@learncard/learn-cloud-plugin 2.3.39 → 2.3.41

package/dist/learn-cloud-plugin.cjs.development.cjs

@@ -21235,14 +21235,22 @@ var UnsignedVCValidator = external_exports.object({
 }).catchall(external_exports.any());
 var ProofValidator = external_exports.object({
   type: external_exports.string(),
-  created: external_exports.string(),
+  created: external_exports.string().optional(),
   challenge: external_exports.string().optional(),
   domain: external_exports.string().optional(),
   nonce: external_exports.string().optional(),
   proofPurpose: external_exports.string(),
   verificationMethod: external_exports.string(),
   jws: external_exports.string().optional()
-}).catchall(external_exports.any());
+}).catchall(external_exports.any()).superRefine((proof, ctx) => {
+  if (proof.created === void 0 && (proof.type !== "DataIntegrityProof" || proof.cryptosuite !== "ecdsa-rdfc-2019")) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["created"],
+      message: "created is required for this proof suite"
+    });
+  }
+});
 var VCValidator = UnsignedVCValidator.extend({
   proof: ProofValidator.or(ProofValidator.array())
 });
@@ -22003,7 +22011,10 @@ var SendOptionsValidator = external_exports.object({
   webhookUrl: external_exports.string().url().optional().describe("Webhook URL to receive claim notifications"),
   suppressDelivery: external_exports.boolean().optional().describe("If true, returns claimUrl without sending email/SMS"),
   branding: SendBrandingOptionsValidator.optional().describe("Branding for email/SMS delivery"),
-  guardianEmail: external_exports.string().email().optional().describe("Guardian email that must approve before student can claim")
+  guardianEmail: external_exports.string().email().optional().describe("Guardian email that must approve before student can claim"),
+  expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+    "How many days the credential stays claimable in the Universal Inbox (default 30). Does not change the credential validity period."
+  )
 });
 var SendBoostInputValidator = external_exports.object({
   type: external_exports.literal("boost"),
@@ -22124,15 +22135,6 @@ var ConsentFlowContractDataValidator = external_exports.object({
 var PaginatedConsentFlowDataValidator = PaginationResponseValidator.extend({
   records: ConsentFlowContractDataValidator.array()
 });
-var ConsentFlowContractDataForDidValidator = external_exports.object({
-  credentials: external_exports.object({ category: external_exports.string(), uri: external_exports.string() }).array(),
-  personal: external_exports.record(external_exports.string(), external_exports.string()).default({}),
-  date: external_exports.string(),
-  contractUri: external_exports.string()
-});
-var PaginatedConsentFlowDataForDidValidator = PaginationResponseValidator.extend({
-  records: ConsentFlowContractDataForDidValidator.array()
-});
 var ConsentFlowTermValidator = external_exports.object({
   sharing: external_exports.boolean().optional(),
   shared: external_exports.string().array().optional(),
@@ -22166,6 +22168,34 @@ var PaginatedConsentFlowTermsValidator = PaginationResponseValidator.extend({
     status: ConsentFlowTermsStatusValidator
   }).array()
 });
+var ConsentFlowGuardianApprovalValidator = external_exports.object({
+  guardianProfileId: external_exports.string(),
+  guardianDid: external_exports.string(),
+  approvedAt: external_exports.string().datetime(),
+  contractUpdatedAt: external_exports.string()
+});
+var ConsentFlowContractDataForDidValidator = external_exports.object({
+  credentials: external_exports.object({ category: external_exports.string(), uri: external_exports.string() }).array(),
+  personal: external_exports.record(external_exports.string(), external_exports.string()).default({}),
+  date: external_exports.string(),
+  createdAt: external_exports.string().optional(),
+  contractUpdatedAt: external_exports.string(),
+  contractExpiresAt: external_exports.string().optional(),
+  reasonForAccessing: external_exports.string().optional(),
+  guardian: external_exports.object({
+    required: external_exports.boolean(),
+    approved: external_exports.boolean(),
+    approval: ConsentFlowGuardianApprovalValidator.optional()
+  }),
+  contractUri: external_exports.string(),
+  termsUri: external_exports.string(),
+  status: ConsentFlowTermsStatusValidator,
+  expiresAt: external_exports.string().optional(),
+  terms: ConsentFlowTermsValidator
+});
+var PaginatedConsentFlowDataForDidValidator = PaginationResponseValidator.extend({
+  records: ConsentFlowContractDataForDidValidator.array()
+});
 var ConsentFlowContractQueryValidator = external_exports.object({
   read: external_exports.object({
     anonymize: external_exports.boolean().optional(),
@@ -22226,6 +22256,7 @@ var ConsentFlowTransactionValidator = external_exports.object({
   expiresAt: external_exports.string().optional(),
   oneTime: external_exports.boolean().optional(),
   terms: ConsentFlowTermsValidator.optional(),
+  guardianApproval: ConsentFlowGuardianApprovalValidator.optional(),
   id: external_exports.string(),
   action: ConsentFlowTransactionActionValidator,
   date: external_exports.string(),
@@ -22298,7 +22329,8 @@ var LCNNotificationTypeEnumValidator = external_exports.enum([
   "APP_NOTIFICATION",
   "CREDENTIAL_REVOKED",
   "CREDENTIAL_SUSPENDED",
-  "CREDENTIAL_UNSUSPENDED"
+  "CREDENTIAL_UNSUSPENDED",
+  "CREDENTIAL_REFRESHED"
 ]);
 var LCNNotificationMessageValidator = external_exports.object({
   title: external_exports.string().optional(),
@@ -22430,12 +22462,16 @@ var CreateContactMethodSessionResponseValidator = external_exports.object({
 });
 var InboxCredentialValidator = external_exports.object({
   id: external_exports.string(),
-  credential: external_exports.string(),
+  credential: external_exports.string().optional(),
   isSigned: external_exports.boolean(),
   currentStatus: LCNInboxStatusEnumValidator,
   isAccepted: external_exports.boolean().optional(),
   expiresAt: external_exports.string(),
   createdAt: external_exports.string(),
+  finalizedAt: external_exports.string().optional(),
+  expiredAt: external_exports.string().optional(),
+  credentialName: external_exports.string().optional(),
+  achievementType: external_exports.string().optional(),
   issuerDid: external_exports.string(),
   webhookUrl: external_exports.string().optional(),
   boostUri: external_exports.string().optional(),
@@ -22489,7 +22525,9 @@ var IssueInboxCredentialValidator = external_exports.object({
       "The signing authority to use for the credential. If not provided, the users default signing authority will be used if the credential is not signed."
     ),
     webhookUrl: external_exports.string().url().optional().describe("The webhook URL to receive credential issuance events."),
-    expiresInDays: external_exports.number().min(1).max(365).optional().describe("The number of days the credential will be valid for."),
+    expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+      "How many days the encrypted inbox payload remains claimable. This does not change the credential validity period."
+    ),
     templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional().describe(
       "Template data to render into the boost credential template using Mustache syntax. Only used when boostUri is provided."
     ),
@@ -22552,6 +22590,9 @@ var ClaimInboxCredentialValidator = external_exports.object({
   credential: VCValidator.or(VPValidator).or(UnsignedVCValidator).or(CredentialNameRefValidator).describe("The credential to issue, or a { name } reference to resolve a boost template."),
   configuration: external_exports.object({
     publishableKey: external_exports.string(),
+    expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+      "Inbox claim window in days. Defaults to 720; use a shorter window for sensitive records."
+    ),
     signingAuthorityName: external_exports.string().optional(),
     listingId: external_exports.string().optional(),
     listingSlug: external_exports.string().optional()
@@ -23178,6 +23219,191 @@ var inAppMessagesFlagValidator = external_exports.object({
   version: external_exports.number().default(1),
   messages: external_exports.array(inAppMessageValidator).default([])
 }).passthrough();
+var LearnCardRefreshAuthorizationValidator = external_exports.object({ type: external_exports.literal("LearnCardDIDAuth") }).catchall(external_exports.any());
+var ManagedCredentialRefreshServiceValidator = external_exports.object({
+  id: external_exports.string().min(1),
+  type: external_exports.literal("LearnCardCredentialRefresh2026"),
+  authorization: LearnCardRefreshAuthorizationValidator.optional()
+}).catchall(external_exports.any());
+var StandardCredentialRefreshServiceValidator = external_exports.object({
+  id: external_exports.string().min(1),
+  type: external_exports.literal("1EdTechCredentialRefresh")
+}).catchall(external_exports.any());
+var SupportedCredentialRefreshServiceValidator = external_exports.union([
+  ManagedCredentialRefreshServiceValidator,
+  StandardCredentialRefreshServiceValidator
+]);
+var AllocateCredentialRefreshInputValidator = external_exports.object({
+  holder: external_exports.object({
+    profileId: external_exports.string().optional(),
+    did: external_exports.string().min(1)
+  }),
+  credentialId: external_exports.string().min(1)
+});
+var AllocateCredentialRefreshResultValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  refreshService: ManagedCredentialRefreshServiceValidator.extend({
+    authorization: LearnCardRefreshAuthorizationValidator
+  })
+});
+var CredentialRefreshSigningModeValidator = external_exports.enum(["issuer-signed", "signing-authority"]);
+var PublishCredentialRefreshBaseFields = {
+  refreshId: external_exports.string().min(1),
+  notifyHolder: external_exports.boolean().optional(),
+  updateSummary: external_exports.string().optional(),
+  idempotencyKey: external_exports.string().optional()
+};
+var PublishIssuerSignedRefreshValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: external_exports.literal("issuer-signed"),
+  signedCredential: VCValidator
+});
+var PublishSigningAuthorityRefreshValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: external_exports.literal("signing-authority"),
+  credential: UnsignedVCValidator,
+  signingAuthority: external_exports.object({
+    type: external_exports.string().min(1)
+  }).catchall(external_exports.any())
+});
+var PublishCredentialRefreshInputValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: CredentialRefreshSigningModeValidator,
+  signedCredential: VCValidator.optional(),
+  credential: UnsignedVCValidator.optional(),
+  signingAuthority: external_exports.object({
+    type: external_exports.string().min(1)
+  }).catchall(external_exports.any()).optional()
+}).superRefine((input, ctx) => {
+  if (input.mode === "issuer-signed" && !input.signedCredential) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["signedCredential"],
+      message: "signedCredential is required for issuer-signed publication"
+    });
+  }
+  if (input.mode === "issuer-signed" && (input.credential !== void 0 || input.signingAuthority !== void 0)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["mode"],
+      message: "issuer-signed publication cannot include signing-authority fields"
+    });
+  }
+  if (input.mode === "signing-authority") {
+    if (input.signedCredential !== void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["signedCredential"],
+        message: "signing-authority publication cannot include signedCredential"
+      });
+    }
+    if (!input.credential) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["credential"],
+        message: "credential is required for signing-authority publication"
+      });
+    }
+    if (!input.signingAuthority) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["signingAuthority"],
+        message: "signingAuthority is required for signing-authority publication"
+      });
+    }
+  }
+});
+var PublishCredentialRefreshNotificationValidator = external_exports.enum([
+  "queued",
+  "suppressed",
+  "not-applicable",
+  /** Publication succeeded, but the post-commit notification enqueue must be retried. */
+  "delivery-failed"
+]);
+var PublishCredentialRefreshResultValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  version: external_exports.number().int().positive(),
+  publishedAt: external_exports.string().min(1),
+  notification: PublishCredentialRefreshNotificationValidator
+});
+var CredentialRefreshVersionMetadataValidator = external_exports.object({
+  version: external_exports.number().int().positive(),
+  publishedAt: external_exports.string().min(1),
+  effectiveAt: external_exports.string().optional(),
+  etag: external_exports.string().optional(),
+  signingMode: CredentialRefreshSigningModeValidator.optional(),
+  updateSummary: external_exports.string().optional()
+});
+var GetCredentialRefreshHistoryInputValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  cursor: external_exports.string().optional(),
+  limit: external_exports.number().int().positive().optional()
+});
+var GetCredentialRefreshHistoryResultValidator = external_exports.object({
+  records: CredentialRefreshVersionMetadataValidator.array(),
+  hasMore: external_exports.boolean(),
+  cursor: external_exports.string().optional()
+});
+var CredentialRefreshChallengeValidator = external_exports.object({
+  challenge: external_exports.string().min(1),
+  expiresAt: external_exports.string().min(1),
+  domain: external_exports.string().optional(),
+  scheme: external_exports.literal("LearnCardDIDAuth").optional()
+});
+var PublicCredentialRefreshEnvelopeValidator = external_exports.object({
+  format: external_exports.literal("vc"),
+  credential: VCValidator,
+  etag: external_exports.string().optional()
+});
+var JweCredentialRefreshEnvelopeValidator = external_exports.object({
+  format: external_exports.literal("jwe"),
+  jwe: JWEValidator,
+  etag: external_exports.string().optional(),
+  /** Present on LearnCard-managed endpoints; optional for interoperable JWE services. */
+  version: external_exports.number().int().positive().optional()
+});
+var CredentialRefreshResponseEnvelopeValidator = external_exports.discriminatedUnion("format", [
+  PublicCredentialRefreshEnvelopeValidator,
+  JweCredentialRefreshEnvelopeValidator
+]);
+var CredentialRefreshFailureCodeValidator = external_exports.enum([
+  "UNAVAILABLE",
+  "TIMEOUT",
+  "UNSUPPORTED_SERVICE",
+  "UNAUTHORIZED",
+  "MALFORMED_RESPONSE",
+  "INVALID_PROOF",
+  "ISSUER_MISMATCH",
+  "ID_MISMATCH",
+  "ROLLBACK",
+  "REVOKED",
+  "UNSAFE_ENDPOINT"
+]);
+var CredentialRefreshUpdatedResultValidator = external_exports.object({
+  status: external_exports.literal("updated"),
+  credential: VCValidator,
+  etag: external_exports.string().optional(),
+  managedVersion: external_exports.number().int().positive().optional()
+});
+var CredentialRefreshUnchangedResultValidator = external_exports.object({
+  status: external_exports.literal("unchanged"),
+  checkedAt: external_exports.string().min(1),
+  etag: external_exports.string().optional()
+});
+var CredentialRefreshUnsupportedResultValidator = external_exports.object({
+  status: external_exports.literal("unsupported")
+});
+var CredentialRefreshFailedResultValidator = external_exports.object({
+  status: external_exports.literal("failed"),
+  code: CredentialRefreshFailureCodeValidator,
+  retryable: external_exports.boolean()
+});
+var CredentialRefreshResultValidator = external_exports.discriminatedUnion("status", [
+  CredentialRefreshUpdatedResultValidator,
+  CredentialRefreshUnchangedResultValidator,
+  CredentialRefreshUnsupportedResultValidator,
+  CredentialRefreshFailedResultValidator
+]);
 
 // src/helpers.ts
 var import_json_stringify_deterministic = __toESM(require_lib(), 1);
@@ -23306,30 +23532,63 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
   learnCard.debug?.("Adding LearnCloud Plugin");
   let client = await getLearnCloudClient(url2, learnCard);
   let dids = [learnCard.id.did()];
-  void client.user.getDids.query().then((result) => dids = result).catch((error51) => learnCard.debug?.("Unable to preload LearnCloud DIDs", error51));
-  let otherClients = {};
-  let learnCloudDid;
-  const getLearnCloudDid = /* @__PURE__ */ __name(() => learnCloudDid ?? (learnCloudDid = client.utilities.getDid.query()), "getLearnCloudDid");
-  const getOtherClient = /* @__PURE__ */ __name(async (url3) => {
-    if (!otherClients[url3]) otherClients[url3] = await getLearnCloudClient(url3, learnCard);
-    return otherClients[url3];
+  let didsLoaded = false;
+  const loadDids = /* @__PURE__ */ __name(async (currentClient) => {
+    if (didsLoaded) return;
+    dids = await currentClient.user.getDids.query();
+    didsLoaded = true;
+  }, "loadDids");
+  const otherClients = /* @__PURE__ */ new Map();
+  const learnCloudDids = /* @__PURE__ */ new WeakMap();
+  const getLearnCloudDid = /* @__PURE__ */ __name((currentClient) => {
+    let learnCloudDid = learnCloudDids.get(currentClient);
+    if (!learnCloudDid) {
+      learnCloudDid = currentClient.utilities.getDid.query();
+      learnCloudDids.set(currentClient, learnCloudDid);
+    }
+    return learnCloudDid;
+  }, "getLearnCloudDid");
+  const getOtherClient = /* @__PURE__ */ __name(async (otherUrl, _learnCard) => {
+    const key = `${_learnCard.id.did()}\0${otherUrl}`;
+    let otherClient = otherClients.get(key);
+    if (!otherClient) {
+      otherClient = getLearnCloudClient(otherUrl, _learnCard);
+      otherClients.set(key, otherClient);
+    }
+    try {
+      return await otherClient;
+    } catch (error51) {
+      if (otherClients.get(key) === otherClient) otherClients.delete(key);
+      throw error51;
+    }
   }, "getOtherClient");
-  const updateLearnCard = /* @__PURE__ */ __name(async (_learnCard) => {
-    const oldDid = learnCard.id.did();
-    const newDid = _learnCard.id.did();
-    if (oldDid !== newDid) {
-      if (!dids.includes(newDid) && automaticallyAssociateDids) {
-        const presentation = await _learnCard.invoke.getDidAuthVp();
-        await client.user.addDid.mutate({ presentation });
-        if (newDid.split(":")[1] === "web") {
-          await client.user.setPrimaryDid.mutate({ presentation });
-        }
-        dids = await client.user.getDids.query();
-      }
-      client = await getLearnCloudClient(url2, _learnCard);
-      learnCloudDid = void 0;
-    }
-    learnCard = _learnCard;
+  let updateQueue = Promise.resolve();
+  const updateLearnCard = /* @__PURE__ */ __name((_learnCard) => {
+    const update = updateQueue.then(async () => {
+      const oldDid = learnCard.id.did();
+      const newDid = _learnCard.id.did();
+      if (oldDid !== newDid) {
+        if (automaticallyAssociateDids) {
+          await loadDids(client);
+          if (!dids.includes(newDid)) {
+            const presentation = await _learnCard.invoke.getDidAuthVp();
+            await client.user.addDid.mutate({ presentation });
+            if (newDid.split(":")[1] === "web") {
+              await client.user.setPrimaryDid.mutate({ presentation });
+            }
+            dids = await client.user.getDids.query();
+          }
+        }
+        client = await getLearnCloudClient(url2, _learnCard);
+      }
+      learnCard = _learnCard;
+      return client;
+    });
+    updateQueue = update.then(
+      () => void 0,
+      () => void 0
+    );
+    return update;
   }, "updateLearnCard");
   return {
     name: "LearnCloud",
@@ -23337,25 +23596,33 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
     description: "LearnCloud Integration",
     methods: {
       learnCloudCreate: /* @__PURE__ */ __name(async (_learnCard, document) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         const item = await generateEncryptedRecord(
           _learnCard,
           document,
           unencryptedCustomFields
         );
-        return client.customStorage.create.mutate({
-          item: await generateJWE(_learnCard, await getLearnCloudDid(), item)
+        return currentClient.customStorage.create.mutate({
+          item: await generateJWE(
+            _learnCard,
+            await getLearnCloudDid(currentClient),
+            item
+          )
         });
       }, "learnCloudCreate"),
       learnCloudCreateMany: /* @__PURE__ */ __name(async (_learnCard, documents) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         const items = await Promise.all(
           documents.map(
             async (document) => generateEncryptedRecord(_learnCard, document, unencryptedCustomFields)
           )
         );
-        return client.customStorage.createMany.mutate({
-          items: await generateJWE(_learnCard, await getLearnCloudDid(), items)
+        return currentClient.customStorage.createMany.mutate({
+          items: await generateJWE(
+            _learnCard,
+            await getLearnCloudDid(currentClient),
+            items
+          )
         });
       }, "learnCloudCreateMany"),
       learnCloudRead: /* @__PURE__ */ __name(async (_learnCard, query, includeAssociatedDids) => {
@@ -23378,9 +23645,9 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         return documents;
       }, "learnCloudRead"),
       learnCloudReadPage: /* @__PURE__ */ __name(async (_learnCard, query, paginationOptions, includeAssociatedDids) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         if (!query) {
-          const jwe2 = await client.customStorage.read.query({
+          const jwe2 = await currentClient.customStorage.read.query({
             includeAssociatedDids,
             ...paginationOptions
           });
@@ -23407,8 +23674,8 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
             ([key]) => [...unencryptedCustomFields, "_id"].includes(key)
           )
         );
-        const jwe = await client.customStorage.read.query({
-          query: await generateJWE(_learnCard, await getLearnCloudDid(), {
+        const jwe = await currentClient.customStorage.read.query({
+          query: await generateJWE(_learnCard, await getLearnCloudDid(currentClient), {
             ...unencryptedEntries,
             ...fields.length > 0 ? { fields: { $in: fields } } : {}
           }),
@@ -23430,8 +23697,9 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         };
       }, "learnCloudReadPage"),
       learnCloudCount: /* @__PURE__ */ __name(async (_learnCard, query, includeAssociatedDids) => {
-        await updateLearnCard(_learnCard);
-        if (!query) return client.customStorage.count.query({ includeAssociatedDids });
+        const currentClient = await updateLearnCard(_learnCard);
+        if (!query)
+          return currentClient.customStorage.count.query({ includeAssociatedDids });
         const fields = await generateEncryptedFieldsArray(_learnCard, query, [
           ...unencryptedCustomFields,
           "_id"
@@ -23441,8 +23709,8 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
             ([key]) => [...unencryptedCustomFields, "_id"].includes(key)
           )
         );
-        return client.customStorage.count.query({
-          query: await generateJWE(_learnCard, await getLearnCloudDid(), {
+        return currentClient.customStorage.count.query({
+          query: await generateJWE(_learnCard, await getLearnCloudDid(currentClient), {
             ...unencryptedEntries,
             ...fields.length > 0 ? { fields: { $in: fields } } : {}
           }),
@@ -23450,17 +23718,21 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         });
       }, "learnCloudCount"),
       learnCloudUpdate: /* @__PURE__ */ __name(async (_learnCard, query, update) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         const documents = await _learnCard.invoke.learnCloudRead(query);
         const updates = await Promise.all(
           documents.map(
-            async (document) => client.customStorage.update.mutate({
-              query: await generateJWE(_learnCard, await getLearnCloudDid(), {
-                _id: document._id
-              }),
+            async (document) => currentClient.customStorage.update.mutate({
+              query: await generateJWE(
+                _learnCard,
+                await getLearnCloudDid(currentClient),
+                {
+                  _id: document._id
+                }
+              ),
               update: await generateJWE(
                 _learnCard,
-                await getLearnCloudDid(),
+                await getLearnCloudDid(currentClient),
                 await generateEncryptedRecord(
                   _learnCard,
                   { ...document, ...update },
@@ -23473,8 +23745,9 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         return updates.reduce((sum, current) => current + sum, 0);
       }, "learnCloudUpdate"),
       learnCloudDelete: /* @__PURE__ */ __name(async (_learnCard, query, includeAssociatedDids) => {
-        await updateLearnCard(_learnCard);
-        if (!query) return client.customStorage.delete.mutate({ includeAssociatedDids });
+        const currentClient = await updateLearnCard(_learnCard);
+        if (!query)
+          return currentClient.customStorage.delete.mutate({ includeAssociatedDids });
         const fields = await generateEncryptedFieldsArray(_learnCard, query, [
           ...unencryptedCustomFields,
           "_id"
@@ -23484,8 +23757,8 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
             ([key]) => [...unencryptedCustomFields, "_id"].includes(key)
           )
         );
-        return client.customStorage.delete.mutate({
-          query: await generateJWE(_learnCard, await getLearnCloudDid(), {
+        return currentClient.customStorage.delete.mutate({
+          query: await generateJWE(_learnCard, await getLearnCloudDid(currentClient), {
             ...unencryptedEntries,
             ...fields.length > 0 ? { fields: { $in: fields } } : {}
           }),
@@ -23493,7 +23766,8 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         });
       }, "learnCloudDelete"),
       learnCloudBatchResolve: /* @__PURE__ */ __name(async (_learnCard, uris) => {
-        const results = await client.storage.batchResolve.query({ uris });
+        const currentClient = await updateLearnCard(_learnCard);
+        const results = await currentClient.storage.batchResolve.query({ uris });
         return Promise.all(
           results.map(async (result) => {
             if (!result) return null;
@@ -23512,19 +23786,20 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
     },
     read: {
       get: /* @__PURE__ */ __name(async (_learnCard, uri) => {
-        learnCard.debug?.("LearnCloud read.get", uri);
+        _learnCard.debug?.("LearnCloud read.get", uri);
         if (!uri) return void 0;
+        const currentClient = await updateLearnCard(_learnCard);
         const parts = uri.split(":");
-        learnCard.debug?.("LearnCloud read.get parts:", parts);
+        _learnCard.debug?.("LearnCloud read.get parts:", parts);
         if (parts.length !== 5) return void 0;
         const [lc, method, uriUrl] = parts;
         if (lc !== "lc" || method !== "cloud") {
-          learnCard.debug?.("LearnCloud read.get not cloud URI!", { lc, method });
+          _learnCard.debug?.("LearnCloud read.get not cloud URI!", { lc, method });
           return void 0;
         }
         if (uriUrl.replace(/https?:\/\//g, "") !== url2.replace(/https?:\/\//g, "").replace(/:/g, "%3A")) {
           const fullUrl = (uriUrl.startsWith("http") ? uriUrl : `http${uriUrl.includes("http") || uriUrl.includes("localhost") ? "" : "s"}://${uriUrl}`).replaceAll("%3A", ":");
-          learnCard.debug?.("LearnCloud read.get different LearnCloud!", {
+          _learnCard.debug?.("LearnCloud read.get different LearnCloud!", {
             uriUrl,
             url: url2,
             fullUrl,
@@ -23533,12 +23808,12 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
               b: url2.replace(/https?:\/\//g, "").replace(/:/g, "%3A")
             }
           });
-          const otherClient = await getOtherClient(fullUrl);
+          const otherClient = await getOtherClient(fullUrl, _learnCard);
           try {
             const result = await otherClient.storage.resolve.query({ uri });
-            learnCard.debug?.("LearnCloud read.get result", result);
+            _learnCard.debug?.("LearnCloud read.get result", result);
             const decryptedResult = await _learnCard.invoke.decryptDagJwe(result);
-            learnCard.debug?.("LearnCloud read.get decryptedResult", decryptedResult);
+            _learnCard.debug?.("LearnCloud read.get decryptedResult", decryptedResult);
             const parsed = await VCValidator.or(VPValidator).or(StoredCredentialEnvelopeValidator).parseAsync(decryptedResult);
             return (0, import_helpers.resolveStorageReadResult)(parsed);
           } catch (error51) {
@@ -23547,10 +23822,10 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
           }
         }
         try {
-          const result = await client.storage.resolve.query({ uri });
-          learnCard.debug?.("LearnCloud read.get result", result);
+          const result = await currentClient.storage.resolve.query({ uri });
+          _learnCard.debug?.("LearnCloud read.get result", result);
           const decryptedResult = await _learnCard.invoke.decryptDagJwe(result);
-          learnCard.debug?.("LearnCloud read.get decryptedResult", decryptedResult);
+          _learnCard.debug?.("LearnCloud read.get decryptedResult", decryptedResult);
           const parsed = await VCValidator.or(VPValidator).or(StoredCredentialEnvelopeValidator).parseAsync(decryptedResult);
           return (0, import_helpers.resolveStorageReadResult)(parsed);
         } catch (error51) {
@@ -23562,23 +23837,26 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
     store: {
       upload: /* @__PURE__ */ __name(async (_learnCard, credential) => {
         _learnCard.debug?.("learnCard.store['LearnCard Network'].upload");
-        return client.storage.store.mutate({
+        const currentClient = await updateLearnCard(_learnCard);
+        return currentClient.storage.store.mutate({
           item: normalizeEnvelopeForTransport(credential)
         });
       }, "upload"),
       uploadEncrypted: /* @__PURE__ */ __name(async (_learnCard, credential, { recipients = [] } = { recipients: [] }) => {
         _learnCard.debug?.("learnCard.store['LearnCard Network'].upload");
+        const currentClient = await updateLearnCard(_learnCard);
         const jwe = await _learnCard.invoke.createDagJwe(
           normalizeEnvelopeForTransport(credential),
           [_learnCard.id.did(), ...recipients]
         );
-        return client.storage.store.mutate({ item: jwe });
+        return currentClient.storage.store.mutate({ item: jwe });
       }, "uploadEncrypted"),
       delete: /* @__PURE__ */ __name(async (_learnCard, uri) => {
         _learnCard.debug?.("learnCard.store['LearnCloud'].delete", { uri });
+        const currentClient = await updateLearnCard(_learnCard);
         let deleted = false;
         try {
-          deleted = Boolean(await client.storage.delete.mutate({ uri }));
+          deleted = Boolean(await currentClient.storage.delete.mutate({ uri }));
         } catch (error51) {
           _learnCard.debug?.("LearnCloud store.delete storage.delete failed", error51);
         }
@@ -23611,7 +23889,7 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         return records;
       }, "get"),
       getPage: /* @__PURE__ */ __name(async (_learnCard, query, paginationOptions) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         _learnCard.debug?.("LearnCloud index.getPaginated", query, paginationOptions);
         const options = {
           ...paginationOptions,
@@ -23619,7 +23897,7 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         };
         if (!query) {
           _learnCard.debug?.("LearnCloud index.get (no query)");
-          const jwe2 = await client.index.get.query(options);
+          const jwe2 = await currentClient.index.get.query(options);
           _learnCard.debug?.("LearnCloud index.get (no query response)", jwe2);
           const encryptedRecords2 = (0, import_helpers.isEncrypted)(jwe2) ? await decryptJWE(_learnCard, jwe2) : jwe2;
           _learnCard.debug?.(
@@ -23649,8 +23927,8 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
           "LearnCloud index.get (query unencryptedEntries)",
           unencryptedEntries
         );
-        const jwe = await client.index.get.query({
-          query: await generateJWE(_learnCard, await getLearnCloudDid(), {
+        const jwe = await currentClient.index.get.query({
+          query: await generateJWE(_learnCard, await getLearnCloudDid(currentClient), {
             ...unencryptedEntries,
             ...fields.length > 0 ? { fields: { $in: fields } } : {}
           }),
@@ -23672,10 +23950,10 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         };
       }, "getPage"),
       getCount: /* @__PURE__ */ __name(async (_learnCard, query) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         if (!query) {
           _learnCard.debug?.("LearnCloud index.count (no query)");
-          const jwe2 = await client.index.count.query();
+          const jwe2 = await currentClient.index.count.query();
           _learnCard.debug?.("LearnCloud index.count (no query response)", jwe2);
           const count2 = (0, import_helpers.isEncrypted)(jwe2) ? await decryptJWE(_learnCard, jwe2) : jwe2;
           _learnCard.debug?.("LearnCloud index.count (no query count)", count2);
@@ -23695,8 +23973,8 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
           "LearnCloud index.getCount (query unencryptedEntries)",
           unencryptedEntries
         );
-        const jwe = await client.index.count.query({
-          query: await generateJWE(_learnCard, await getLearnCloudDid(), {
+        const jwe = await currentClient.index.count.query({
+          query: await generateJWE(_learnCard, await getLearnCloudDid(currentClient), {
             ...unencryptedEntries,
             ...fields.length > 0 ? { fields: { $in: fields } } : {}
           })
@@ -23707,10 +23985,10 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         return count;
       }, "getCount"),
       add: /* @__PURE__ */ __name(async (_learnCard, record2) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         const id = record2.id || _learnCard.invoke.crypto().randomUUID();
-        return client.index.add.mutate({
-          record: await generateJWE(_learnCard, await getLearnCloudDid(), {
+        return currentClient.index.add.mutate({
+          record: await generateJWE(_learnCard, await getLearnCloudDid(currentClient), {
             ...await generateEncryptedRecord(
               _learnCard,
               { ...record2, id },
@@ -23721,7 +23999,7 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         });
       }, "add"),
       addMany: /* @__PURE__ */ __name(async (_learnCard, _records) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         const results = await Promise.all(
           (0, import_lodash.chunk)(_records, 25).map(async (batch) => {
             const records = await Promise.all(
@@ -23737,10 +24015,10 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
                 };
               })
             );
-            return client.index.addMany.mutate({
+            return currentClient.index.addMany.mutate({
               records: await generateJWE(
                 _learnCard,
-                await getLearnCloudDid(),
+                await getLearnCloudDid(currentClient),
                 records
               )
             });
@@ -23749,27 +24027,27 @@ var getLearnCloudPlugin = /* @__PURE__ */ __name(async (initialLearnCard, url2,
         return results.every(Boolean);
       }, "addMany"),
       update: /* @__PURE__ */ __name(async (_learnCard, id, updates) => {
-        await updateLearnCard(_learnCard);
+        const currentClient = await updateLearnCard(_learnCard);
         const records = await _learnCard.index.LearnCloud.get({ id });
         if (records.length !== 1) return false;
         const record2 = records[0];
         const newRecord = { ...record2, ...updates };
-        return client.index.update.mutate({
+        return currentClient.index.update.mutate({
           id: await hash2(_learnCard, id),
           updates: await generateJWE(
             _learnCard,
-            await getLearnCloudDid(),
+            await getLearnCloudDid(currentClient),
             await generateEncryptedRecord(_learnCard, newRecord, unencryptedFields)
           )
         });
       }, "update"),
       remove: /* @__PURE__ */ __name(async (_learnCard, id) => {
-        await updateLearnCard(_learnCard);
-        return client.index.remove.mutate({ id: await hash2(_learnCard, id) });
+        const currentClient = await updateLearnCard(_learnCard);
+        return currentClient.index.remove.mutate({ id: await hash2(_learnCard, id) });
       }, "remove"),
       removeAll: /* @__PURE__ */ __name(async (_learnCard) => {
-        await updateLearnCard(_learnCard);
-        return client.index.removeAll.mutate();
+        const currentClient = await updateLearnCard(_learnCard);
+        return currentClient.index.removeAll.mutate();
       }, "removeAll")
     }
   };