@learncard/cli 4.0.1 → 4.0.2

package/CHANGELOG.md

@@ -1,5 +1,81 @@
 # @learncard/cli
 
+## 4.0.2
+
+### Patch Changes
+
+- [#1819](https://github.com/learningeconomy/LearnCard/pull/1819) [`784f0c9b346a5f7e4e2c618a9b976dcaa90fafe3`](https://github.com/learningeconomy/LearnCard/commit/784f0c9b346a5f7e4e2c618a9b976dcaa90fafe3) Thanks [@smurflo2](https://github.com/smurflo2)! - feat: [LC-2194] Support versioned ConsentFlow updates and user review.
+
+    Keep a connection's URI and history while publishing immutable access updates. New optional read/write choices stay off; required additions pause writes until the user reviews the changes. Add explicit update acceptance, review notifications, deadlines, once-only AutoBoost delivery, and safe retirement. Unsaved request previews no longer require a URI.
+
+    Preserve existing grants in partial scope updates, gate Lambda startup on legacy snapshots, and retain once-only delivery during explicit one-time updates. Localize review and history content, recover from cancelled guardian checks and concurrent updates, and keep handled notifications safe to reopen.
+
+    Retry transient Lambda migration failures without poisoning warm application imports. Record completed migrations for fast cold starts, report malformed request IDs without credential data, and identify retained ambiguous AutoBoost claims for reconciliation. Load runtime secrets before importing the scheduled deadline worker, including secrets-only Lambda deployments. Keep inbox maintenance coverage behavioral rather than pinning Lambda wrapper source text.
+
+    Recover valid, unversioned contracts created after the migration marker through scoped version-1 initialization. Atomically backfill only their existing connections, preserve global migration completion, and keep missing history on already-versioned or malformed contracts fail-closed.
+
+    Settle guardian PIN actions on external dismissal or unmount without cancelling valid submissions. Cover reapproval, signing failures and referral cancellation with the current PIN modal contract. Clear stacked overlays before opening a contract-update review. Cancel delayed modal-removal timers when their provider unmounts while preserving closing animations. Use stable localization keys independent of English labels and stop proposing optional defaults after their window expires.
+
+    Route pending and suspended connections from ordinary consent entry to explicit update review. Recover the same way when the latest-approval error arrives during an open consent dialog, without treating the connection as approved or bypassing guardian checks.
+
+    Reject overlapping top-level and nested SDK scope patches instead of silently dropping changes. Restore strict type-only imports, declare the runnable update snippet's SDK contract, and narrow unsuccessful notification reads in end-to-end consumers without raising the typecheck allowance.
+
+    Include cumulative changes in consent records so users can approve all required additions across multiple unreviewed versions. Clear the pending optional-choice marker only when the holder successfully saves their choices.
+
+    Resolve built-in request categories and personal fields to localized labels and descriptions in English, Spanish, French, and Arabic, including learning history and career/AI categories. Recognize the legitimate French cognates “Image” and “Qualifications” in the existing untranslated-value guard.
+
+    Dismiss Alerts when opening a contract-update review without waiting for read-status writes. Give unread indicators their own layout space so they cannot overlap notification dates.
+
+    Use one shared request form with the original creation controls for creating and editing requests, without per-item purpose fields or added default-enabled checkboxes. Keep the overall update explanation separate. Replace JSON authoring with readable changes and Preview Update / Publish Update actions in the Contracts tab. Show an accessible help icon and meaningful existing-access/defaults disclosures.
+
+    Start new optional review controls from their Opt-in/Opt-out settings without silently granting access. Use the edited request's defaults in previews, refresh saved choices when reopening without overwriting active edits, and reduce the extra spacing below the current version.
+
+    Separate Advanced Options from changes, published feedback, and actions. Add space below the current version while keeping the image's remove control in its original outside corner.
+
+    Show a clear unavailable state for networks that omit contract version metadata, including cached responses. Keep publishing disabled until a versioned response is available, and never assume an unversioned response is version 1.
+
+    Use direct Mongo connections for the local Docker APIs so the single-node replica's localhost address does not prevent them from starting. Gate Mongo-dependent services on a writable primary so they do not exit during replica initialization or election.
+
+    Pre-bundle the remaining workspace crypto and cloud-client dependencies before serving the local app, avoiding dependency-discovery reloads during browser startup.
+
+    Open an on-demand Update contract modal from each configured request in the Contracts tab, rather than the Testing tab. Reveal the update explanation only after edits, separate it from grouped current/next values, and keep user-review previews in the shared modal stack for correct focus and Escape behavior.
+
+    Breaking SDK/API changes: use `updateContract` instead of the removed `addAutoBoostsToContract` and `removeAutoBoostsFromContract` SDK methods. One-time consent status is now `consumed`, not `stale`. The deprecated HTTP AutoBoost routes remain available for one compatibility release and use the versioned update path. Legacy AutoBoost additions also pause writes and synchronization pending explicit holder review; coordinate partner upgrades and support `getConsentStatus` / `reviewUrl` before rollout.
+
+    Reject stale editor drafts with their original expected version, treat equivalent updates as no-ops, require future reconsent deadlines, and restrict legacy AutoBoost publications to contract owners. Paginate tied consent-data timestamps with stable opaque cursors and preserve all unreviewed optional additions across later updates.
+
+    Track each holder's last explicit review, backfill that baseline from transaction history, and timestamp legacy snapshots at the revision actually captured. Require notification and approval when an existing item's reason changes; keep redirect-only changes quiet. Retain ambiguous initial AutoBoost claims and reject mismatched concurrent initial credential deliveries.
+
+    Show material metadata, writer, and automatic-delivery changes alongside scope updates. Refresh holder terms before enabling review edits, populate newly enabled personal fields from the holder profile, and use a structured approval-required reason instead of matching error text.
+
+    Regenerate the Python API client from the current router graph, including all consent lifecycle states, versioned updates, and review metadata. Omit `None` for ordinary non-nullable optional inputs, preserve nullable values, and retain the allocation holder's explicit-null rejection instead of silently treating it as an omission.
+
+    Preserve existing delegated AutoBoost issuers when owners publish unchanged configurations, while keeping new configurations owner-issued and rejecting changes to an existing delegated signer. Defer new cross-account setup until an explicit issuer-authorization flow is available. Use pre-upgrade persisted fixtures for legacy-delegation regressions without reopening writer publication, and fix the signer mock's recursive self-call in consent regressions.
+
+    Keep saves from already handled reviews in ordinary sharing-update history, and preserve the saved one-time setting when update or reconsent inputs omit it.
+
+    Use opaque timestamp-and-ID cursors for holder consent lists, between-profile data, transaction history, and holder exports as well as owner data pages. Preserve legacy timestamp fallbacks and reject malformed or pre-upgrade date-only cursors with `BAD_REQUEST`; restart pagination without a cursor after upgrading.
+
+    Pin owned verification review links to the allocated app origin so real consent review URLs never escape to an unrelated localhost development server.
+
+    Explain approval notifications above Publish Update without changing checked-by-default Opt-out selections. Synchronize the CLI method catalog with the versioned contract SDK, removing obsolete AutoBoost commands and exposing update, history, status, and acceptance methods.
+
+    Use neutral changed-request summaries and Updated badges for existing-scope edits, including reason-only reviews. Reserve new-access headlines and new-item counts for pure scope additions without material request-detail edits, and retain existing optional choices during approval.
+
+- Updated dependencies [[`e9d738eea3b477dbd82bde171d3c5f8ffa2efbc5`](https://github.com/learningeconomy/LearnCard/commit/e9d738eea3b477dbd82bde171d3c5f8ffa2efbc5), [`69b80366c48e0f458b3bb50f25166c90ecaa2d6d`](https://github.com/learningeconomy/LearnCard/commit/69b80366c48e0f458b3bb50f25166c90ecaa2d6d), [`0caa0e478bce246793893e488f37ee90c9b00a1a`](https://github.com/learningeconomy/LearnCard/commit/0caa0e478bce246793893e488f37ee90c9b00a1a), [`bde3fe0f15a780d9fafc699096a9a0307502f529`](https://github.com/learningeconomy/LearnCard/commit/bde3fe0f15a780d9fafc699096a9a0307502f529), [`784f0c9b346a5f7e4e2c618a9b976dcaa90fafe3`](https://github.com/learningeconomy/LearnCard/commit/784f0c9b346a5f7e4e2c618a9b976dcaa90fafe3), [`83dad5258438dd7cbc1fba3035f1b009c703653e`](https://github.com/learningeconomy/LearnCard/commit/83dad5258438dd7cbc1fba3035f1b009c703653e), [`a7923d7deaf0baf7205bbae1f6fe132e846fed44`](https://github.com/learningeconomy/LearnCard/commit/a7923d7deaf0baf7205bbae1f6fe132e846fed44), [`751579d9c14116dbf6d0e7f7d62f489c81c39db2`](https://github.com/learningeconomy/LearnCard/commit/751579d9c14116dbf6d0e7f7d62f489c81c39db2), [`2c60b1a760958cbfe2525bc951d2381332e1aa48`](https://github.com/learningeconomy/LearnCard/commit/2c60b1a760958cbfe2525bc951d2381332e1aa48)]:
+    - @learncard/types@6.0.0
+    - @learncard/network-brain-client@2.7.0
+    - @learncard/learn-cloud-plugin@2.3.52
+    - @learncard/holder-continuity@0.2.29
+    - @learncard/core@9.4.44
+    - @learncard/init@2.5.10
+    - @learncard/didkit-plugin@1.10.10
+    - @learncard/lca-api-plugin@2.0.16
+    - @learncard/ler-rs-plugin@0.1.35
+    - @learncard/linked-claims-plugin@0.2.44
+    - @learncard/open-badge-v2-plugin@1.1.45
+    - @learncard/render-method-plugin@13.0.0
+
 ## 4.0.1
 
 ### Patch Changes

package/dist/index.js

@@ -27,6 +27,7 @@ var node_crypto = require('node:crypto');
 var node_child_process = require('node:child_process');
 var path$1 = require('path');
 var networkBrainClient = require('@learncard/network-brain-client');
+var helpers = require('@learncard/helpers');
 var crypto = require('crypto');
 
 function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
@@ -3275,6 +3276,11 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "acceptConnectionRequest: (id: string) => Promise<boolean>"
   },
+  "acceptContractUpdate": {
+    "plugin": "learn-card-network",
+    "signature": "acceptContractUpdate: (termsUri: string, update: {version: number; terms: ConsentFlowTerms; audienceVersion?: number}) => Promise<boolean>",
+    "doc": "Accepts the reviewed update using the user's selected data. @example await learnCard.invoke.acceptContractUpdate(termsUri, { version: 2, terms, audienceVersion: currentContract.audienceVersion });"
+  },
   "acceptCredential": {
     "plugin": "learn-card-network",
     "signature": "acceptCredential: (uri: string, options?: {skipNotification?: boolean; metadata?: Record<string, unknown>}) => Promise<boolean>"
@@ -3305,10 +3311,6 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "addAuthGrant: (authGrant: Partial<AuthGrantType>) => Promise<string>"
   },
-  "addAutoBoostsToContract": {
-    "plugin": "learn-card-network",
-    "signature": "addAutoBoostsToContract: (contractUri: string, autoboosts: AutoBoostConfig[]) => Promise<boolean>"
-  },
   "addBoostAdmin": {
     "plugin": "learn-card-network",
     "signature": "addBoostAdmin: (uri: string, profileId: string) => Promise<boolean>"
@@ -3426,7 +3428,7 @@ const METHOD_SIGNATURES = {
   },
   "campaignsAddAudience": {
     "plugin": "learn-card-network",
-    "signature": "campaignsAddAudience: (input: CampaignAudienceInput) => Promise<{count: number}>"
+    "signature": "campaignsAddAudience: (input: CampaignAudienceInput) => Promise<CampaignAudienceResult>"
   },
   "campaignsCreate": {
     "plugin": "learn-card-network",
@@ -3436,6 +3438,11 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "campaignsDelete: (campaignId: string) => Promise<boolean>"
   },
+  "campaignsDispatch": {
+    "plugin": "learn-card-network",
+    "signature": "campaignsDispatch: (campaignId: string, options?: CampaignDispatchOptions) => Promise<{dispatchId: string}>",
+    "doc": "Supply the preview token to reject stale or repeated confirmations."
+  },
   "campaignsGet": {
     "plugin": "learn-card-network",
     "signature": "campaignsGet: (campaignId: string) => Promise<Campaign>"
@@ -3458,7 +3465,17 @@ const METHOD_SIGNATURES = {
   },
   "campaignsPreviewAudience": {
     "plugin": "learn-card-network",
-    "signature": "campaignsPreviewAudience: (input: CampaignAudienceInput) => Promise<{count: number}>"
+    "signature": "campaignsPreviewAudience: (input: CampaignAudienceInput) => Promise<CampaignAudienceResult>"
+  },
+  "campaignsPreviewDispatch": {
+    "plugin": "learn-card-network",
+    "signature": "campaignsPreviewDispatch: (campaignId: string) => Promise<CampaignDispatchPreview>",
+    "doc": "Preview eligible inbox recipients before confirming an audience notification send."
+  },
+  "campaignsSendTestToMe": {
+    "plugin": "learn-card-network",
+    "signature": "campaignsSendTestToMe: (campaignId: string) => Promise<boolean>",
+    "doc": "Test selected channels only for the signed-in administrator, regardless of campaign status."
   },
   "campaignsSetStatus": {
     "plugin": "learn-card-network",
@@ -3599,12 +3616,17 @@ const METHOD_SIGNATURES = {
   },
   "createContract": {
     "plugin": "learn-card-network",
-    "signature": "createContract: (contract: {contract: ConsentFlowContract; name: string; subtitle?: string; description?: string; image?: string; expiresAt?: string; writers?: string[]; recipients?: string[]; autoboosts?: AutoBoostConfig[]}) => Promise<string>"
+    "signature": "createContract: (contract: {contract: ConsentFlowContract; reasonForAccessing?: string; needsGuardianConsent?: boolean; redirectUrl?: string; frontDoorBoostUri?: string; name: string; subtitle?: string; description?: string; image?: string; expiresAt?: string; writers?: string[]; recipients?: string[]; autoboosts?: AutoBoostConfig[]}) => Promise<string>"
   },
   "createDagJwe": {
     "plugin": "didkit",
     "signature": "createDagJwe: <T>(cleartext: T, recipients: string[]) => Promise<JWE>"
   },
+  "createDagJweExact": {
+    "plugin": "encryption",
+    "signature": "createDagJweExact: <T>(cleartext: T, recipients: string[]) => Promise<JWE>",
+    "doc": "Encrypts only to explicit recipients, without adding the calling identity."
+  },
   "createJwe": {
     "plugin": "didkit",
     "signature": "createJwe: (cleartext: string, recipients: string[]) => Promise<JWE>"
@@ -3818,6 +3840,10 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "getAllContractRequestsForProfile: (targetProfileId: string) => Promise<(ConsentFlowContractRequestForProfile & {contract: ConsentFlowContract & {uri: string; name?: string; image?: string; description?: string}})[]>"
   },
+  "getAnnouncementPreferences": {
+    "plugin": "learn-card-network",
+    "signature": "getAnnouncementPreferences: () => Promise<AnnouncementPreferences>"
+  },
   "getAPITokenForAuthGrant": {
     "plugin": "learn-card-network",
     "signature": "getAPITokenForAuthGrant: (id: string) => Promise<string>"
@@ -3950,9 +3976,15 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "getConsentFlowTransactions: (uri: string, options?: Partial<PaginationOptionsType> & {query?: ConsentFlowTransactionsQuery}) => Promise<PaginatedConsentFlowTransactions>"
   },
+  "getConsentStatus": {
+    "plugin": "learn-card-network",
+    "signature": "getConsentStatus: (uri: string, profileId: string) => Promise<ConsentFlowConsentStatus>",
+    "doc": "Checks a user's access state and provides a review link when approval is needed. @example const { needsReconsent, reviewUrl } = await learnCard.invoke.getConsentStatus(uri, profileId);"
+  },
   "getContract": {
     "plugin": "learn-card-network",
-    "signature": "getContract: (uri: string) => Promise<ConsentFlowContractDetails>"
+    "signature": "getContract: (uri: string) => Promise<ConsentFlowContractDetails>",
+    "doc": "Gets the current request, including its version. @example const contract = await learnCard.invoke.getContract(uri);"
   },
   "getContracts": {
     "plugin": "learn-card-network",
@@ -3962,11 +3994,21 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "getContractSentRequests: (contractUri: string) => Promise<ConsentFlowContractRequestForProfile[]>"
   },
+  "getContractVersions": {
+    "plugin": "learn-card-network",
+    "signature": "getContractVersions: (uri: string) => Promise<ConsentFlowContractVersion[]>",
+    "doc": "Lists a request's saved versions, newest first. @example const versions = await learnCard.invoke.getContractVersions(uri);"
+  },
   "getCredentialRefreshHistory": {
     "plugin": "learn-card-network",
     "signature": "getCredentialRefreshHistory: (input: GetCredentialRefreshHistoryInput) => Promise<GetCredentialRefreshHistoryResult>",
     "doc": "Cursor-paginated, metadata-only issuer audit history for a managed refresh. Never includes credential bodies or encrypted payloads."
   },
+  "getCredentialRefreshReceipt": {
+    "plugin": "learn-card-network",
+    "signature": "getCredentialRefreshReceipt: (input: GetCredentialRefreshReceiptInput) => Promise<CredentialRefreshReceipt | null>",
+    "doc": "Read the authenticated public binding for a pending managed delivery."
+  },
   "getCredentialsForContract": {
     "plugin": "learn-card-network",
     "signature": "getCredentialsForContract: (termsUri: string, options?: Partial<PaginationOptionsType> & {includeReceived?: boolean}) => Promise<PaginatedContractCredentials>"
@@ -4417,6 +4459,11 @@ const METHOD_SIGNATURES = {
     "signature": "publishCredentialSharePreview: (preview: PublishCredentialSharePreview) => Promise<string>",
     "doc": "Publish opted-in, publisher-supplied metadata bound to an encrypted presentation URI. Provide an owned preview ID and the same URI to refresh it; its URI cannot be rebound. A missing or mismatched refresh returns NOT_FOUND. This does not verify the credential or issuer. Returns an opaque UUID; public lookup also requires the matching share URI."
   },
+  "publishHolderEncryptedRefreshable": {
+    "plugin": "learn-card-network",
+    "signature": "publishHolderEncryptedRefreshable: (receipt: ManagedCredentialRefreshReceipt, credential: UnsignedVC, options: PublishHolderEncryptedRefreshableOptions) => Promise<PublishCredentialRefreshResult>",
+    "doc": "Holder-mode (LC-2345) counterpart of `publishCredentialRefresh`: builds and signs a new version locally from `receipt`'s bindings, encrypts it exactly to the current holder + manager recipients, and sends only the ciphertext handoff. Rejects when local signing is unavailable."
+  },
   "putShareLinkAttachmentChunk": {
     "plugin": "learn-card-network",
     "signature": "putShareLinkAttachmentChunk: (input: PutShareLinkAttachmentChunkInput) => Promise<{ok: true}>"
@@ -4427,7 +4474,7 @@ const METHOD_SIGNATURES = {
   },
   "recordCampaignEvent": {
     "plugin": "learn-card-network",
-    "signature": "recordCampaignEvent: (campaignId: string, event: CampaignEvent) => Promise<boolean>"
+    "signature": "recordCampaignEvent: (campaignId: string, event: CampaignEvent, testId?: string) => Promise<boolean>"
   },
   "recoverInboxCredentials": {
     "plugin": "learn-card-network",
@@ -4450,10 +4497,6 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "rejectGuardianCredentialInApp: (inboxCredentialId: string) => Promise<{success: boolean}>"
   },
-  "removeAutoBoostsFromContract": {
-    "plugin": "learn-card-network",
-    "signature": "removeAutoBoostsFromContract: (contractUri: string, boostUris: string[]) => Promise<boolean>"
-  },
   "removeBoostAdmin": {
     "plugin": "learn-card-network",
     "signature": "removeBoostAdmin: (uri: string, profileId: string) => Promise<boolean>"
@@ -4557,7 +4600,7 @@ const METHOD_SIGNATURES = {
   },
   "send": {
     "plugin": "learn-card-network",
-    "signature": "send: (input: SendInput) => Promise<SendResponse>"
+    "signature": "send: (input: SendBoostInputWithEncryption) => Promise<SendResponse>"
   },
   "sendAiInsightsContractRequest": {
     "plugin": "learn-card-network",
@@ -4702,10 +4745,18 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "unsubmitAppStoreListing: (listingId: string) => Promise<boolean>"
   },
+  "unsubscribeFromAnnouncements": {
+    "plugin": "learn-card-network",
+    "signature": "unsubscribeFromAnnouncements: (token: string) => Promise<boolean>"
+  },
   "unsuspendBoostRecipient": {
     "plugin": "learn-card-network",
     "signature": "unsuspendBoostRecipient: (boostUri: string, recipientProfileId: string, credentialUri?: string) => Promise<boolean>"
   },
+  "updateAnnouncementPreferences": {
+    "plugin": "learn-card-network",
+    "signature": "updateAnnouncementPreferences: (updates: Partial<AnnouncementPreferences>) => Promise<AnnouncementPreferences>"
+  },
   "updateAppStoreListing": {
     "plugin": "learn-card-network",
     "signature": "updateAppStoreListing: (listingId: string, updates: AppStoreListingUpdateType) => Promise<boolean>"
@@ -4722,6 +4773,11 @@ const METHOD_SIGNATURES = {
     "plugin": "learn-card-network",
     "signature": "updateBoostPermissions: (uri: string, updates: Partial<Omit<BoostPermissions, 'role'>>, profileId?: string) => Promise<boolean>"
   },
+  "updateContract": {
+    "plugin": "learn-card-network",
+    "signature": "updateContract: (uri: string, changes: ConsentFlowContractChanges & NonNullable<ConsentFlowContractChanges['contract']>, options?: {reason?: string; reconsentDeadline?: string; dryRun?: boolean; expectedVersion?: number}) => Promise<ConsentFlowContractUpdateResult>",
+    "doc": "Updates a live request at the same URI, or previews it without saving. Scope maps merge with the current request. Set an entry to null to remove it; expiresAt: null clears expiry. AutoBoost and writer arrays replace their lists. Pass expectedVersion from the original draft to reject intervening publications. @example await learnCard.invoke.updateContract(uri, { read: { credentials: { categories: { Transcript: { required: true, reason: 'to calculate your GPA' }, } } }, }, { reason: 'We added transcripts so we can show your GPA on your r\xE9sum\xE9.' });"
+  },
   "updateContractTerms": {
     "plugin": "learn-card-network",
     "signature": "updateContractTerms: (uri: string, terms: {terms: ConsentFlowTerms; expiresAt?: string; oneTime?: boolean; audienceVersion?: number}) => Promise<boolean>"
@@ -4808,6 +4864,7 @@ const METHOD_SIGNATURES = {
 const STATIC_INVOKE_METHODS = [
   "acceptAndStoreCredentialOffer",
   "acceptConnectionRequest",
+  "acceptContractUpdate",
   "acceptCredential",
   "acceptCredentialOffer",
   "acceptPresentation",
@@ -4815,7 +4872,6 @@ const STATIC_INVOKE_METHODS = [
   "actAs",
   "activateChapiHandler",
   "addAuthGrant",
-  "addAutoBoostsToContract",
   "addBoostAdmin",
   "addBoostToApp",
   "addContactMethod",
@@ -4847,12 +4903,15 @@ const STATIC_INVOKE_METHODS = [
   "campaignsAddAudience",
   "campaignsCreate",
   "campaignsDelete",
+  "campaignsDispatch",
   "campaignsGet",
   "campaignsGetStats",
   "campaignsIsAdmin",
   "campaignsList",
   "campaignsPageAudience",
   "campaignsPreviewAudience",
+  "campaignsPreviewDispatch",
+  "campaignsSendTestToMe",
   "campaignsSetStatus",
   "campaignsUpdate",
   "cancelConnectionRequest",
@@ -4889,6 +4948,7 @@ const STATIC_INVOKE_METHODS = [
   "createClaimHook",
   "createContract",
   "createDagJwe",
+  "createDagJweExact",
   "createJwe",
   "createManagedProfile",
   "createManagedServiceProfile",
@@ -4942,6 +5002,7 @@ const STATIC_INVOKE_METHODS = [
   "getAllAvailableFrameworks",
   "getAllConsentFlowData",
   "getAllContractRequestsForProfile",
+  "getAnnouncementPreferences",
   "getAppBoosts",
   "getAppStoreListing",
   "getAppStoreListingInstallCount",
@@ -4972,11 +5033,14 @@ const STATIC_INVOKE_METHODS = [
   "getConsentFlowData",
   "getConsentFlowDataForDid",
   "getConsentFlowTransactions",
+  "getConsentStatus",
   "getConsentedContracts",
   "getContract",
   "getContractSentRequests",
+  "getContractVersions",
   "getContracts",
   "getCredentialRefreshHistory",
+  "getCredentialRefreshReceipt",
   "getCredentialsForContract",
   "getCurrentNetwork",
   "getDidAuthVp",
@@ -5087,6 +5151,7 @@ const STATIC_INVOKE_METHODS = [
   "presentSdJwtVc",
   "publishCredentialRefresh",
   "publishCredentialSharePreview",
+  "publishHolderEncryptedRefreshable",
   "putShareLinkAttachmentChunk",
   "receiveChapiEvent",
   "recordCampaignEvent",
@@ -5095,7 +5160,6 @@ const STATIC_INVOKE_METHODS = [
   "registerSigningAuthority",
   "rejectGuardianCredential",
   "rejectGuardianCredentialInApp",
-  "removeAutoBoostsFromContract",
   "removeBoostAdmin",
   "removeBoostFromApp",
   "removeBoostParent",
@@ -5154,11 +5218,14 @@ const STATIC_INVOKE_METHODS = [
   "unblockProfile",
   "uninstallApp",
   "unsubmitAppStoreListing",
+  "unsubscribeFromAnnouncements",
   "unsuspendBoostRecipient",
+  "updateAnnouncementPreferences",
   "updateAppStoreListing",
   "updateAuthGrant",
   "updateBoost",
   "updateBoostPermissions",
+  "updateContract",
   "updateContractTerms",
   "updateDidMetadata",
   "updateIntegration",
@@ -5190,6 +5257,7 @@ const READ_ALLOWLIST = /* @__PURE__ */ new Set([
   "campaignsList",
   "campaignsPageAudience",
   "campaignsPreviewAudience",
+  "campaignsPreviewDispatch",
   "categorizeSdJwtVct",
   "contextLoader",
   "decodeSdJwtClaims",
@@ -6259,7 +6327,7 @@ const registerSkillCommands = (program, deps) => {
 };
 
 var name = "@learncard/cli";
-var version = "4.0.1";
+var version = "4.0.2";
 var description = "Command Line Interface for LearnCard";
 var main = "dist/index.js";
 var bin = {
@@ -10332,7 +10400,8 @@ ${login.href}`);
     step = "refresh the recipient\u2019s copy";
     out.log("\n3 / 3  REFRESH THE RECIPIENT\u2019S COPY");
     out.log("Checking for an update and verifying the new credential...");
-    if (local && new URL(refresh.refreshService.id).origin !== networkUrl.origin) {
+    const managedService = helpers.getManagedRefreshServices(refresh)[0];
+    if (local && (!managedService || new URL(managedService.id).origin !== networkUrl.origin)) {
       throw new Error("The refresh service does not match the selected local network.");
     }
     const refreshed = await holder.invoke.refreshCredential(

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@learncard/cli",
-    "version": "4.0.1",
+    "version": "4.0.2",
     "description": "Command Line Interface for LearnCard",
     "main": "dist/index.js",
     "bin": {
@@ -28,18 +28,18 @@
     "author": "Learning Economy Foundation (www.learningeconomy.io)",
     "license": "MIT",
     "dependencies": {
-        "@learncard/core": "9.4.43",
-        "@learncard/didkit-plugin": "^1.10.9",
-        "@learncard/holder-continuity": "0.2.28",
-        "@learncard/init": "^2.5.9",
-        "@learncard/lca-api-plugin": "2.0.15",
-        "@learncard/learn-cloud-plugin": "2.3.51",
-        "@learncard/ler-rs-plugin": "0.1.34",
-        "@learncard/linked-claims-plugin": "0.2.43",
-        "@learncard/network-brain-client": "2.6.3",
-        "@learncard/open-badge-v2-plugin": "1.1.44",
-        "@learncard/render-method-plugin": "12.0.2",
-        "@learncard/types": "5.24.2",
+        "@learncard/core": "9.4.44",
+        "@learncard/didkit-plugin": "^1.10.10",
+        "@learncard/holder-continuity": "0.2.29",
+        "@learncard/init": "^2.5.10",
+        "@learncard/lca-api-plugin": "2.0.16",
+        "@learncard/learn-cloud-plugin": "2.3.52",
+        "@learncard/ler-rs-plugin": "0.1.35",
+        "@learncard/linked-claims-plugin": "0.2.44",
+        "@learncard/network-brain-client": "2.7.0",
+        "@learncard/open-badge-v2-plugin": "1.1.45",
+        "@learncard/render-method-plugin": "13.0.0",
+        "@learncard/types": "6.0.0",
         "clipboardy": "^4.0.0",
         "commander": "^9.3.0",
         "figlet": "^1.5.2",
@@ -49,7 +49,7 @@
         "zod": "^4.1.13"
     },
     "devDependencies": {
-        "@learncard/credential-library": "2.1.6",
+        "@learncard/credential-library": "2.1.7",
         "@rollup/plugin-json": "^4.1.0",
         "@types/cors": "^2.8.12",
         "@types/figlet": "^1.5.4",