject<{
                        proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
                    }, z.core.$strip>;
                }, z.core.$strip>;
                scope: z.ZodString;
            }, z.core.$strip>>>;
            credential_endpoint: z.ZodURL;
            credential_hash_alg_supported: z.ZodString;
            credential_issuer: z.ZodURL;
            deferred_credential_endpoint: z.ZodURL;
            display: z.ZodArray<z.ZodObject<{
                locale: z.ZodString;
                name: z.ZodString;
            }, z.core.$strip>>;
            evidence_supported: z.ZodArray<z.ZodString>;
            jwks: z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>;
            nonce_endpoint: z.ZodURL;
            notification_endpoint: z.ZodURL;
            revocation_endpoint: z.ZodURL;
            status_assertion_endpoint: z.ZodURL;
            status_attestation_endpoint: z.ZodURL;
            trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"eudi_wallet">]>>;
        }, z.core.$loose>>;
        openid_credential_verifier: z.ZodOptional<z.ZodObject<{
            application_type: z.ZodLiteral<"web">;
            authorization_encrypted_response_alg: z.ZodString;
            authorization_encrypted_response_enc: z.ZodString;
            authorization_signed_response_alg: z.ZodString;
            client_id: z.ZodURL;
            client_name: z.ZodString;
            erasure_endpoint: z.ZodOptional<z.ZodURL>;
            jwks: z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>;
            request_uris: z.ZodArray<z.ZodURL>;
            response_uris: z.ZodArray<z.ZodURL>;
            vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<{
                alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
                "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>>;
        }, z.core.$loose>>;
        federation_entity: z.ZodOptional<z.ZodObject<{
            contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
            homepage_uri: z.ZodOptional<z.ZodURL>;
            jwks_uri: z.ZodOptional<z.ZodURL>;
            logo_uri: z.ZodOptional<z.ZodURL>;
            organization_name: z.ZodOptional<z.ZodString>;
            policy_uri: z.ZodOptional<z.ZodURL>;
            signed_jwks_uri: z.ZodOptional<z.ZodURL>;
            federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
            federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
            federation_list_endpoint: z.ZodOptional<z.ZodURL>;
            federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
            federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
            federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
            federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
            jwks: z.ZodOptional<z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>>;
            tos_uri: z.ZodOptional<z.ZodURL>;
        }, z.core.$loose>>;
        wallet_provider: z.ZodOptional<z.ZodObject<{
            jwks: z.ZodOptional<z.ZodObject<{
                keys: z.ZodArray<z.ZodObject<{
                    alg: z.ZodOptional<z.ZodString>;
                    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    kid: z.ZodString;
                    kty: z.ZodString;
                    use: z.ZodOptional<z.ZodString>;
                    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    x5t: z.ZodOptional<z.ZodString>;
                    "x5t#S256": z.ZodOptional<z.ZodString>;
                    x5u: z.ZodOptional<z.ZodString>;
                }, z.core.$loose>>;
            }, z.core.$strip>>;
            jwks_uri: z.ZodOptional<z.ZodURL>;
            signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        }, z.core.$loose>>;
    }, z.core.$strict>]>>;
    metadata_policy: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodObject<{
        add: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        default: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        essential: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        one_of: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        subset_of: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        superset_of: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        value: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    }, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodAny>>>>>>;
    metadata_policy_crit: z.ZodOptional<z.ZodArray<z.ZodString>>;
    source_endpoint: z.ZodOptional<z.ZodURL>;
    sub: z.ZodString;
    trust_mark_issuers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
    trust_mark_owners: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
        jwks: z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>;
        sub: z.ZodString;
    }, z.core.$strip>>>;
    trust_marks: z.ZodOptional<z.ZodArray<z.ZodObject<{
        trust_mark: z.ZodString;
        trust_mark_type: z.ZodURL;
    }, z.core.$strip>>>;
}, z.core.$strip>;
type BaseEntityStatementClaimsOptions = z.input<typeof baseSchema>;
type BaseEntityStatementClaims = z.output<typeof baseSchema>;
declare const itWalletEntityStatementClaimsSchema: z.ZodType<BaseEntityStatementClaims, BaseEntityStatementClaimsOptions>;
type ItWalletEntityStatementClaimsOptions = z.input<typeof itWalletEntityStatementClaimsSchema>;
type ItWalletEntityStatementClaims = z.output<typeof itWalletEntityStatementClaimsSchema>;
type EntityStatementClaimsWithMetadata<TMetadata> = {
    metadata?: TMetadata;
} & Omit<ItWalletEntityStatementClaims, "metadata">;
type ItWalletEntityStatementClaimsByVersion<V extends ItWalletSpecsVersion> = EntityStatementClaimsWithMetadata<ItWalletMetadataByVersion<V>>;
/**
 * Checks whether entity statement claims match a specific IT-Wallet metadata version.
 *
 * Claims without a `metadata` member are considered compatible after base schema validation.
 *
 * @param claims - Entity statement claims to inspect.
 * @param version - IT-Wallet specification version to validate metadata against.
 * @returns True when the claims and optional metadata match the selected version.
 * @throws {ItWalletSpecsVersionError} If the version is unsupported.
 */
declare function isItWalletEntityStatementClaimsVersion<V extends ItWalletSpecsVersion>(claims: unknown, version: V): claims is ItWalletEntityStatementClaimsByVersion<V>;
/**
 * Parses entity statement claims and narrows the optional metadata by IT-Wallet version.
 *
 * @param claims - Entity statement claims to parse.
 * @param version - IT-Wallet specification version to validate metadata against.
 * @returns Entity statement claims with version-specific metadata.
 * @throws {ValidationError} If claims or metadata do not satisfy the selected schemas.
 * @throws {ItWalletSpecsVersionError} If the version is unsupported.
 */
declare function parseItWalletEntityStatementClaimsForVersion<V extends ItWalletSpecsVersion>(claims: unknown, version: V): ItWalletEntityStatementClaimsByVersion<V>;

declare const itWalletEntityConfigurationClaimsSchema: z.ZodType<{
    exp: number;
    iat: number;
    iss: string;
    jwks: {
        keys: {
            [x: string]: unknown;
            kid: string;
            kty: string;
            alg?: string | undefined;
            key_ops?: string[] | undefined;
            use?: string | undefined;
            x5c?: string[] | undefined;
            x5t?: string | undefined;
            "x5t#S256"?: string | undefined;
            x5u?: string | undefined;
        }[];
    };
    sub: string;
    authority_hints?: string[] | undefined;
    constraints?: {
        allowed_entity_types?: string[] | undefined;
        max_path_length?: number | undefined;
        naming_constraints?: {
            excluded?: string[] | undefined;
            permitted?: string[] | undefined;
        } | undefined;
    } | undefined;
    crit?: string[] | undefined;
    metadata?: {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            response_modes_supported: ("query" | "form_post.jwt")[];
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
            require_signed_request_object?: boolean | undefined;
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            batch_credential_issuance: {
                batch_size: number;
            };
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                claims: {
                    display: {
                        locale: string;
                        name: string;
                    }[];
                    path: (string | number | null)[];
                }[];
                cryptographic_binding_methods_supported: string[];
                display: {
                    locale: string;
                    name: string;
                }[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                    };
                };
                scope: string;
            }>;
            credential_endpoint: string;
            credential_hash_alg_supported: string;
            credential_issuer: string;
            deferred_credential_endpoint: string;
            display: {
                locale: string;
                name: string;
            }[];
            evidence_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            nonce_endpoint: string;
            notification_endpoint: string;
            revocation_endpoint: string;
            status_assertion_endpoint: string;
            status_attestation_endpoint: string;
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet")[];
            authorization_servers?: [string, ...string[]] | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            authorization_encrypted_response_alg: string;
            authorization_encrypted_response_enc: string;
            authorization_signed_response_alg: string;
            client_id: string;
            client_name: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            request_uris: string[];
            response_uris: string[];
            vp_formats: Record<string, {
                alg?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_provider?: {
            [x: string]: unknown;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_attestation_pop_signing_alg_values_supported: string[];
            client_attestation_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            dpop_signing_alg_values_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            require_signed_request_object: true;
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                authentic_sources: {
                    dataset_id: string;
                    entity_id: string;
                };
                credential_metadata: {
                    claims?: {
                        path: (string | number | null)[];
                        display?: {
                            locale: string;
                            name: string;
                            description?: string | undefined;
                        }[] | undefined;
                        mandatory?: boolean | undefined;
                        sd?: "never" | "always" | undefined;
                    }[] | undefined;
                    display?: {
                        locale: string;
                        name: string;
                        background_color?: string | undefined;
                        background_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        description?: string | undefined;
                        logo?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        watermark_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                    }[] | undefined;
                };
                cryptographic_binding_methods_supported: string[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                        key_attestations_required?: {
                            key_storage?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                            user_authentication?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                        } | undefined;
                    };
                };
                schema_id: string;
                scope: string;
            }>;
            credential_endpoint: string;
            credential_issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet" | "it_l2+document_proof" | "it_spid")[];
            authorization_servers?: [string, ...string[]] | undefined;
            batch_credential_issuance?: {
                batch_size: number;
            } | undefined;
            deferred_credential_endpoint?: string | undefined;
            display?: {
                locale: string;
                name: string;
                background_color?: string | undefined;
                background_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                description?: string | undefined;
                logo?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                watermark_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
            }[] | undefined;
            nonce_endpoint?: string | undefined;
            notification_endpoint?: string | undefined;
            status_list_aggregation_endpoint?: string | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            client_id: string;
            client_name: string;
            encrypted_response_enc_values_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            logo_uri: string;
            request_uris: string[];
            response_uris: string[];
            vp_formats_supported: Record<string, {
                alg?: string[] | undefined;
                deviceauth_alg_values?: number[] | undefined;
                issuerauth_alg_values?: number[] | undefined;
                "kb-jwt_alg_values"?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_solution?: {
            [x: string]: unknown;
            logo_uri: string;
            wallet_metadata: {
                [x: string]: unknown;
                authorization_endpoint: string;
                client_id_prefixes_supported: ("openid_federation" | "x509_hash")[];
                credential_offer_endpoint: string;
                request_object_signing_alg_values_supported: string[];
                response_modes_supported: "query"[];
                response_types_supported: string[];
                vp_formats_supported: Record<string, {
                    [x: string]: unknown;
                }>;
                wallet_name: string;
            };
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | undefined;
    metadata_policy?: Record<string, Record<string, {
        add?: unknown;
        default?: unknown;
        essential?: unknown;
        one_of?: unknown;
        subset_of?: unknown;
        superset_of?: unknown;
        value?: unknown;
    } & Record<string, any>> | undefined> | undefined;
    metadata_policy_crit?: string[] | undefined;
    source_endpoint?: string | undefined;
    trust_mark_issuers?: Record<string, string[]> | undefined;
    trust_mark_owners?: Record<string, {
        jwks: {
            keys: {
                [x: string]: unknown;
                kid: string;
                kty: string;
                alg?: string | undefined;
                key_ops?: string[] | undefined;
                use?: string | undefined;
                x5c?: string[] | undefined;
                x5t?: string | undefined;
                "x5t#S256"?: string | undefined;
                x5u?: string | undefined;
            }[];
        };
        sub: string;
    }> | undefined;
    trust_marks?: {
        trust_mark: string;
        trust_mark_type: string;
    }[] | undefined;
}, {
    exp: number;
    iat: number;
    iss: string;
    jwks: {
        keys: {
            [x: string]: unknown;
            kid: string;
            kty: string;
            alg?: string | undefined;
            key_ops?: string[] | undefined;
            use?: string | undefined;
            x5c?: string[] | undefined;
            x5t?: string | undefined;
            "x5t#S256"?: string | undefined;
            x5u?: string | undefined;
        }[];
    };
    sub: string;
    authority_hints?: string[] | undefined;
    constraints?: {
        allowed_entity_types?: string[] | undefined;
        max_path_length?: number | undefined;
        naming_constraints?: {
            excluded?: string[] | undefined;
            permitted?: string[] | undefined;
        } | undefined;
    } | undefined;
    crit?: string[] | undefined;
    metadata?: {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            response_modes_supported: ("query" | "form_post.jwt")[];
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
            require_signed_request_object?: boolean | undefined;
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            batch_credential_issuance: {
                batch_size: number;
            };
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                claims: {
                    display: {
                        locale: string;
                        name: string;
                    }[];
                    path: (string | number | null)[];
                }[];
                cryptographic_binding_methods_supported: string[];
                display: {
                    locale: string;
                    name: string;
                }[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                    };
                };
                scope: string;
            }>;
            credential_endpoint: string;
            credential_hash_alg_supported: string;
            credential_issuer: string;
            deferred_credential_endpoint: string;
            display: {
                locale: string;
                name: string;
            }[];
            evidence_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            nonce_endpoint: string;
            notification_endpoint: string;
            revocation_endpoint: string;
            status_assertion_endpoint: string;
            status_attestation_endpoint: string;
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet")[];
            authorization_servers?: [string, ...string[]] | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            authorization_encrypted_response_alg: string;
            authorization_encrypted_response_enc: string;
            authorization_signed_response_alg: string;
            client_id: string;
            client_name: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            request_uris: string[];
            response_uris: string[];
            vp_formats: Record<string, {
                alg?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_provider?: {
            [x: string]: unknown;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_attestation_pop_signing_alg_values_supported: string[];
            client_attestation_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            dpop_signing_alg_values_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            require_signed_request_object: true;
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                authentic_sources: {
                    dataset_id: string;
                    entity_id: string;
                };
                credential_metadata: {
                    claims?: {
                        path: (string | number | null)[];
                        display?: {
                            locale: string;
                            name: string;
                            description?: string | undefined;
                        }[] | undefined;
                        mandatory?: boolean | undefined;
                        sd?: "never" | "always" | undefined;
                    }[] | undefined;
                    display?: {
                        locale: string;
                        name: string;
                        background_color?: string | undefined;
                        background_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        description?: string | undefined;
                        logo?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        watermark_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                    }[] | undefined;
                };
                cryptographic_binding_methods_supported: string[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                        key_attestations_required?: {
                            key_storage?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                            user_authentication?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                        } | undefined;
                    };
                };
                schema_id: string;
                scope: string;
            }>;
            credential_endpoint: string;
            credential_issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet" | "it_l2+document_proof" | "it_spid")[];
            authorization_servers?: [string, ...string[]] | undefined;
            batch_credential_issuance?: {
                batch_size: number;
            } | undefined;
            deferred_credential_endpoint?: string | undefined;
            display?: {
                locale: string;
                name: string;
                background_color?: string | undefined;
                background_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                description?: string | undefined;
                logo?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                watermark_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
            }[] | undefined;
            nonce_endpoint?: string | undefined;
            notification_endpoint?: string | undefined;
            status_list_aggregation_endpoint?: string | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            client_id: string;
            client_name: string;
            encrypted_response_enc_values_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            logo_uri: string;
            request_uris: string[];
            response_uris: string[];
            vp_formats_supported: Record<string, {
                alg?: string[] | undefined;
                deviceauth_alg_values?: number[] | undefined;
                issuerauth_alg_values?: number[] | undefined;
                "kb-jwt_alg_values"?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_solution?: {
            [x: string]: unknown;
            logo_uri: string;
            wallet_metadata: {
                [x: string]: unknown;
                authorization_endpoint: string;
                client_id_prefixes_supported: ("openid_federation" | "x509_hash")[];
                credential_offer_endpoint: string;
                request_object_signing_alg_values_supported: string[];
                response_modes_supported: "query"[];
                response_types_supported: string[];
                vp_formats_supported: Record<string, {
                    [x: string]: unknown;
                }>;
                wallet_name: string;
            };
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | undefined;
    metadata_policy?: Record<string, Record<string, {
        add?: unknown;
        default?: unknown;
        essential?: unknown;
        one_of?: unknown;
        subset_of?: unknown;
        superset_of?: unknown;
        value?: unknown;
    } & Record<string, any>> | undefined> | undefined;
    metadata_policy_crit?: string[] | undefined;
    source_endpoint?: string | undefined;
    trust_mark_issuers?: Record<string, string[]> | undefined;
    trust_mark_owners?: Record<string, {
        jwks: {
            keys: {
                [x: string]: unknown;
                kid: string;
                kty: string;
                alg?: string | undefined;
                key_ops?: string[] | undefined;
                use?: string | undefined;
                x5c?: string[] | undefined;
                x5t?: string | undefined;
                "x5t#S256"?: string | undefined;
                x5u?: string | undefined;
            }[];
        };
        sub: string;
    }> | undefined;
    trust_marks?: {
        trust_mark: string;
        trust_mark_type: string;
    }[] | undefined;
}, z.core.$ZodTypeInternals<{
    exp: number;
    iat: number;
    iss: string;
    jwks: {
        keys: {
            [x: string]: unknown;
            kid: string;
            kty: string;
            alg?: string | undefined;
            key_ops?: string[] | undefined;
            use?: string | undefined;
            x5c?: string[] | undefined;
            x5t?: string | undefined;
            "x5t#S256"?: string | undefined;
            x5u?: string | undefined;
        }[];
    };
    sub: string;
    authority_hints?: string[] | undefined;
    constraints?: {
        allowed_entity_types?: string[] | undefined;
        max_path_length?: number | undefined;
        naming_constraints?: {
            excluded?: string[] | undefined;
            permitted?: string[] | undefined;
        } | undefined;
    } | undefined;
    crit?: string[] | undefined;
    metadata?: {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            response_modes_supported: ("query" | "form_post.jwt")[];
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
            require_signed_request_object?: boolean | undefined;
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            batch_credential_issuance: {
                batch_size: number;
            };
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                claims: {
                    display: {
                        locale: string;
                        name: string;
                    }[];
                    path: (string | number | null)[];
                }[];
                cryptographic_binding_methods_supported: string[];
                display: {
                    locale: string;
                    name: string;
                }[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                    };
                };
                scope: string;
            }>;
            credential_endpoint: string;
            credential_hash_alg_supported: string;
            credential_issuer: string;
            deferred_credential_endpoint: string;
            display: {
                locale: string;
                name: string;
            }[];
            evidence_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            nonce_endpoint: string;
            notification_endpoint: string;
            revocation_endpoint: string;
            status_assertion_endpoint: string;
            status_attestation_endpoint: string;
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet")[];
            authorization_servers?: [string, ...string[]] | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            authorization_encrypted_response_alg: string;
            authorization_encrypted_response_enc: string;
            authorization_signed_response_alg: string;
            client_id: string;
            client_name: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            request_uris: string[];
            response_uris: string[];
            vp_formats: Record<string, {
                alg?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_provider?: {
            [x: string]: unknown;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_attestation_pop_signing_alg_values_supported: string[];
            client_attestation_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            dpop_signing_alg_values_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            require_signed_request_object: true;
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                authentic_sources: {
                    dataset_id: string;
                    entity_id: string;
                };
                credential_metadata: {
                    claims?: {
                        path: (string | number | null)[];
                        display?: {
                            locale: string;
                            name: string;
                            description?: string | undefined;
                        }[] | undefined;
                        mandatory?: boolean | undefined;
                        sd?: "never" | "always" | undefined;
                    }[] | undefined;
                    display?: {
                        locale: string;
                        name: string;
                        background_color?: string | undefined;
                        background_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        description?: string | undefined;
                        logo?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        watermark_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                    }[] | undefined;
                };
                cryptographic_binding_methods_supported: string[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                        key_attestations_required?: {
                            key_storage?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                            user_authentication?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                        } | undefined;
                    };
                };
                schema_id: string;
                scope: string;
            }>;
            credential_endpoint: string;
            credential_issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet" | "it_l2+document_proof" | "it_spid")[];
            authorization_servers?: [string, ...string[]] | undefined;
            batch_credential_issuance?: {
                batch_size: number;
            } | undefined;
            deferred_credential_endpoint?: string | undefined;
            display?: {
                locale: string;
                name: string;
                background_color?: string | undefined;
                background_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                description?: string | undefined;
                logo?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                watermark_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
            }[] | undefined;
            nonce_endpoint?: string | undefined;
            notification_endpoint?: string | undefined;
            status_list_aggregation_endpoint?: string | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            client_id: string;
            client_name: string;
            encrypted_response_enc_values_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            logo_uri: string;
            request_uris: string[];
            response_uris: string[];
            vp_formats_supported: Record<string, {
                alg?: string[] | undefined;
                deviceauth_alg_values?: number[] | undefined;
                issuerauth_alg_values?: number[] | undefined;
                "kb-jwt_alg_values"?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_solution?: {
            [x: string]: unknown;
            logo_uri: string;
            wallet_metadata: {
                [x: string]: unknown;
                authorization_endpoint: string;
                client_id_prefixes_supported: ("openid_federation" | "x509_hash")[];
                credential_offer_endpoint: string;
                request_object_signing_alg_values_supported: string[];
                response_modes_supported: "query"[];
                response_types_supported: string[];
                vp_formats_supported: Record<string, {
                    [x: string]: unknown;
                }>;
                wallet_name: string;
            };
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | undefined;
    metadata_policy?: Record<string, Record<string, {
        add?: unknown;
        default?: unknown;
        essential?: unknown;
        one_of?: unknown;
        subset_of?: unknown;
        superset_of?: unknown;
        value?: unknown;
    } & Record<string, any>> | undefined> | undefined;
    metadata_policy_crit?: string[] | undefined;
    source_endpoint?: string | undefined;
    trust_mark_issuers?: Record<string, string[]> | undefined;
    trust_mark_owners?: Record<string, {
        jwks: {
            keys: {
                [x: string]: unknown;
                kid: string;
                kty: string;
                alg?: string | undefined;
                key_ops?: string[] | undefined;
                use?: string | undefined;
                x5c?: string[] | undefined;
                x5t?: string | undefined;
                "x5t#S256"?: string | undefined;
                x5u?: string | undefined;
            }[];
        };
        sub: string;
    }> | undefined;
    trust_marks?: {
        trust_mark: string;
        trust_mark_type: string;
    }[] | undefined;
}, {
    exp: number;
    iat: number;
    iss: string;
    jwks: {
        keys: {
            [x: string]: unknown;
            kid: string;
            kty: string;
            alg?: string | undefined;
            key_ops?: string[] | undefined;
            use?: string | undefined;
            x5c?: string[] | undefined;
            x5t?: string | undefined;
            "x5t#S256"?: string | undefined;
            x5u?: string | undefined;
        }[];
    };
    sub: string;
    authority_hints?: string[] | undefined;
    constraints?: {
        allowed_entity_types?: string[] | undefined;
        max_path_length?: number | undefined;
        naming_constraints?: {
            excluded?: string[] | undefined;
            permitted?: string[] | undefined;
        } | undefined;
    } | undefined;
    crit?: string[] | undefined;
    metadata?: {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            response_modes_supported: ("query" | "form_post.jwt")[];
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
            require_signed_request_object?: boolean | undefined;
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            batch_credential_issuance: {
                batch_size: number;
            };
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                claims: {
                    display: {
                        locale: string;
                        name: string;
                    }[];
                    path: (string | number | null)[];
                }[];
                cryptographic_binding_methods_supported: string[];
                display: {
                    locale: string;
                    name: string;
                }[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                    };
                };
                scope: string;
            }>;
            credential_endpoint: string;
            credential_hash_alg_supported: string;
            credential_issuer: string;
            deferred_credential_endpoint: string;
            display: {
                locale: string;
                name: string;
            }[];
            evidence_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            nonce_endpoint: string;
            notification_endpoint: string;
            revocation_endpoint: string;
            status_assertion_endpoint: string;
            status_attestation_endpoint: string;
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet")[];
            authorization_servers?: [string, ...string[]] | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            authorization_encrypted_response_alg: string;
            authorization_encrypted_response_enc: string;
            authorization_signed_response_alg: string;
            client_id: string;
            client_name: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            request_uris: string[];
            response_uris: string[];
            vp_formats: Record<string, {
                alg?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_provider?: {
            [x: string]: unknown;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | {
        oauth_authorization_server?: {
            [x: string]: unknown;
            acr_values_supported: string[];
            authorization_endpoint: string;
            authorization_signing_alg_values_supported: string[];
            client_attestation_pop_signing_alg_values_supported: string[];
            client_attestation_signing_alg_values_supported: string[];
            client_registration_types_supported: ("automatic" | "explicit")[];
            code_challenge_methods_supported: string[];
            dpop_signing_alg_values_supported: string[];
            grant_types_supported: string[];
            issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            pushed_authorization_request_endpoint: string;
            request_object_signing_alg_values_supported: string[];
            require_signed_request_object: true;
            response_types_supported: string[];
            scopes_supported: string[];
            token_endpoint: string;
            token_endpoint_auth_methods_supported: string[];
            token_endpoint_auth_signing_alg_values_supported: string[];
        } | undefined;
        openid_credential_issuer?: {
            [x: string]: unknown;
            credential_configurations_supported: Record<string, ({
                credential_signing_alg_values_supported: string[];
                format: "dc+sd-jwt";
                vct: string;
            } | {
                credential_signing_alg_values_supported: number[];
                doctype: string;
                format: "mso_mdoc";
            }) & {
                authentic_sources: {
                    dataset_id: string;
                    entity_id: string;
                };
                credential_metadata: {
                    claims?: {
                        path: (string | number | null)[];
                        display?: {
                            locale: string;
                            name: string;
                            description?: string | undefined;
                        }[] | undefined;
                        mandatory?: boolean | undefined;
                        sd?: "never" | "always" | undefined;
                    }[] | undefined;
                    display?: {
                        locale: string;
                        name: string;
                        background_color?: string | undefined;
                        background_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        description?: string | undefined;
                        logo?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                        watermark_image?: {
                            uri: string;
                            alt_text?: string | undefined;
                            "uri#integrity"?: string | undefined;
                        } | undefined;
                    }[] | undefined;
                };
                cryptographic_binding_methods_supported: string[];
                proof_types_supported: {
                    jwt: {
                        proof_signing_alg_values_supported: string[];
                        key_attestations_required?: {
                            key_storage?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                            user_authentication?: ("iso_18045_high" | "iso_18045_moderate" | "iso_18045_enhanced-basic" | "iso_18045_basic")[] | undefined;
                        } | undefined;
                    };
                };
                schema_id: string;
                scope: string;
            }>;
            credential_endpoint: string;
            credential_issuer: string;
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            trust_frameworks_supported: ("it_cie" | "it_wallet" | "eudi_wallet" | "it_l2+document_proof" | "it_spid")[];
            authorization_servers?: [string, ...string[]] | undefined;
            batch_credential_issuance?: {
                batch_size: number;
            } | undefined;
            deferred_credential_endpoint?: string | undefined;
            display?: {
                locale: string;
                name: string;
                background_color?: string | undefined;
                background_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                description?: string | undefined;
                logo?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
                watermark_image?: {
                    uri: string;
                    alt_text?: string | undefined;
                    "uri#integrity"?: string | undefined;
                } | undefined;
            }[] | undefined;
            nonce_endpoint?: string | undefined;
            notification_endpoint?: string | undefined;
            status_list_aggregation_endpoint?: string | undefined;
        } | undefined;
        openid_credential_verifier?: {
            [x: string]: unknown;
            application_type: "web";
            client_id: string;
            client_name: string;
            encrypted_response_enc_values_supported: string[];
            jwks: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            };
            logo_uri: string;
            request_uris: string[];
            response_uris: string[];
            vp_formats_supported: Record<string, {
                alg?: string[] | undefined;
                deviceauth_alg_values?: number[] | undefined;
                issuerauth_alg_values?: number[] | undefined;
                "kb-jwt_alg_values"?: string[] | undefined;
                "sd-jwt_alg_values"?: string[] | undefined;
            }>;
            erasure_endpoint?: string | undefined;
        } | undefined;
        federation_entity?: {
            [x: string]: unknown;
            contacts?: string[] | undefined;
            homepage_uri?: string | undefined;
            jwks_uri?: string | undefined;
            logo_uri?: string | undefined;
            organization_name?: string | undefined;
            policy_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
            federation_fetch_endpoint?: string | undefined;
            federation_historical_keys_endpoint?: string | undefined;
            federation_list_endpoint?: string | undefined;
            federation_resolve_endpoint?: string | undefined;
            federation_trust_mark_endpoint?: string | undefined;
            federation_trust_mark_list_endpoint?: string | undefined;
            federation_trust_mark_status_endpoint?: string | undefined;
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            tos_uri?: string | undefined;
        } | undefined;
        wallet_solution?: {
            [x: string]: unknown;
            logo_uri: string;
            wallet_metadata: {
                [x: string]: unknown;
                authorization_endpoint: string;
                client_id_prefixes_supported: ("openid_federation" | "x509_hash")[];
                credential_offer_endpoint: string;
                request_object_signing_alg_values_supported: string[];
                response_modes_supported: "query"[];
                response_types_supported: string[];
                vp_formats_supported: Record<string, {
                    [x: string]: unknown;
                }>;
                wallet_name: string;
            };
            jwks?: {
                keys: {
                    [x: string]: unknown;
                    kid: string;
                    kty: string;
                    alg?: string | undefined;
                    key_ops?: string[] | undefined;
                    use?: string | undefined;
                    x5c?: string[] | undefined;
                    x5t?: string | undefined;
                    "x5t#S256"?: string | undefined;
                    x5u?: string | undefined;
                }[];
            } | undefined;
            jwks_uri?: string | undefined;
            signed_jwks_uri?: string | undefined;
        } | undefined;
    } | undefined;
    metadata_policy?: Record<string, Record<string, {
        add?: unknown;
        default?: unknown;
        essential?: unknown;
        one_of?: unknown;
        subset_of?: unknown;
        superset_of?: unknown;
        value?: unknown;
    } & Record<string, any>> | undefined> | undefined;
    metadata_policy_crit?: string[] | undefined;
    source_endpoint?: string | undefined;
    trust_mark_issuers?: Record<string, string[]> | undefined;
    trust_mark_owners?: Record<string, {
        jwks: {
            keys: {
                [x: string]: unknown;
                kid: string;
                kty: string;
                alg?: string | undefined;
                key_ops?: string[] | undefined;
                use?: string | undefined;
                x5c?: string[] | undefined;
                x5t?: string | undefined;
                "x5t#S256"?: string | undefined;
                x5u?: string | undefined;
            }[];
        };
        sub: string;
    }> | undefined;
    trust_marks?: {
        trust_mark: string;
        trust_mark_type: string;
    }[] | undefined;
}>>;
type ItWalletEntityConfigurationClaimsOptions = z.input<typeof itWalletEntityConfigurationClaimsSchema>;
type ItWalletEntityConfigurationClaims = z.output<typeof itWalletEntityConfigurationClaimsSchema>;
type ItWalletEntityConfigurationClaimsByVersion<V extends ItWalletSpecsVersion> = ItWalletEntityStatementClaimsByVersion<V>;
declare const isItWalletEntityConfigurationClaimsVersion: typeof isItWalletEntityStatementClaimsVersion;
declare const parseItWalletEntityConfigurationClaimsForVersion: typeof parseItWalletEntityStatementClaimsForVersion;

declare const entityConfigurationHeaderSchema: z.ZodObject<{
    alg: z.ZodEnum<{
        ES256: "ES256";
        ES384: "ES384";
        ES512: "ES512";
        PS256: "PS256";
        PS384: "PS384";
        PS512: "PS512";
    }>;
    kid: z.ZodString;
    typ: z.ZodLiteral<"entity-statement+jwt">;
}, z.core.$loose>;
type EntityConfigurationHeaderOptions = z.input<typeof entityConfigurationHeaderSchema>;
type EntityConfigurationHeader = z.output<typeof entityConfigurationHeaderSchema>;

interface CreateEntityConfigurationOptions {
    claims: ItWalletEntityConfigurationClaimsOptions;
    header: EntityConfigurationHeaderOptions;
    signJwtCallback: SignCallback;
}
/**
 * Creates a signed OpenID Federation entity configuration JWT.
 *
 * The signing callback is called with the JWK selected by `header.kid` from
 * `claims.jwks.keys` and the compact JWT signing input.
 *
 * @param options - Entity configuration creation options.
 * @param options.claims - Entity configuration claims to sign.
 * @param options.header - Entity configuration JWT header.
 * @param options.signJwtCallback - Callback used to sign the JWT input.
 * @returns Signed entity configuration JWT.
 * @throws {ValidationError} If header or payload validation fails.
 * @throws {Error} If the matching signing JWK cannot be selected or the JWT input cannot be created.
 */
declare const createItWalletEntityConfiguration: ({ claims, header, signJwtCallback, }: CreateEntityConfigurationOptions) => Promise<string>;

declare const constraintSchema: z.ZodObject<{
    allowed_entity_types: z.ZodOptional<z.ZodArray<z.ZodString>>;
    max_path_length: z.ZodOptional<z.ZodNumber>;
    naming_constraints: z.ZodOptional<z.ZodObject<{
        excluded: z.ZodOptional<z.ZodArray<z.ZodString>>;
        permitted: z.ZodOptional<z.ZodArray<z.ZodString>>;
    }, z.core.$strip>>;
}, z.core.$strip>;
/**
 *
 * {@link https://openid.net/specs/openid-federation-1_0.html#name-constraints | Constraints}
 *
 * Trust Anchors and Intermediate Entities MAY define constraining criteria that apply to their Subordinates. They are expressed in the constraints claim of a Subordinate Statement, as described in {@link https://openid.net/specs/openid-federation-1_0.html#entity-statement | Section 3}.
 *
 */
type Constraint = z.input<typeof constraintSchema>;

/**
 * @example https://<federation_authority_domain>/trust_marks/<purpose>/<entity_type>
 */
declare const trustMarkUrlSchema: z.ZodURL;
declare const trustMarkSchema: z.ZodObject<{
    trust_mark: z.ZodString;
    trust_mark_type: z.ZodURL;
}, z.core.$strip>;
type TrustMark = z.output<typeof trustMarkSchema>;
declare const trustMarkIssuerSchema: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>;
type TrustMarkIssuer = z.input<typeof trustMarkIssuerSchema>;
declare const trustMarkOwnerSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    sub: z.ZodString;
}, z.core.$strip>>;
type TrustMarkOwner = z.input<typeof trustMarkOwnerSchema>;

/**
 * Generic error thrown during OID Federation operations
 */
declare class OidFederationError extends Error {
    readonly statusCode?: number;
    constructor(message: string, options?: {
        statusCode?: number;
    } & ErrorOptions);
}
/**
 * Error thrown when trust chain evaluation fails.
 * This includes signature verification failures, expiry checks,
 * structural inconsistencies, and trust anchor binding failures.
 */
declare class TrustChainEvaluationError extends OidFederationError {
    constructor(message: string, cause?: unknown);
}

declare const commonMetadataSchema: z.ZodObject<{
    contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
    homepage_uri: z.ZodOptional<z.ZodURL>;
    jwks: z.ZodOptional<z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>>;
    jwks_uri: z.ZodOptional<z.ZodURL>;
    logo_uri: z.ZodOptional<z.ZodURL>;
    organization_name: z.ZodOptional<z.ZodString>;
    policy_uri: z.ZodOptional<z.ZodURL>;
    signed_jwks_uri: z.ZodOptional<z.ZodURL>;
}, z.core.$strip>;

declare const federationEntityMetadata: {
    identifier: "federation_entity";
    policySchema: z.ZodObject<Record<string, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>, z.core.$strip>;
    schema: z.ZodObject<{
        contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
        homepage_uri: z.ZodOptional<z.ZodURL>;
        jwks: z.ZodOptional<z.ZodObject<{
            keys: z.ZodArray<z.ZodObject<{
                alg: z.ZodOptional<z.ZodString>;
                key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
                kid: z.ZodString;
                kty: z.ZodString;
                use: z.ZodOptional<z.ZodString>;
                x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
                x5t: z.ZodOptional<z.ZodString>;
                "x5t#S256": z.ZodOptional<z.ZodString>;
                x5u: z.ZodOptional<z.ZodString>;
            }, z.core.$loose>>;
        }, z.core.$strip>>;
        jwks_uri: z.ZodOptional<z.ZodURL>;
        logo_uri: z.ZodOptional<z.ZodURL>;
        organization_name: z.ZodOptional<z.ZodString>;
        policy_uri: z.ZodOptional<z.ZodURL>;
        signed_jwks_uri: z.ZodOptional<z.ZodURL>;
        federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
        federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
        federation_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
        federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
    }, z.core.$strip>;
};
type FederationEntityMetadata = z.input<(typeof federationEntityMetadata)["schema"]>;
/**
 *
 * {@link https://italia.github.io/eid-wallet-it-docs/releases/1.1.0/en/trust.html#metadata-of-federation-entity-leaves}
 *
 */
declare const itWalletFederationEntityMetadata: z.ZodObject<{
    contacts: z.ZodOptional<z.ZodArray<z.ZodString>>;
    homepage_uri: z.ZodOptional<z.ZodURL>;
    jwks_uri: z.ZodOptional<z.ZodURL>;
    logo_uri: z.ZodOptional<z.ZodURL>;
    organization_name: z.ZodOptional<z.ZodString>;
    policy_uri: z.ZodOptional<z.ZodURL>;
    signed_jwks_uri: z.ZodOptional<z.ZodURL>;
    federation_fetch_endpoint: z.ZodOptional<z.ZodURL>;
    federation_historical_keys_endpoint: z.ZodOptional<z.ZodURL>;
    federation_list_endpoint: z.ZodOptional<z.ZodURL>;
    federation_resolve_endpoint: z.ZodOptional<z.ZodURL>;
    federation_trust_mark_endpoint: z.ZodOptional<z.ZodURL>;
    federation_trust_mark_list_endpoint: z.ZodOptional<z.ZodURL>;
    federation_trust_mark_status_endpoint: z.ZodOptional<z.ZodURL>;
    jwks: z.ZodOptional<z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>>;
    tos_uri: z.ZodOptional<z.ZodURL>;
}, z.core.$loose>;
type ItWalletFederationEntityMetadata = z.input<typeof itWalletFederationEntityMetadata>;
declare const itWalletFederationEntityIdentifier: "federation_entity";

/**
 *
 * {@link https://italia.github.io/eid-wallet-it-docs/releases/1.1.0/en/wallet-provider-metadata.html}
 *
 */
declare const itWalletProviderEntityMetadata: z.ZodObject<{
    jwks: z.ZodOptional<z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>>;
    jwks_uri: z.ZodOptional<z.ZodURL>;
    signed_jwks_uri: z.ZodOptional<z.ZodURL>;
}, z.core.$loose>;
type ItWalletProviderEntityMetadata = z.input<typeof itWalletProviderEntityMetadata>;
declare const itWalletProviderEntityIdentifier = "wallet_provider";

/**
 *
 * {@link https://italia.github.io/eid-wallet-it-docs/releases/1.1.0/en/credential-issuer-solution.html#metadata-for-openid-credential-issuer}
 *
 */
type CredentialDisplayMetadata$1 = z.infer<typeof CredentialDisplayMetadata$1>;
declare const CredentialDisplayMetadata$1: z.ZodObject<{
    locale: z.ZodString;
    name: z.ZodString;
}, z.core.$strip>;
type ClaimsMetadata$1 = z.infer<typeof ClaimsMetadata$1>;
declare const ClaimsMetadata$1: z.ZodObject<{
    display: z.ZodArray<z.ZodObject<{
        locale: z.ZodString;
        name: z.ZodString;
    }, z.core.$strip>>;
    path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
}, z.core.$strip>;
type SupportedCredentialMetadata$1 = z.infer<typeof SupportedCredentialMetadata$1>;
declare const SupportedCredentialMetadata$1: z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
    credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    format: z.ZodLiteral<"dc+sd-jwt">;
    vct: z.ZodString;
}, z.core.$strip>, z.ZodObject<{
    credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
    doctype: z.ZodString;
    format: z.ZodLiteral<"mso_mdoc">;
}, z.core.$strip>], "format">, z.ZodObject<{
    claims: z.ZodArray<z.ZodObject<{
        display: z.ZodArray<z.ZodObject<{
            locale: z.ZodString;
            name: z.ZodString;
        }, z.core.$strip>>;
        path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
    }, z.core.$strip>>;
    cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
    display: z.ZodArray<z.ZodObject<{
        locale: z.ZodString;
        name: z.ZodString;
    }, z.core.$strip>>;
    proof_types_supported: z.ZodObject<{
        jwt: z.ZodObject<{
            proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        }, z.core.$strip>;
    }, z.core.$strip>;
    scope: z.ZodString;
}, z.core.$strip>>;
declare const itWalletCredentialIssuerMetadata$1: z.ZodObject<{
    authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
    batch_credential_issuance: z.ZodObject<{
        batch_size: z.ZodNumber;
    }, z.core.$strip>;
    credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
        credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        format: z.ZodLiteral<"dc+sd-jwt">;
        vct: z.ZodString;
    }, z.core.$strip>, z.ZodObject<{
        credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
        doctype: z.ZodString;
        format: z.ZodLiteral<"mso_mdoc">;
    }, z.core.$strip>], "format">, z.ZodObject<{
        claims: z.ZodArray<z.ZodObject<{
            display: z.ZodArray<z.ZodObject<{
                locale: z.ZodString;
                name: z.ZodString;
            }, z.core.$strip>>;
            path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
        }, z.core.$strip>>;
        cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
        display: z.ZodArray<z.ZodObject<{
            locale: z.ZodString;
            name: z.ZodString;
        }, z.core.$strip>>;
        proof_types_supported: z.ZodObject<{
            jwt: z.ZodObject<{
                proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            }, z.core.$strip>;
        }, z.core.$strip>;
        scope: z.ZodString;
    }, z.core.$strip>>>;
    credential_endpoint: z.ZodURL;
    credential_hash_alg_supported: z.ZodString;
    credential_issuer: z.ZodURL;
    deferred_credential_endpoint: z.ZodURL;
    display: z.ZodArray<z.ZodObject<{
        locale: z.ZodString;
        name: z.ZodString;
    }, z.core.$strip>>;
    evidence_supported: z.ZodArray<z.ZodString>;
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    nonce_endpoint: z.ZodURL;
    notification_endpoint: z.ZodURL;
    revocation_endpoint: z.ZodURL;
    status_assertion_endpoint: z.ZodURL;
    status_attestation_endpoint: z.ZodURL;
    trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"eudi_wallet">]>>;
}, z.core.$loose>;
type ItWalletCredentialIssuerMetadata$1 = z.input<typeof itWalletCredentialIssuerMetadata$1>;
declare const itWalletCredentialIssuerIdentifier$1 = "openid_credential_issuer";

/**
 *
 * {@link https://italia.github.io/eid-wallet-it-docs/releases/1.1.0/en/relying-party-metadata.html}
 *
 */
declare const itWalletCredentialVerifierMetadata$1: z.ZodObject<{
    application_type: z.ZodLiteral<"web">;
    authorization_encrypted_response_alg: z.ZodString;
    authorization_encrypted_response_enc: z.ZodString;
    authorization_signed_response_alg: z.ZodString;
    client_id: z.ZodURL;
    client_name: z.ZodString;
    erasure_endpoint: z.ZodOptional<z.ZodURL>;
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    request_uris: z.ZodArray<z.ZodURL>;
    response_uris: z.ZodArray<z.ZodURL>;
    vp_formats: z.ZodRecord<z.ZodString, z.ZodObject<{
        alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
        "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
    }, z.core.$strip>>;
}, z.core.$loose>;
type ItWalletCredentialVerifierMetadata$1 = z.input<typeof itWalletCredentialVerifierMetadata$1>;
declare const itWalletCredentialVerifierIdentifier = "openid_credential_verifier";

/**
 * Image metadata with integrity hash support
 * Follows IT Wallet v1.3 specification
 */
type ImageMetadata = z.infer<typeof ImageMetadata>;
declare const ImageMetadata: z.ZodObject<{
    alt_text: z.ZodOptional<z.ZodString>;
    uri: z.ZodURL;
    "uri#integrity": z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
/**
 * Enhanced credential display metadata
 * Supports background images, watermarks, and colors
 */
type CredentialDisplayMetadata = z.infer<typeof CredentialDisplayMetadata>;
declare const CredentialDisplayMetadata: z.ZodObject<{
    background_color: z.ZodOptional<z.ZodString>;
    background_image: z.ZodOptional<z.ZodObject<{
        alt_text: z.ZodOptional<z.ZodString>;
        uri: z.ZodURL;
        "uri#integrity": z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
    description: z.ZodOptional<z.ZodString>;
    locale: z.ZodString;
    logo: z.ZodOptional<z.ZodObject<{
        alt_text: z.ZodOptional<z.ZodString>;
        uri: z.ZodURL;
        "uri#integrity": z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
    name: z.ZodString;
    watermark_image: z.ZodOptional<z.ZodObject<{
        alt_text: z.ZodOptional<z.ZodString>;
        uri: z.ZodURL;
        "uri#integrity": z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
}, z.core.$strip>;
/**
 * Claim display metadata
 */
type ClaimDisplayMetadata = z.infer<typeof ClaimDisplayMetadata>;
declare const ClaimDisplayMetadata: z.ZodObject<{
    description: z.ZodOptional<z.ZodString>;
    locale: z.ZodString;
    name: z.ZodString;
}, z.core.$strip>;
/**
 * Enhanced claims metadata with selective disclosure and mandatory flags
 */
type ClaimsMetadata = z.infer<typeof ClaimsMetadata>;
declare const ClaimsMetadata: z.ZodObject<{
    display: z.ZodOptional<z.ZodArray<z.ZodObject<{
        description: z.ZodOptional<z.ZodString>;
        locale: z.ZodString;
        name: z.ZodString;
    }, z.core.$strip>>>;
    mandatory: z.ZodOptional<z.ZodBoolean>;
    path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
    sd: z.ZodOptional<z.ZodEnum<{
        never: "never";
        always: "always";
    }>>;
}, z.core.$strip>;
/**
 * Complete credential metadata structure
 * This is the new mandatory field in credential_configurations_supported
 */
type CredentialMetadata = z.infer<typeof CredentialMetadata>;
declare const CredentialMetadata: z.ZodObject<{
    claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
        display: z.ZodOptional<z.ZodArray<z.ZodObject<{
            description: z.ZodOptional<z.ZodString>;
            locale: z.ZodString;
            name: z.ZodString;
        }, z.core.$strip>>>;
        mandatory: z.ZodOptional<z.ZodBoolean>;
        path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
        sd: z.ZodOptional<z.ZodEnum<{
            never: "never";
            always: "always";
        }>>;
    }, z.core.$strip>>>;
    display: z.ZodOptional<z.ZodArray<z.ZodObject<{
        background_color: z.ZodOptional<z.ZodString>;
        background_image: z.ZodOptional<z.ZodObject<{
            alt_text: z.ZodOptional<z.ZodString>;
            uri: z.ZodURL;
            "uri#integrity": z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
        description: z.ZodOptional<z.ZodString>;
        locale: z.ZodString;
        logo: z.ZodOptional<z.ZodObject<{
            alt_text: z.ZodOptional<z.ZodString>;
            uri: z.ZodURL;
            "uri#integrity": z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
        name: z.ZodString;
        watermark_image: z.ZodOptional<z.ZodObject<{
            alt_text: z.ZodOptional<z.ZodString>;
            uri: z.ZodURL;
            "uri#integrity": z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
    }, z.core.$strip>>>;
}, z.core.$strip>;
declare const zKeyStorageLevel: z.ZodEnum<{
    iso_18045_high: "iso_18045_high";
    iso_18045_moderate: "iso_18045_moderate";
    "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
    iso_18045_basic: "iso_18045_basic";
}>;
type KeyStorageLevel = z.infer<typeof zKeyStorageLevel>;
/**
 * Authentic sources metadata linking to trusted data sources
 */
type AuthenticSources = z.infer<typeof AuthenticSources>;
declare const AuthenticSources: z.ZodObject<{
    dataset_id: z.ZodString;
    entity_id: z.ZodString;
}, z.core.$strip>;
/**
 * Enhanced metadata for a credential supported by an Issuer
 * Includes new mandatory credential_metadata, schema_id, and authentic_sources
 */
type SupportedCredentialMetadata = z.infer<typeof SupportedCredentialMetadata>;
declare const SupportedCredentialMetadata: z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
    credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
    format: z.ZodLiteral<"dc+sd-jwt">;
    vct: z.ZodString;
}, z.core.$strip>, z.ZodObject<{
    credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
    doctype: z.ZodString;
    format: z.ZodLiteral<"mso_mdoc">;
}, z.core.$strip>], "format">, z.ZodObject<{
    authentic_sources: z.ZodObject<{
        dataset_id: z.ZodString;
        entity_id: z.ZodString;
    }, z.core.$strip>;
    credential_metadata: z.ZodObject<{
        claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
            display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                description: z.ZodOptional<z.ZodString>;
                locale: z.ZodString;
                name: z.ZodString;
            }, z.core.$strip>>>;
            mandatory: z.ZodOptional<z.ZodBoolean>;
            path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
            sd: z.ZodOptional<z.ZodEnum<{
                never: "never";
                always: "always";
            }>>;
        }, z.core.$strip>>>;
        display: z.ZodOptional<z.ZodArray<z.ZodObject<{
            background_color: z.ZodOptional<z.ZodString>;
            background_image: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
            description: z.ZodOptional<z.ZodString>;
            locale: z.ZodString;
            logo: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
            name: z.ZodString;
            watermark_image: z.ZodOptional<z.ZodObject<{
                alt_text: z.ZodOptional<z.ZodString>;
                uri: z.ZodURL;
                "uri#integrity": z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
        }, z.core.$strip>>>;
    }, z.core.$strip>;
    cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
    proof_types_supported: z.ZodObject<{
        jwt: z.ZodObject<{
            key_attestations_required: z.ZodOptional<z.ZodObject<{
                key_storage: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                    iso_18045_high: "iso_18045_high";
                    iso_18045_moderate: "iso_18045_moderate";
                    "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                    iso_18045_basic: "iso_18045_basic";
                }>>>;
                user_authentication: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                    iso_18045_high: "iso_18045_high";
                    iso_18045_moderate: "iso_18045_moderate";
                    "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                    iso_18045_basic: "iso_18045_basic";
                }>>>;
            }, z.core.$strip>>;
            proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        }, z.core.$strip>;
    }, z.core.$strip>;
    schema_id: z.ZodString;
    scope: z.ZodString;
}, z.core.$strip>>;
/**
 * IT Wallet Credential Issuer Metadata for v1.3 specification
 *
 * Changes from v1.0:
 * - REMOVED: revocation_endpoint, status_assertion_endpoint, credential_hash_alg_supported, evidence_supported
 * - ADDED: batch_credential_issuance, status_list_aggregation_endpoint
 * - MODIFIED: credential_configurations_supported now requires credential_metadata, schema_id, authentic_sources
 * - MODIFIED: proof_types_supported supports key_attestations_required
 *
 * {@link https://italia.github.io/eid-wallet-it-docs/releases/1.3.0/en/credential-issuer-solution.html#metadata-for-openid-credential-issuer}
 */
declare const itWalletCredentialIssuerMetadata: z.ZodObject<{
    authorization_servers: z.ZodOptional<z.ZodTuple<[z.ZodURL], z.ZodURL>>;
    batch_credential_issuance: z.ZodOptional<z.ZodObject<{
        batch_size: z.ZodNumber;
    }, z.core.$strip>>;
    credential_configurations_supported: z.ZodRecord<z.ZodString, z.ZodIntersection<z.ZodDiscriminatedUnion<[z.ZodObject<{
        credential_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        format: z.ZodLiteral<"dc+sd-jwt">;
        vct: z.ZodString;
    }, z.core.$strip>, z.ZodObject<{
        credential_signing_alg_values_supported: z.ZodArray<z.ZodNumber>;
        doctype: z.ZodString;
        format: z.ZodLiteral<"mso_mdoc">;
    }, z.core.$strip>], "format">, z.ZodObject<{
        authentic_sources: z.ZodObject<{
            dataset_id: z.ZodString;
            entity_id: z.ZodString;
        }, z.core.$strip>;
        credential_metadata: z.ZodObject<{
            claims: z.ZodOptional<z.ZodArray<z.ZodObject<{
                display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    description: z.ZodOptional<z.ZodString>;
                    locale: z.ZodString;
                    name: z.ZodString;
                }, z.core.$strip>>>;
                mandatory: z.ZodOptional<z.ZodBoolean>;
                path: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>>;
                sd: z.ZodOptional<z.ZodEnum<{
                    never: "never";
                    always: "always";
                }>>;
            }, z.core.$strip>>>;
            display: z.ZodOptional<z.ZodArray<z.ZodObject<{
                background_color: z.ZodOptional<z.ZodString>;
                background_image: z.ZodOptional<z.ZodObject<{
                    alt_text: z.ZodOptional<z.ZodString>;
                    uri: z.ZodURL;
                    "uri#integrity": z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                description: z.ZodOptional<z.ZodString>;
                locale: z.ZodString;
                logo: z.ZodOptional<z.ZodObject<{
                    alt_text: z.ZodOptional<z.ZodString>;
                    uri: z.ZodURL;
                    "uri#integrity": z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                name: z.ZodString;
                watermark_image: z.ZodOptional<z.ZodObject<{
                    alt_text: z.ZodOptional<z.ZodString>;
                    uri: z.ZodURL;
                    "uri#integrity": z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>;
        cryptographic_binding_methods_supported: z.ZodArray<z.ZodString>;
        proof_types_supported: z.ZodObject<{
            jwt: z.ZodObject<{
                key_attestations_required: z.ZodOptional<z.ZodObject<{
                    key_storage: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                        iso_18045_high: "iso_18045_high";
                        iso_18045_moderate: "iso_18045_moderate";
                        "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                        iso_18045_basic: "iso_18045_basic";
                    }>>>;
                    user_authentication: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                        iso_18045_high: "iso_18045_high";
                        iso_18045_moderate: "iso_18045_moderate";
                        "iso_18045_enhanced-basic": "iso_18045_enhanced-basic";
                        iso_18045_basic: "iso_18045_basic";
                    }>>>;
                }, z.core.$strip>>;
                proof_signing_alg_values_supported: z.ZodArray<z.ZodString>;
            }, z.core.$strip>;
        }, z.core.$strip>;
        schema_id: z.ZodString;
        scope: z.ZodString;
    }, z.core.$strip>>>;
    credential_endpoint: z.ZodURL;
    credential_issuer: z.ZodURL;
    deferred_credential_endpoint: z.ZodOptional<z.ZodURL>;
    display: z.ZodOptional<z.ZodArray<z.ZodObject<{
        background_color: z.ZodOptional<z.ZodString>;
        background_image: z.ZodOptional<z.ZodObject<{
            alt_text: z.ZodOptional<z.ZodString>;
            uri: z.ZodURL;
            "uri#integrity": z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
        description: z.ZodOptional<z.ZodString>;
        locale: z.ZodString;
        logo: z.ZodOptional<z.ZodObject<{
            alt_text: z.ZodOptional<z.ZodString>;
            uri: z.ZodURL;
            "uri#integrity": z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
        name: z.ZodString;
        watermark_image: z.ZodOptional<z.ZodObject<{
            alt_text: z.ZodOptional<z.ZodString>;
            uri: z.ZodURL;
            "uri#integrity": z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
    }, z.core.$strip>>>;
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    nonce_endpoint: z.ZodOptional<z.ZodURL>;
    notification_endpoint: z.ZodOptional<z.ZodURL>;
    status_list_aggregation_endpoint: z.ZodOptional<z.ZodURL>;
    trust_frameworks_supported: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"eudi_wallet">, z.ZodLiteral<"it_cie">, z.ZodLiteral<"it_wallet">, z.ZodLiteral<"it_l2+document_proof">, z.ZodLiteral<"it_spid">]>>;
}, z.core.$loose>;
type ItWalletCredentialIssuerMetadata = z.input<typeof itWalletCredentialIssuerMetadata>;
declare const itWalletCredentialIssuerIdentifier = "openid_credential_issuer";

/**
 * IT Wallet Credential Verifier Metadata for OpenID Federation v1.3.3
 *
 * This schema defines the metadata structure for OpenID credential verifiers
 * (relying parties) in the Italian Wallet ecosystem, aligned with specification v1.3.3.
 *
 * Key changes from v1.0:
 * - Added `logo_uri` field (MIME type MUST be application/svg)
 * - Added `encrypted_response_enc_values_supported` for content encryption algorithms
 * - Renamed `vp_formats` to `vp_formats_supported`
 * - Enhanced VP formats structure with separate algorithm arrays:
 *   - For SD-JWT: `sd-jwt_alg_values` and `kb-jwt_alg_values`
 *   - For mso_mdoc: `issuerauth_alg_values` and `deviceauth_alg_values` (COSE algorithm numbers)
 * - Removed deprecated JARM fields: `authorization_signed_response_alg`,
 *   `authorization_encrypted_response_alg`, `authorization_encrypted_response_enc`
 *
 * @see {@link https://italia.github.io/eidas-it-wallet-docs/versioned_docs/version-1.3.3/en/relying-party-metadata.html}
 */
declare const itWalletCredentialVerifierMetadata: z.ZodObject<{
    application_type: z.ZodLiteral<"web">;
    client_id: z.ZodURL;
    client_name: z.ZodString;
    encrypted_response_enc_values_supported: z.ZodArray<z.ZodString>;
    erasure_endpoint: z.ZodOptional<z.ZodURL>;
    jwks: z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>;
    logo_uri: z.ZodURL;
    request_uris: z.ZodArray<z.ZodURL>;
    response_uris: z.ZodArray<z.ZodURL>;
    vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
        alg: z.ZodOptional<z.ZodArray<z.ZodString>>;
        deviceauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
        issuerauth_alg_values: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
        "kb-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
        "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
    }, z.core.$strip>>;
}, z.core.$loose>;
type ItWalletCredentialVerifierMetadata = z.input<typeof itWalletCredentialVerifierMetadata>;

declare const itWalletSolutionEntityMetadata: z.ZodObject<{
    jwks: z.ZodOptional<z.ZodObject<{
        keys: z.ZodArray<z.ZodObject<{
            alg: z.ZodOptional<z.ZodString>;
            key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
            kid: z.ZodString;
            kty: z.ZodString;
            use: z.ZodOptional<z.ZodString>;
            x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
            x5t: z.ZodOptional<z.ZodString>;
            "x5t#S256": z.ZodOptional<z.ZodString>;
            x5u: z.ZodOptional<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$strip>>;
    jwks_uri: z.ZodOptional<z.ZodURL>;
    logo_uri: z.ZodURL;
    signed_jwks_uri: z.ZodOptional<z.ZodURL>;
    wallet_metadata: z.ZodObject<{
        authorization_endpoint: z.ZodURL;
        client_id_prefixes_supported: z.ZodArray<z.ZodEnum<{
            openid_federation: "openid_federation";
            x509_hash: "x509_hash";
        }>>;
        credential_offer_endpoint: z.ZodURL;
        request_object_signing_alg_values_supported: z.ZodArray<z.ZodString>;
        response_modes_supported: z.ZodArray<z.ZodLiteral<"query">>;
        response_types_supported: z.ZodArray<z.ZodString>;
        vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{}, z.core.$loose>>;
        wallet_name: z.ZodString;
    }, z.core.$loose>;
}, z.core.$loose>;
type ItWalletSolutionEntityMetadata = z.input<typeof itWalletSolutionEntityMetadata>;
declare const itWalletSolutionEntityIdentifier = "wallet_solution";

declare enum MetadataMergeStrategy {
    /**
     *
     * The result of merging the values of two these operators is the intersection of the operator values. If the intersection is empty, this MUST result in a policy error.
     *
     */
    Intersection = 2,
    /**
     *
     * Allowed only when the operator values are equal. If not, this MUST result in a policy error.
     *
     */
    OperatorValuesEqual = 0,
    /**
     *
     * If a Superior has specified essential=true, then a Subordinate MUST NOT change that. If a Superior has specified essential=false, then a Subordinate is allowed to change that to essential=true. If a Superior has not specified essential, then a Subordinate can set essential to true or false. If those conditions are not met, this MUST result in a policy error.
     *
     */
    SuperiorFollowsIfTrue = 3,
    /**
     *
     * The result of merging the values of two these operators is the union of the operator values.
     *
     */
    Union = 1
}

declare enum MetadataOrderOfApplication {
    First = 0,
    AfterValue = 1,
    AfterAdd = 2,
    AfterDefault = 3,
    AfterOneOf = 4,
    AfterSubsetOf = 5,
    Last = 6
}

interface MetadataOperator<TKey extends string> {
    canBeCombinedWith: string[];
    key: TKey;
    mergeStrategy: MetadataMergeStrategy;
    operatorJsonValues: z.ZodSchema[];
    orderOfApplication: MetadataOrderOfApplication;
    parameterJsonValues: z.ZodSchema[];
}

declare const addOperator: {
    readonly key: "add";
    readonly mergeStrategy: MetadataMergeStrategy;
    readonly operator: MetadataOperator<"add">;
    readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    readonly orderOfApplication: MetadataOrderOfApplication;
    readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
};

declare const defaultOperator: {
    readonly key: "default";
    readonly mergeStrategy: MetadataMergeStrategy;
    readonly operator: MetadataOperator<"default">;
    readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    readonly orderOfApplication: MetadataOrderOfApplication;
    readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
};

declare const essentialOperator: {
    readonly key: "essential";
    readonly mergeStrategy: MetadataMergeStrategy;
    readonly operator: MetadataOperator<"essential">;
    readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    readonly orderOfApplication: MetadataOrderOfApplication;
    readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
};

declare const oneOfOperator: {
    readonly key: "one_of";
    readonly mergeStrategy: MetadataMergeStrategy;
    readonly operator: MetadataOperator<"one_of">;
    readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    readonly orderOfApplication: MetadataOrderOfApplication;
    readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
};

declare const subsetOfOperator: {
    readonly key: "subset_of";
    readonly mergeStrategy: MetadataMergeStrategy;
    readonly operator: MetadataOperator<"subset_of">;
    readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    readonly orderOfApplication: MetadataOrderOfApplication;
    readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
};

declare const supersetOfOperator: {
    readonly key: "superset_of";
    readonly mergeStrategy: MetadataMergeStrategy;
    readonly operator: MetadataOperator<"superset_of">;
    readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    readonly orderOfApplication: MetadataOrderOfApplication;
    readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
};

declare const valueOperator: {
    readonly key: "value";
    readonly mergeStrategy: MetadataMergeStrategy;
    readonly operator: MetadataOperator<"value">;
    readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    readonly orderOfApplication: MetadataOrderOfApplication;
    readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
};

/**
 * Converts a metadata operator definition into the policy operator schema shape.
 *
 * @param operator - Metadata operator definition.
 * @returns Schema descriptor used by metadata policy validation and application.
 */
declare const createPolicyOperatorSchema: <TKey extends string>(operator: MetadataOperator<TKey>) => {
    /**
     * The key of the operator which is used to identify the operator
     */
    readonly key: TKey;
    /**
     * The merge strategy of the operator
     */
    readonly mergeStrategy: MetadataMergeStrategy;
    /**
     * The operator itself
     */
    readonly operator: MetadataOperator<TKey>;
    /**
     * The schema for the operator itself so for essential it is only a boolean
     */
    readonly operatorSchema: zod.ZodOptional<zod.ZodType<unknown, unknown, zod_v4_core.$ZodTypeInternals<unknown, unknown>>>;
    /**
     * The order of application of the operator
     */
    readonly orderOfApplication: MetadataOrderOfApplication;
    /**
     * The schema for the parameter the operator can be applied to so when the policy is targeting federation_entity we can check if the policy can handle that property
     */
    readonly parameterSchema: zod.ZodOptional<zod.ZodType<unknown, unknown, zod_v4_core.$ZodTypeInternals<unknown, unknown>>>;
};

/**
 * Builds a schema with the same keys as the source object and a replacement validator for each key.
 *
 * @param schema - Source object schema whose keys are preserved.
 * @param newValidator - Validator assigned to every key in the returned schema.
 * @returns New Zod object schema with swapped field validators.
 */
declare const swapValidators: <T extends z.ZodRawShape>(schema: z.ZodObject<T>, newValidator: z.ZodSchema) => z.ZodObject<Record<string, typeof newValidator>>;

declare const allSupportedPolicies: {
    readonly add: {
        readonly key: "add";
        readonly mergeStrategy: MetadataMergeStrategy;
        readonly operator: MetadataOperator<"add">;
        readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        readonly orderOfApplication: MetadataOrderOfApplication;
        readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    };
    readonly default: {
        readonly key: "default";
        readonly mergeStrategy: MetadataMergeStrategy;
        readonly operator: MetadataOperator<"default">;
        readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        readonly orderOfApplication: MetadataOrderOfApplication;
        readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    };
    readonly essential: {
        readonly key: "essential";
        readonly mergeStrategy: MetadataMergeStrategy;
        readonly operator: MetadataOperator<"essential">;
        readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        readonly orderOfApplication: MetadataOrderOfApplication;
        readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    };
    readonly one_of: {
        readonly key: "one_of";
        readonly mergeStrategy: MetadataMergeStrategy;
        readonly operator: MetadataOperator<"one_of">;
        readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        readonly orderOfApplication: MetadataOrderOfApplication;
        readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    };
    readonly subset_of: {
        readonly key: "subset_of";
        readonly mergeStrategy: MetadataMergeStrategy;
        readonly operator: MetadataOperator<"subset_of">;
        readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        readonly orderOfApplication: MetadataOrderOfApplication;
        readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    };
    readonly superset_of: {
        readonly key: "superset_of";
        readonly mergeStrategy: MetadataMergeStrategy;
        readonly operator: MetadataOperator<"superset_of">;
        readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        readonly orderOfApplication: MetadataOrderOfApplication;
        readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    };
    readonly value: {
        readonly key: "value";
        readonly mergeStrategy: MetadataMergeStrategy;
        readonly operator: MetadataOperator<"value">;
        readonly operatorSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
        readonly orderOfApplication: MetadataOrderOfApplication;
        readonly parameterSchema: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    };
};
type SupportedPolicyKey = keyof typeof allSupportedPolicies;
/**
 * Checks whether a policy key is supported by the SDK metadata policy implementation.
 *
 * @param key - Policy key to inspect.
 * @returns True when the key is one of the supported policy operators.
 */
declare const isExistingPolicyKey: (key: string) => key is SupportedPolicyKey;
declare const metadataPolicySchema: z.ZodIntersection<z.ZodObject<{
    add: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    default: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    essential: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    one_of: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    subset_of: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    superset_of: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    value: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
}, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodAny>>;
type MetadataPolicyOperator = z.input<typeof metadataPolicySchema>;

type VerifyJwtCallback = CallbackContext["verifyJwt"];
/**
 * A simplified JWT verification callback that accepts a concrete JWK.
 *
 * Using a plain JWK instead of the full `JwtSigner` union avoids a circular
 * dependency when trust-chain verification is itself invoked from inside a
 * `verifyJwt` callback (e.g. when resolving a federation trust chain to
 * obtain the signer's public key).
 */
type VerifyJwtWithJwkCallback = (jwtSigner: JwtSignerJwk, jwt: Parameters<VerifyJwtCallback>[1]) => ReturnType<VerifyJwtCallback>;
interface ValidateTrustChainOptions {
    callbacks: {
        /**
         * Required for chains with intermediate entities (chains longer than two
         * elements). Used to fetch each intermediate issuer's entity configuration
         * for self-signature verification.
         */
        fetch: CallbackContext["fetch"];
        /**
         * Required for hashing operations, used to compute JWK thumbprints when
         * comparing key material across subordinate statements and entity
         * configurations.
         */
        hash: HashCallback;
        /**
         * Required for verifying entity statement signatures.
         */
        verifyJwt: VerifyJwtWithJwkCallback;
    };
    /**
     * Non-empty list of trusted trust anchor URLs. When provided, the chain root
     * must be one of them. When omitted, any chain root is accepted without
     * binding to a known trust anchor — callers are responsible for applying
     * their own root-of-trust verification in that case.
     */
    trustAnchorUrls?: [string, ...string[]];
}
/**
 * Cryptographically validates a pre-built (inline) trust chain.
 *
 * Verifies every element's signature, checks `exp`, enforces structural
 * `iss`/`sub` consistency, and optionally binds the root to a known trust
 * anchor.
 *
 * The first element must be the leaf EC (self-signed). The last element must
 * be the trust anchor EC (self-signed). Intermediate elements are subordinate
 * statements; all but the last require `callbacks.fetch` to resolve the
 * intermediate issuer's EC for signature verification.
 *
 * Warning: When `options.trustAnchorUrls` is omitted, the chain root is
 * accepted unconditionally. Callers are responsible for applying their own
 * root-of-trust verification in that case.
 *
 * @param trustChain Array of compact JWTs forming the chain.
 * @param options Validation options including callbacks and trusted anchors.
 * @returns Resolves when the trust chain is valid.
 * @throws If any signature is invalid, any element is expired, structural links are broken, or the root is not a trusted anchor.
 */
declare function validateTrustChain(trustChain: string[], options: ValidateTrustChainOptions): Promise<void>;
interface FetchAndValidateTrustChainOptions {
    callbacks: {
        /**
         * Required for hashing operations, used to compute JWK thumbprints when
         * comparing key material across subordinate statements and entity
         * configurations.
         */
        hash: HashCallback;
        verifyJwt: VerifyJwtWithJwkCallback;
    } & Pick<CallbackContext, "fetch">;
    /**
     * Non-empty list of trusted trust anchor URLs. When provided, traversal
     * stops as soon as one of these URLs is reached and the resolved chain root
     * is verified against the list. When omitted, traversal follows
     * `authority_hints` until no further hints exist (or a cycle / depth limit
     * is hit), and any chain root is accepted — callers are responsible for
     * applying their own root-of-trust verification in that case.
     */
    trustAnchorUrls?: [string, ...string[]];
}
/**
 * Fetches and validates a trust chain starting from a leaf entity.
 *
 * Traverses `authority_hints` upward from the leaf entity until a known
 * trust anchor is reached (or until no further hints exist), fetches every
 * entity configuration along the path and the corresponding subordinate
 * statements, verifies all signatures, and returns the assembled chain as an
 * array of compact JWTs.
 *
 * Warning: When `options.trustAnchorUrls` is omitted, the chain root is
 * accepted unconditionally. Callers are responsible for applying their own
 * root-of-trust verification in that case.
 *
 * @param entityUrl URL of the leaf entity.
 * @param options Options including fetch/verifyJwt callbacks and trusted anchors.
 * @returns Ordered array of compact JWTs forming the validated trust chain.
 * @throws If the chain cannot be built, any element is expired or invalid, or the root is not a trusted anchor.
 */
declare function fetchAndValidateTrustChain(entityUrl: string, options: FetchAndValidateTrustChainOptions): Promise<string[]>;

type ItWalletAuthorizationServerMetadata = ItWalletAuthorizationServerMetadata$1 | ItWalletAuthorizationServerMetadata$2;

export { AuthenticSources as AuthenticSourcesV1_3, ClaimDisplayMetadata as ClaimDisplayMetadataV1_3, ClaimsMetadata$1 as ClaimsMetadata, ClaimsMetadata as ClaimsMetadataV1_3, type Constraint, type CreateEntityConfigurationOptions, CredentialDisplayMetadata$1 as CredentialDisplayMetadata, CredentialDisplayMetadata as CredentialDisplayMetadataV1_3, CredentialMetadata as CredentialMetadataV1_3, type EntityConfigurationHeader, type EntityConfigurationHeaderOptions, type FederationEntityMetadata, type FetchAndValidateTrustChainOptions, ImageMetadata as ImageMetadataV1_3, type ItWalletAuthorizationServerMetadata, type ItWalletAuthorizationServerMetadata$1 as ItWalletAuthorizationServerMetadataV1_0, type ItWalletAuthorizationServerMetadata$2 as ItWalletAuthorizationServerMetadataV1_3, type ItWalletCredentialIssuerMetadata$1 as ItWalletCredentialIssuerMetadata, type ItWalletCredentialIssuerMetadata as ItWalletCredentialIssuerMetadataV1_3, type ItWalletCredentialVerifierMetadata$1 as ItWalletCredentialVerifierMetadata, type ItWalletCredentialVerifierMetadata as ItWalletCredentialVerifierMetadataV1_3, type ItWalletEntityConfigurationClaims, type ItWalletEntityConfigurationClaimsByVersion, type ItWalletEntityConfigurationClaimsOptions, type ItWalletEntityStatementClaims, type ItWalletEntityStatementClaimsByVersion, type ItWalletEntityStatementClaimsOptions, type ItWalletFederationEntityMetadata, type ItWalletMetadata, type ItWalletMetadataByVersion, type ItWalletMetadataV1_0, type ItWalletMetadataV1_3, type ItWalletProviderEntityMetadata, type ItWalletSolutionEntityMetadata as ItWalletSolutionEntityMetadataV1_3, type JsonWebKey, type KeyStorageLevel as KeyStorageLevelV1_3, MetadataMergeStrategy, type MetadataOperator, MetadataOrderOfApplication, type MetadataPolicyOperator, OidFederationError, type SignCallback, SupportedCredentialMetadata$1 as SupportedCredentialMetadata, SupportedCredentialMetadata as SupportedCredentialMetadataV1_3, type SupportedPolicyKey, TrustChainEvaluationError, type TrustMark, type TrustMarkIssuer, type TrustMarkOwner, type ValidateTrustChainOptions, type VerifyJwtWithJwkCallback, addOperator, allSupportedPolicies, commonMetadataSchema, constraintSchema, createItWalletEntityConfiguration, createPolicyOperatorSchema, defaultOperator, entityConfigurationHeaderSchema, essentialOperator, federationEntityMetadata, fetchAndValidateTrustChain, isExistingPolicyKey, isItWalletEntityConfigurationClaimsVersion, isItWalletEntityStatementClaimsVersion, isItWalletMetadataVersion, itWalletAuthorizationServerIdentifier, itWalletAuthorizationServerIdentifier$1 as itWalletAuthorizationServerIdentifierV1_3, itWalletAuthorizationServerMetadata, itWalletAuthorizationServerMetadata$1 as itWalletAuthorizationServerMetadataV1_3, itWalletCredentialIssuerIdentifier$1 as itWalletCredentialIssuerIdentifier, itWalletCredentialIssuerIdentifier as itWalletCredentialIssuerIdentifierV1_3, itWalletCredentialIssuerMetadata$1 as itWalletCredentialIssuerMetadata, itWalletCredentialIssuerMetadata as itWalletCredentialIssuerMetadataV1_3, itWalletCredentialVerifierIdentifier, itWalletCredentialVerifierIdentifier as itWalletCredentialVerifierIdentifierV1_3, itWalletCredentialVerifierMetadata$1 as itWalletCredentialVerifierMetadata, itWalletCredentialVerifierMetadata as itWalletCredentialVerifierMetadataV1_3, itWalletEntityConfigurationClaimsSchema, itWalletEntityStatementClaimsSchema, itWalletFederationEntityIdentifier, itWalletFederationEntityMetadata, itWalletMetadataSchema, itWalletMetadataV1_0, itWalletMetadataV1_3, itWalletProviderEntityIdentifier, itWalletProviderEntityMetadata, itWalletSolutionEntityIdentifier as itWalletSolutionEntityIdentifierV1_3, itWalletSolutionEntityMetadata as itWalletSolutionEntityMetadataV1_3, jsonWebKeySchema, type jsonWebKeySet, jsonWebKeySetSchema, metadataPolicySchema, oneOfOperator, parseItWalletEntityConfigurationClaimsForVersion, parseItWalletEntityStatementClaimsForVersion, parseItWalletMetadataForVersion, subsetOfOperator, supersetOfOperator, swapValidators, trustMarkIssuerSchema, trustMarkOwnerSchema, trustMarkSchema, trustMarkUrlSchema, validateTrustChain, valueOperator, zKeyStorageLevel as zKeyStorageLevelV1_3 };