@learncard/helpers 1.7.2 → 1.8.0

package/dist/helpers.esm.js

@@ -58,6 +58,7 @@ var require_types_cjs_development = __commonJS({
     var index_exports = {};
     __export2(index_exports, {
       ACT_AS_HEADER: /* @__PURE__ */ __name(() => ACT_AS_HEADER, "ACT_AS_HEADER"),
+      AIPassportCredentialRecordValidator: /* @__PURE__ */ __name(() => AIPassportCredentialRecordValidator, "AIPassportCredentialRecordValidator"),
       AUTH_GRANT_AUDIENCE_DOMAIN_PREFIX: /* @__PURE__ */ __name(() => AUTH_GRANT_AUDIENCE_DOMAIN_PREFIX, "AUTH_GRANT_AUDIENCE_DOMAIN_PREFIX"),
       AchievementCredentialValidator: /* @__PURE__ */ __name(() => AchievementCredentialValidator, "AchievementCredentialValidator"),
       AchievementCriteriaValidator: /* @__PURE__ */ __name(() => AchievementCriteriaValidator, "AchievementCriteriaValidator"),
@@ -69,6 +70,8 @@ var require_types_cjs_development = __commonJS({
       AddTagInputValidator: /* @__PURE__ */ __name(() => AddTagInputValidator, "AddTagInputValidator"),
       AddressValidator: /* @__PURE__ */ __name(() => AddressValidator, "AddressValidator"),
       AgeRatingValidator: /* @__PURE__ */ __name(() => AgeRatingValidator, "AgeRatingValidator"),
+      AiSessionMode: /* @__PURE__ */ __name(() => AiSessionMode, "AiSessionMode"),
+      AiSessionModeValidator: /* @__PURE__ */ __name(() => AiSessionModeValidator, "AiSessionModeValidator"),
       AlignmentTargetTypeValidator: /* @__PURE__ */ __name(() => AlignmentTargetTypeValidator, "AlignmentTargetTypeValidator"),
       AlignmentValidator: /* @__PURE__ */ __name(() => AlignmentValidator, "AlignmentValidator"),
       AllocateCredentialRefreshInputValidator: /* @__PURE__ */ __name(() => AllocateCredentialRefreshInputValidator, "AllocateCredentialRefreshInputValidator"),
@@ -76,6 +79,7 @@ var require_types_cjs_development = __commonJS({
       AllocateCredentialStatusInputValidator: /* @__PURE__ */ __name(() => AllocateCredentialStatusInputValidator, "AllocateCredentialStatusInputValidator"),
       AllocatedBitstringStatusListEntryValidator: /* @__PURE__ */ __name(() => AllocatedBitstringStatusListEntryValidator, "AllocatedBitstringStatusListEntryValidator"),
       AllowConnectionRequestsEnum: /* @__PURE__ */ __name(() => AllowConnectionRequestsEnum, "AllowConnectionRequestsEnum"),
+      AnnouncementPreferencesValidator: /* @__PURE__ */ __name(() => AnnouncementPreferencesValidator, "AnnouncementPreferencesValidator"),
       AppBoostValidator: /* @__PURE__ */ __name(() => AppBoostValidator, "AppBoostValidator"),
       AppEventInputValidator: /* @__PURE__ */ __name(() => AppEventInputValidator, "AppEventInputValidator"),
       AppEventResponseValidator: /* @__PURE__ */ __name(() => AppEventResponseValidator, "AppEventResponseValidator"),
@@ -91,12 +95,15 @@ var require_types_cjs_development = __commonJS({
       AppStoreListingSubmitterValidator: /* @__PURE__ */ __name(() => AppStoreListingSubmitterValidator, "AppStoreListingSubmitterValidator"),
       AppStoreListingUpdateValidator: /* @__PURE__ */ __name(() => AppStoreListingUpdateValidator, "AppStoreListingUpdateValidator"),
       AppStoreListingValidator: /* @__PURE__ */ __name(() => AppStoreListingValidator, "AppStoreListingValidator"),
+      ArtifactSuggestionValidator: /* @__PURE__ */ __name(() => ArtifactSuggestionValidator, "ArtifactSuggestionValidator"),
       AssociationTypeValidator: /* @__PURE__ */ __name(() => AssociationTypeValidator, "AssociationTypeValidator"),
       AssociationValidator: /* @__PURE__ */ __name(() => AssociationValidator, "AssociationValidator"),
+      AttachCredentialRefreshStatusEntriesInputValidator: /* @__PURE__ */ __name(() => AttachCredentialRefreshStatusEntriesInputValidator, "AttachCredentialRefreshStatusEntriesInputValidator"),
       AuthGrantQueryValidator: /* @__PURE__ */ __name(() => AuthGrantQueryValidator, "AuthGrantQueryValidator"),
       AuthGrantStatusValidator: /* @__PURE__ */ __name(() => AuthGrantStatusValidator, "AuthGrantStatusValidator"),
       AuthGrantValidator: /* @__PURE__ */ __name(() => AuthGrantValidator, "AuthGrantValidator"),
       AuthSessionError: /* @__PURE__ */ __name(() => AuthSessionError, "AuthSessionError"),
+      AuthenticatedMessageValidator: /* @__PURE__ */ __name(() => AuthenticatedMessageValidator, "AuthenticatedMessageValidator"),
       AutoBoostConfigValidator: /* @__PURE__ */ __name(() => AutoBoostConfigValidator, "AutoBoostConfigValidator"),
       BITSTRING_STATUS_PURPOSES: /* @__PURE__ */ __name(() => BITSTRING_STATUS_PURPOSES, "BITSTRING_STATUS_PURPOSES"),
       BitstringStatusListCredentialSubjectValidator: /* @__PURE__ */ __name(() => BitstringStatusListCredentialSubjectValidator, "BitstringStatusListCredentialSubjectValidator"),
@@ -108,19 +115,26 @@ var require_types_cjs_development = __commonJS({
       BoostRecipientValidator: /* @__PURE__ */ __name(() => BoostRecipientValidator, "BoostRecipientValidator"),
       BoostRecipientWithChildrenValidator: /* @__PURE__ */ __name(() => BoostRecipientWithChildrenValidator, "BoostRecipientWithChildrenValidator"),
       BoostValidator: /* @__PURE__ */ __name(() => BoostValidator, "BoostValidator"),
+      CONTRACT_APPROVAL_REQUIRED: /* @__PURE__ */ __name(() => CONTRACT_APPROVAL_REQUIRED, "CONTRACT_APPROVAL_REQUIRED"),
       CampaignAudienceInputValidator: /* @__PURE__ */ __name(() => CampaignAudienceInputValidator, "CampaignAudienceInputValidator"),
+      CampaignAudienceResultValidator: /* @__PURE__ */ __name(() => CampaignAudienceResultValidator, "CampaignAudienceResultValidator"),
       CampaignAudienceSourceValidator: /* @__PURE__ */ __name(() => CampaignAudienceSourceValidator, "CampaignAudienceSourceValidator"),
       CampaignChannelValidator: /* @__PURE__ */ __name(() => CampaignChannelValidator, "CampaignChannelValidator"),
+      CampaignDispatchOptionsValidator: /* @__PURE__ */ __name(() => CampaignDispatchOptionsValidator, "CampaignDispatchOptionsValidator"),
+      CampaignDispatchPreviewValidator: /* @__PURE__ */ __name(() => CampaignDispatchPreviewValidator, "CampaignDispatchPreviewValidator"),
+      CampaignEmailValidator: /* @__PURE__ */ __name(() => CampaignEmailValidator, "CampaignEmailValidator"),
       CampaignEventValidator: /* @__PURE__ */ __name(() => CampaignEventValidator, "CampaignEventValidator"),
       CampaignIdValidator: /* @__PURE__ */ __name(() => CampaignIdValidator, "CampaignIdValidator"),
       CampaignPaginationValidator: /* @__PURE__ */ __name(() => CampaignPaginationValidator, "CampaignPaginationValidator"),
       CampaignStatsValidator: /* @__PURE__ */ __name(() => CampaignStatsValidator, "CampaignStatsValidator"),
       CampaignStatusValidator: /* @__PURE__ */ __name(() => CampaignStatusValidator, "CampaignStatusValidator"),
+      CampaignTestValidator: /* @__PURE__ */ __name(() => CampaignTestValidator, "CampaignTestValidator"),
       CampaignUpdatesValidator: /* @__PURE__ */ __name(() => CampaignUpdatesValidator, "CampaignUpdatesValidator"),
       CampaignUserStateValidator: /* @__PURE__ */ __name(() => CampaignUserStateValidator, "CampaignUserStateValidator"),
       CampaignValidator: /* @__PURE__ */ __name(() => CampaignValidator, "CampaignValidator"),
       CapturedConsentRecordValidator: /* @__PURE__ */ __name(() => CapturedConsentRecordValidator, "CapturedConsentRecordValidator"),
       CapturedTemplateRecordValidator: /* @__PURE__ */ __name(() => CapturedTemplateRecordValidator, "CapturedTemplateRecordValidator"),
+      ChatMessageValidator: /* @__PURE__ */ __name(() => ChatMessageValidator, "ChatMessageValidator"),
       CheckCredentialEventValidator: /* @__PURE__ */ __name(() => CheckCredentialEventValidator, "CheckCredentialEventValidator"),
       CheckIssuanceStatusEventValidator: /* @__PURE__ */ __name(() => CheckIssuanceStatusEventValidator, "CheckIssuanceStatusEventValidator"),
       ClaimHookQueryValidator: /* @__PURE__ */ __name(() => ClaimHookQueryValidator, "ClaimHookQueryValidator"),
@@ -130,15 +144,26 @@ var require_types_cjs_development = __commonJS({
       ClaimTokenValidator: /* @__PURE__ */ __name(() => ClaimTokenValidator, "ClaimTokenValidator"),
       ClrCredentialValidator: /* @__PURE__ */ __name(() => ClrCredentialValidator, "ClrCredentialValidator"),
       ClrSubjectValidator: /* @__PURE__ */ __name(() => ClrSubjectValidator, "ClrSubjectValidator"),
+      ConsentFlowConsentStatusValidator: /* @__PURE__ */ __name(() => ConsentFlowConsentStatusValidator, "ConsentFlowConsentStatusValidator"),
+      ConsentFlowContractChangeKindValidator: /* @__PURE__ */ __name(() => ConsentFlowContractChangeKindValidator, "ConsentFlowContractChangeKindValidator"),
+      ConsentFlowContractChangesValidator: /* @__PURE__ */ __name(() => ConsentFlowContractChangesValidator, "ConsentFlowContractChangesValidator"),
       ConsentFlowContractDataForDidValidator: /* @__PURE__ */ __name(() => ConsentFlowContractDataForDidValidator, "ConsentFlowContractDataForDidValidator"),
       ConsentFlowContractDataValidator: /* @__PURE__ */ __name(() => ConsentFlowContractDataValidator, "ConsentFlowContractDataValidator"),
+      ConsentFlowContractDetailChangeValidator: /* @__PURE__ */ __name(() => ConsentFlowContractDetailChangeValidator, "ConsentFlowContractDetailChangeValidator"),
       ConsentFlowContractDetailsValidator: /* @__PURE__ */ __name(() => ConsentFlowContractDetailsValidator, "ConsentFlowContractDetailsValidator"),
+      ConsentFlowContractDiffValidator: /* @__PURE__ */ __name(() => ConsentFlowContractDiffValidator, "ConsentFlowContractDiffValidator"),
+      ConsentFlowContractNotificationDataValidator: /* @__PURE__ */ __name(() => ConsentFlowContractNotificationDataValidator, "ConsentFlowContractNotificationDataValidator"),
       ConsentFlowContractQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowContractQueryValidator, "ConsentFlowContractQueryValidator"),
       ConsentFlowContractRequestForProfileListValidator: /* @__PURE__ */ __name(() => ConsentFlowContractRequestForProfileListValidator, "ConsentFlowContractRequestForProfileListValidator"),
       ConsentFlowContractRequestForProfileValidator: /* @__PURE__ */ __name(() => ConsentFlowContractRequestForProfileValidator, "ConsentFlowContractRequestForProfileValidator"),
       ConsentFlowContractRequestReadStatusValidator: /* @__PURE__ */ __name(() => ConsentFlowContractRequestReadStatusValidator, "ConsentFlowContractRequestReadStatusValidator"),
       ConsentFlowContractRequestStatusValidator: /* @__PURE__ */ __name(() => ConsentFlowContractRequestStatusValidator, "ConsentFlowContractRequestStatusValidator"),
+      ConsentFlowContractScopeValidator: /* @__PURE__ */ __name(() => ConsentFlowContractScopeValidator, "ConsentFlowContractScopeValidator"),
+      ConsentFlowContractStatusValidator: /* @__PURE__ */ __name(() => ConsentFlowContractStatusValidator, "ConsentFlowContractStatusValidator"),
+      ConsentFlowContractUpdatePreviewValidator: /* @__PURE__ */ __name(() => ConsentFlowContractUpdatePreviewValidator, "ConsentFlowContractUpdatePreviewValidator"),
+      ConsentFlowContractUpdateResultValidator: /* @__PURE__ */ __name(() => ConsentFlowContractUpdateResultValidator, "ConsentFlowContractUpdateResultValidator"),
       ConsentFlowContractValidator: /* @__PURE__ */ __name(() => ConsentFlowContractValidator, "ConsentFlowContractValidator"),
+      ConsentFlowContractVersionValidator: /* @__PURE__ */ __name(() => ConsentFlowContractVersionValidator, "ConsentFlowContractVersionValidator"),
       ConsentFlowDataForDidQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowDataForDidQueryValidator, "ConsentFlowDataForDidQueryValidator"),
       ConsentFlowDataQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowDataQueryValidator, "ConsentFlowDataQueryValidator"),
       ConsentFlowGuardianApprovalValidator: /* @__PURE__ */ __name(() => ConsentFlowGuardianApprovalValidator, "ConsentFlowGuardianApprovalValidator"),
@@ -178,6 +203,7 @@ var require_types_cjs_development = __commonJS({
       CredentialActivityStatsValidator: /* @__PURE__ */ __name(() => CredentialActivityStatsValidator, "CredentialActivityStatsValidator"),
       CredentialActivityValidator: /* @__PURE__ */ __name(() => CredentialActivityValidator, "CredentialActivityValidator"),
       CredentialActivityWithDetailsValidator: /* @__PURE__ */ __name(() => CredentialActivityWithDetailsValidator, "CredentialActivityWithDetailsValidator"),
+      CredentialDisplayValidator: /* @__PURE__ */ __name(() => CredentialDisplayValidator, "CredentialDisplayValidator"),
       CredentialFormatValidator: /* @__PURE__ */ __name(() => CredentialFormatValidator, "CredentialFormatValidator"),
       CredentialInfoValidator: /* @__PURE__ */ __name(() => CredentialInfoValidator, "CredentialInfoValidator"),
       CredentialNameRefValidator: /* @__PURE__ */ __name(() => CredentialNameRefValidator, "CredentialNameRefValidator"),
@@ -185,11 +211,13 @@ var require_types_cjs_development = __commonJS({
       CredentialRefreshChallengeValidator: /* @__PURE__ */ __name(() => CredentialRefreshChallengeValidator, "CredentialRefreshChallengeValidator"),
       CredentialRefreshFailedResultValidator: /* @__PURE__ */ __name(() => CredentialRefreshFailedResultValidator, "CredentialRefreshFailedResultValidator"),
       CredentialRefreshFailureCodeValidator: /* @__PURE__ */ __name(() => CredentialRefreshFailureCodeValidator, "CredentialRefreshFailureCodeValidator"),
+      CredentialRefreshReceiptValidator: /* @__PURE__ */ __name(() => CredentialRefreshReceiptValidator, "CredentialRefreshReceiptValidator"),
       CredentialRefreshResponseEnvelopeValidator: /* @__PURE__ */ __name(() => CredentialRefreshResponseEnvelopeValidator, "CredentialRefreshResponseEnvelopeValidator"),
       CredentialRefreshResultValidator: /* @__PURE__ */ __name(() => CredentialRefreshResultValidator, "CredentialRefreshResultValidator"),
       CredentialRefreshSigningModeValidator: /* @__PURE__ */ __name(() => CredentialRefreshSigningModeValidator, "CredentialRefreshSigningModeValidator"),
       CredentialRefreshUnchangedResultValidator: /* @__PURE__ */ __name(() => CredentialRefreshUnchangedResultValidator, "CredentialRefreshUnchangedResultValidator"),
       CredentialRefreshUnsupportedResultValidator: /* @__PURE__ */ __name(() => CredentialRefreshUnsupportedResultValidator, "CredentialRefreshUnsupportedResultValidator"),
+      CredentialRefreshUpdateReasonValidator: /* @__PURE__ */ __name(() => CredentialRefreshUpdateReasonValidator, "CredentialRefreshUpdateReasonValidator"),
       CredentialRefreshUpdatedResultValidator: /* @__PURE__ */ __name(() => CredentialRefreshUpdatedResultValidator, "CredentialRefreshUpdatedResultValidator"),
       CredentialRefreshVersionMetadataValidator: /* @__PURE__ */ __name(() => CredentialRefreshVersionMetadataValidator, "CredentialRefreshVersionMetadataValidator"),
       CredentialSchemaValidator: /* @__PURE__ */ __name(() => CredentialSchemaValidator, "CredentialSchemaValidator"),
@@ -197,8 +225,10 @@ var require_types_cjs_development = __commonJS({
       CredentialSharePreviewValidator: /* @__PURE__ */ __name(() => CredentialSharePreviewValidator, "CredentialSharePreviewValidator"),
       CredentialStatusValidator: /* @__PURE__ */ __name(() => CredentialStatusValidator, "CredentialStatusValidator"),
       CredentialSubjectValidator: /* @__PURE__ */ __name(() => CredentialSubjectValidator, "CredentialSubjectValidator"),
+      CredentialVerificationMetadataValidator: /* @__PURE__ */ __name(() => CredentialVerificationMetadataValidator, "CredentialVerificationMetadataValidator"),
       CriteriaValidator: /* @__PURE__ */ __name(() => CriteriaValidator, "CriteriaValidator"),
       DEFAULT_BITSTRING_STATUS_LIST_SIZE: /* @__PURE__ */ __name(() => DEFAULT_BITSTRING_STATUS_LIST_SIZE, "DEFAULT_BITSTRING_STATUS_LIST_SIZE"),
+      DebugInfoValidator: /* @__PURE__ */ __name(() => DebugInfoValidator, "DebugInfoValidator"),
       DeleteFrameworkInputValidator: /* @__PURE__ */ __name(() => DeleteFrameworkInputValidator, "DeleteFrameworkInputValidator"),
       DeleteShareLinkAttachmentChunksInputValidator: /* @__PURE__ */ __name(() => DeleteShareLinkAttachmentChunksInputValidator, "DeleteShareLinkAttachmentChunksInputValidator"),
       DeleteShareLinkAttachmentChunksOutputValidator: /* @__PURE__ */ __name(() => DeleteShareLinkAttachmentChunksOutputValidator, "DeleteShareLinkAttachmentChunksOutputValidator"),
@@ -210,6 +240,7 @@ var require_types_cjs_development = __commonJS({
       ESCROW_PIN_UNAVAILABLE_MESSAGE: /* @__PURE__ */ __name(() => ESCROW_PIN_UNAVAILABLE_MESSAGE, "ESCROW_PIN_UNAVAILABLE_MESSAGE"),
       EncryptedCredentialRecordValidator: /* @__PURE__ */ __name(() => EncryptedCredentialRecordValidator, "EncryptedCredentialRecordValidator"),
       EncryptedRecordValidator: /* @__PURE__ */ __name(() => EncryptedRecordValidator, "EncryptedRecordValidator"),
+      EncryptionRecipientsResultValidator: /* @__PURE__ */ __name(() => EncryptionRecipientsResultValidator, "EncryptionRecipientsResultValidator"),
       EndorsementCredentialValidator: /* @__PURE__ */ __name(() => EndorsementCredentialValidator, "EndorsementCredentialValidator"),
       EndorsementSubjectValidator: /* @__PURE__ */ __name(() => EndorsementSubjectValidator, "EndorsementSubjectValidator"),
       EscrowPinStatusValidator: /* @__PURE__ */ __name(() => EscrowPinStatusValidator, "EscrowPinStatusValidator"),
@@ -223,6 +254,8 @@ var require_types_cjs_development = __commonJS({
       GetCountersEventValidator: /* @__PURE__ */ __name(() => GetCountersEventValidator, "GetCountersEventValidator"),
       GetCredentialRefreshHistoryInputValidator: /* @__PURE__ */ __name(() => GetCredentialRefreshHistoryInputValidator, "GetCredentialRefreshHistoryInputValidator"),
       GetCredentialRefreshHistoryResultValidator: /* @__PURE__ */ __name(() => GetCredentialRefreshHistoryResultValidator, "GetCredentialRefreshHistoryResultValidator"),
+      GetCredentialRefreshReceiptInputValidator: /* @__PURE__ */ __name(() => GetCredentialRefreshReceiptInputValidator, "GetCredentialRefreshReceiptInputValidator"),
+      GetEncryptionRecipientsInputValidator: /* @__PURE__ */ __name(() => GetEncryptionRecipientsInputValidator, "GetEncryptionRecipientsInputValidator"),
       GetFullSkillTreeInputValidator: /* @__PURE__ */ __name(() => GetFullSkillTreeInputValidator, "GetFullSkillTreeInputValidator"),
       GetFullSkillTreeResultValidator: /* @__PURE__ */ __name(() => GetFullSkillTreeResultValidator, "GetFullSkillTreeResultValidator"),
       GetShareLinkAttachmentChunkInputValidator: /* @__PURE__ */ __name(() => GetShareLinkAttachmentChunkInputValidator, "GetShareLinkAttachmentChunkInputValidator"),
@@ -230,6 +263,7 @@ var require_types_cjs_development = __commonJS({
       GetSkillPathResultValidator: /* @__PURE__ */ __name(() => GetSkillPathResultValidator, "GetSkillPathResultValidator"),
       GetTemplateRecipientsEventValidator: /* @__PURE__ */ __name(() => GetTemplateRecipientsEventValidator, "GetTemplateRecipientsEventValidator"),
       GuardianStatusValidator: /* @__PURE__ */ __name(() => GuardianStatusValidator, "GuardianStatusValidator"),
+      HolderEncryptedHandoffValidator: /* @__PURE__ */ __name(() => HolderEncryptedHandoffValidator, "HolderEncryptedHandoffValidator"),
       HolderExportConsentRecordValidator: /* @__PURE__ */ __name(() => HolderExportConsentRecordValidator, "HolderExportConsentRecordValidator"),
       HolderExportMetadataValidator: /* @__PURE__ */ __name(() => HolderExportMetadataValidator, "HolderExportMetadataValidator"),
       IdentifierEntryValidator: /* @__PURE__ */ __name(() => IdentifierEntryValidator, "IdentifierEntryValidator"),
@@ -249,7 +283,9 @@ var require_types_cjs_development = __commonJS({
       InlineSendCredentialEventValidator: /* @__PURE__ */ __name(() => InlineSendCredentialEventValidator, "InlineSendCredentialEventValidator"),
       InlineWalletCategoryValidator: /* @__PURE__ */ __name(() => InlineWalletCategoryValidator, "InlineWalletCategoryValidator"),
       InlineWalletSkillTagValidator: /* @__PURE__ */ __name(() => InlineWalletSkillTagValidator, "InlineWalletSkillTagValidator"),
+      InsightArtifactValidator: /* @__PURE__ */ __name(() => InsightArtifactValidator, "InsightArtifactValidator"),
       InstalledAppValidator: /* @__PURE__ */ __name(() => InstalledAppValidator, "InstalledAppValidator"),
+      IntroStreamModeValidator: /* @__PURE__ */ __name(() => IntroStreamModeValidator, "IntroStreamModeValidator"),
       IssueInboxCredentialBatchItemResultValidator: /* @__PURE__ */ __name(() => IssueInboxCredentialBatchItemResultValidator, "IssueInboxCredentialBatchItemResultValidator"),
       IssueInboxCredentialBatchItemValidator: /* @__PURE__ */ __name(() => IssueInboxCredentialBatchItemValidator, "IssueInboxCredentialBatchItemValidator"),
       IssueInboxCredentialBatchResponseValidator: /* @__PURE__ */ __name(() => IssueInboxCredentialBatchResponseValidator, "IssueInboxCredentialBatchResponseValidator"),
@@ -301,6 +337,7 @@ var require_types_cjs_development = __commonJS({
       LCNVisibleProfileValidator: /* @__PURE__ */ __name(() => LCNVisibleProfileValidator, "LCNVisibleProfileValidator"),
       LaunchTypeValidator: /* @__PURE__ */ __name(() => LaunchTypeValidator, "LaunchTypeValidator"),
       LearnCardRefreshAuthorizationValidator: /* @__PURE__ */ __name(() => LearnCardRefreshAuthorizationValidator, "LearnCardRefreshAuthorizationValidator"),
+      LearningPathwayValidator: /* @__PURE__ */ __name(() => LearningPathwayValidator, "LearningPathwayValidator"),
       LegacySendCredentialEventValidator: /* @__PURE__ */ __name(() => LegacySendCredentialEventValidator, "LegacySendCredentialEventValidator"),
       LinkProviderFrameworkInputValidator: /* @__PURE__ */ __name(() => LinkProviderFrameworkInputValidator, "LinkProviderFrameworkInputValidator"),
       ListCampaignsInputValidator: /* @__PURE__ */ __name(() => ListCampaignsInputValidator, "ListCampaignsInputValidator"),
@@ -312,8 +349,11 @@ var require_types_cjs_development = __commonJS({
       MAX_SHARE_RECOVERY_JWE_BYTES: /* @__PURE__ */ __name(() => MAX_SHARE_RECOVERY_JWE_BYTES, "MAX_SHARE_RECOVERY_JWE_BYTES"),
       MAX_SHARE_SOURCE_URI_CHARS: /* @__PURE__ */ __name(() => MAX_SHARE_SOURCE_URI_CHARS, "MAX_SHARE_SOURCE_URI_CHARS"),
       MAX_VP_MEMBERS: /* @__PURE__ */ __name(() => MAX_VP_MEMBERS, "MAX_VP_MEMBERS"),
+      ManagedCredentialRefreshBindingValidator: /* @__PURE__ */ __name(() => ManagedCredentialRefreshBindingValidator, "ManagedCredentialRefreshBindingValidator"),
       ManagedCredentialRefreshReceiptValidator: /* @__PURE__ */ __name(() => ManagedCredentialRefreshReceiptValidator, "ManagedCredentialRefreshReceiptValidator"),
       ManagedCredentialRefreshServiceValidator: /* @__PURE__ */ __name(() => ManagedCredentialRefreshServiceValidator2, "ManagedCredentialRefreshServiceValidator"),
+      ModelSafeCredentialFactValidator: /* @__PURE__ */ __name(() => ModelSafeCredentialFactValidator, "ModelSafeCredentialFactValidator"),
+      ModelSafeCredentialProjectionValidator: /* @__PURE__ */ __name(() => ModelSafeCredentialProjectionValidator, "ModelSafeCredentialProjectionValidator"),
       MyCampaignValidator: /* @__PURE__ */ __name(() => MyCampaignValidator, "MyCampaignValidator"),
       NormalizedConsentScopesValidator: /* @__PURE__ */ __name(() => NormalizedConsentScopesValidator, "NormalizedConsentScopesValidator"),
       PageCampaignAudienceInputValidator: /* @__PURE__ */ __name(() => PageCampaignAudienceInputValidator, "PageCampaignAudienceInputValidator"),
@@ -358,6 +398,7 @@ var require_types_cjs_development = __commonJS({
       PublishCredentialRefreshNotificationValidator: /* @__PURE__ */ __name(() => PublishCredentialRefreshNotificationValidator, "PublishCredentialRefreshNotificationValidator"),
       PublishCredentialRefreshResultValidator: /* @__PURE__ */ __name(() => PublishCredentialRefreshResultValidator, "PublishCredentialRefreshResultValidator"),
       PublishCredentialSharePreviewValidator: /* @__PURE__ */ __name(() => PublishCredentialSharePreviewValidator, "PublishCredentialSharePreviewValidator"),
+      PublishHolderEncryptedRefreshInputValidator: /* @__PURE__ */ __name(() => PublishHolderEncryptedRefreshInputValidator, "PublishHolderEncryptedRefreshInputValidator"),
       PublishIssuerSignedRefreshValidator: /* @__PURE__ */ __name(() => PublishIssuerSignedRefreshValidator, "PublishIssuerSignedRefreshValidator"),
       PublishSigningAuthorityRefreshValidator: /* @__PURE__ */ __name(() => PublishSigningAuthorityRefreshValidator, "PublishSigningAuthorityRefreshValidator"),
       PutShareLinkAttachmentChunkInputValidator: /* @__PURE__ */ __name(() => PutShareLinkAttachmentChunkInputValidator, "PutShareLinkAttachmentChunkInputValidator"),
@@ -375,6 +416,7 @@ var require_types_cjs_development = __commonJS({
       ResultStatusTypeValidator: /* @__PURE__ */ __name(() => ResultStatusTypeValidator, "ResultStatusTypeValidator"),
       ResultTypeValidator: /* @__PURE__ */ __name(() => ResultTypeValidator, "ResultTypeValidator"),
       ResultValidator: /* @__PURE__ */ __name(() => ResultValidator, "ResultValidator"),
+      RoleValidator: /* @__PURE__ */ __name(() => RoleValidator, "RoleValidator"),
       RubricCriterionValidator: /* @__PURE__ */ __name(() => RubricCriterionValidator, "RubricCriterionValidator"),
       SHARE_AAD_PREFIX: /* @__PURE__ */ __name(() => SHARE_AAD_PREFIX, "SHARE_AAD_PREFIX"),
       SHARE_CONTENT_KEY_BYTES: /* @__PURE__ */ __name(() => SHARE_CONTENT_KEY_BYTES, "SHARE_CONTENT_KEY_BYTES"),
@@ -393,6 +435,7 @@ var require_types_cjs_development = __commonJS({
       SendBrandingOptionsValidator: /* @__PURE__ */ __name(() => SendBrandingOptionsValidator, "SendBrandingOptionsValidator"),
       SendContractRequestValidator: /* @__PURE__ */ __name(() => SendContractRequestValidator, "SendContractRequestValidator"),
       SendCredentialEventValidator: /* @__PURE__ */ __name(() => SendCredentialEventValidator, "SendCredentialEventValidator"),
+      SendHolderEncryptedRefreshableInputValidator: /* @__PURE__ */ __name(() => SendHolderEncryptedRefreshableInputValidator, "SendHolderEncryptedRefreshableInputValidator"),
       SendInboxResponseValidator: /* @__PURE__ */ __name(() => SendInboxResponseValidator, "SendInboxResponseValidator"),
       SendInputValidator: /* @__PURE__ */ __name(() => SendInputValidator, "SendInputValidator"),
       SendNotificationEventValidator: /* @__PURE__ */ __name(() => SendNotificationEventValidator, "SendNotificationEventValidator"),
@@ -449,8 +492,10 @@ var require_types_cjs_development = __commonJS({
       SkillValidator: /* @__PURE__ */ __name(() => SkillValidator, "SkillValidator"),
       StandardCredentialRefreshServiceValidator: /* @__PURE__ */ __name(() => StandardCredentialRefreshServiceValidator, "StandardCredentialRefreshServiceValidator"),
       StatusCheckEntryValidator: /* @__PURE__ */ __name(() => StatusCheckEntryValidator, "StatusCheckEntryValidator"),
+      StatusManagementValidator: /* @__PURE__ */ __name(() => StatusManagementValidator, "StatusManagementValidator"),
       StoredCredentialEnvelopeValidator: /* @__PURE__ */ __name(() => StoredCredentialEnvelopeValidator, "StoredCredentialEnvelopeValidator"),
       StringQuery: /* @__PURE__ */ __name(() => StringQuery, "StringQuery"),
+      StructuredResponseValidator: /* @__PURE__ */ __name(() => StructuredResponseValidator, "StructuredResponseValidator"),
       SummaryCredentialDataValidator: /* @__PURE__ */ __name(() => SummaryCredentialDataValidator, "SummaryCredentialDataValidator"),
       SummaryCredentialKeywordValidator: /* @__PURE__ */ __name(() => SummaryCredentialKeywordValidator, "SummaryCredentialKeywordValidator"),
       SupportedCredentialRefreshServiceValidator: /* @__PURE__ */ __name(() => SupportedCredentialRefreshServiceValidator2, "SupportedCredentialRefreshServiceValidator"),
@@ -458,6 +503,9 @@ var require_types_cjs_development = __commonJS({
       TagValidator: /* @__PURE__ */ __name(() => TagValidator, "TagValidator"),
       TemplateRenderMethodValidator: /* @__PURE__ */ __name(() => TemplateRenderMethodValidator, "TemplateRenderMethodValidator"),
       TermsOfUseValidator: /* @__PURE__ */ __name(() => TermsOfUseValidator, "TermsOfUseValidator"),
+      ThreadCredentialContextValidator: /* @__PURE__ */ __name(() => ThreadCredentialContextValidator, "ThreadCredentialContextValidator"),
+      ThreadValidator: /* @__PURE__ */ __name(() => ThreadValidator, "ThreadValidator"),
+      TimingEventValidator: /* @__PURE__ */ __name(() => TimingEventValidator, "TimingEventValidator"),
       UnsignedAchievementCredentialValidator: /* @__PURE__ */ __name(() => UnsignedAchievementCredentialValidator, "UnsignedAchievementCredentialValidator"),
       UnsignedClrCredentialValidator: /* @__PURE__ */ __name(() => UnsignedClrCredentialValidator, "UnsignedClrCredentialValidator"),
       UnsignedVCValidator: /* @__PURE__ */ __name(() => UnsignedVCValidator, "UnsignedVCValidator"),
@@ -742,7 +790,7 @@ var require_types_cjs_development = __commonJS({
       safeEncodeAsync: /* @__PURE__ */ __name(() => safeEncodeAsync2, "safeEncodeAsync"),
       safeParse: /* @__PURE__ */ __name(() => safeParse2, "safeParse"),
       safeParseAsync: /* @__PURE__ */ __name(() => safeParseAsync2, "safeParseAsync"),
-      set: /* @__PURE__ */ __name(() => set, "set"),
+      set: /* @__PURE__ */ __name(() => set2, "set"),
       setErrorMap: /* @__PURE__ */ __name(() => setErrorMap, "setErrorMap"),
       size: /* @__PURE__ */ __name(() => _size, "size"),
       slugify: /* @__PURE__ */ __name(() => _slugify, "slugify"),
@@ -18539,7 +18587,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       readonly: /* @__PURE__ */ __name(() => readonly, "readonly"),
       record: /* @__PURE__ */ __name(() => record, "record"),
       refine: /* @__PURE__ */ __name(() => refine, "refine"),
-      set: /* @__PURE__ */ __name(() => set, "set"),
+      set: /* @__PURE__ */ __name(() => set2, "set"),
       strictObject: /* @__PURE__ */ __name(() => strictObject, "strictObject"),
       string: /* @__PURE__ */ __name(() => string2, "string"),
       stringFormat: /* @__PURE__ */ __name(() => stringFormat, "stringFormat"),
@@ -19829,15 +19877,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       inst.max = (...args) => inst.check(/* @__PURE__ */ _maxSize(...args));
       inst.size = (...args) => inst.check(/* @__PURE__ */ _size(...args));
     });
-    function set(valueType, params) {
+    function set2(valueType, params) {
       return new ZodSet({
         type: "set",
         valueType,
         ...util_exports.normalizeParams(params)
       });
     }
-    __name(set, "set");
-    __name2(set, "set");
+    __name(set2, "set");
+    __name2(set2, "set");
     var ZodEnum = /* @__PURE__ */ $constructor("ZodEnum", (inst, def) => {
       $ZodEnum.init(inst, def);
       ZodType.init(inst, def);
@@ -21976,12 +22024,47 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         $or: BaseStringQuery.array()
       })
     ]);
+    var BITSTRING_STATUS_PURPOSES = ["revocation", "suspension"];
+    var DEFAULT_BITSTRING_STATUS_LIST_SIZE = 131072;
+    var BitstringStatusPurposeValidator = external_exports.enum(BITSTRING_STATUS_PURPOSES);
+    var BitstringStatusListEntryValidator = external_exports.object({
+      id: external_exports.string().optional(),
+      type: external_exports.literal("BitstringStatusListEntry"),
+      statusPurpose: BitstringStatusPurposeValidator,
+      statusListIndex: external_exports.string().or(external_exports.number().int().nonnegative()),
+      statusListCredential: external_exports.string()
+    });
+    var AllocatedBitstringStatusListEntryValidator = BitstringStatusListEntryValidator.extend({
+      id: external_exports.string()
+    });
+    var BitstringStatusListCredentialSubjectValidator = external_exports.object({
+      id: external_exports.string().optional(),
+      type: external_exports.literal("BitstringStatusList"),
+      statusPurpose: BitstringStatusPurposeValidator,
+      encodedList: external_exports.string()
+    });
+    var AllocateCredentialStatusInputValidator = external_exports.object({
+      statusPurposes: external_exports.array(BitstringStatusPurposeValidator).optional(),
+      listSize: external_exports.number().int().positive().optional()
+    }).default({});
+    var AttachCredentialRefreshStatusEntriesInputValidator = external_exports.object({
+      refreshId: external_exports.string().min(1),
+      credentialStatus: CredentialStatusValidator.or(CredentialStatusValidator.array()).nullable()
+    });
     var LearnCardRefreshAuthorizationValidator = external_exports.object({ type: external_exports.literal("LearnCardDIDAuth") }).catchall(external_exports.any());
     var ManagedCredentialRefreshServiceValidator2 = external_exports.object({
       id: external_exports.string().min(1),
       type: external_exports.literal("LearnCardCredentialRefresh2026"),
       authorization: LearnCardRefreshAuthorizationValidator.optional()
     }).catchall(external_exports.any());
+    var ManagedCredentialRefreshBindingValidator = ManagedCredentialRefreshServiceValidator2.or(
+      RefreshServiceValidator.array().refine(
+        (services) => services.some(
+          (service) => ManagedCredentialRefreshServiceValidator2.safeParse(service).success
+        ),
+        "A managed refresh service is required"
+      )
+    );
     var StandardCredentialRefreshServiceValidator = external_exports.object({
       id: external_exports.string().min(1),
       type: external_exports.literal("1EdTechCredentialRefresh")
@@ -22005,7 +22088,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     });
     var ManagedCredentialRefreshReceiptValidator = external_exports.object({
       refreshId: external_exports.string().min(1),
-      refreshService: ManagedCredentialRefreshServiceValidator2,
+      refreshService: ManagedCredentialRefreshBindingValidator,
+      /** Legacy receipts authenticate only the allocated managed entry, not other services. */
+      refreshServiceBinding: external_exports.literal("managed-entry").optional(),
       credentialId: external_exports.string().min(1),
       issuerDid: external_exports.string().min(1),
       holderDid: external_exports.string().min(1),
@@ -22013,14 +22098,43 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         CredentialStatusValidator.array()
       ).optional()
     }).strip();
+    var GetCredentialRefreshReceiptInputValidator = external_exports.object({ uri: external_exports.string().min(1) });
+    var CredentialRefreshReceiptValidator = ManagedCredentialRefreshReceiptValidator.extend({
+      encryptionMode: external_exports.enum(["network", "holder"])
+    });
+    var HolderEncryptedHandoffValidator = external_exports.object({
+      refreshId: external_exports.string().min(1),
+      credentialId: external_exports.string().min(1),
+      holderDid: external_exports.string().min(1),
+      issuerDid: external_exports.string().min(1),
+      credentialStatus: CredentialStatusValidator.or(CredentialStatusValidator.array()),
+      refreshService: ManagedCredentialRefreshBindingValidator.optional(),
+      jwe: JWEValidator2
+    }).strict();
+    var SendHolderEncryptedRefreshableInputValidator = external_exports.object({
+      handoff: HolderEncryptedHandoffValidator,
+      idempotencyKey: external_exports.string().min(1).optional(),
+      boostUri: external_exports.string().optional(),
+      skipNotification: external_exports.boolean().optional()
+    });
+    var GetEncryptionRecipientsInputValidator = external_exports.object({ refreshId: external_exports.string().min(1) });
+    var EncryptionRecipientsResultValidator = external_exports.object({
+      recipientKeyIds: external_exports.array(external_exports.string())
+    });
     var InboxCredentialRefreshReceiptValidator = ManagedCredentialRefreshReceiptValidator.omit(
       { holderDid: true }
     ).extend({ holderDid: external_exports.string().min(1).optional() });
     var CredentialRefreshSigningModeValidator = external_exports.enum(["issuer-signed", "signing-authority"]);
+    var CredentialRefreshUpdateReasonValidator = external_exports.enum(["corrected", "updated", "reissued"]);
     var PublishCredentialRefreshBaseFields = {
       refreshId: external_exports.string().min(1),
       notifyHolder: external_exports.boolean().optional(),
-      updateSummary: external_exports.string().optional(),
+      updateSummary: external_exports.string().max(280).optional().describe(
+        "Public legacy update summary. Do not include private claims; prefer updateReason."
+      ),
+      updateReason: CredentialRefreshUpdateReasonValidator.optional().describe(
+        "Public reason for this update"
+      ),
       idempotencyKey: external_exports.string().optional()
     };
     var PublishIssuerSignedRefreshValidator = external_exports.object({
@@ -22096,13 +22210,25 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       publishedAt: external_exports.string().min(1),
       notification: PublishCredentialRefreshNotificationValidator
     });
+    var PublishHolderEncryptedRefreshInputValidator = external_exports.object({
+      handoff: HolderEncryptedHandoffValidator,
+      notify: external_exports.boolean(),
+      updateSummary: external_exports.string().max(280).optional().describe(
+        "Public legacy update summary. Do not include private claims; prefer updateReason."
+      ),
+      updateReason: CredentialRefreshUpdateReasonValidator.optional().describe(
+        "Public reason for this update"
+      ),
+      idempotencyKey: external_exports.string().optional()
+    });
     var CredentialRefreshVersionMetadataValidator = external_exports.object({
       version: external_exports.number().int().positive(),
       publishedAt: external_exports.string().min(1),
       effectiveAt: external_exports.string().optional(),
       etag: external_exports.string().optional(),
       signingMode: CredentialRefreshSigningModeValidator.optional(),
-      updateSummary: external_exports.string().optional()
+      updateSummary: external_exports.string().optional(),
+      updateReason: CredentialRefreshUpdateReasonValidator.optional()
     });
     var GetCredentialRefreshHistoryInputValidator = external_exports.object({
       refreshId: external_exports.string().min(1),
@@ -22145,6 +22271,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       "INVALID_PROOF",
       "ISSUER_MISMATCH",
       "ID_MISMATCH",
+      "BINDING_MISMATCH",
       "ROLLBACK",
       "REVOKED",
       "UNSAFE_ENDPOINT"
@@ -22469,6 +22596,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         name: external_exports.string()
       })
     });
+    var CredentialDisplayValidator = external_exports.object({
+      name: external_exports.string().trim().min(1).max(280).optional(),
+      category: external_exports.string().max(280).optional(),
+      image: external_exports.string().max(2048).url().refine((url2) => url2.startsWith("https://"), { message: "Image URL must use https" }).optional()
+    });
     var SendBoostTemplateValidator = BoostValidator.partial().omit({ uri: true, claimPermissions: true }).extend({
       credential: VCValidator.or(UnsignedVCValidator),
       claimPermissions: BoostPermissionsValidator.partial().optional(),
@@ -22507,6 +22639,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       templateUri: external_exports.string().optional(),
       template: SendBoostTemplateValidator.optional(),
       signedCredential: VCValidator.optional(),
+      display: CredentialDisplayValidator.optional().describe(
+        "Public display metadata for managed and signed-only sends. Nothing is inferred from credential content; omitted names use generic copy. The exception is category: when display.category is omitted for an inline template, the template's category is copied, since consent-flow write authorization is keyed on it."
+      ),
+      statusPurposes: external_exports.array(BitstringStatusPurposeValidator).optional(),
       options: SendOptionsValidator.optional().describe(
         "Options for email/phone recipients (Universal Inbox)"
       ),
@@ -22545,7 +22681,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         "Present when guardianEmail was specified"
       )
     });
+    var StatusManagementValidator = external_exports.enum(["network", "external", "mixed", "none"]);
     var SendBoostResponseValidator = external_exports.object({
+      /** Public status providers for a managed send; external entries require provider-side updates. */
+      statusManagement: StatusManagementValidator.optional(),
       type: external_exports.literal("boost"),
       credentialUri: external_exports.string(),
       uri: external_exports.string(),
@@ -22558,19 +22697,33 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       )
     });
     var PrepareRefreshableSendInputValidator = external_exports.object({
+      /** Opt in to signing the server-bound statusEntries; omission preserves client allocation. */
+      statusBinding: external_exports.literal("server").optional(),
+      statusPurposes: external_exports.array(BitstringStatusPurposeValidator).optional(),
       recipient: external_exports.string(),
       templateUri: external_exports.string().optional(),
       template: SendBoostTemplateValidator.optional(),
+      display: CredentialDisplayValidator.optional().describe("Public display metadata only"),
       contractUri: external_exports.string().optional(),
       templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
       integrationId: external_exports.string().optional(),
       /** Credential ID to allocate for; generated server-side when omitted. */
       credentialId: external_exports.string().min(1).optional(),
-      idempotencyKey: external_exports.string().min(1).max(200).optional()
-    }).refine((data) => Boolean(data.templateUri) !== Boolean(data.template), {
-      message: "Provide exactly one of templateUri or template."
+      idempotencyKey: external_exports.string().min(1).max(200).optional(),
+      /**
+       * `'holder'` requests student-only encryption (LC-2345): the SDK signs and
+       * encrypts locally and the server never receives plaintext. Requires a
+       * profile or DID recipient; rejected for signedCredential-only sends and for
+       * inbox (email/phone) recipients. Defaults to `'network'`.
+       */
+      encryption: external_exports.enum(["network", "holder"]).optional()
+    }).refine((data) => !(data.templateUri && data.template), {
+      message: "Provide at most one of templateUri or template."
     });
     var PrepareRefreshableSendResultValidator = external_exports.object({
+      /** Public status providers known at preparation; final send reports the signed entries. */
+      statusManagement: StatusManagementValidator.optional(),
+      statusEntries: external_exports.array(BitstringStatusListEntryValidator).optional(),
       boostUri: external_exports.string(),
       credentialId: external_exports.string(),
       refreshId: external_exports.string(),
@@ -22578,11 +22731,111 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       /** The DID to use as credentialSubject.id (recipient DID, or the profile's did:web). */
       holderDid: external_exports.string(),
       /** Present when this idempotencyKey already completed: return it without signing. */
-      completed: SendBoostResponseValidator.optional()
+      completed: SendBoostResponseValidator.optional(),
+      /**
+       * Present only when `encryption: 'holder'` was requested: the exact
+       * key-agreement verification-method ids (holder + current managers) the SDK
+       * must encrypt to. Recomputed on every call, so a later manager change can
+       * make a previously-prepared set stale (see `credentialRefresh.sendHolderEncryptedRefreshable`
+       * and `credentialRefresh.getEncryptionRecipients`).
+       */
+      recipientKeyIds: external_exports.array(external_exports.string()).optional()
     });
     var SendInputValidator = external_exports.discriminatedUnion("type", [SendBoostInputValidator]);
     var SendResponseValidator = external_exports.discriminatedUnion("type", [SendBoostResponseValidator]);
-    var ConsentFlowTermsStatusValidator = external_exports.enum(["live", "stale", "withdrawn"]);
+    var ConsentFlowTermsStatusValidator = external_exports.enum([
+      "live",
+      "consumed",
+      "withdrawn",
+      "needs_reconsent",
+      "suspended"
+    ]);
+    var CONTRACT_APPROVAL_REQUIRED = "CONTRACT_APPROVAL_REQUIRED";
+    var ConsentFlowContractChangeKindValidator = external_exports.enum([
+      "relaxed",
+      "expanded_optional",
+      "requires_consent"
+    ]);
+    var ConsentFlowContractScopeValidator = external_exports.object({
+      area: external_exports.enum(["read", "write"]),
+      type: external_exports.enum(["credential", "personal"]),
+      key: external_exports.string(),
+      required: external_exports.boolean(),
+      reason: external_exports.string().optional()
+    });
+    var ConsentFlowContractDetailValueValidator = external_exports.union([
+      external_exports.string(),
+      external_exports.boolean(),
+      external_exports.string().array()
+    ]);
+    var ConsentFlowContractDetailChangeValidator = external_exports.object({
+      field: external_exports.enum([
+        "name",
+        "subtitle",
+        "description",
+        "reasonForAccessing",
+        "image",
+        "needsGuardianConsent",
+        "redirectUrl",
+        "frontDoorBoostUri",
+        "expiresAt",
+        "writers",
+        "autoboosts"
+      ]),
+      before: ConsentFlowContractDetailValueValidator.optional(),
+      after: ConsentFlowContractDetailValueValidator.optional()
+    });
+    var ConsentFlowContractDiffValidator = external_exports.object({
+      added: ConsentFlowContractScopeValidator.array(),
+      removed: ConsentFlowContractScopeValidator.array(),
+      changed: ConsentFlowContractScopeValidator.array(),
+      details: ConsentFlowContractDetailChangeValidator.array().optional()
+    });
+    var ConsentFlowContractUpdatePreviewValidator = external_exports.object({
+      headline: external_exports.string(),
+      subhead: external_exports.string(),
+      rows: external_exports.array(
+        external_exports.object({
+          scope: ConsentFlowContractScopeValidator,
+          change: external_exports.enum(["added", "removed", "changed"]),
+          label: external_exports.string(),
+          subtitle: external_exports.string()
+        })
+      ),
+      primaryLabel: external_exports.string()
+    });
+    var ConsentFlowContractStatusValidator = external_exports.enum(["active", "retired"]);
+    var ConsentFlowContractVersionValidator = external_exports.object({
+      version: external_exports.number().int().positive(),
+      createdAt: external_exports.string(),
+      reason: external_exports.string().optional(),
+      kind: ConsentFlowContractChangeKindValidator.optional()
+    });
+    var ConsentFlowContractUpdateResultValidator = external_exports.object({
+      version: external_exports.number().int().positive(),
+      kind: ConsentFlowContractChangeKindValidator,
+      affectedUsers: external_exports.number().int().nonnegative(),
+      preview: ConsentFlowContractUpdatePreviewValidator
+    });
+    var ConsentFlowConsentStatusValidator = external_exports.object({
+      status: ConsentFlowTermsStatusValidator.or(external_exports.literal("not_consented")),
+      consentedVersion: external_exports.number().int().positive().optional(),
+      currentVersion: external_exports.number().int().positive(),
+      needsReconsent: external_exports.boolean(),
+      reviewUrl: external_exports.string().optional()
+    });
+    var ConsentFlowContractNotificationDataValidator = external_exports.object({
+      contractUri: external_exports.string(),
+      contractName: external_exports.string().optional(),
+      fromVersion: external_exports.number().int().positive(),
+      toVersion: external_exports.number().int().positive(),
+      kind: ConsentFlowContractChangeKindValidator,
+      reason: external_exports.string().optional(),
+      diff: ConsentFlowContractDiffValidator,
+      reconsentDeadline: external_exports.string().optional(),
+      reviewUrl: external_exports.string(),
+      preview: ConsentFlowContractUpdatePreviewValidator.optional()
+    });
     var ConsentFlowContractValidator = external_exports.object({
       read: external_exports.object({
         anonymize: external_exports.boolean().optional(),
@@ -22591,13 +22844,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
             external_exports.string(),
             external_exports.object({
               required: external_exports.boolean(),
-              defaultEnabled: external_exports.boolean().optional()
+              defaultEnabled: external_exports.boolean().optional(),
+              reason: external_exports.string().optional()
             })
           ).default({})
         }).prefault({ categories: {} }),
         personal: external_exports.record(
           external_exports.string(),
-          external_exports.object({ required: external_exports.boolean(), defaultEnabled: external_exports.boolean().optional() })
+          external_exports.object({
+            required: external_exports.boolean(),
+            defaultEnabled: external_exports.boolean().optional(),
+            reason: external_exports.string().optional()
+          })
         ).default({})
       }).prefault({ credentials: { categories: {} }, personal: {} }),
       write: external_exports.object({
@@ -22606,16 +22864,55 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
             external_exports.string(),
             external_exports.object({
               required: external_exports.boolean(),
-              defaultEnabled: external_exports.boolean().optional()
+              defaultEnabled: external_exports.boolean().optional(),
+              reason: external_exports.string().optional()
             })
           ).default({})
         }).prefault({ categories: {} }),
         personal: external_exports.record(
           external_exports.string(),
-          external_exports.object({ required: external_exports.boolean(), defaultEnabled: external_exports.boolean().optional() })
+          external_exports.object({
+            required: external_exports.boolean(),
+            defaultEnabled: external_exports.boolean().optional(),
+            reason: external_exports.string().optional()
+          })
         ).default({})
       }).prefault({ credentials: { categories: {} }, personal: {} })
     });
+    var ConsentFlowContractScopePatchValidator = external_exports.object({
+      required: external_exports.boolean(),
+      defaultEnabled: external_exports.boolean().optional(),
+      reason: external_exports.string().optional()
+    }).nullable();
+    var ConsentFlowContractChangesValidator = external_exports.object({
+      contract: external_exports.object({
+        read: external_exports.object({
+          anonymize: external_exports.boolean().optional(),
+          credentials: external_exports.object({
+            categories: external_exports.record(external_exports.string(), ConsentFlowContractScopePatchValidator).optional()
+          }).optional(),
+          personal: external_exports.record(external_exports.string(), ConsentFlowContractScopePatchValidator).optional()
+        }).optional(),
+        write: external_exports.object({
+          credentials: external_exports.object({
+            categories: external_exports.record(external_exports.string(), ConsentFlowContractScopePatchValidator).optional()
+          }).optional(),
+          personal: external_exports.record(external_exports.string(), ConsentFlowContractScopePatchValidator).optional()
+        }).optional()
+      }).optional(),
+      name: external_exports.string().optional(),
+      subtitle: external_exports.string().optional(),
+      description: external_exports.string().optional(),
+      reasonForAccessing: external_exports.string().optional(),
+      image: external_exports.string().optional(),
+      needsGuardianConsent: external_exports.boolean().optional(),
+      redirectUrl: external_exports.string().optional(),
+      frontDoorBoostUri: external_exports.string().optional(),
+      expiresAt: external_exports.string().nullable().optional(),
+      autoboosts: AutoBoostConfigValidator.array().optional(),
+      writers: external_exports.string().array().optional(),
+      recipients: external_exports.string().array().optional()
+    });
     var ConsentFlowContractDetailsValidator = external_exports.object({
       contract: ConsentFlowContractValidator,
       owner: LCNProfileValidator,
@@ -22634,7 +22931,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       autoBoosts: external_exports.string().array().optional(),
       writers: external_exports.array(LCNProfileValidator).optional(),
       recipients: external_exports.array(LCNPublicProfileValidator.extend({ did: external_exports.string() })).optional(),
-      audienceVersion: external_exports.number().int().nonnegative().optional()
+      audienceVersion: external_exports.number().int().nonnegative().optional(),
+      version: external_exports.number().int().positive(),
+      status: ConsentFlowContractStatusValidator.optional(),
+      latestUpdate: external_exports.object({
+        fromVersion: external_exports.number().int().positive(),
+        toVersion: external_exports.number().int().positive(),
+        kind: ConsentFlowContractChangeKindValidator,
+        reason: external_exports.string().optional(),
+        diff: ConsentFlowContractDiffValidator,
+        reconsentDeadline: external_exports.string().optional(),
+        createdAt: external_exports.string(),
+        preview: ConsentFlowContractUpdatePreviewValidator
+      }).optional()
     });
     var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied", "cancelled"]).nullable();
     var ConsentFlowContractRequestReadStatusValidator = external_exports.enum(["unseen", "seen"]).nullable();
@@ -22723,7 +23032,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         contract: ConsentFlowContractDetailsValidator,
         uri: external_exports.string(),
         consenter: LCNProfileValidator,
-        status: ConsentFlowTermsStatusValidator
+        status: ConsentFlowTermsStatusValidator,
+        consentedVersion: external_exports.number().int().positive(),
+        lastReviewedVersion: external_exports.number().int().positive().optional(),
+        reconsentDeadline: external_exports.string().optional(),
+        newOptionsUntil: external_exports.string().optional(),
+        cumulativeUpdate: ConsentFlowContractDetailsValidator.shape.latestUpdate
       }).array()
     });
     var ConsentFlowGuardianApprovalValidator = external_exports.object({
@@ -22799,7 +23113,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       "update",
       "sync",
       "withdraw",
-      "write"
+      "write",
+      "reconsent"
     ]);
     var ConsentFlowTransactionsQueryValidator = external_exports.object({
       terms: ConsentFlowTermsQueryValidator.optional(),
@@ -22818,8 +23133,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       referral: ConsentFlowReferralValidator.optional(),
       id: external_exports.string(),
       action: ConsentFlowTransactionActionValidator,
+      kind: ConsentFlowContractChangeKindValidator.optional(),
       date: external_exports.string(),
-      uris: external_exports.string().array().optional()
+      uris: external_exports.string().array().optional(),
+      consentedVersion: external_exports.number().int().positive().optional(),
+      reconsentDeadline: external_exports.string().optional(),
+      newOptionsUntil: external_exports.string().optional()
     });
     var HolderExportConsentRecordValidator = external_exports.object({
       termsUri: external_exports.string(),
@@ -22827,6 +23146,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       contract: ConsentFlowContractDetailsValidator,
       terms: ConsentFlowTermsValidator,
       referral: ConsentFlowReferralValidator.optional(),
+      consentedVersion: external_exports.number().int().positive(),
+      reconsentDeadline: external_exports.string().optional(),
+      newOptionsUntil: external_exports.string().optional(),
+      cumulativeUpdate: ConsentFlowContractDetailsValidator.shape.latestUpdate,
       transactions: ConsentFlowTransactionValidator.array()
     });
     var HolderExportMetadataValidator = external_exports.object({
@@ -22887,10 +23210,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       "GUARDIAN_APPROVED",
       "GUARDIAN_REJECTED",
       "APP_NOTIFICATION",
+      "ANNOUNCEMENT",
       "CREDENTIAL_REVOKED",
       "CREDENTIAL_SUSPENDED",
       "CREDENTIAL_UNSUSPENDED",
-      "CREDENTIAL_REFRESHED"
+      "CREDENTIAL_REFRESHED",
+      "CONSENT_FLOW_CONTRACT_UPDATED"
     ]);
     var LCNNotificationMessageValidator = external_exports.object({
       title: external_exports.string().optional(),
@@ -22919,12 +23244,26 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       timestamp: external_exports.iso.datetime().optional()
     });
     var LCNNotificationMetadataValidator = external_exports.object({
-      connectionPrompt: LCNConnectionPromptMetadataValidator.optional()
+      connectionPrompt: LCNConnectionPromptMetadataValidator.optional(),
+      campaignId: external_exports.string().regex(/^[a-z0-9-]{3,64}$/).optional(),
+      campaignCreatedAt: external_exports.iso.datetime().optional(),
+      campaignHasInApp: external_exports.boolean().optional(),
+      campaignTestId: external_exports.uuid().optional()
     }).catchall(external_exports.unknown());
     var LCNNotificationDataValidator = external_exports.object({
       vcUris: external_exports.array(external_exports.string()).optional(),
       vpUris: external_exports.array(external_exports.string()).optional(),
       transaction: ConsentFlowTransactionValidator.optional(),
+      contractUri: external_exports.string().optional(),
+      contractName: external_exports.string().optional(),
+      fromVersion: external_exports.number().int().positive().optional(),
+      toVersion: external_exports.number().int().positive().optional(),
+      kind: ConsentFlowContractChangeKindValidator.optional(),
+      reason: external_exports.string().optional(),
+      diff: ConsentFlowContractDiffValidator.optional(),
+      reconsentDeadline: external_exports.string().optional(),
+      reviewUrl: external_exports.string().optional(),
+      preview: ConsentFlowContractUpdatePreviewValidator.optional(),
       inbox: LCNNotificationInboxValidator.optional(),
       metadata: LCNNotificationMetadataValidator.optional()
     }).loose();
@@ -24037,29 +24376,6 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
        */
       wrongAttempts: external_exports.number().int().nonnegative().optional()
     });
-    var BITSTRING_STATUS_PURPOSES = ["revocation", "suspension"];
-    var DEFAULT_BITSTRING_STATUS_LIST_SIZE = 131072;
-    var BitstringStatusPurposeValidator = external_exports.enum(BITSTRING_STATUS_PURPOSES);
-    var BitstringStatusListEntryValidator = external_exports.object({
-      id: external_exports.string().optional(),
-      type: external_exports.literal("BitstringStatusListEntry"),
-      statusPurpose: BitstringStatusPurposeValidator,
-      statusListIndex: external_exports.string().or(external_exports.number().int().nonnegative()),
-      statusListCredential: external_exports.string()
-    });
-    var AllocatedBitstringStatusListEntryValidator = BitstringStatusListEntryValidator.extend({
-      id: external_exports.string()
-    });
-    var BitstringStatusListCredentialSubjectValidator = external_exports.object({
-      id: external_exports.string().optional(),
-      type: external_exports.literal("BitstringStatusList"),
-      statusPurpose: BitstringStatusPurposeValidator,
-      encodedList: external_exports.string()
-    });
-    var AllocateCredentialStatusInputValidator = external_exports.object({
-      statusPurposes: external_exports.array(BitstringStatusPurposeValidator).optional(),
-      listSize: external_exports.number().int().positive().optional()
-    }).default({});
     var isSafeInAppMessagePath = /* @__PURE__ */ __name2((path) => {
       let decoded = path;
       for (let depth = 0; depth < 5; depth += 1) {
@@ -24387,24 +24703,46 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     }, "parseInAppMessagesFlag");
     var CampaignIdValidator = external_exports.string().regex(/^[a-z0-9-]{3,64}$/);
     var CampaignStatusValidator = external_exports.enum(["draft", "live", "paused", "archived"]);
-    var CampaignChannelValidator = external_exports.enum(["inApp", "notify"]);
+    var CampaignChannelValidator = external_exports.enum(["inApp", "notify", "email"]);
     var CampaignEventValidator = external_exports.enum(["shown", "clicked", "dismissed", "converted"]);
-    var timestamp = external_exports.iso.datetime({ offset: true }).overwrite((value) => new Date(value).toISOString());
+    var timestamp = external_exports.iso.datetime({ offset: true }).overwrite((value) => {
+      const date5 = new Date(value);
+      return Number.isFinite(date5.getTime()) ? date5.toISOString() : value;
+    });
     var notification = external_exports.object({ title: external_exports.string().min(1), body: external_exports.string().min(1) }).strict();
-    var channels = external_exports.array(CampaignChannelValidator).min(1).max(2).refine((values) => new Set(values).size === values.length, "Channels must be unique");
+    var CampaignEmailValidator = external_exports.object({
+      subject: external_exports.string().trim().min(1).max(200).regex(/^[^\r\n]+$/),
+      title: external_exports.string().trim().min(1).max(200),
+      body: external_exports.string().trim().min(1).max(2e4),
+      heroImageUrl: external_exports.url().startsWith("https://").max(2048).optional(),
+      ctaLabel: external_exports.string().trim().min(1).max(100)
+    }).strict();
+    var AnnouncementPreferencesValidator = external_exports.object({
+      announcementEmailOptOut: external_exports.boolean(),
+      announcementPushOptOut: external_exports.boolean()
+    }).strict();
+    var channels = external_exports.array(CampaignChannelValidator).min(1).max(3).refine((values) => new Set(values).size === values.length, "Channels must be unique");
     var campaignDefinition = external_exports.object({
       id: CampaignIdValidator,
       name: external_exports.string().trim().min(1).max(200),
       status: CampaignStatusValidator.default("draft"),
       channels,
-      message: inAppMessageValidator,
+      message: inAppMessageValidator.optional(),
       notification: notification.optional(),
+      email: CampaignEmailValidator.optional(),
       startsAt: timestamp.optional(),
       endsAt: timestamp.optional(),
       excludeMinors: external_exports.boolean().default(true),
       selfEnroll: external_exports.boolean().default(false)
     }).strict();
     var validDefinition = /* @__PURE__ */ __name2((value, ctx) => {
+      if (value.channels.includes("inApp") && !value.message) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["message"],
+          message: "In-app requires a message"
+        });
+      }
       if (value.channels.includes("notify") && !value.notification) {
         ctx.addIssue({
           code: "custom",
@@ -24412,15 +24750,23 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           message: "Notify requires a title and body"
         });
       }
+      if (value.channels.includes("email") && !value.email) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["email"],
+          message: "Email requires announcement content"
+        });
+      }
       if (value.startsAt && value.endsAt && value.startsAt >= value.endsAt) {
         ctx.addIssue({ code: "custom", path: ["endsAt"], message: "End must be after start" });
       }
     }, "validDefinition");
     var CampaignValidator = campaignDefinition.extend({
+      tenantId: external_exports.string().optional(),
       createdAt: timestamp,
       updatedAt: timestamp
     }).superRefine(validDefinition).superRefine((value, ctx) => {
-      if (value.message.id !== value.id) {
+      if (value.message && value.message.id !== value.id) {
         ctx.addIssue({
           code: "custom",
           path: ["message", "id"],
@@ -24429,21 +24775,23 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       }
     });
     var CreateCampaignInputValidator = campaignDefinition.extend({
-      message: inAppMessageAuthoringValidator
+      message: inAppMessageAuthoringValidator.optional()
     }).superRefine(validDefinition);
     var CampaignUpdatesValidator = campaignDefinition.omit({ id: true }).partial().extend({
       // A PATCH must not apply creation defaults to fields the caller omitted.
       status: CampaignStatusValidator.optional(),
       excludeMinors: external_exports.boolean().optional(),
       selfEnroll: external_exports.boolean().optional(),
-      message: inAppMessageAuthoringValidator.optional(),
+      message: inAppMessageAuthoringValidator.nullable().optional(),
       notification: notification.nullable().optional(),
+      email: CampaignEmailValidator.nullable().optional(),
       startsAt: timestamp.nullable().optional(),
       endsAt: timestamp.nullable().optional()
     }).strict();
     var UpdateCampaignInputValidator = external_exports.object({
       campaignId: CampaignIdValidator,
-      updates: CampaignUpdatesValidator
+      updates: CampaignUpdatesValidator,
+      expectedUpdatedAt: timestamp.optional()
     }).strict();
     var identifier = external_exports.string().trim().min(1).max(2048);
     var metadataKey = external_exports.string().regex(/^[a-zA-Z_][a-zA-Z0-9_.-]{0,63}$/).refine(
@@ -24495,7 +24843,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       clickedAt: timestamp.optional(),
       dismissedAt: timestamp.optional(),
       convertedAt: timestamp.optional(),
-      notifiedAt: timestamp.optional()
+      notifiedAt: timestamp.optional(),
+      emailedAt: timestamp.optional()
     });
     var MyCampaignValidator = external_exports.object({
       campaign: campaignDefinition.pick({
@@ -24504,12 +24853,19 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         startsAt: true,
         endsAt: true,
         selfEnroll: true
-      }),
-      state: CampaignUserStateValidator
+      }).extend({ message: inAppMessageValidator }),
+      state: CampaignUserStateValidator,
+      testId: external_exports.uuid().optional()
+    });
+    var CampaignTestValidator = external_exports.object({
+      id: external_exports.uuid(),
+      campaignId: CampaignIdValidator,
+      message: inAppMessageValidator
     });
     var CampaignStatsValidator = external_exports.object({
       audience: external_exports.number().int().nonnegative(),
       notified: external_exports.number().int().nonnegative(),
+      emailed: external_exports.number().int().nonnegative(),
       shown: external_exports.number().int().nonnegative(),
       clicked: external_exports.number().int().nonnegative(),
       dismissed: external_exports.number().int().nonnegative(),
@@ -24536,6 +24892,31 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       hasMore: external_exports.boolean(),
       cursor: external_exports.string().optional()
     });
+    var CampaignDispatchPreviewValidator = external_exports.object({
+      campaignId: CampaignIdValidator,
+      audienceCount: external_exports.number().int().nonnegative(),
+      alreadyNotifiedCount: external_exports.number().int().nonnegative(),
+      recipientCount: external_exports.number().int().nonnegative(),
+      notificationRecipientCount: external_exports.number().int().nonnegative().optional(),
+      emailRecipientCount: external_exports.number().int().nonnegative().optional(),
+      previewToken: external_exports.string().regex(/^[a-f0-9]{64}$/),
+      blockedReason: external_exports.enum([
+        "not_live",
+        "notify_disabled",
+        "email_confirmation_required",
+        "not_started",
+        "ended",
+        "no_recipients"
+      ]).optional()
+    });
+    var CampaignDispatchOptionsValidator = external_exports.object({
+      expectedPreviewToken: CampaignDispatchPreviewValidator.shape.previewToken.optional()
+    }).strict();
+    var CampaignAudienceResultValidator = external_exports.object({
+      count: external_exports.number().int().nonnegative(),
+      added: external_exports.number().int().nonnegative(),
+      notFound: external_exports.array(external_exports.string())
+    });
     var SHARE_LINK_ID_BYTES = 16;
     var SHARE_CONTENT_KEY_BYTES = 32;
     var SHARE_IV_BYTES = 12;
@@ -25060,6 +25441,217 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       }
     );
     var GenerateSkillIconsInputValidator = external_exports.object({ names: SkillIconNamesValidator });
+    var RoleValidator = external_exports.enum(["user", "assistant", "tool", "system"]);
+    var AiSessionMode = {
+      tutor: "ai-tutor",
+      insights: "ai-insights"
+    };
+    var AiSessionModeValidator = external_exports.enum([AiSessionMode.tutor, AiSessionMode.insights]);
+    var StructuredResponseValidator = external_exports.object({
+      notes: external_exports.string().optional(),
+      questions: external_exports.array(external_exports.string())
+    });
+    var IntroStreamModeValidator = external_exports.enum(["formatted", "structured"]);
+    var ChatMessageValidator = external_exports.object({
+      role: RoleValidator,
+      content: external_exports.string().nullable(),
+      tool_call_id: external_exports.string().optional(),
+      tool_calls: external_exports.array(
+        external_exports.object({
+          id: external_exports.string(),
+          type: external_exports.literal("function"),
+          function: external_exports.object({
+            name: external_exports.string(),
+            arguments: external_exports.string()
+          })
+        })
+      ).optional()
+    });
+    var InsightArtifactValidator = external_exports.object({
+      title: external_exports.string(),
+      summary: external_exports.string(),
+      category: external_exports.string(),
+      question: external_exports.string(),
+      narrative: external_exports.string()
+    });
+    var ArtifactSuggestionValidator = external_exports.object({
+      artifact: InsightArtifactValidator,
+      source_text: external_exports.string().optional(),
+      created_at: external_exports.string()
+    });
+    var ThreadCredentialContextValidator = external_exports.object({
+      uri: external_exports.string(),
+      type: external_exports.string(),
+      context: external_exports.string(),
+      score: external_exports.number(),
+      strongestScore: external_exports.number().optional(),
+      averageScore: external_exports.number().optional(),
+      matchCount: external_exports.number().optional(),
+      title: external_exports.string().optional()
+    });
+    var ThreadValidator = external_exports.object({
+      id: external_exports.string(),
+      did: external_exports.string(),
+      topicCredentialUri: external_exports.string().nullable().optional(),
+      title: external_exports.string(),
+      created_at: external_exports.string(),
+      last_message_at: external_exports.string(),
+      active: external_exports.boolean().optional(),
+      ended_at: external_exports.string().optional(),
+      plan_started_at: external_exports.string().optional(),
+      summaries: external_exports.array(
+        external_exports.object({
+          summary_data: external_exports.string(),
+          credential_uri: external_exports.string(),
+          created_at: external_exports.string()
+        })
+      ).optional(),
+      plans: external_exports.array(
+        external_exports.object({
+          plan_data: external_exports.string(),
+          created_at: external_exports.string(),
+          consentRevision: external_exports.string().optional()
+        })
+      ).optional(),
+      credentials: external_exports.array(ThreadCredentialContextValidator).optional(),
+      credentialSearchTopic: external_exports.string().optional(),
+      credentialContextStatus: external_exports.enum(["pending", "ready", "empty", "error"]).optional(),
+      mode: AiSessionModeValidator.optional(),
+      artifactSuggestions: external_exports.array(ArtifactSuggestionValidator).optional()
+    });
+    var CredentialVerificationMetadataValidator = external_exports.object({
+      credentialUri: external_exports.string(),
+      contentHash: external_exports.string().regex(/^[a-f0-9]{64}$/),
+      status: external_exports.enum(["valid", "invalid"]),
+      checkedAt: external_exports.string().datetime(),
+      verifier: external_exports.object({
+        name: external_exports.string(),
+        version: external_exports.string()
+      }),
+      verifiedPayload: external_exports.enum(["credential", "boostCredential"]),
+      checks: external_exports.array(external_exports.string()),
+      errors: external_exports.array(external_exports.string()),
+      warnings: external_exports.array(external_exports.string()),
+      provenance: external_exports.object({
+        source: external_exports.enum(["wallet", "generated"]),
+        retrievedAt: external_exports.string().datetime()
+      }),
+      consent: external_exports.object({
+        contractUri: external_exports.string(),
+        receiptId: external_exports.string().min(1),
+        grantedAt: external_exports.string().datetime().optional(),
+        updatedAt: external_exports.string().datetime(),
+        contractUpdatedAt: external_exports.string().min(1),
+        status: external_exports.literal("live"),
+        expiresAt: external_exports.string().datetime().optional(),
+        contractExpiresAt: external_exports.string().datetime().optional(),
+        categories: external_exports.array(external_exports.string()),
+        credentialUris: external_exports.array(external_exports.string()),
+        personalFields: external_exports.array(external_exports.string()),
+        purpose: external_exports.enum(["credential-ingestion", "model-inference", "embedding"]),
+        revision: external_exports.string().min(1),
+        guardian: external_exports.object({ required: external_exports.boolean(), approved: external_exports.boolean() })
+      })
+    });
+    var ModelSafeCredentialFactValidator = external_exports.object({
+      kind: external_exports.enum([
+        "skill",
+        "goal",
+        "achievement",
+        "course",
+        "experience",
+        "competency",
+        "title",
+        "summary",
+        "assessment",
+        "grade",
+        "date",
+        "alignment",
+        "criteria",
+        "pathway",
+        "topic"
+      ]),
+      value: external_exports.string().min(1).max(240),
+      label: external_exports.string().min(1).max(120).optional()
+    });
+    var ModelSafeCredentialProjectionValidator = external_exports.object({
+      schemaVersion: external_exports.literal("1"),
+      category: external_exports.string().min(1).max(120),
+      credentialTypes: external_exports.array(external_exports.string().min(1).max(120)).max(20),
+      facts: external_exports.array(ModelSafeCredentialFactValidator).max(100),
+      // Present only on credentials that are past their expiry, so the model can
+      // tell a lapsed credential from a current one.
+      expired: external_exports.literal(true).optional(),
+      expirationDate: external_exports.string().datetime().optional()
+    });
+    var AIPassportCredentialRecordValidator = external_exports.object({
+      id: external_exports.string(),
+      uri: external_exports.string(),
+      category: external_exports.string(),
+      credential: VCValidator,
+      aiContext: external_exports.string(),
+      generalSummary: external_exports.string().optional(),
+      createdAt: external_exports.string(),
+      verification: CredentialVerificationMetadataValidator.optional(),
+      projection: ModelSafeCredentialProjectionValidator.optional()
+    });
+    var AuthenticatedMessageValidator = external_exports.object({
+      message: ChatMessageValidator.optional(),
+      threadId: external_exports.string().optional(),
+      selectedQuestion: external_exports.string().optional(),
+      action: external_exports.enum([
+        "start_topic",
+        "continue_plan",
+        "start_topic_uri",
+        "start_learning_pathway",
+        "start_insights_session",
+        "close_insights_session",
+        "artifact_suggestion"
+      ]).optional(),
+      topic: external_exports.string().optional(),
+      topicUri: external_exports.string().optional(),
+      pathwayUri: external_exports.string().optional(),
+      mode: AiSessionModeValidator.optional(),
+      introStreamMode: IntroStreamModeValidator.optional(),
+      // BCP-47 language for AI responses (LC-1901). This has to live on the
+      // validator, not just the inferred type — z.object strips unknown keys, so an
+      // undeclared `locale` would be dropped before the WS handler ever saw it.
+      locale: external_exports.string().nullish()
+    });
+    var DebugInfoValidator = external_exports.object({
+      operation: external_exports.string(),
+      collection: external_exports.string(),
+      input: external_exports.unknown().optional(),
+      output: external_exports.unknown().optional(),
+      timestamp: external_exports.string(),
+      duration: external_exports.number().optional()
+    });
+    var TimingEventValidator = external_exports.object({
+      event: external_exports.literal("timing"),
+      operation: external_exports.string(),
+      phase: external_exports.enum(["start", "end", "complete"]),
+      duration: external_exports.number().optional(),
+      metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+      timestamp: external_exports.string()
+    });
+    var LearningPathwayValidator = external_exports.object({
+      id: external_exports.string(),
+      learningPathway: external_exports.object({
+        stepIndex: external_exports.number(),
+        step: external_exports.object({
+          title: external_exports.string(),
+          description: external_exports.string(),
+          summary: external_exports.string(),
+          learned: external_exports.array(external_exports.string()),
+          skills: external_exports.array(
+            external_exports.object({
+              title: external_exports.string(),
+              description: external_exports.string()
+            })
+          )
+        })
+      })
+    });
   }
 });
 
@@ -25924,6 +26516,8 @@ var inferW3cVersionFromContext = /* @__PURE__ */ __name((vc) => {
 
 // src/credential-refresh.ts
 var import_types2 = __toESM(require_dist());
+var BITSTRING_STATUS_LIST_CONTEXT = "https://www.w3.org/ns/credentials/status/v1";
+var VC_V2_CONTEXT = "https://www.w3.org/ns/credentials/v2";
 var getSupportedRefreshService = /* @__PURE__ */ __name((vc) => {
   const refreshService = vc?.refreshService;
   if (!refreshService) return void 0;
@@ -25961,6 +26555,33 @@ var canonicalizeCredentialContent = /* @__PURE__ */ __name((value) => {
   return value;
 }, "canonicalizeCredentialContent");
 var canonicalizeCredentialJson = /* @__PURE__ */ __name((value) => JSON.stringify(canonicalizeCredentialContent(value)), "canonicalizeCredentialJson");
+var assertExactJweRecipients = /* @__PURE__ */ __name((jwe, recipientKeyIds) => {
+  const expected = new Set(recipientKeyIds);
+  const recipients = jwe.recipients ?? [];
+  const actual = recipients.map((recipient) => recipient.header.kid);
+  if (expected.size === 0 || expected.size !== recipientKeyIds.length || actual.length !== expected.size || new Set(actual).size !== actual.length || actual.some((kid) => !kid || !expected.has(kid))) {
+    throw new Error("ENCRYPTION_RECIPIENTS_MISMATCH");
+  }
+}, "assertExactJweRecipients");
+var credentialRefreshBindingsEqual = /* @__PURE__ */ __name((credential, baseline) => canonicalizeCredentialJson(credential.credentialStatus) === canonicalizeCredentialJson(baseline.credentialStatus) && canonicalizeCredentialJson(credential.refreshService) === canonicalizeCredentialJson(baseline.refreshService), "credentialRefreshBindingsEqual");
+var assertManagedCredentialBinding = /* @__PURE__ */ __name((credential, receipt) => {
+  const subjects = Array.isArray(credential.credentialSubject) ? credential.credentialSubject : [credential.credentialSubject];
+  const holderMatches = subjects.length > 0 && subjects.every(
+    (subject) => typeof subject === "object" && subject !== null && "id" in subject && subject.id === receipt.holderDid
+  );
+  const managedServices = getManagedRefreshServices(credential);
+  const services = Array.isArray(credential.refreshService) ? credential.refreshService : [credential.refreshService];
+  const managedEntryCount = services.filter(
+    (service) => service?.type === "LearnCardCredentialRefresh2026"
+  ).length;
+  const bindingsMatch = receipt.refreshServiceBinding === "managed-entry" ? managedServices.length === 1 && managedEntryCount === 1 && credentialRefreshBindingsEqual(
+    { ...credential, refreshService: managedServices[0] },
+    receipt
+  ) : credentialRefreshBindingsEqual(credential, receipt);
+  if (credential.id !== receipt.credentialId || getCredentialIssuerId(credential) !== receipt.issuerDid || !holderMatches || !bindingsMatch) {
+    throw new Error("MANAGED_CREDENTIAL_BINDING_MISMATCH");
+  }
+}, "assertManagedCredentialBinding");
 var MANAGED_REFRESH_TYPE_TERM = "LearnCardCredentialRefresh2026";
 var MANAGED_REFRESH_DID_AUTH_TERM = "LearnCardDIDAuth";
 var MANAGED_REFRESH_TYPE_IRI = "https://learncard.com/refresh#LearnCardCredentialRefresh2026";
@@ -26011,6 +26632,18 @@ var prepareManagedRefreshContext = /* @__PURE__ */ __name((credential) => {
   const existingContext = credential["@context"];
   const contextList = existingContext === void 0 || existingContext === null ? [] : Array.isArray(existingContext) ? [...existingContext] : [existingContext];
   const inlineObjects = contextList.filter(isPlainObject);
+  let addedStatusContext = false;
+  if (getBitstringStatusListEntries(credential).length > 0 && !contextList.some(
+    (context) => context === VC_V2_CONTEXT || context === BITSTRING_STATUS_LIST_CONTEXT
+  )) {
+    const firstInline = contextList.findIndex(isPlainObject);
+    contextList.splice(
+      firstInline === -1 ? contextList.length : firstInline,
+      0,
+      BITSTRING_STATUS_LIST_CONTEXT
+    );
+    addedStatusContext = true;
+  }
   const fragment = {};
   const typeDefinition = findTopLevelDefinition(inlineObjects, MANAGED_REFRESH_TYPE_TERM);
   if (typeDefinition === void 0) {
@@ -26060,10 +26693,11 @@ var prepareManagedRefreshContext = /* @__PURE__ */ __name((credential) => {
       );
     }
   }
-  if (Object.keys(fragment).length === 0) return credential;
+  const hasFragment = Object.keys(fragment).length > 0;
+  if (!hasFragment && !addedStatusContext) return credential;
   return {
     ...credential,
-    "@context": [...contextList, fragment]
+    "@context": hasFragment ? [...contextList, fragment] : contextList
   };
 }, "prepareManagedRefreshContext");
 var injectManagedRefreshService = /* @__PURE__ */ __name((credential, refreshService) => {
@@ -26252,6 +26886,391 @@ var canonicalizeShareContentRequestBody = /* @__PURE__ */ __name((body, options
   return serialized;
 }, "canonicalizeShareContentRequestBody");
 
+// src/consent-flow-contract-updates.ts
+var hasOpenNewOptionsWindow = /* @__PURE__ */ __name((newOptionsUntil, now = Date.now()) => Boolean(newOptionsUntil && Date.parse(newOptionsUntil) > now), "hasOpenNewOptionsWindow");
+var scopes = /* @__PURE__ */ __name((contract) => {
+  const result = [];
+  for (const area of ["read", "write"]) {
+    const access = contract[area];
+    for (const [key, config] of Object.entries(access.credentials.categories)) {
+      result.push({
+        area,
+        type: "credential",
+        key,
+        required: config.required,
+        reason: config.reason
+      });
+    }
+    for (const [key, config] of Object.entries(access.personal)) {
+      result.push({
+        area,
+        type: "personal",
+        key,
+        required: config.required,
+        reason: config.reason
+      });
+    }
+  }
+  return result.sort((a, b) => scopeKey(a).localeCompare(scopeKey(b)));
+}, "scopes");
+var scopeKey = /* @__PURE__ */ __name(({ area, type, key }) => `${area}:${type}:${key}`, "scopeKey");
+var diffScopes = /* @__PURE__ */ __name((previous, current) => {
+  const before = new Map(previous.map((scope) => [scopeKey(scope), scope]));
+  const after = new Map(current.map((scope) => [scopeKey(scope), scope]));
+  const added = [];
+  const removed = [];
+  const changed = [];
+  for (const [key, scope] of after) {
+    const old = before.get(key);
+    if (!old) added.push(scope);
+    else if (old.required !== scope.required || old.reason !== scope.reason)
+      changed.push(scope);
+  }
+  for (const [key, scope] of before) if (!after.has(key)) removed.push(scope);
+  const sort = /* @__PURE__ */ __name((list) => list.sort((a, b) => scopeKey(a).localeCompare(scopeKey(b))), "sort");
+  return { added: sort(added), removed: sort(removed), changed: sort(changed) };
+}, "diffScopes");
+var DETAIL_FIELDS = [
+  "name",
+  "subtitle",
+  "description",
+  "reasonForAccessing",
+  "image",
+  "needsGuardianConsent",
+  "redirectUrl",
+  "frontDoorBoostUri",
+  "expiresAt"
+];
+var diffContractChange = /* @__PURE__ */ __name((prev, next) => {
+  const details = [];
+  for (const field of DETAIL_FIELDS) {
+    const before = field === "needsGuardianConsent" ? !!prev[field] : prev[field];
+    const after = field === "needsGuardianConsent" ? !!next[field] : next[field];
+    if (before !== after) details.push({ field, before, after });
+  }
+  for (const field of ["writers", "autoboosts"]) {
+    const before = [...set(prev[field])].sort();
+    const after = [...set(next[field])].sort();
+    if (before.length !== after.length || before.some((value, index) => value !== after[index])) {
+      details.push({ field, before, after });
+    }
+  }
+  return {
+    ...diffScopes(scopes(prev.contract), scopes(next.contract)),
+    ...details.length ? { details } : {}
+  };
+}, "diffContractChange");
+var expiryIsStricter = /* @__PURE__ */ __name((previous, next) => {
+  if (!next) return false;
+  if (!previous) return true;
+  const oldTime = Date.parse(previous);
+  const newTime = Date.parse(next);
+  return Number.isFinite(oldTime) && Number.isFinite(newTime) && newTime < oldTime;
+}, "expiryIsStricter");
+var canonicalIdentity = /* @__PURE__ */ __name((value) => {
+  if (typeof value === "string") return value;
+  if (value && typeof value === "object") {
+    if (Array.isArray(value)) return `[${value.map(canonicalIdentity).join(",")}]`;
+    const record = value;
+    const identity = record.uri ?? record.id ?? record.boostUri;
+    if (typeof identity === "string") return identity;
+    return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonicalIdentity(record[key])}`).join(",")}}`;
+  }
+  return JSON.stringify(value) ?? String(value);
+}, "canonicalIdentity");
+var set = /* @__PURE__ */ __name((values) => new Set((values ?? []).map(canonicalIdentity)), "set");
+var classifyContractChange = /* @__PURE__ */ __name((prev, next) => {
+  const previousScopes = scopes(prev.contract);
+  const diff = diffScopes(previousScopes, scopes(next.contract));
+  const before = new Map(previousScopes.map((scope) => [scopeKey(scope), scope]));
+  let requiresConsent = next.name !== prev.name || next.reasonForAccessing !== prev.reasonForAccessing || !prev.needsGuardianConsent && !!next.needsGuardianConsent || expiryIsStricter(prev.expiresAt, next.expiresAt) || next.writers?.some((writer) => !prev.writers?.includes(writer)) === true;
+  let expandedOptional = false;
+  for (const scope of diff.added) {
+    if (scope.required) requiresConsent = true;
+    else expandedOptional = true;
+  }
+  for (const scope of diff.changed) {
+    const previous = before.get(scopeKey(scope));
+    if (scope.reason !== previous?.reason || scope.required && !previous?.required)
+      requiresConsent = true;
+  }
+  const oldBoosts = set(prev.autoboosts);
+  if ([...set(next.autoboosts)].some((boost) => !oldBoosts.has(boost))) requiresConsent = true;
+  if (requiresConsent) return "requires_consent";
+  if (expandedOptional) return "expanded_optional";
+  return "relaxed";
+}, "classifyContractChange");
+var CANONICAL_SCOPE_COPY = {
+  TRANSCRIPT: {
+    messageKey: "transcripts",
+    label: "Transcripts",
+    description: "Records of completed courses and learning."
+  },
+  TRANSCRIPTS: {
+    messageKey: "transcripts",
+    label: "Transcripts",
+    description: "Records of completed courses and learning."
+  },
+  CERTIFICATE: {
+    messageKey: "certificates",
+    label: "Certificates",
+    description: "Credentials recognizing qualifications or completed learning."
+  },
+  CERTIFICATES: {
+    messageKey: "certificates",
+    label: "Certificates",
+    description: "Credentials recognizing qualifications or completed learning."
+  },
+  ACHIEVEMENT: {
+    messageKey: "achievements",
+    label: "Achievements",
+    description: "Milestones earned through effort, skill, or perseverance."
+  },
+  ACHIEVEMENTS: {
+    messageKey: "achievements",
+    label: "Achievements",
+    description: "Milestones earned through effort, skill, or perseverance."
+  },
+  SKILL: {
+    messageKey: "skills",
+    label: "Skills",
+    description: "Abilities developed through training, practice, or experience."
+  },
+  SKILLS: {
+    messageKey: "skills",
+    label: "Skills",
+    description: "Abilities developed through training, practice, or experience."
+  },
+  "WORK HISTORY": {
+    messageKey: "workHistory",
+    label: "Work History",
+    description: "Professional roles and activities over time."
+  },
+  "LEARNING HISTORY": {
+    messageKey: "learningHistory",
+    label: "Learning History",
+    description: "Structured programs of learning."
+  },
+  ID: { messageKey: "ids", label: "IDs", description: "Credentials used to verify identity." },
+  "SOCIAL BADGE": {
+    messageKey: "socialBadges",
+    label: "Social Badges",
+    description: "Digital labels recognizing participation or group membership."
+  },
+  "SOCIAL BADGES": {
+    messageKey: "socialBadges",
+    label: "Social Badges",
+    description: "Digital labels recognizing participation or group membership."
+  },
+  MEMBERSHIP: {
+    messageKey: "memberships",
+    label: "Memberships",
+    description: "Records of memberships."
+  },
+  MEMBERSHIPS: {
+    messageKey: "memberships",
+    label: "Memberships",
+    description: "Records of memberships."
+  },
+  ACCOMPLISHMENT: {
+    messageKey: "accomplishments",
+    label: "Accomplishments",
+    description: "Collections of work that showcase skills and experience."
+  },
+  ACCOMPLISHMENTS: {
+    messageKey: "accomplishments",
+    label: "Accomplishments",
+    description: "Collections of work that showcase skills and experience."
+  },
+  EXPERIENCES: {
+    messageKey: "experiences",
+    label: "Experiences",
+    description: "Knowledge and skills gained through professional roles and activities."
+  },
+  ACCOMMODATION: {
+    messageKey: "accommodations",
+    label: "Accommodations",
+    description: "Adjustments made to support accessibility."
+  },
+  ACCOMMODATIONS: {
+    messageKey: "accommodations",
+    label: "Accommodations",
+    description: "Adjustments made to support accessibility."
+  },
+  FAMILY: {
+    messageKey: "family",
+    label: "Family",
+    description: "Family profiles connected through shared learning journeys."
+  },
+  QUALIFICATIONS: {
+    messageKey: "qualifications",
+    label: "Qualifications",
+    description: "Education, training, and professional qualifications."
+  },
+  GOALS: {
+    messageKey: "goals",
+    label: "Goals",
+    description: "Learning and career goals you want to achieve."
+  },
+  "PROFESSIONAL TITLE": {
+    messageKey: "professionalTitle",
+    label: "Professional title",
+    description: "The title that describes your professional role."
+  },
+  "ROLE EXPERIENCE": {
+    messageKey: "roleExperience",
+    label: "Role experience",
+    description: "Experience gained in a particular professional role."
+  },
+  "WORK EXPERIENCE": {
+    messageKey: "workExperience",
+    label: "Work experience",
+    description: "Your work activities, responsibilities, and experience."
+  },
+  "PAY RATE": {
+    messageKey: "payRate",
+    label: "Pay rate",
+    description: "Your pay amount and payment period."
+  },
+  "WORK LIFE BALANCE": {
+    messageKey: "workLifeBalance",
+    label: "Work-life balance",
+    description: "Your preferences for balancing work and personal life."
+  },
+  "JOB STABILITY": {
+    messageKey: "jobStability",
+    label: "Job stability",
+    description: "Your preferences for job security and stability."
+  },
+  "SELF-ASSIGNED SKILLS": {
+    messageKey: "selfAssignedSkills",
+    label: "Self-assigned skills",
+    description: "Skills you have added to your own profile."
+  },
+  "AI-SUMMARY": {
+    messageKey: "aiSummaries",
+    label: "AI summaries",
+    description: "Summaries of your AI-assisted learning sessions."
+  },
+  "AI-TOPIC": {
+    messageKey: "aiTopics",
+    label: "AI topics",
+    description: "Topics explored in your AI-assisted learning."
+  },
+  "AI-ASSESSMENT": {
+    messageKey: "aiAssessments",
+    label: "AI assessments",
+    description: "Assessments from your AI-assisted learning."
+  },
+  "AI INSIGHT": {
+    messageKey: "aiInsights",
+    label: "AI insights",
+    description: "Insights about your learning progress and skills."
+  },
+  "LEARNING-PATHWAY": {
+    messageKey: "learningPathways",
+    label: "Learning pathways",
+    description: "Plans and steps toward your learning goals."
+  }
+};
+var PERSONAL_SCOPE_COPY = {
+  NAME: { messageKey: "name", label: "Name", description: "Your name." },
+  EMAIL: { messageKey: "email", label: "Email", description: "Your email address." },
+  IMAGE: {
+    messageKey: "profilePhoto",
+    label: "Profile photo",
+    description: "Your profile photo."
+  },
+  "PROFILE IMAGE": {
+    messageKey: "profilePhoto",
+    label: "Profile photo",
+    description: "Your profile photo."
+  },
+  "PROFILE PHOTO": {
+    messageKey: "profilePhoto",
+    label: "Profile photo",
+    description: "Your profile photo."
+  }
+};
+var scopeCopy = /* @__PURE__ */ __name((scope, translate) => {
+  const copy = (scope.type === "personal" ? PERSONAL_SCOPE_COPY : CANONICAL_SCOPE_COPY)[scope.key.toUpperCase()];
+  if (!copy) return { label: scope.key, description: "" };
+  if (!translate) return copy;
+  const prefix = `consentUpdate.scope.${copy.messageKey}`;
+  return {
+    label: translate(`${prefix}.label`),
+    description: translate(`${prefix}.description`)
+  };
+}, "scopeCopy");
+var buildContractUpdatePreview = /* @__PURE__ */ __name(({
+  name,
+  kind,
+  diff,
+  status,
+  translate
+}) => {
+  const text = /* @__PURE__ */ __name((key, fallback, values) => translate?.(`consentUpdate.${key}`, values) ?? fallback, "text");
+  const label = /* @__PURE__ */ __name((scope) => scopeCopy(scope, translate).label, "label");
+  const addedScopeCount = diff.added.length;
+  const onlyAddedScopes = diff.changed.length === 0 && !diff.details?.length;
+  let headline;
+  let subhead;
+  let primaryLabel;
+  if (status === "suspended") {
+    headline = text("headline.paused", `${name}'s access is paused`, { name });
+    subhead = text("subhead.reconnect", "Approve the update to reconnect.");
+    primaryLabel = text("action.reconnect", "Reconnect");
+  } else if (kind === "requires_consent" && addedScopeCount === 1 && onlyAddedScopes) {
+    const scope = diff.added[0];
+    const values = { name, label: label(scope) };
+    headline = scope.area === "read" ? text("headline.read", `${name} is asking to see your ${values.label}`, values) : text(
+      "headline.write",
+      `${name} is asking to add ${values.label} to your account`,
+      values
+    );
+    subhead = "";
+    primaryLabel = text("action.allow", "Allow");
+  } else if (kind === "requires_consent" && addedScopeCount > 1 && onlyAddedScopes) {
+    headline = text("headline.multiple", `${name} is asking for more access`, { name });
+    subhead = text("subhead.newItems", `${addedScopeCount} new items`, {
+      count: addedScopeCount
+    });
+    primaryLabel = text("action.allowAccess", "Allow access");
+  } else if (kind === "requires_consent") {
+    headline = text("headline.changed", `${name} changed its request`, { name });
+    subhead = text("subhead.review", "Review what's different.");
+    primaryLabel = text("action.allow", "Allow");
+  } else if (kind === "expanded_optional") {
+    headline = text("headline.optional", `${name} has a new option`, { name });
+    subhead = text(
+      "subhead.optional",
+      "Turn it on if you want. Nothing changes unless you do."
+    );
+    primaryLabel = text("action.continue", "Continue");
+  } else {
+    const removed = diff.removed[0];
+    headline = removed ? text("headline.removed", `${name} now sees less`, { name }) : text("headline.changed", `${name} changed its request`, { name });
+    subhead = removed ? text("subhead.removed", `Stopped asking for ${label(removed)}.`, {
+      label: label(removed)
+    }) : text("subhead.changed", "Its request has changed.");
+    primaryLabel = text("action.done", "Done");
+  }
+  const row = /* @__PURE__ */ __name((scope, change) => {
+    const copy = scopeCopy(scope, translate);
+    return { scope, change, label: copy.label, subtitle: scope.reason || copy.description };
+  }, "row");
+  return {
+    headline,
+    subhead,
+    rows: [
+      ...diff.added.map((scope) => row(scope, "added")),
+      ...diff.removed.map((scope) => row(scope, "removed")),
+      ...diff.changed.map((scope) => row(scope, "changed"))
+    ],
+    primaryLabel
+  };
+}, "buildContractUpdatePreview");
+
 // src/credential-materialization.ts
 var CredentialFieldError = class extends Error {
   constructor(field) {
@@ -26325,6 +27344,82 @@ var materializeCredentialFields = /* @__PURE__ */ __name((credential) => {
   return result;
 }, "materializeCredentialFields");
 
+// src/age-policy.ts
+import moment from "moment";
+var GDPR_AGE_LIMIT = {
+  Germany: 16,
+  France: 15,
+  Spain: 14,
+  Ireland: 13,
+  Netherlands: 16,
+  Austria: 14,
+  Italy: 14,
+  Sweden: 13
+};
+var DEFAULT_EU_AGE_LIMIT = 16;
+var GDPR_AGE_LIMIT_BY_CODE = {
+  DE: 16,
+  FR: 15,
+  ES: 14,
+  IE: 13,
+  NL: 16,
+  AT: 14,
+  IT: 14,
+  SE: 13
+};
+var EU_COUNTRY_CODES = [
+  "AT",
+  "BE",
+  "BG",
+  "HR",
+  "CY",
+  "CZ",
+  "DK",
+  "EE",
+  "FI",
+  "FR",
+  "DE",
+  "GR",
+  "HU",
+  "IE",
+  "IT",
+  "LV",
+  "LT",
+  "LU",
+  "MT",
+  "NL",
+  "PL",
+  "PT",
+  "RO",
+  "SK",
+  "SI",
+  "ES",
+  "SE"
+];
+var getMinorAgeThreshold = /* @__PURE__ */ __name((countryCode) => {
+  if (countryCode && EU_COUNTRY_CODES.includes(countryCode)) {
+    return GDPR_AGE_LIMIT_BY_CODE[countryCode] ?? DEFAULT_EU_AGE_LIMIT;
+  }
+  return 18;
+}, "getMinorAgeThreshold");
+var calculateAgeFromISODate = /* @__PURE__ */ __name((dob, now = /* @__PURE__ */ new Date()) => {
+  const parsed = moment.parseZone(dob, moment.ISO_8601, true);
+  if (!parsed.isValid()) return Number.NaN;
+  const year = parsed.year();
+  const month = parsed.month() + 1;
+  const day = parsed.date();
+  const birth = /* @__PURE__ */ new Date(0);
+  birth.setUTCFullYear(year, month - 1, day);
+  birth.setUTCHours(0, 0, 0, 0);
+  const today = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
+  if (birth > today) return Number.NaN;
+  let age = today.getUTCFullYear() - year;
+  if (today.getUTCMonth() < month - 1 || today.getUTCMonth() === month - 1 && today.getUTCDate() < day) {
+    age--;
+  }
+  return age;
+}, "calculateAgeFromISODate");
+
 // src/index.ts
 var isHex = /* @__PURE__ */ __name((str) => /^[0-9a-f]+$/i.test(str), "isHex");
 var isEncrypted = /* @__PURE__ */ __name((item) => {
@@ -26360,6 +27455,8 @@ var isVC2Format = /* @__PURE__ */ __name((credential) => {
   const context = credential["@context"];
   return Array.isArray(context) ? context.some((value) => value === "https://www.w3.org/ns/credentials/v2") : context === "https://www.w3.org/ns/credentials/v2";
 }, "isVC2Format");
+var DISPLAY_ONLY_ANCHOR_MARKER = "displayOnlyAnchor";
+var isDisplayOnlyAnchorTemplate = /* @__PURE__ */ __name((credential) => !!credential && typeof credential === "object" && credential[DISPLAY_ONLY_ANCHOR_MARKER] === true, "isDisplayOnlyAnchorTemplate");
 var unwrapBoostCredential = /* @__PURE__ */ __name((vc) => {
   if (vc?.type?.includes("CertifiedBoostCredential") && vc?.boostCredential) {
     return vc.boostCredential;
@@ -26375,10 +27472,15 @@ var isAppDidWeb = /* @__PURE__ */ __name((did) => {
 export {
   AGE_RATING_TO_MIN_AGE,
   CredentialFieldError,
+  DEFAULT_EU_AGE_LIMIT,
   DEFAULT_MAX_CANONICAL_BYTES,
   DEFAULT_MAX_CANONICAL_DEPTH,
   DEFAULT_RESOLUTIONS,
+  DISPLAY_ONLY_ANCHOR_MARKER,
+  EU_COUNTRY_CODES,
   EnvironmentConfigurationError,
+  GDPR_AGE_LIMIT,
+  GDPR_AGE_LIMIT_BY_CODE,
   ImageResizingValidator,
   ImageUploadingValidator,
   ImageWithLoadingStateValdator,
@@ -26388,14 +27490,20 @@ export {
   MANAGED_REFRESH_TYPE_IRI,
   RegExpTransformer,
   ShareContentCanonicalizationError,
+  assertExactJweRecipients,
+  assertManagedCredentialBinding,
+  buildContractUpdatePreview,
   calculateAgeFromDob,
+  calculateAgeFromISODate,
   canonicalizeCredentialContent,
   canonicalizeCredentialJson,
   canonicalizeShareContentRequestBody,
   capitalizeFirstLetter,
   changeQuality4 as changeQuality,
   checkAppInstallEligibility,
+  classifyContractChange,
   credentialContentsEqual,
+  credentialRefreshBindingsEqual,
   curriedArraySlice,
   curriedInnerImmerOuterImmer,
   curriedInnerImmerOuterReact,
@@ -26405,6 +27513,7 @@ export {
   deriveNameFromVct,
   deriveSdJwtIssuedAtIso,
   deriveTypeFromVct,
+  diffContractChange,
   environmentBoolean,
   environmentPort,
   extractVctSegment,
@@ -26421,9 +27530,11 @@ export {
   getCredentialStatusArray,
   getDidWeb,
   getManagedRefreshServices,
+  getMinorAgeThreshold,
   getProvider,
   getSupportedRefreshService,
   getUrlsFromSrcSet,
+  hasOpenNewOptionsWindow,
   immerArraySlice,
   injectManagedRefreshService,
   innerImmerOuterImmer,
@@ -26432,6 +27543,7 @@ export {
   innerReactOuterReact,
   isAppDidWeb,
   isBitstringStatusListEntry,
+  isDisplayOnlyAnchorTemplate,
   isEncrypted,
   isHex,
   isNotMaybe,