@learncard/network-brain-client 2.5.21 → 2.5.24

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @learncard/network-brain-client
 
+## 2.5.24
+
+### Patch Changes
+
+-   Updated dependencies [[`359a64bc190505255cf49b9317a7853b8fc71226`](https://github.com/learningeconomy/LearnCard/commit/359a64bc190505255cf49b9317a7853b8fc71226), [`00976e097128d18c25c8016a75be9580cd3a7050`](https://github.com/learningeconomy/LearnCard/commit/00976e097128d18c25c8016a75be9580cd3a7050), [`bba1f735e107d9cc86880e9f869413bc7072bff8`](https://github.com/learningeconomy/LearnCard/commit/bba1f735e107d9cc86880e9f869413bc7072bff8), [`fce9d2fd32898cfc64c59b88ca644dea3b53d1a5`](https://github.com/learningeconomy/LearnCard/commit/fce9d2fd32898cfc64c59b88ca644dea3b53d1a5), [`a702862957303a3e25c21bdc7f0998b3ee3e64a3`](https://github.com/learningeconomy/LearnCard/commit/a702862957303a3e25c21bdc7f0998b3ee3e64a3)]:
+    -   @learncard/network-brain-service@3.13.2
+
+## 2.5.23
+
+### Patch Changes
+
+-   Updated dependencies [[`e8c886eac8907e127805e760c9622118c80c7bf5`](https://github.com/learningeconomy/LearnCard/commit/e8c886eac8907e127805e760c9622118c80c7bf5), [`c83e3de987c11a6d95deec31c1fdb2401a990db2`](https://github.com/learningeconomy/LearnCard/commit/c83e3de987c11a6d95deec31c1fdb2401a990db2), [`fe4a1a265132271860460b8121e28ec0eacf4cb0`](https://github.com/learningeconomy/LearnCard/commit/fe4a1a265132271860460b8121e28ec0eacf4cb0), [`6a1e0096ab35d0c98a51c6e06aea347f2a3e89c2`](https://github.com/learningeconomy/LearnCard/commit/6a1e0096ab35d0c98a51c6e06aea347f2a3e89c2)]:
+    -   @learncard/network-brain-service@3.13.1
+
+## 2.5.22
+
+### Patch Changes
+
+-   [#1075](https://github.com/learningeconomy/LearnCard/pull/1075) [`50fa611b714ae47fa3d6d56e7751ba59b5b71322`](https://github.com/learningeconomy/LearnCard/commit/50fa611b714ae47fa3d6d56e7751ba59b5b71322) Thanks [@smurflo2](https://github.com/smurflo2)! - Add guardianGatedRoute so backend has access to isChildProfile and hasGuardianApproval
+
+-   Updated dependencies [[`3935a7c28ded7270133496f30562bad54a14f200`](https://github.com/learningeconomy/LearnCard/commit/3935a7c28ded7270133496f30562bad54a14f200), [`01a12c4353c28196a6e49ea6996656717faa246a`](https://github.com/learningeconomy/LearnCard/commit/01a12c4353c28196a6e49ea6996656717faa246a), [`50fa611b714ae47fa3d6d56e7751ba59b5b71322`](https://github.com/learningeconomy/LearnCard/commit/50fa611b714ae47fa3d6d56e7751ba59b5b71322), [`b8f9581422406f78d3738c4c3a6d9f335725b745`](https://github.com/learningeconomy/LearnCard/commit/b8f9581422406f78d3738c4c3a6d9f335725b745), [`34ced8d1c933ca7015dd1d3bd37b6b2ff847de3c`](https://github.com/learningeconomy/LearnCard/commit/34ced8d1c933ca7015dd1d3bd37b6b2ff847de3c)]:
+    -   @learncard/network-brain-service@3.13.0
+
 ## 2.5.21
 
 ### Patch Changes

package/dist/brain-client.cjs.development.js

@@ -106,11 +106,13 @@ var require_helpers_cjs_development = __commonJS({
           AppEventValidator: /* @__PURE__ */ __name2(() => AppEventValidator, "AppEventValidator"),
           AppListingStatusValidator: /* @__PURE__ */ __name2(() => AppListingStatusValidator, "AppListingStatusValidator"),
           AppStoreListingCreateValidator: /* @__PURE__ */ __name2(() => AppStoreListingCreateValidator, "AppStoreListingCreateValidator"),
+          AppStoreListingSubmitterValidator: /* @__PURE__ */ __name2(() => AppStoreListingSubmitterValidator, "AppStoreListingSubmitterValidator"),
           AppStoreListingUpdateValidator: /* @__PURE__ */ __name2(() => AppStoreListingUpdateValidator, "AppStoreListingUpdateValidator"),
           AppStoreListingValidator: /* @__PURE__ */ __name2(() => AppStoreListingValidator, "AppStoreListingValidator"),
           AuthGrantQueryValidator: /* @__PURE__ */ __name2(() => AuthGrantQueryValidator, "AuthGrantQueryValidator"),
           AuthGrantStatusValidator: /* @__PURE__ */ __name2(() => AuthGrantStatusValidator, "AuthGrantStatusValidator"),
           AuthGrantValidator: /* @__PURE__ */ __name2(() => AuthGrantValidator, "AuthGrantValidator"),
+          AuthSessionError: /* @__PURE__ */ __name2(() => AuthSessionError, "AuthSessionError"),
           AutoBoostConfigValidator: /* @__PURE__ */ __name2(() => AutoBoostConfigValidator, "AutoBoostConfigValidator"),
           BoostPermissionsQueryValidator: /* @__PURE__ */ __name2(() => BoostPermissionsQueryValidator, "BoostPermissionsQueryValidator"),
           BoostPermissionsValidator: /* @__PURE__ */ __name2(() => BoostPermissionsValidator, "BoostPermissionsValidator"),
@@ -118,6 +120,8 @@ var require_helpers_cjs_development = __commonJS({
           BoostRecipientValidator: /* @__PURE__ */ __name2(() => BoostRecipientValidator, "BoostRecipientValidator"),
           BoostRecipientWithChildrenValidator: /* @__PURE__ */ __name2(() => BoostRecipientWithChildrenValidator, "BoostRecipientWithChildrenValidator"),
           BoostValidator: /* @__PURE__ */ __name2(() => BoostValidator, "BoostValidator"),
+          CheckCredentialEventValidator: /* @__PURE__ */ __name2(() => CheckCredentialEventValidator, "CheckCredentialEventValidator"),
+          CheckIssuanceStatusEventValidator: /* @__PURE__ */ __name2(() => CheckIssuanceStatusEventValidator, "CheckIssuanceStatusEventValidator"),
           ClaimHookQueryValidator: /* @__PURE__ */ __name2(() => ClaimHookQueryValidator, "ClaimHookQueryValidator"),
           ClaimHookTypeValidator: /* @__PURE__ */ __name2(() => ClaimHookTypeValidator, "ClaimHookTypeValidator"),
           ClaimHookValidator: /* @__PURE__ */ __name2(() => ClaimHookValidator, "ClaimHookValidator"),
@@ -127,6 +131,10 @@ var require_helpers_cjs_development = __commonJS({
           ConsentFlowContractDataValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractDataValidator, "ConsentFlowContractDataValidator"),
           ConsentFlowContractDetailsValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractDetailsValidator, "ConsentFlowContractDetailsValidator"),
           ConsentFlowContractQueryValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractQueryValidator, "ConsentFlowContractQueryValidator"),
+          ConsentFlowContractRequestForProfileListValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractRequestForProfileListValidator, "ConsentFlowContractRequestForProfileListValidator"),
+          ConsentFlowContractRequestForProfileValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractRequestForProfileValidator, "ConsentFlowContractRequestForProfileValidator"),
+          ConsentFlowContractRequestReadStatusValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractRequestReadStatusValidator, "ConsentFlowContractRequestReadStatusValidator"),
+          ConsentFlowContractRequestStatusValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractRequestStatusValidator, "ConsentFlowContractRequestStatusValidator"),
           ConsentFlowContractValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractValidator, "ConsentFlowContractValidator"),
           ConsentFlowDataForDidQueryValidator: /* @__PURE__ */ __name2(() => ConsentFlowDataForDidQueryValidator, "ConsentFlowDataForDidQueryValidator"),
           ConsentFlowDataQueryValidator: /* @__PURE__ */ __name2(() => ConsentFlowDataQueryValidator, "ConsentFlowDataQueryValidator"),
@@ -159,6 +167,7 @@ var require_helpers_cjs_development = __commonJS({
           CredentialActivityValidator: /* @__PURE__ */ __name2(() => CredentialActivityValidator, "CredentialActivityValidator"),
           CredentialActivityWithDetailsValidator: /* @__PURE__ */ __name2(() => CredentialActivityWithDetailsValidator, "CredentialActivityWithDetailsValidator"),
           CredentialInfoValidator: /* @__PURE__ */ __name2(() => CredentialInfoValidator, "CredentialInfoValidator"),
+          CredentialNameRefValidator: /* @__PURE__ */ __name2(() => CredentialNameRefValidator, "CredentialNameRefValidator"),
           CredentialRecordValidator: /* @__PURE__ */ __name2(() => CredentialRecordValidator, "CredentialRecordValidator"),
           CredentialSchemaValidator: /* @__PURE__ */ __name2(() => CredentialSchemaValidator, "CredentialSchemaValidator"),
           CredentialStatusValidator: /* @__PURE__ */ __name2(() => CredentialStatusValidator, "CredentialStatusValidator"),
@@ -180,6 +189,7 @@ var require_helpers_cjs_development = __commonJS({
           GetFullSkillTreeResultValidator: /* @__PURE__ */ __name2(() => GetFullSkillTreeResultValidator, "GetFullSkillTreeResultValidator"),
           GetSkillPathInputValidator: /* @__PURE__ */ __name2(() => GetSkillPathInputValidator, "GetSkillPathInputValidator"),
           GetSkillPathResultValidator: /* @__PURE__ */ __name2(() => GetSkillPathResultValidator, "GetSkillPathResultValidator"),
+          GetTemplateRecipientsEventValidator: /* @__PURE__ */ __name2(() => GetTemplateRecipientsEventValidator, "GetTemplateRecipientsEventValidator"),
           IdentifierEntryValidator: /* @__PURE__ */ __name2(() => IdentifierEntryValidator, "IdentifierEntryValidator"),
           IdentifierTypeValidator: /* @__PURE__ */ __name2(() => IdentifierTypeValidator, "IdentifierTypeValidator"),
           IdentityObjectValidator: /* @__PURE__ */ __name2(() => IdentityObjectValidator, "IdentityObjectValidator"),
@@ -14889,6 +14899,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           autoBoosts: external_exports.string().array().optional(),
           writers: external_exports.array(LCNProfileValidator).optional()
         });
+        var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied"]).nullable();
+        var ConsentFlowContractRequestReadStatusValidator = external_exports.enum(["unseen", "seen"]).nullable();
+        var ConsentFlowContractRequestForProfileValidator = external_exports.object({
+          profile: LCNProfileValidator,
+          status: ConsentFlowContractRequestStatusValidator,
+          readStatus: ConsentFlowContractRequestReadStatusValidator.optional()
+        });
+        var ConsentFlowContractRequestForProfileListValidator = external_exports.array(
+          ConsentFlowContractRequestForProfileValidator
+        );
         var PaginatedConsentFlowContractsValidator = PaginationResponseValidator.extend({
           records: ConsentFlowContractDetailsValidator.omit({ owner: true }).array()
         });
@@ -15049,7 +15069,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           "PROFILE_PARENT_APPROVED",
           "APP_LISTING_SUBMITTED",
           "APP_LISTING_APPROVED",
-          "APP_LISTING_REJECTED"
+          "APP_LISTING_REJECTED",
+          "APP_LISTING_WITHDRAWN",
+          "DEVICE_LINK_REQUEST"
         ]);
         var LCNNotificationMessageValidator = external_exports.object({
           title: external_exports.string().optional(),
@@ -15188,6 +15210,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           webhookUrl: external_exports.string().optional(),
           boostUri: external_exports.string().optional(),
           activityId: external_exports.string().optional(),
+          integrationId: external_exports.string().optional(),
           signingAuthority: external_exports.object({
             endpoint: external_exports.string().optional(),
             name: external_exports.string().optional()
@@ -15289,8 +15312,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           claimUrl: external_exports.string().url().optional(),
           recipientDid: external_exports.string().optional()
         });
+        var CredentialNameRefValidator = external_exports.object({ name: external_exports.string() }).passthrough();
         var ClaimInboxCredentialValidator = external_exports.object({
-          credential: VCValidator.or(VPValidator).or(UnsignedVCValidator).describe("The credential to issue."),
+          credential: VCValidator.or(VPValidator).or(UnsignedVCValidator).or(CredentialNameRefValidator).describe("The credential to issue, or a { name } reference to resolve a boost template."),
           configuration: external_exports.object({
             publishableKey: external_exports.string(),
             signingAuthorityName: external_exports.string().optional(),
@@ -15574,6 +15598,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           "DEMOTED"
         ]);
         var AgeRatingValidator = external_exports.enum(["4+", "9+", "12+", "17+"]);
+        var AppStoreListingSubmitterValidator = external_exports.object({
+          profileId: external_exports.string(),
+          displayName: external_exports.string(),
+          email: external_exports.string().optional()
+        });
         var AppStoreListingValidator = external_exports.object({
           listing_id: external_exports.string(),
           slug: external_exports.string().optional(),
@@ -15595,7 +15624,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           screenshots: external_exports.array(external_exports.string()).optional(),
           hero_background_color: external_exports.string().optional(),
           min_age: external_exports.number().int().min(0).max(18).optional(),
-          age_rating: AgeRatingValidator.optional()
+          age_rating: AgeRatingValidator.optional(),
+          submitted_at: external_exports.string().optional(),
+          submitter: AppStoreListingSubmitterValidator.optional(),
+          contact_email: external_exports.string().email().optional()
         });
         var AppStoreListingCreateValidator = AppStoreListingValidator.omit({
           listing_id: true,
@@ -15623,9 +15655,39 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         var SendCredentialEventValidator = external_exports.object({
           type: external_exports.literal("send-credential"),
           templateAlias: external_exports.string(),
-          templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+          templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+          preventDuplicateClaim: external_exports.boolean().optional()
+        });
+        var CheckCredentialEventValidator = external_exports.object({
+          type: external_exports.literal("check-credential"),
+          templateAlias: external_exports.string().optional(),
+          boostUri: external_exports.string().optional()
+        }).refine((input) => Boolean(input.templateAlias) !== Boolean(input.boostUri), {
+          message: "Exactly one of templateAlias or boostUri is required"
+        });
+        var CheckIssuanceStatusEventValidator = external_exports.object({
+          type: external_exports.literal("check-issuance-status"),
+          templateAlias: external_exports.string().optional(),
+          boostUri: external_exports.string().optional(),
+          recipient: external_exports.string()
+        }).refine((input) => Boolean(input.templateAlias) !== Boolean(input.boostUri), {
+          message: "Exactly one of templateAlias or boostUri is required"
         });
-        var AppEventValidator = external_exports.discriminatedUnion("type", [SendCredentialEventValidator]);
+        var GetTemplateRecipientsEventValidator = external_exports.object({
+          type: external_exports.literal("get-template-recipients"),
+          templateAlias: external_exports.string().optional(),
+          boostUri: external_exports.string().optional(),
+          limit: external_exports.number().optional(),
+          cursor: external_exports.string().optional()
+        }).refine((input) => Boolean(input.templateAlias) !== Boolean(input.boostUri), {
+          message: "Exactly one of templateAlias or boostUri is required"
+        });
+        var AppEventValidator = external_exports.discriminatedUnion("type", [
+          SendCredentialEventValidator,
+          CheckCredentialEventValidator,
+          CheckIssuanceStatusEventValidator,
+          GetTemplateRecipientsEventValidator
+        ]);
         var AppEventInputValidator = external_exports.object({
           listingId: external_exports.string(),
           event: AppEventValidator
@@ -15688,6 +15750,22 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           failed: external_exports.number(),
           claimRate: external_exports.number()
         });
+        var AuthSessionError = class extends Error {
+          static {
+            __name(this, "AuthSessionError");
+          }
+          static {
+            __name2(this, "AuthSessionError");
+          }
+          constructor(message, reason) {
+            super(message);
+            this.reason = reason;
+            this.name = "AuthSessionError";
+          }
+          static {
+            __name22(this, "AuthSessionError");
+          }
+        };
       }
     });
     var require_dist2 = __commonJS2({
@@ -15702,13 +15780,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     });
     var index_exports2 = {};
     __export2(index_exports2, {
+      AGE_RATING_TO_MIN_AGE: /* @__PURE__ */ __name(() => AGE_RATING_TO_MIN_AGE, "AGE_RATING_TO_MIN_AGE"),
       DEFAULT_RESOLUTIONS: /* @__PURE__ */ __name(() => DEFAULT_RESOLUTIONS, "DEFAULT_RESOLUTIONS"),
       ImageResizingValidator: /* @__PURE__ */ __name(() => ImageResizingValidator, "ImageResizingValidator"),
       ImageUploadingValidator: /* @__PURE__ */ __name(() => ImageUploadingValidator, "ImageUploadingValidator"),
       ImageWithLoadingStateValdator: /* @__PURE__ */ __name(() => ImageWithLoadingStateValdator, "ImageWithLoadingStateValdator"),
       RegExpTransformer: /* @__PURE__ */ __name(() => RegExpTransformer2, "RegExpTransformer"),
+      calculateAgeFromDob: /* @__PURE__ */ __name(() => calculateAgeFromDob, "calculateAgeFromDob"),
       capitalizeFirstLetter: /* @__PURE__ */ __name(() => capitalizeFirstLetter, "capitalizeFirstLetter"),
       changeQuality: /* @__PURE__ */ __name(() => changeQuality4, "changeQuality"),
+      checkAppInstallEligibility: /* @__PURE__ */ __name(() => checkAppInstallEligibility, "checkAppInstallEligibility"),
       curriedArraySlice: /* @__PURE__ */ __name(() => curriedArraySlice, "curriedArraySlice"),
       curriedInnerImmerOuterImmer: /* @__PURE__ */ __name(() => curriedInnerImmerOuterImmer, "curriedInnerImmerOuterImmer"),
       curriedInnerImmerOuterReact: /* @__PURE__ */ __name(() => curriedInnerImmerOuterReact, "curriedInnerImmerOuterReact"),
@@ -16544,6 +16625,88 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     });
     var isNotUndefined = /* @__PURE__ */ __name2((value) => Boolean(value), "isNotUndefined");
     var filterUndefined = /* @__PURE__ */ __name2((arr) => arr.filter(isNotUndefined), "filterUndefined");
+    var checkAppInstallEligibility = /* @__PURE__ */ __name2((input) => {
+      const {
+        isChildProfile,
+        userAge,
+        minAge,
+        ageRating,
+        hasContract,
+        hasGuardianApproval = false
+      } = input;
+      const ageRatingMinAge = getAgeRatingMinAge(ageRating);
+      const isHardBlocked = userAge !== null && minAge !== void 0 && minAge > 0 && userAge < minAge;
+      if (isHardBlocked) {
+        return {
+          action: "hard_blocked",
+          reason: `User does not meet the minimum age requirement of ${minAge}`
+        };
+      }
+      if (isChildProfile) {
+        const noAgeRating = ageRatingMinAge === 0;
+        const childAgeUnknown = userAge === null;
+        const childTooYoung = userAge !== null && userAge < ageRatingMinAge;
+        if (childAgeUnknown) {
+          if (hasGuardianApproval) {
+            return { action: "proceed" };
+          }
+          return {
+            action: "require_dob",
+            reason: "Child profile age is unknown and must be verified by guardian"
+          };
+        }
+        if (noAgeRating) {
+          if (hasGuardianApproval) {
+            return { action: "proceed" };
+          }
+          return {
+            action: "require_guardian_approval",
+            reason: "App has no age rating; guardian approval required for child profiles"
+          };
+        }
+        if (childTooYoung) {
+          if (hasGuardianApproval) {
+            return { action: "proceed" };
+          }
+          return {
+            action: "require_guardian_approval",
+            reason: `Child is under the age rating of ${ageRatingMinAge}+; guardian approval required`
+          };
+        }
+        if (hasContract) {
+          if (hasGuardianApproval) {
+            return { action: "proceed" };
+          }
+          return {
+            action: "require_guardian_approval",
+            reason: "App requires consent to a contract; guardian approval required for child profiles"
+          };
+        }
+      }
+      return { action: "proceed" };
+    }, "checkAppInstallEligibility");
+    var AGE_RATING_TO_MIN_AGE = {
+      "4+": 4,
+      "9+": 9,
+      "12+": 12,
+      "17+": 17
+    };
+    var getAgeRatingMinAge = /* @__PURE__ */ __name2((ageRating) => {
+      if (!ageRating) return 0;
+      return AGE_RATING_TO_MIN_AGE[ageRating] ?? 0;
+    }, "getAgeRatingMinAge");
+    var calculateAgeFromDob = /* @__PURE__ */ __name2((dob) => {
+      if (!dob) return null;
+      const birthDate = new Date(dob);
+      if (isNaN(birthDate.getTime())) return null;
+      const today = /* @__PURE__ */ new Date();
+      let age = today.getFullYear() - birthDate.getFullYear();
+      const monthDiff = today.getMonth() - birthDate.getMonth();
+      if (monthDiff < 0 || monthDiff === 0 && today.getDate() < birthDate.getDate()) {
+        age--;
+      }
+      return age;
+    }, "calculateAgeFromDob");
     var isHex = /* @__PURE__ */ __name2((str) => /^[0-9a-f]+$/i.test(str), "isHex");
     var isEncrypted = /* @__PURE__ */ __name2((item) => {
       return import_types.JWEValidator.safeParse(item).success;
@@ -16654,7 +16817,7 @@ var callbackLink = /* @__PURE__ */ __name((callback) => {
 }, "callbackLink");
 
 // src/index.ts
-var getClient = /* @__PURE__ */ __name(async (url, didAuthFunction) => {
+var getClient = /* @__PURE__ */ __name(async (url, didAuthFunction, guardianApprovalGetter) => {
   let challenges = [];
   const challengeRequester = (0, import_client.createTRPCClient)({
     links: [
@@ -16685,7 +16848,11 @@ var getClient = /* @__PURE__ */ __name(async (url, didAuthFunction) => {
         url,
         headers: /* @__PURE__ */ __name(async () => {
           if (challenges.length === 0) challenges.push(...await getChallenges());
-          return { Authorization: `Bearer ${await didAuthFunction(challenges.pop())}` };
+          const guardianApproval = guardianApprovalGetter ? await guardianApprovalGetter() : void 0;
+          return {
+            Authorization: `Bearer ${await didAuthFunction(challenges.pop())}`,
+            ...guardianApproval ? { "x-guardian-approval": guardianApproval } : {}
+          };
         }, "headers"),
         transformer: {
           input: import_helpers.RegExpTransformer,
@@ -16696,14 +16863,20 @@ var getClient = /* @__PURE__ */ __name(async (url, didAuthFunction) => {
   });
   return trpc;
 }, "getClient");
-var getApiTokenClient = /* @__PURE__ */ __name(async (url, apiToken) => {
+var getApiTokenClient = /* @__PURE__ */ __name(async (url, apiToken, guardianApprovalGetter) => {
   const trpc = (0, import_client.createTRPCClient)({
     links: [
       (0, import_client.httpBatchLink)({
         methodOverride: "POST",
         url,
         maxURLLength: 3072,
-        headers: { Authorization: `Bearer ${apiToken}` },
+        headers: /* @__PURE__ */ __name(async () => {
+          const guardianApproval = guardianApprovalGetter ? await guardianApprovalGetter() : void 0;
+          return {
+            Authorization: `Bearer ${apiToken}`,
+            ...guardianApproval ? { "x-guardian-approval": guardianApproval } : {}
+          };
+        }, "headers"),
         transformer: {
           input: import_helpers.RegExpTransformer,
           output: { serialize: /* @__PURE__ */ __name((o) => o, "serialize"), deserialize: /* @__PURE__ */ __name((o) => o, "deserialize") }