@learncard/learn-cloud-service 2.5.33 → 2.5.35

package/.env.example

@@ -21,3 +21,16 @@ SENTRY_ENV=development
 IS_OFFLINE=false
 SKIP_DIDKIT_NAPI=false
 CI=false
+
+# LC-2187 service-only share-content routes start with valid service configuration.
+# All four values are required and REDIS_HOST/REDIS_PORT must point at the real
+# replay store. Real values are provisioned per environment, never committed.
+# LearnCloud's own service DID that service tokens must address.
+SHARE_CONTENT_AUDIENCE=
+# Comma-separated allowlisted Brain service DIDs.
+SHARE_CONTENT_SERVICE_DIDS=
+# Comma-separated exact JWS `kid` verification methods (DID URL with fragment).
+SHARE_CONTENT_VERIFICATION_METHODS=
+# JSON object mapping each service DID to the namespaces it may use, e.g.
+# {"did:web:brain.example":["learncard"]}
+SHARE_CONTENT_NAMESPACE_BINDINGS=

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @learncard/network-brain-service
 
+## 2.5.35
+
+### Patch Changes
+
+- Updated dependencies [[`4b83aa9ee802f0d7a54adc5f053a7376fa103cdd`](https://github.com/learningeconomy/LearnCard/commit/4b83aa9ee802f0d7a54adc5f053a7376fa103cdd), [`b184f5552abf37a11468d435e5cea07fc35e1993`](https://github.com/learningeconomy/LearnCard/commit/b184f5552abf37a11468d435e5cea07fc35e1993), [`0e262737aafb8248e88e05039c83a3f30be6750f`](https://github.com/learningeconomy/LearnCard/commit/0e262737aafb8248e88e05039c83a3f30be6750f), [`d436c39e00994e6d8c77e7b94985a51fe1f42adb`](https://github.com/learningeconomy/LearnCard/commit/d436c39e00994e6d8c77e7b94985a51fe1f42adb)]:
+    - @learncard/types@5.22.0
+    - @learncard/helpers@1.6.1
+    - @learncard/core@9.4.37
+    - @learncard/did-web-plugin@1.1.37
+    - @learncard/didkey-plugin@1.1.37
+    - @learncard/didkit-plugin@1.10.2
+    - @learncard/didkit-plugin-node@0.3.2
+    - @learncard/encryption-plugin@1.1.37
+    - @learncard/learn-card-plugin@1.2.37
+    - @learncard/vc-plugin@1.6.3
+    - @learncard/vc-templates-plugin@1.1.37
+    - @learncard/crypto-plugin@1.1.37
+    - @learncard/expiration-plugin@1.2.37
+
+## 2.5.34
+
+### Patch Changes
+
+- Updated dependencies [[`2991bd32b03e26736239dd8e586e2f720d9bcd45`](https://github.com/learningeconomy/LearnCard/commit/2991bd32b03e26736239dd8e586e2f720d9bcd45), [`0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e`](https://github.com/learningeconomy/LearnCard/commit/0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e), [`3174c09b97fde6f7b5251390245038cf6b7ea9ba`](https://github.com/learningeconomy/LearnCard/commit/3174c09b97fde6f7b5251390245038cf6b7ea9ba), [`928e587378b3674766cf58a8bbe1cbd4d66d3a9f`](https://github.com/learningeconomy/LearnCard/commit/928e587378b3674766cf58a8bbe1cbd4d66d3a9f), [`928e587378b3674766cf58a8bbe1cbd4d66d3a9f`](https://github.com/learningeconomy/LearnCard/commit/928e587378b3674766cf58a8bbe1cbd4d66d3a9f)]:
+    - @learncard/types@5.21.0
+    - @learncard/helpers@1.6.0
+    - @learncard/vc-plugin@1.6.2
+    - @learncard/core@9.4.36
+    - @learncard/did-web-plugin@1.1.36
+    - @learncard/didkey-plugin@1.1.36
+    - @learncard/didkit-plugin@1.10.1
+    - @learncard/didkit-plugin-node@0.3.1
+    - @learncard/encryption-plugin@1.1.36
+    - @learncard/learn-card-plugin@1.2.36
+    - @learncard/vc-templates-plugin@1.1.36
+    - @learncard/crypto-plugin@1.1.36
+    - @learncard/expiration-plugin@1.2.36
+
 ## 2.5.33
 
 ### Patch Changes

package/dist/accesslayer/share-content/delete.d.ts

@@ -0,0 +1,5 @@
+import type { Collection } from 'mongodb';
+import type { MongoShareContentDocument } from '../.././models/index';
+import type { ShareContentRepositoryResult, ShareContentTombstoneSummary } from './types';
+export declare const deleteShareContent: (collection: Collection<MongoShareContentDocument>, rawBinding: unknown) => Promise<ShareContentRepositoryResult<ShareContentTombstoneSummary>>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/accesslayer/share-content/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/share-content/delete.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAUzD,OAAO,KAAK,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAgB1F,eAAO,MAAM,kBAAkB,GAC3B,YAAY,UAAU,CAAC,yBAAyB,CAAC,EACjD,YAAY,OAAO,KACpB,OAAO,CAAC,4BAA4B,CAAC,4BAA4B,CAAC,CA4FpE,CAAC"}

package/dist/accesslayer/share-content/index.d.ts

@@ -0,0 +1,8 @@
+import type { Collection, Db } from 'mongodb';
+import { type MongoShareContentDocument } from '../.././models/index';
+import type { ShareContentRepository } from './types';
+export * from './types';
+export { ensureShareContentIndexes, SHARE_CONTENT_IDENTITY_INDEX } from './initialize';
+export declare const getShareContentCollection: (db: Db) => Collection<MongoShareContentDocument>;
+export declare const createShareContentRepository: (collection: Collection<MongoShareContentDocument>) => ShareContentRepository;
+//# sourceMappingURL=index.d.ts.map

package/dist/accesslayer/share-content/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/share-content/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,EAEH,KAAK,yBAAyB,EAGjC,MAAM,SAAS,CAAC;AAOjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEtD,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAOvF,eAAO,MAAM,yBAAyB,GAAI,IAAI,EAAE,KAAG,UAAU,CAAC,yBAAyB,CACjB,CAAC;AAiBvE,eAAO,MAAM,4BAA4B,GACrC,YAAY,UAAU,CAAC,yBAAyB,CAAC,KAClD,sBAyBF,CAAC"}

package/dist/accesslayer/share-content/initialize.d.ts

@@ -0,0 +1,5 @@
+import type { Collection } from 'mongodb';
+import type { MongoShareContentDocument } from '../.././models/index';
+export declare const SHARE_CONTENT_IDENTITY_INDEX = "share_content_identity_unique";
+export declare const ensureShareContentIndexes: (collection: Collection<MongoShareContentDocument>) => Promise<void>;
+//# sourceMappingURL=initialize.d.ts.map

package/dist/accesslayer/share-content/initialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialize.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/share-content/initialize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAGzD,eAAO,MAAM,4BAA4B,kCAAkC,CAAC;AAW5E,eAAO,MAAM,yBAAyB,GAClC,YAAY,UAAU,CAAC,yBAAyB,CAAC,KAClD,OAAO,CAAC,IAAI,CAKd,CAAC"}

package/dist/accesslayer/share-content/internal.d.ts

@@ -0,0 +1,12 @@
+import type { Filter } from 'mongodb';
+import { type MongoShareContentActive, type MongoShareContentDocument, type MongoShareContentTombstone, type ShareContentObjectBinding } from '../.././models/index';
+import type { ShareContentActiveSummary, ShareContentTombstoneSummary } from './types';
+export declare const MAX_SHARE_CONTENT_ATTEMPTS = 5;
+export declare const parseShareContentBinding: (raw: unknown) => ShareContentObjectBinding | null;
+export declare const shareContentBindingFilter: (binding: ShareContentObjectBinding) => Filter<MongoShareContentDocument>;
+export declare const shareContentIdentityFilter: (binding: Pick<ShareContentObjectBinding, "namespace" | "objectId">) => Filter<MongoShareContentDocument>;
+export declare const bindingMatchesDocument: (doc: MongoShareContentDocument, binding: ShareContentObjectBinding) => boolean;
+export declare const isDuplicateKeyError: (error: unknown) => boolean;
+export declare const toActiveSummary: (doc: MongoShareContentActive) => ShareContentActiveSummary;
+export declare const toTombstoneSummary: (doc: MongoShareContentTombstone) => ShareContentTombstoneSummary;
+//# sourceMappingURL=internal.d.ts.map

package/dist/accesslayer/share-content/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/share-content/internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAEH,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EACjC,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAQvF,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,eAAO,MAAM,wBAAwB,GAAI,KAAK,OAAO,KAAG,yBAAyB,GAAG,IAInF,CAAC;AAGF,eAAO,MAAM,yBAAyB,GAClC,SAAS,yBAAyB,KACnC,MAAM,CAAC,yBAAyB,CAOjC,CAAC;AAGH,eAAO,MAAM,0BAA0B,GACnC,SAAS,IAAI,CAAC,yBAAyB,EAAE,WAAW,GAAG,UAAU,CAAC,KACnE,MAAM,CAAC,yBAAyB,CAGjC,CAAC;AAEH,eAAO,MAAM,sBAAsB,GAC/B,KAAK,yBAAyB,EAC9B,SAAS,yBAAyB,KACnC,OAMwC,CAAC;AAG5C,eAAO,MAAM,mBAAmB,GAAI,OAAO,OAAO,KAAG,OAC0C,CAAC;AAEhG,eAAO,MAAM,eAAe,GAAI,KAAK,uBAAuB,KAAG,yBAa7D,CAAC;AAEH,eAAO,MAAM,kBAAkB,GAC3B,KAAK,0BAA0B,KAChC,4BAUD,CAAC"}

package/dist/accesslayer/share-content/put.d.ts

@@ -0,0 +1,5 @@
+import type { Collection } from 'mongodb';
+import { type MongoShareContentDocument } from '../.././models/index';
+import type { ShareContentPutResult } from './types';
+export declare const putShareContent: (collection: Collection<MongoShareContentDocument>, rawInput: unknown) => Promise<ShareContentPutResult>;
+//# sourceMappingURL=put.d.ts.map

package/dist/accesslayer/share-content/put.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/share-content/put.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,EAMH,KAAK,yBAAyB,EAEjC,MAAM,SAAS,CAAC;AASjB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAqCrD,eAAO,MAAM,eAAe,GACxB,YAAY,UAAU,CAAC,yBAAyB,CAAC,EACjD,UAAU,OAAO,KAClB,OAAO,CAAC,qBAAqB,CAiC/B,CAAC"}

package/dist/accesslayer/share-content/read.d.ts

@@ -0,0 +1,7 @@
+import type { Collection } from 'mongodb';
+import type { MongoShareContentDocument } from '../.././models/index';
+import type { ShareContentContentProjection, ShareContentRecoveryProjection, ShareContentRepositoryResult, ShareContentStatProjection } from './types';
+export declare const getShareContentContent: (collection: Collection<MongoShareContentDocument>, rawBinding: unknown) => Promise<ShareContentRepositoryResult<ShareContentContentProjection>>;
+export declare const getShareContentRecovery: (collection: Collection<MongoShareContentDocument>, rawBinding: unknown) => Promise<ShareContentRepositoryResult<ShareContentRecoveryProjection>>;
+export declare const statShareContent: (collection: Collection<MongoShareContentDocument>, rawBinding: unknown) => Promise<ShareContentRepositoryResult<ShareContentStatProjection>>;
+//# sourceMappingURL=read.d.ts.map

package/dist/accesslayer/share-content/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/share-content/read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAQzD,OAAO,KAAK,EACR,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,0BAA0B,EAC7B,MAAM,SAAS,CAAC;AAQjB,eAAO,MAAM,sBAAsB,GAC/B,YAAY,UAAU,CAAC,yBAAyB,CAAC,EACjD,YAAY,OAAO,KACpB,OAAO,CAAC,4BAA4B,CAAC,6BAA6B,CAAC,CA6BrE,CAAC;AAQF,eAAO,MAAM,uBAAuB,GAChC,YAAY,UAAU,CAAC,yBAAyB,CAAC,EACjD,YAAY,OAAO,KACpB,OAAO,CAAC,4BAA4B,CAAC,8BAA8B,CAAC,CA6BtE,CAAC;AAOF,eAAO,MAAM,gBAAgB,GACzB,YAAY,UAAU,CAAC,yBAAyB,CAAC,EACjD,YAAY,OAAO,KACpB,OAAO,CAAC,4BAA4B,CAAC,0BAA0B,CAAC,CAkBlE,CAAC"}

package/dist/accesslayer/share-content/types.d.ts

@@ -0,0 +1,85 @@
+import type { Collection } from 'mongodb';
+import type { MongoShareContentDocument, ShareContentHash, ShareContentObjectBinding, ShareContentPutInput, ShareEnvelope, ShareOwnerRecovery } from '../.././models/index';
+export type ShareContentRepositoryError = 'INVALID_INPUT' | 'NOT_FOUND' | 'TOMBSTONED' | 'BINDING_MISMATCH' | 'CONFLICT' | 'STORE_ERROR';
+export type ShareContentRepositoryFailure = {
+    ok: false;
+    error: ShareContentRepositoryError;
+};
+export type ShareContentRepositoryResult<T> = {
+    ok: true;
+    value: T;
+} | ShareContentRepositoryFailure;
+export type ShareContentWriteStatus = 'created' | 'idempotent';
+export type ShareContentActiveSummary = {
+    kind: 'active';
+    namespace: string;
+    ownerProfileId: string;
+    shareId: string;
+    contentVersion: number;
+    objectId: string;
+    operationId: string;
+    contentHash: ShareContentHash;
+    payloadHash: ShareContentHash;
+    ciphertextBytes: number;
+    recoveryBytes: number;
+    createdAt: Date;
+};
+export type ShareContentTombstoneSummary = {
+    kind: 'tombstone';
+    namespace: string;
+    ownerProfileId: string;
+    shareId: string;
+    contentVersion: number;
+    objectId: string;
+    operationId: string;
+    contentHash?: ShareContentHash;
+    deletedAt: Date;
+};
+export type ShareContentContentProjection = {
+    kind: 'active';
+    namespace: string;
+    ownerProfileId: string;
+    shareId: string;
+    contentVersion: number;
+    objectId: string;
+    operationId: string;
+    contentHash: ShareContentHash;
+    payloadHash: ShareContentHash;
+    envelope: ShareEnvelope;
+    ciphertextBytes: number;
+    createdAt: Date;
+};
+export type ShareContentRecoveryProjection = {
+    kind: 'active';
+    namespace: string;
+    ownerProfileId: string;
+    shareId: string;
+    contentVersion: number;
+    objectId: string;
+    operationId: string;
+    contentHash: ShareContentHash;
+    payloadHash: ShareContentHash;
+    ownerEncryptedRecovery: ShareOwnerRecovery;
+    recoveryBytes: number;
+    createdAt: Date;
+};
+export type ShareContentStatProjection = ShareContentActiveSummary | ShareContentTombstoneSummary;
+export type ShareContentPutResultValue = {
+    status: ShareContentWriteStatus;
+    record: ShareContentActiveSummary;
+};
+export type ShareContentPutResult = ShareContentRepositoryResult<ShareContentPutResultValue>;
+export type ShareContentRepository = {
+    readonly collection: Collection<MongoShareContentDocument>;
+    initialize: () => Promise<void>;
+    put: (input: ShareContentPutInput) => Promise<ShareContentPutResult>;
+    getContent: (binding: ShareContentObjectBinding) => Promise<ShareContentRepositoryResult<ShareContentContentProjection>>;
+    getRecovery: (binding: ShareContentObjectBinding) => Promise<ShareContentRepositoryResult<ShareContentRecoveryProjection>>;
+    stat: (binding: ShareContentObjectBinding) => Promise<ShareContentRepositoryResult<ShareContentStatProjection>>;
+    delete: (binding: ShareContentObjectBinding) => Promise<ShareContentRepositoryResult<ShareContentTombstoneSummary>>;
+};
+export declare class ShareContentRepositoryNotInitializedError extends Error {
+    readonly code = "SHARE_CONTENT_REPOSITORY_NOT_INITIALIZED";
+    constructor();
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/accesslayer/share-content/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/share-content/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EACR,yBAAyB,EACzB,gBAAgB,EAChB,yBAAyB,EACzB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EACrB,MAAM,SAAS,CAAC;AAOjB,MAAM,MAAM,2BAA2B,GACnC,eAAe,GAAG,WAAW,GAAG,YAAY,GAAG,kBAAkB,GAAG,UAAU,GAAG,aAAa,CAAC;AAEnG,MAAM,MAAM,6BAA6B,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,2BAA2B,CAAA;CAAE,CAAC;AAE9F,MAAM,MAAM,4BAA4B,CAAC,CAAC,IACtC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG,6BAA6B,CAAC;AAG3D,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,YAAY,CAAC;AAG/D,MAAM,MAAM,yBAAyB,GAAG;IACpC,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAGF,MAAM,MAAM,4BAA4B,GAAG;IACvC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAOF,MAAM,MAAM,6BAA6B,GAAG;IACxC,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAOF,MAAM,MAAM,8BAA8B,GAAG;IACzC,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,sBAAsB,EAAE,kBAAkB,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,yBAAyB,GAAG,4BAA4B,CAAC;AAGlG,MAAM,MAAM,0BAA0B,GAAG;IACrC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,yBAAyB,CAAC;CACrC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,4BAA4B,CAAC,0BAA0B,CAAC,CAAC;AAW7F,MAAM,MAAM,sBAAsB,GAAG;IAEjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,yBAAyB,CAAC,CAAC;IAM3D,UAAU,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC,GAAG,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAErE,UAAU,EAAE,CACR,OAAO,EAAE,yBAAyB,KACjC,OAAO,CAAC,4BAA4B,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAE1E,WAAW,EAAE,CACT,OAAO,EAAE,yBAAyB,KACjC,OAAO,CAAC,4BAA4B,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAE3E,IAAI,EAAE,CACF,OAAO,EAAE,yBAAyB,KACjC,OAAO,CAAC,4BAA4B,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAKvE,MAAM,EAAE,CACJ,OAAO,EAAE,yBAAyB,KACjC,OAAO,CAAC,4BAA4B,CAAC,4BAA4B,CAAC,CAAC,CAAC;CAC5E,CAAC;AAGF,qBAAa,yCAA0C,SAAQ,KAAK;IAChE,QAAQ,CAAC,IAAI,8CAA8C;;CAM9D"}

package/dist/config/environment.d.ts

@@ -37,6 +37,10 @@ export declare const learnCloudServiceEnvironmentShape: {
         true: "true";
         false: "false";
     }>, z.ZodTransform<boolean, "0" | "1" | "true" | "false">>>>>;
+    SHARE_CONTENT_AUDIENCE: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    SHARE_CONTENT_SERVICE_DIDS: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    SHARE_CONTENT_VERIFICATION_METHODS: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    SHARE_CONTENT_NAMESPACE_BINDINGS: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
 };
 export declare const learnCloudServiceEnvironmentSchema: z.ZodObject<{
     NODE_ENV: z.ZodDefault<z.ZodEnum<{
@@ -75,6 +79,10 @@ export declare const learnCloudServiceEnvironmentSchema: z.ZodObject<{
         true: "true";
         false: "false";
     }>, z.ZodTransform<boolean, "0" | "1" | "true" | "false">>>>>;
+    SHARE_CONTENT_AUDIENCE: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    SHARE_CONTENT_SERVICE_DIDS: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    SHARE_CONTENT_VERIFICATION_METHODS: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    SHARE_CONTENT_NAMESPACE_BINDINGS: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
 }, z.core.$strip>;
 export type LearnCloudServiceEnvironment = z.output<typeof learnCloudServiceEnvironmentSchema>;
 export declare const parseLearnCloudServiceEnvironment: (raw: Record<string, unknown>, source?: string) => LearnCloudServiceEnvironment;
@@ -96,5 +104,9 @@ export declare const environment: {
     REDIS_PORT?: number | undefined;
     SENTRY_DSN?: string | undefined;
     SENTRY_ENV?: string | undefined;
+    SHARE_CONTENT_AUDIENCE?: string | undefined;
+    SHARE_CONTENT_SERVICE_DIDS?: string | undefined;
+    SHARE_CONTENT_VERIFICATION_METHODS?: string | undefined;
+    SHARE_CONTENT_NAMESPACE_BINDINGS?: string | undefined;
 };
 //# sourceMappingURL=environment.d.ts.map

package/dist/config/environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/config/environment.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkBrB,CAAC;AAE1B,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBzC,CAAC;AAEP,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE/F,eAAO,MAAM,iCAAiC,GAC1C,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAA8B,KAC/B,4BAmBF,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;CAAiD,CAAC"}
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/config/environment.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyBrB,CAAC;AAE1B,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDzC,CAAC;AAEP,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE/F,eAAO,MAAM,iCAAiC,GAC1C,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAA8B,KAC/B,4BAmBF,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;CAAiD,CAAC"}

package/dist/helpers/share-content-auth/adapters.d.ts

@@ -0,0 +1,12 @@
+import type { PresentationVerificationResult, PresentationVerifier, ReplayStore } from './types';
+export type LearnCardLike = {
+    invoke: {
+        verifyPresentation: (token: string, options: {
+            proofFormat: 'jwt';
+        }) => Promise<PresentationVerificationResult>;
+    };
+};
+export declare const createDidkitPresentationVerifier: (getLearnCard: () => Promise<LearnCardLike>) => PresentationVerifier;
+export type SetIfAbsent = (key: string, ttlSeconds: number) => Promise<boolean>;
+export declare const createSetIfAbsentReplayStore: (setIfAbsent: SetIfAbsent) => ReplayStore;
+//# sourceMappingURL=adapters.d.ts.map

package/dist/helpers/share-content-auth/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAWjG,MAAM,MAAM,aAAa,GAAG;IACxB,MAAM,EAAE;QACJ,kBAAkB,EAAE,CAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;YAAE,WAAW,EAAE,KAAK,CAAA;SAAE,KAC9B,OAAO,CAAC,8BAA8B,CAAC,CAAC;KAChD,CAAC;CACL,CAAC;AASF,eAAO,MAAM,gCAAgC,GACzC,cAAc,MAAM,OAAO,CAAC,aAAa,CAAC,KAC3C,oBAMF,CAAC;AAOF,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAGhF,eAAO,MAAM,4BAA4B,GAAI,aAAa,WAAW,KAAG,WAEtE,CAAC"}

package/dist/helpers/share-content-auth/canonical.d.ts

@@ -0,0 +1,15 @@
+import { type ShareContentOperation } from './types';
+export { canonicalizeShareContentRequestBody, DEFAULT_MAX_CANONICAL_BYTES as DEFAULT_MAX_CANONICAL_REQUEST_BYTES, DEFAULT_MAX_CANONICAL_DEPTH, ShareContentCanonicalizationError, } from '@learncard/helpers';
+export declare const isPlainObject: (value: unknown) => value is Record<string, unknown>;
+export declare const isCanonicalBase64Url: (value: unknown, expectedBytes?: number) => value is string;
+export declare const isSafeContentVersion: (value: unknown) => value is number;
+export declare const isSafeEpochSecond: (value: unknown) => value is number;
+export declare const isOpaqueIdentifier: (value: unknown, maxLength?: number) => value is string;
+export declare const isBoundedNonce: (value: unknown, minLength: number, maxLength: number) => value is string;
+export declare const isSha256Hex: (value: unknown) => value is string;
+export declare const isShareContentOperation: (value: unknown) => value is ShareContentOperation;
+export declare const computeShareContentRequestHash: (body: unknown, options?: {
+    maxBytes?: number;
+    maxDepth?: number;
+}) => string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/helpers/share-content-auth/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/canonical.ts"],"names":[],"mappings":"AAGA,OAAO,EAA4B,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAW/E,OAAO,EACH,mCAAmC,EACnC,2BAA2B,IAAI,mCAAmC,EAClE,2BAA2B,EAC3B,iCAAiC,GACpC,MAAM,oBAAoB,CAAC;AAO5B,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAM7E,CAAC;AAGF,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,EAAE,gBAAgB,MAAM,KAAG,KAAK,IAAI,MAUtF,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MACmC,CAAC;AAEnG,eAAO,MAAM,iBAAiB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MACc,CAAC;AAM3E,eAAO,MAAM,kBAAkB,GAAI,OAAO,OAAO,EAAE,kBAAe,KAAG,KAAK,IAAI,MAI1C,CAAC;AAErC,eAAO,MAAM,cAAc,GACvB,OAAO,OAAO,EACd,WAAW,MAAM,EACjB,WAAW,MAAM,KAClB,KAAK,IAAI,MAIU,CAAC;AAEvB,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MACI,CAAC;AAE3D,eAAO,MAAM,uBAAuB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,qBAC8B,CAAC;AAOjG,eAAO,MAAM,8BAA8B,GACvC,MAAM,OAAO,EACb,UAAS;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,KACvD,MAGmB,CAAC"}

package/dist/helpers/share-content-auth/claims.d.ts

@@ -0,0 +1,19 @@
+import { type ShareContentAuthorizationClaims, type ShareContentTrustConfig } from './types';
+export declare const SHARE_ID_BYTES = 16;
+export type SignedClaimsResult = {
+    ok: true;
+    raw: unknown;
+} | {
+    ok: false;
+    reason: 'MALFORMED_CLAIMS';
+};
+export declare const extractSignedClaims: (payload: Record<string, unknown>) => SignedClaimsResult;
+export type ParseClaimsResult = {
+    ok: true;
+    claims: ShareContentAuthorizationClaims;
+} | {
+    ok: false;
+    reason: 'MALFORMED_CLAIMS' | 'UNKNOWN_CLAIM_FIELD' | 'INVALID_CLAIMS' | 'INVALID_SHARE_ID' | 'INVALID_IDENTIFIER' | 'INVALID_JTI' | 'OPERATION_NOT_ALLOWED' | 'PURPOSE_MISMATCH';
+};
+export declare const parseShareContentAuthorizationClaims: (raw: unknown, config: ShareContentTrustConfig) => ParseClaimsResult;
+//# sourceMappingURL=claims.d.ts.map

package/dist/helpers/share-content-auth/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/claims.ts"],"names":[],"mappings":"AAUA,OAAO,EAGH,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,EAC/B,MAAM,SAAS,CAAC;AAGjB,eAAO,MAAM,cAAc,KAAK,CAAC;AAIjC,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAO3E,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,kBAyBtE,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,+BAA+B,CAAA;CAAE,GACrD;IACI,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACA,kBAAkB,GAClB,qBAAqB,GACrB,gBAAgB,GAChB,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,uBAAuB,GACvB,kBAAkB,CAAC;CAC5B,CAAC;AAOR,eAAO,MAAM,oCAAoC,GAC7C,KAAK,OAAO,EACZ,QAAQ,uBAAuB,KAChC,iBAmFF,CAAC"}

package/dist/helpers/share-content-auth/config.d.ts

@@ -0,0 +1,12 @@
+import type { ShareContentTrustConfig } from './types';
+export declare const HARD_MAX_TOKEN_TTL_SECONDS = 60;
+export declare const HARD_MAX_CLOCK_SKEW_SECONDS = 60;
+export declare const HARD_MIN_TOKEN_BYTES = 256;
+export declare const HARD_MAX_TOKEN_BYTES = 65536;
+export declare const DEFAULT_MAX_TOKEN_BYTES = 8192;
+export declare const DEFAULT_MIN_JTI_LENGTH = 16;
+export declare const DEFAULT_MAX_JTI_LENGTH = 128;
+export declare const DISABLED_SHARE_CONTENT_TRUST_CONFIG: ShareContentTrustConfig;
+export declare const resolveShareContentTrustConfig: (raw: unknown) => ShareContentTrustConfig;
+export declare const isShareContentTrustConfigActive: (config: ShareContentTrustConfig) => boolean;
+//# sourceMappingURL=config.d.ts.map

package/dist/helpers/share-content-auth/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAWvD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAC3C,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAC7C,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,eAAO,MAAM,mCAAmC,EAAE,uBAWhD,CAAC;AA2CH,eAAO,MAAM,8BAA8B,GAAI,KAAK,OAAO,KAAG,uBA+E7D,CAAC;AAGF,eAAO,MAAM,+BAA+B,GAAI,QAAQ,uBAAuB,KAAG,OAIlC,CAAC"}

package/dist/helpers/share-content-auth/index.d.ts

@@ -0,0 +1,8 @@
+export * from './types';
+export { SHARE_ID_BYTES, extractSignedClaims, parseShareContentAuthorizationClaims, } from './claims';
+export { DEFAULT_MAX_CANONICAL_DEPTH, DEFAULT_MAX_CANONICAL_REQUEST_BYTES, ShareContentCanonicalizationError, canonicalizeShareContentRequestBody, computeShareContentRequestHash, isBoundedNonce, isCanonicalBase64Url, isOpaqueIdentifier, isPlainObject, isSafeContentVersion, isSafeEpochSecond, isSha256Hex, isShareContentOperation, } from './canonical';
+export { DEFAULT_MAX_JTI_LENGTH, DEFAULT_MAX_TOKEN_BYTES, DEFAULT_MIN_JTI_LENGTH, DISABLED_SHARE_CONTENT_TRUST_CONFIG, HARD_MAX_CLOCK_SKEW_SECONDS, HARD_MAX_TOKEN_BYTES, HARD_MAX_TOKEN_TTL_SECONDS, HARD_MIN_TOKEN_BYTES, isShareContentTrustConfigActive, resolveShareContentTrustConfig, } from './config';
+export { parseCompactJwt, validateShareContentJwtHeader } from './token';
+export { createShareContentAuthorizationVerifier, type CreateShareContentAuthorizationVerifierDependencies, } from './verifier';
+export { createDidkitPresentationVerifier, createSetIfAbsentReplayStore, type LearnCardLike, type SetIfAbsent, } from './adapters';
+//# sourceMappingURL=index.d.ts.map

package/dist/helpers/share-content-auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/index.ts"],"names":[],"mappings":"AAeA,cAAc,SAAS,CAAC;AACxB,OAAO,EACH,cAAc,EACd,mBAAmB,EACnB,oCAAoC,GACvC,MAAM,UAAU,CAAC;AAClB,OAAO,EACH,2BAA2B,EAC3B,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,8BAA8B,EAC9B,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,uBAAuB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACH,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,mCAAmC,EACnC,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,+BAA+B,EAC/B,8BAA8B,GACjC,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,eAAe,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EACH,uCAAuC,EACvC,KAAK,mDAAmD,GAC3D,MAAM,YAAY,CAAC;AACpB,OAAO,EACH,gCAAgC,EAChC,4BAA4B,EAC5B,KAAK,aAAa,EAClB,KAAK,WAAW,GACnB,MAAM,YAAY,CAAC"}

package/dist/helpers/share-content-auth/token.d.ts

@@ -0,0 +1,28 @@
+import type { ShareContentTrustConfig } from './types';
+export type ParsedCompactJwt = {
+    header: Record<string, unknown>;
+    payload: Record<string, unknown>;
+    signingInput: string;
+    signature: string;
+};
+export type ParseCompactJwtResult = {
+    ok: true;
+    parsed: ParsedCompactJwt;
+} | {
+    ok: false;
+    reason: 'TOKEN_TOO_LARGE' | 'MALFORMED_TOKEN';
+};
+export declare const parseCompactJwt: (token: unknown, maxBytes: number) => ParseCompactJwtResult;
+export type ValidatedJwtHeader = {
+    signerDid: string;
+    verificationMethod: string;
+};
+export type ValidateJwtHeaderResult = {
+    ok: true;
+    value: ValidatedJwtHeader;
+} | {
+    ok: false;
+    reason: 'UNSUPPORTED_HEADER' | 'UNSUPPORTED_ALGORITHM' | 'MISSING_KID' | 'UNKNOWN_SIGNER' | 'UNKNOWN_VERIFICATION_METHOD';
+};
+export declare const validateShareContentJwtHeader: (header: Record<string, unknown>, config: ShareContentTrustConfig) => ValidateJwtHeaderResult;
+//# sourceMappingURL=token.d.ts.map

package/dist/helpers/share-content-auth/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/token.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAcvD,MAAM,MAAM,gBAAgB,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEnE,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,EAAE,UAAU,MAAM,KAAG,qBA8ClE,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,SAAS,EAAE,MAAM,CAAC;IAElB,kBAAkB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,GACvC;IACI,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACA,oBAAoB,GACpB,uBAAuB,GACvB,aAAa,GACb,gBAAgB,GAChB,6BAA6B,CAAC;CACvC,CAAC;AAOR,eAAO,MAAM,6BAA6B,GACtC,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,uBAAuB,KAChC,uBA+CF,CAAC"}

package/dist/helpers/share-content-auth/types.d.ts

@@ -0,0 +1,70 @@
+export declare const SHARE_CONTENT_AUTH_PURPOSE: "lc-share-content/v1";
+export declare const SHARE_CONTENT_OPERATIONS: readonly ["put", "get", "stat", "delete", "readRecovery"];
+export type ShareContentOperation = (typeof SHARE_CONTENT_OPERATIONS)[number];
+export declare const SHARE_CONTENT_CLAIM_FIELDS: readonly ["iss", "aud", "purpose", "namespace", "op", "shareId", "contentVersion", "ownerProfileId", "objectId", "operationId", "requestHash", "iat", "exp", "jti"];
+export type ShareContentClaimField = (typeof SHARE_CONTENT_CLAIM_FIELDS)[number];
+export type ShareContentAuthorizationClaims = {
+    iss: string;
+    aud: string;
+    purpose: typeof SHARE_CONTENT_AUTH_PURPOSE;
+    namespace: string;
+    op: ShareContentOperation;
+    shareId: string;
+    contentVersion: number;
+    ownerProfileId: string;
+    objectId: string;
+    operationId: string;
+    requestHash: string;
+    iat: number;
+    exp: number;
+    jti: string;
+};
+export type ShareContentAuthorizationRequest = {
+    namespace: string;
+    op: ShareContentOperation;
+    shareId: string;
+    contentVersion: number;
+    ownerProfileId: string;
+    objectId: string;
+    operationId: string;
+    requestHash: string;
+};
+export type ShareContentAuthorizationContext = {
+    signerDid: string;
+    verificationMethod: string;
+    claims: ShareContentAuthorizationClaims;
+};
+export type PresentationVerificationResult = {
+    checks: string[];
+    warnings: string[];
+    errors: string[];
+};
+export type PresentationVerifier = (token: string) => Promise<PresentationVerificationResult>;
+export type ReplayStore = {
+    consumeOnce: (key: string, ttlSeconds: number) => Promise<boolean>;
+};
+export type ShareContentTrustConfig = {
+    enabled: boolean;
+    audience: string;
+    allowedServiceDids: readonly string[];
+    allowedVerificationMethods: readonly string[];
+    allowedAlgorithms: readonly string[];
+    clockSkewSeconds: number;
+    maxTokenTtlSeconds: number;
+    maxTokenBytes: number;
+    minJtiLength: number;
+    maxJtiLength: number;
+};
+export type ShareContentAuthorizationRejectionReason = 'DISABLED' | 'INVALID_REQUEST' | 'TOKEN_TOO_LARGE' | 'MALFORMED_TOKEN' | 'UNSUPPORTED_HEADER' | 'UNSUPPORTED_ALGORITHM' | 'MISSING_KID' | 'UNKNOWN_SIGNER' | 'UNKNOWN_VERIFICATION_METHOD' | 'SIGNATURE_INVALID' | 'SIGNER_MISMATCH' | 'MALFORMED_CLAIMS' | 'UNKNOWN_CLAIM_FIELD' | 'INVALID_CLAIMS' | 'INVALID_SHARE_ID' | 'INVALID_IDENTIFIER' | 'INVALID_JTI' | 'AUDIENCE_MISMATCH' | 'PURPOSE_MISMATCH' | 'OPERATION_NOT_ALLOWED' | 'INVALID_TTL' | 'TOKEN_EXPIRED' | 'TOKEN_NOT_YET_VALID' | 'REQUEST_BINDING_MISMATCH' | 'REQUEST_HASH_MISMATCH' | 'REPLAY_DETECTED' | 'REPLAY_STORE_UNAVAILABLE';
+export type ShareContentAuthorizationResult = {
+    ok: true;
+    context: ShareContentAuthorizationContext;
+} | {
+    ok: false;
+    reason: ShareContentAuthorizationRejectionReason;
+};
+export type ShareContentAuthorizationVerifier = {
+    config: ShareContentTrustConfig;
+    authorize: (request: ShareContentAuthorizationRequest, token: string) => Promise<ShareContentAuthorizationResult>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/helpers/share-content-auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/types.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,0BAA0B,EAAG,qBAA8B,CAAC;AAQzE,eAAO,MAAM,wBAAwB,2DAA4D,CAAC;AAElG,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG9E,eAAO,MAAM,0BAA0B,qKAe7B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAGjF,MAAM,MAAM,+BAA+B,GAAG;IAE1C,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,0BAA0B,CAAC;IAE3C,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,qBAAqB,CAAC;IAE1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IAEvB,cAAc,EAAE,MAAM,CAAC;IAEvB,QAAQ,EAAE,MAAM,CAAC;IAEjB,WAAW,EAAE,MAAM,CAAC;IAEpB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,EAAE,MAAM,CAAC;CACf,CAAC;AAOF,MAAM,MAAM,gCAAgC,GAAG;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,qBAAqB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAGF,MAAM,MAAM,gCAAgC,GAAG;IAC3C,SAAS,EAAE,MAAM,CAAC;IAElB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,+BAA+B,CAAC;CAC3C,CAAC;AAGF,MAAM,MAAM,8BAA8B,GAAG;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAGF,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAO9F,MAAM,MAAM,WAAW,GAAG;IACtB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE,CAAC;AAgBF,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IAEjB,QAAQ,EAAE,MAAM,CAAC;IAEjB,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAKtC,0BAA0B,EAAE,SAAS,MAAM,EAAE,CAAC;IAE9C,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,kBAAkB,EAAE,MAAM,CAAC;IAE3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACxB,CAAC;AAOF,MAAM,MAAM,wCAAwC,GAC9C,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,oBAAoB,GACpB,uBAAuB,GACvB,aAAa,GACb,gBAAgB,GAChB,6BAA6B,GAC7B,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,gBAAgB,GAChB,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,mBAAmB,GACnB,kBAAkB,GAClB,uBAAuB,GACvB,aAAa,GACb,eAAe,GACf,qBAAqB,GACrB,0BAA0B,GAC1B,uBAAuB,GACvB,iBAAiB,GACjB,0BAA0B,CAAC;AAEjC,MAAM,MAAM,+BAA+B,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,gCAAgC,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,wCAAwC,CAAA;CAAE,CAAC;AAEtE,MAAM,MAAM,iCAAiC,GAAG;IAC5C,MAAM,EAAE,uBAAuB,CAAC;IAChC,SAAS,EAAE,CACP,OAAO,EAAE,gCAAgC,EACzC,KAAK,EAAE,MAAM,KACZ,OAAO,CAAC,+BAA+B,CAAC,CAAC;CACjD,CAAC"}

package/dist/helpers/share-content-auth/verifier.d.ts

@@ -0,0 +1,9 @@
+import { type PresentationVerifier, type ReplayStore, type ShareContentAuthorizationVerifier, type ShareContentTrustConfig } from './types';
+export type CreateShareContentAuthorizationVerifierDependencies = {
+    config: ShareContentTrustConfig;
+    verifyPresentation: PresentationVerifier;
+    replayStore: ReplayStore;
+    now?: () => number;
+};
+export declare const createShareContentAuthorizationVerifier: (dependencies: CreateShareContentAuthorizationVerifierDependencies) => ShareContentAuthorizationVerifier;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/helpers/share-content-auth/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../src/helpers/share-content-auth/verifier.ts"],"names":[],"mappings":"AAiBA,OAAO,EAGH,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAIhB,KAAK,iCAAiC,EACtC,KAAK,uBAAuB,EAC/B,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,mDAAmD,GAAG;IAC9D,MAAM,EAAE,uBAAuB,CAAC;IAEhC,kBAAkB,EAAE,oBAAoB,CAAC;IAEzC,WAAW,EAAE,WAAW,CAAC;IAEzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB,CAAC;AAyDF,eAAO,MAAM,uCAAuC,GAChD,cAAc,mDAAmD,KAClE,iCA2HF,CAAC"}

package/dist/index.js

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/index.js
-size: 53107160 bytes
-sha256: 7d12d0e71d3b66a4b7e42a87d496e893ce4e1004b6326756af30f4d19ec87fd1
+size: 53395239 bytes
+sha256: 8ebe2243c876780364a730330d6e9b013db922136ba371b2bbc02af8d79d579d