@learncard/cli 3.6.4 → 3.6.5

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @learncard/cli
 
+## 3.6.5
+
+### Patch Changes
+
+- [#1741](https://github.com/learningeconomy/LearnCard/pull/1741) [`b26df6a11a5ab4daa5cbfdfe2a28f0b7508d9229`](https://github.com/learningeconomy/LearnCard/commit/b26df6a11a5ab4daa5cbfdfe2a28f0b7508d9229) Thanks [@TaylorBeeston](https://github.com/TaylorBeeston)! - Persist saved profile changes before navigation without forcing profile refetches on every mount. Keep browser query-cache storage on localforage and native storage on SQLite across initialization and reload; native persistence failures never fall back to a stale second store. Revalidate installed apps after reload and apply nested tenant registry defaults correctly.
+
+    Add the disposable `lc verify` workflow with maintained user journeys, clean-checkout preparation, independently allocated service ports, confined local-service access, interruption-safe evidence, and ownership-checked crash recovery. Repair cold-start Vite loading, pin Astro's compatible Zod dependency, and load the example's CommonJS dependency correctly during server rendering. Build credential share links from the active tenant's configured host instead of the fixed development port.
+
+    Allow CLI schema/help loading before generated snippets exist; generate snippets atomically and load token snippets only when needed.
+
+- Updated dependencies []:
+    - @learncard/network-brain-client@2.5.62
+
 ## 3.6.4
 
 ### Patch Changes

package/dist/index.js

@@ -638,6 +638,19 @@ const CONSENT_CALLBACK_MJS = "import { createServer } from 'node:http';\nimport
 const READ_USER_DATA_MJS = "import { pathToFileURL } from 'node:url';\nimport { initLearnCard } from '@learncard/init';\nimport { verifyConsentRedirect } from './consent-callback.mjs';\n\nexport const readUserData = async (learnCard, userDid, contractUri) => {\n    const profile = await learnCard.invoke.getProfile(userDid);\n    if (!profile) return [];\n    const hasAccess = () => learnCard.invoke.verifyConsent(contractUri, profile.profileId);\n    if (!(await hasAccess())) return [];\n    const records = [];\n    let cursor;\n    do {\n        const page = await learnCard.invoke.getConsentFlowDataForDid(userDid, {\n            limit: 100,\n            ...(cursor ? { cursor } : {}),\n        });\n        records.push(...page.records.filter(record => record.contractUri === contractUri));\n        if (!page.hasMore) return (await hasAccess()) ? records : [];\n        if (!page.cursor || page.cursor === cursor) throw new Error('Pagination did not advance');\n        cursor = page.cursor;\n    } while (true);\n};\n\nif (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {\n    const { SECURE_SEED, CONTRACT_URI, CONSENT_VP } = process.env;\n    if (!SECURE_SEED || !CONTRACT_URI) throw new Error('Set SECURE_SEED and CONTRACT_URI');\n    const learnCard = await initLearnCard({ seed: SECURE_SEED, network: true });\n    const verified = await verifyConsentRedirect(learnCard, CONSENT_VP, CONTRACT_URI);\n    if (verified.status !== 'verified') throw new Error('Consent denied or abandoned');\n    const records = await readUserData(learnCard, verified.userDid, CONTRACT_URI);\n    console.log(\n        records.length ? `Active consent: ${records.length} record(s).` : 'No active consent.'\n    );\n}\n";
 const ISSUE_THROUGH_CONTRACT_MJS = "import { pathToFileURL } from 'node:url';\nimport { initLearnCard } from '@learncard/init';\nimport { verifyConsentRedirect } from './consent-callback.mjs';\nimport { readUserData } from './read-user-data.mjs';\n\nexport const issueThroughContract = async (learnCard, userDid, contractUri) => {\n    if ((await readUserData(learnCard, userDid, contractUri)).length === 0) {\n        throw new Error('No active consent');\n    }\n    const base = learnCard.invoke.newCredential({ type: 'boost' });\n    const unsignedCredential = {\n        ...base,\n        issuer: learnCard.id.did(),\n        name: 'ConsentFlow Tutorial Complete',\n        credentialSubject: {\n            ...base.credentialSubject,\n            id: userDid,\n            achievement: {\n                ...base.credentialSubject.achievement,\n                name: 'ConsentFlow Tutorial Complete',\n                description: 'Completed the ConsentFlow tutorial.',\n            },\n        },\n    };\n    const boostUri = await learnCard.invoke.createBoost(unsignedCredential, {\n        name: 'ConsentFlow Tutorial Complete',\n        category: 'Achievement',\n        type: 'achievement',\n    });\n    const signedCredential = await learnCard.invoke.issueCredential({\n        ...unsignedCredential,\n        boostId: boostUri,\n    });\n    return learnCard.invoke.writeCredentialToContract(\n        userDid,\n        contractUri,\n        signedCredential,\n        boostUri\n    );\n};\n\nif (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {\n    const { SECURE_SEED, CONTRACT_URI, CONSENT_VP } = process.env;\n    if (!SECURE_SEED || !CONTRACT_URI) throw new Error('Set SECURE_SEED and CONTRACT_URI');\n    const learnCard = await initLearnCard({ seed: SECURE_SEED, network: true });\n    const verified = await verifyConsentRedirect(learnCard, CONSENT_VP, CONTRACT_URI);\n    if (verified.status !== 'verified') throw new Error('Consent denied or abandoned');\n    const credentialUri = await issueThroughContract(learnCard, verified.userDid, CONTRACT_URI);\n    console.log(`Issued: ${credentialUri}`);\n}\n";
 
+var snippets = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    SEND_MJS: SEND_MJS,
+    SEND_SH: SEND_SH,
+    SEND_FROM_TEMPLATE_MJS: SEND_FROM_TEMPLATE_MJS,
+    WEBHOOK_MJS: WEBHOOK_MJS,
+    CLAIM_BUTTON_HTML: CLAIM_BUTTON_HTML,
+    CREATE_CONTRACT_MJS: CREATE_CONTRACT_MJS,
+    CONSENT_CALLBACK_MJS: CONSENT_CALLBACK_MJS,
+    READ_USER_DATA_MJS: READ_USER_DATA_MJS,
+    ISSUE_THROUGH_CONTRACT_MJS: ISSUE_THROUGH_CONTRACT_MJS
+});
+
 var __defProp$j = Object.defineProperty;
 var __defProps$g = Object.defineProperties;
 var __getOwnPropDescs$g = Object.getOwnPropertyDescriptors;
@@ -1058,6 +1071,7 @@ const runToken = async (options) => {
   out.log(token);
   const file = path__default["default"].join(process.cwd(), "send.sh");
   let wroteSendSh = false;
+  const { SEND_SH } = await Promise.resolve().then(function () { return snippets; });
   try {
     await fs__default["default"].writeFile(
       file,
@@ -3234,7 +3248,7 @@ const registerPromoteCommand = (program, run) => {
 };
 
 var name = "@learncard/cli";
-var version = "3.6.4";
+var version = "3.6.5";
 var description = "Command Line Interface for LearnCard";
 var main = "dist/index.js";
 var bin = "dist/index.js";

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@learncard/cli",
-    "version": "3.6.4",
+    "version": "3.6.5",
     "description": "Command Line Interface for LearnCard",
     "main": "dist/index.js",
     "bin": "dist/index.js",
@@ -24,7 +24,7 @@
         "@learncard/learn-cloud-plugin": "2.3.46",
         "@learncard/ler-rs-plugin": "0.1.30",
         "@learncard/linked-claims-plugin": "0.2.39",
-        "@learncard/network-brain-client": "2.5.61",
+        "@learncard/network-brain-client": "2.5.62",
         "@learncard/open-badge-v2-plugin": "1.1.40",
         "@learncard/render-method-plugin": "10.0.1",
         "@learncard/types": "5.23.1",

package/scripts/embed-snippets.ts

@@ -1,4 +1,5 @@
-import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
@@ -14,12 +15,33 @@ const snippets = {
     READ_USER_DATA_MJS: 'consentflow/read-user-data.mjs',
     ISSUE_THROUGH_CONTRACT_MJS: 'consentflow/issue-through-contract.mjs',
 };
-const lines = await Promise.all(
-    Object.entries(snippets).map(
-        async ([name, file]) =>
-            `export const ${name} = ${JSON.stringify(await readFile(resolve(root, 'docs/snippets', file), 'utf8'))};\n`
-    )
-);
-const output = resolve(root, 'packages/learn-card-cli/src/generated/snippets.ts');
-await mkdir(dirname(output), { recursive: true });
-await writeFile(output, '// Generated from docs/snippets. Do not edit.\n' + lines.join(''));
+/** Deterministic and atomic: independent checkout users never read a partial module. */
+export const embedSnippets = async (signal?: AbortSignal): Promise<void> => {
+    signal?.throwIfAborted();
+    const lines = await Promise.all(
+        Object.entries(snippets).map(
+            async ([name, file]) =>
+                `export const ${name} = ${JSON.stringify(await readFile(resolve(root, 'docs/snippets', file), { encoding: 'utf8', signal }))};\n`
+        )
+    );
+    const output = resolve(root, 'packages/learn-card-cli/src/generated/snippets.ts');
+    const content = '// Generated from docs/snippets. Do not edit.\n' + lines.join('');
+    try {
+        if ((await readFile(output, 'utf8')) === content) return;
+    } catch (error) {
+        if ((error as NodeJS.ErrnoException).code !== 'ENOENT') throw error;
+    }
+    await mkdir(dirname(output), { recursive: true });
+    const temporary = `${output}.${randomUUID()}.tmp`;
+    try {
+        await writeFile(temporary, content, { flag: 'wx', signal });
+        signal?.throwIfAborted();
+        await rename(temporary, output);
+    } finally {
+        await rm(temporary, { force: true });
+    }
+};
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+    await embedSnippets();
+}

package/src/token.ts

@@ -11,7 +11,6 @@ import {
     resolveServices,
     withEnvTokenLoader,
 } from './project';
-import { SEND_SH } from './generated/snippets';
 import { out } from './out';
 
 // Route-derived resources documented in auth-grants-and-api-tokens.md (not the stale singular aliases).
@@ -114,6 +113,8 @@ export const runToken = async (
     out.log(token);
     const file = path.join(process.cwd(), 'send.sh');
     let wroteSendSh = false;
+    // Static import would make org schema validation require this absent-on-clean-checkout asset.
+    const { SEND_SH } = await import('./generated/snippets');
     try {
         await fs.writeFile(
             file,