@learncard/network-brain-client 2.5.57 → 2.5.58

package/dist/brain-client.esm.js

@@ -15961,6 +15961,8 @@ var require_types_cjs_development = __commonJS({
       AchievementSubjectValidator: /* @__PURE__ */ __name2(() => AchievementSubjectValidator, "AchievementSubjectValidator"),
       AchievementTypeValidator: /* @__PURE__ */ __name2(() => AchievementTypeValidator, "AchievementTypeValidator"),
       AchievementValidator: /* @__PURE__ */ __name2(() => AchievementValidator, "AchievementValidator"),
+      AcknowledgeViewInputValidator: /* @__PURE__ */ __name2(() => AcknowledgeViewInputValidator, "AcknowledgeViewInputValidator"),
+      AcknowledgeViewOutputValidator: /* @__PURE__ */ __name2(() => AcknowledgeViewOutputValidator, "AcknowledgeViewOutputValidator"),
       AddTagInputValidator: /* @__PURE__ */ __name2(() => AddTagInputValidator, "AddTagInputValidator"),
       AddressValidator: /* @__PURE__ */ __name2(() => AddressValidator, "AddressValidator"),
       AgeRatingValidator: /* @__PURE__ */ __name2(() => AgeRatingValidator, "AgeRatingValidator"),
@@ -16038,6 +16040,7 @@ var require_types_cjs_development = __commonJS({
       CreateContactMethodSessionValidator: /* @__PURE__ */ __name2(() => CreateContactMethodSessionValidator, "CreateContactMethodSessionValidator"),
       CreateManagedFrameworkBatchInputValidator: /* @__PURE__ */ __name2(() => CreateManagedFrameworkBatchInputValidator, "CreateManagedFrameworkBatchInputValidator"),
       CreateManagedFrameworkInputValidator: /* @__PURE__ */ __name2(() => CreateManagedFrameworkInputValidator, "CreateManagedFrameworkInputValidator"),
+      CreateShareLinkInputValidator: /* @__PURE__ */ __name2(() => CreateShareLinkInputValidator, "CreateShareLinkInputValidator"),
       CreateSkillInputValidator: /* @__PURE__ */ __name2(() => CreateSkillInputValidator, "CreateSkillInputValidator"),
       CreateSkillsBatchInputValidator: /* @__PURE__ */ __name2(() => CreateSkillsBatchInputValidator, "CreateSkillsBatchInputValidator"),
       CredentialActivityEventTypeValidator: /* @__PURE__ */ __name2(() => CredentialActivityEventTypeValidator, "CredentialActivityEventTypeValidator"),
@@ -16069,10 +16072,14 @@ var require_types_cjs_development = __commonJS({
       DeleteSkillInputValidator: /* @__PURE__ */ __name2(() => DeleteSkillInputValidator, "DeleteSkillInputValidator"),
       DidDocumentValidator: /* @__PURE__ */ __name2(() => DidDocumentValidator, "DidDocumentValidator"),
       EMPTY_IN_APP_MESSAGES_FLAG: /* @__PURE__ */ __name2(() => EMPTY_IN_APP_MESSAGES_FLAG, "EMPTY_IN_APP_MESSAGES_FLAG"),
+      ESCROW_PIN_LOCKED_MESSAGE: /* @__PURE__ */ __name2(() => ESCROW_PIN_LOCKED_MESSAGE, "ESCROW_PIN_LOCKED_MESSAGE"),
+      ESCROW_PIN_MISMATCH_PATTERN: /* @__PURE__ */ __name2(() => ESCROW_PIN_MISMATCH_PATTERN, "ESCROW_PIN_MISMATCH_PATTERN"),
+      ESCROW_PIN_UNAVAILABLE_MESSAGE: /* @__PURE__ */ __name2(() => ESCROW_PIN_UNAVAILABLE_MESSAGE, "ESCROW_PIN_UNAVAILABLE_MESSAGE"),
       EncryptedCredentialRecordValidator: /* @__PURE__ */ __name2(() => EncryptedCredentialRecordValidator, "EncryptedCredentialRecordValidator"),
       EncryptedRecordValidator: /* @__PURE__ */ __name2(() => EncryptedRecordValidator, "EncryptedRecordValidator"),
       EndorsementCredentialValidator: /* @__PURE__ */ __name2(() => EndorsementCredentialValidator, "EndorsementCredentialValidator"),
       EndorsementSubjectValidator: /* @__PURE__ */ __name2(() => EndorsementSubjectValidator, "EndorsementSubjectValidator"),
+      EscrowPinStatusValidator: /* @__PURE__ */ __name2(() => EscrowPinStatusValidator, "EscrowPinStatusValidator"),
       EvidenceValidator: /* @__PURE__ */ __name2(() => EvidenceValidator, "EvidenceValidator"),
       FlatAuthGrantValidator: /* @__PURE__ */ __name2(() => FlatAuthGrantValidator, "FlatAuthGrantValidator"),
       FrameworkWithSkillsValidator: /* @__PURE__ */ __name2(() => FrameworkWithSkillsValidator, "FrameworkWithSkillsValidator"),
@@ -16154,6 +16161,14 @@ var require_types_cjs_development = __commonJS({
       LaunchTypeValidator: /* @__PURE__ */ __name2(() => LaunchTypeValidator, "LaunchTypeValidator"),
       LearnCardRefreshAuthorizationValidator: /* @__PURE__ */ __name2(() => LearnCardRefreshAuthorizationValidator, "LearnCardRefreshAuthorizationValidator"),
       LinkProviderFrameworkInputValidator: /* @__PURE__ */ __name2(() => LinkProviderFrameworkInputValidator, "LinkProviderFrameworkInputValidator"),
+      ListShareLinksInputValidator: /* @__PURE__ */ __name2(() => ListShareLinksInputValidator, "ListShareLinksInputValidator"),
+      MAX_ENDORSEMENTS: /* @__PURE__ */ __name2(() => MAX_ENDORSEMENTS, "MAX_ENDORSEMENTS"),
+      MAX_SELECTED_CREDENTIALS: /* @__PURE__ */ __name2(() => MAX_SELECTED_CREDENTIALS, "MAX_SELECTED_CREDENTIALS"),
+      MAX_SHARE_CIPHERTEXT_BYTES: /* @__PURE__ */ __name2(() => MAX_SHARE_CIPHERTEXT_BYTES, "MAX_SHARE_CIPHERTEXT_BYTES"),
+      MAX_SHARE_LINK_REQUEST_BYTES: /* @__PURE__ */ __name2(() => MAX_SHARE_LINK_REQUEST_BYTES, "MAX_SHARE_LINK_REQUEST_BYTES"),
+      MAX_SHARE_RECOVERY_JWE_BYTES: /* @__PURE__ */ __name2(() => MAX_SHARE_RECOVERY_JWE_BYTES, "MAX_SHARE_RECOVERY_JWE_BYTES"),
+      MAX_SHARE_SOURCE_URI_CHARS: /* @__PURE__ */ __name2(() => MAX_SHARE_SOURCE_URI_CHARS, "MAX_SHARE_SOURCE_URI_CHARS"),
+      MAX_VP_MEMBERS: /* @__PURE__ */ __name2(() => MAX_VP_MEMBERS, "MAX_VP_MEMBERS"),
       ManagedCredentialRefreshReceiptValidator: /* @__PURE__ */ __name2(() => ManagedCredentialRefreshReceiptValidator, "ManagedCredentialRefreshReceiptValidator"),
       ManagedCredentialRefreshServiceValidator: /* @__PURE__ */ __name2(() => ManagedCredentialRefreshServiceValidator2, "ManagedCredentialRefreshServiceValidator"),
       PaginatedAppStoreListingsValidator: /* @__PURE__ */ __name2(() => PaginatedAppStoreListingsValidator, "PaginatedAppStoreListingsValidator"),
@@ -16176,6 +16191,7 @@ var require_types_cjs_development = __commonJS({
       PaginatedLCNProfileManagersValidator: /* @__PURE__ */ __name2(() => PaginatedLCNProfileManagersValidator, "PaginatedLCNProfileManagersValidator"),
       PaginatedLCNProfilesAndManagersValidator: /* @__PURE__ */ __name2(() => PaginatedLCNProfilesAndManagersValidator, "PaginatedLCNProfilesAndManagersValidator"),
       PaginatedLCNProfilesValidator: /* @__PURE__ */ __name2(() => PaginatedLCNProfilesValidator, "PaginatedLCNProfilesValidator"),
+      PaginatedShareLinksValidator: /* @__PURE__ */ __name2(() => PaginatedShareLinksValidator, "PaginatedShareLinksValidator"),
       PaginatedSkillFrameworksValidator: /* @__PURE__ */ __name2(() => PaginatedSkillFrameworksValidator, "PaginatedSkillFrameworksValidator"),
       PaginatedSkillTreeValidator: /* @__PURE__ */ __name2(() => PaginatedSkillTreeValidator, "PaginatedSkillTreeValidator"),
       PaginatedVisibleLCNProfilesValidator: /* @__PURE__ */ __name2(() => PaginatedVisibleLCNProfilesValidator, "PaginatedVisibleLCNProfilesValidator"),
@@ -16200,11 +16216,20 @@ var require_types_cjs_development = __commonJS({
       ReplaceSkillFrameworkSkillsInputValidator: /* @__PURE__ */ __name2(() => ReplaceSkillFrameworkSkillsInputValidator, "ReplaceSkillFrameworkSkillsInputValidator"),
       ReplaceSkillFrameworkSkillsResultValidator: /* @__PURE__ */ __name2(() => ReplaceSkillFrameworkSkillsResultValidator, "ReplaceSkillFrameworkSkillsResultValidator"),
       RequestLearnerContextEventValidator: /* @__PURE__ */ __name2(() => RequestLearnerContextEventValidator, "RequestLearnerContextEventValidator"),
+      ResolveShareLinkInputValidator: /* @__PURE__ */ __name2(() => ResolveShareLinkInputValidator, "ResolveShareLinkInputValidator"),
       ResultDescriptionValidator: /* @__PURE__ */ __name2(() => ResultDescriptionValidator, "ResultDescriptionValidator"),
       ResultStatusTypeValidator: /* @__PURE__ */ __name2(() => ResultStatusTypeValidator, "ResultStatusTypeValidator"),
       ResultTypeValidator: /* @__PURE__ */ __name2(() => ResultTypeValidator, "ResultTypeValidator"),
       ResultValidator: /* @__PURE__ */ __name2(() => ResultValidator, "ResultValidator"),
       RubricCriterionValidator: /* @__PURE__ */ __name2(() => RubricCriterionValidator, "RubricCriterionValidator"),
+      SHARE_AAD_PREFIX: /* @__PURE__ */ __name2(() => SHARE_AAD_PREFIX, "SHARE_AAD_PREFIX"),
+      SHARE_CONTENT_KEY_BYTES: /* @__PURE__ */ __name2(() => SHARE_CONTENT_KEY_BYTES, "SHARE_CONTENT_KEY_BYTES"),
+      SHARE_IV_BYTES: /* @__PURE__ */ __name2(() => SHARE_IV_BYTES, "SHARE_IV_BYTES"),
+      SHARE_LINK_ID_BYTES: /* @__PURE__ */ __name2(() => SHARE_LINK_ID_BYTES, "SHARE_LINK_ID_BYTES"),
+      SHARE_LINK_PROTOCOL: /* @__PURE__ */ __name2(() => SHARE_LINK_PROTOCOL, "SHARE_LINK_PROTOCOL"),
+      SHARE_RECOVERY_PROTOCOL: /* @__PURE__ */ __name2(() => SHARE_RECOVERY_PROTOCOL, "SHARE_RECOVERY_PROTOCOL"),
+      SHARE_TAG_BYTES: /* @__PURE__ */ __name2(() => SHARE_TAG_BYTES, "SHARE_TAG_BYTES"),
+      SHARE_VIEW_RECEIPT_TTL_SECONDS: /* @__PURE__ */ __name2(() => SHARE_VIEW_RECEIPT_TTL_SECONDS, "SHARE_VIEW_RECEIPT_TTL_SECONDS"),
       SendAiSessionCredentialEventValidator: /* @__PURE__ */ __name2(() => SendAiSessionCredentialEventValidator, "SendAiSessionCredentialEventValidator"),
       SendBoostInputValidator: /* @__PURE__ */ __name2(() => SendBoostInputValidator, "SendBoostInputValidator"),
       SendBoostResponseValidator: /* @__PURE__ */ __name2(() => SendBoostResponseValidator, "SendBoostResponseValidator"),
@@ -16219,6 +16244,32 @@ var require_types_cjs_development = __commonJS({
       SentCredentialInfoValidator: /* @__PURE__ */ __name2(() => SentCredentialInfoValidator, "SentCredentialInfoValidator"),
       ServiceValidator: /* @__PURE__ */ __name2(() => ServiceValidator, "ServiceValidator"),
       SetPrimaryContactMethodValidator: /* @__PURE__ */ __name2(() => SetPrimaryContactMethodValidator, "SetPrimaryContactMethodValidator"),
+      ShareCiphertextValidator: /* @__PURE__ */ __name2(() => ShareCiphertextValidator, "ShareCiphertextValidator"),
+      ShareContentKeyValidator: /* @__PURE__ */ __name2(() => ShareContentKeyValidator, "ShareContentKeyValidator"),
+      ShareContentStateValidator: /* @__PURE__ */ __name2(() => ShareContentStateValidator, "ShareContentStateValidator"),
+      ShareEndorsementEntryValidator: /* @__PURE__ */ __name2(() => ShareEndorsementEntryValidator, "ShareEndorsementEntryValidator"),
+      ShareEnvelopeValidator: /* @__PURE__ */ __name2(() => ShareEnvelopeValidator, "ShareEnvelopeValidator"),
+      ShareIvValidator: /* @__PURE__ */ __name2(() => ShareIvValidator, "ShareIvValidator"),
+      ShareLinkIdInputValidator: /* @__PURE__ */ __name2(() => ShareLinkIdInputValidator, "ShareLinkIdInputValidator"),
+      ShareLinkIdValidator: /* @__PURE__ */ __name2(() => ShareLinkIdValidator, "ShareLinkIdValidator"),
+      ShareLinkOperationKeyInputValidator: /* @__PURE__ */ __name2(() => ShareLinkOperationKeyInputValidator, "ShareLinkOperationKeyInputValidator"),
+      ShareLinkOwnerCommitOutputValidator: /* @__PURE__ */ __name2(() => ShareLinkOwnerCommitOutputValidator, "ShareLinkOwnerCommitOutputValidator"),
+      ShareLinkOwnerContentOutputValidator: /* @__PURE__ */ __name2(() => ShareLinkOwnerContentOutputValidator, "ShareLinkOwnerContentOutputValidator"),
+      ShareLinkOwnerRecoveryOutputValidator: /* @__PURE__ */ __name2(() => ShareLinkOwnerRecoveryOutputValidator, "ShareLinkOwnerRecoveryOutputValidator"),
+      ShareLinkOwnerStatusOutputValidator: /* @__PURE__ */ __name2(() => ShareLinkOwnerStatusOutputValidator, "ShareLinkOwnerStatusOutputValidator"),
+      ShareLinkPublicContentViewValidator: /* @__PURE__ */ __name2(() => ShareLinkPublicContentViewValidator, "ShareLinkPublicContentViewValidator"),
+      ShareLinkPublicStateValidator: /* @__PURE__ */ __name2(() => ShareLinkPublicStateValidator, "ShareLinkPublicStateValidator"),
+      ShareLinkStatusValidator: /* @__PURE__ */ __name2(() => ShareLinkStatusValidator, "ShareLinkStatusValidator"),
+      ShareLinkValidator: /* @__PURE__ */ __name2(() => ShareLinkValidator, "ShareLinkValidator"),
+      ShareManifestPresentationValidator: /* @__PURE__ */ __name2(() => ShareManifestPresentationValidator, "ShareManifestPresentationValidator"),
+      ShareOwnerRecoveryValidator: /* @__PURE__ */ __name2(() => ShareOwnerRecoveryValidator, "ShareOwnerRecoveryValidator"),
+      SharePayloadValidator: /* @__PURE__ */ __name2(() => SharePayloadValidator, "SharePayloadValidator"),
+      SharePayloadValidatorShape: /* @__PURE__ */ __name2(() => SharePayloadValidatorShape, "SharePayloadValidatorShape"),
+      ShareRecoveryEndorsementValidator: /* @__PURE__ */ __name2(() => ShareRecoveryEndorsementValidator, "ShareRecoveryEndorsementValidator"),
+      ShareRecoveryPlaintextValidator: /* @__PURE__ */ __name2(() => ShareRecoveryPlaintextValidator, "ShareRecoveryPlaintextValidator"),
+      ShareRecoverySelectionValidator: /* @__PURE__ */ __name2(() => ShareRecoverySelectionValidator, "ShareRecoverySelectionValidator"),
+      ShareSelectionEntryValidator: /* @__PURE__ */ __name2(() => ShareSelectionEntryValidator, "ShareSelectionEntryValidator"),
+      ShareSharerValidator: /* @__PURE__ */ __name2(() => ShareSharerValidator, "ShareSharerValidator"),
       SkillDeletionStrategyValidator: /* @__PURE__ */ __name2(() => SkillDeletionStrategyValidator, "SkillDeletionStrategyValidator"),
       SkillFrameworkAdminInputValidator: /* @__PURE__ */ __name2(() => SkillFrameworkAdminInputValidator, "SkillFrameworkAdminInputValidator"),
       SkillFrameworkAdminsValidator: /* @__PURE__ */ __name2(() => SkillFrameworkAdminsValidator, "SkillFrameworkAdminsValidator"),
@@ -16250,6 +16301,7 @@ var require_types_cjs_development = __commonJS({
       UnsignedVCValidator: /* @__PURE__ */ __name2(() => UnsignedVCValidator, "UnsignedVCValidator"),
       UnsignedVPValidator: /* @__PURE__ */ __name2(() => UnsignedVPValidator, "UnsignedVPValidator"),
       UpdateFrameworkInputValidator: /* @__PURE__ */ __name2(() => UpdateFrameworkInputValidator, "UpdateFrameworkInputValidator"),
+      UpdateShareLinkInputValidator: /* @__PURE__ */ __name2(() => UpdateShareLinkInputValidator, "UpdateShareLinkInputValidator"),
       UpdateSkillInputValidator: /* @__PURE__ */ __name2(() => UpdateSkillInputValidator, "UpdateSkillInputValidator"),
       VC2EvidenceValidator: /* @__PURE__ */ __name2(() => VC2EvidenceValidator, "VC2EvidenceValidator"),
       VCValidator: /* @__PURE__ */ __name2(() => VCValidator, "VCValidator"),
@@ -16261,7 +16313,12 @@ var require_types_cjs_development = __commonJS({
       VerificationStatusValidator: /* @__PURE__ */ __name2(() => VerificationStatusValidator, "VerificationStatusValidator"),
       appStoreActionValidator: /* @__PURE__ */ __name2(() => appStoreActionValidator, "appStoreActionValidator"),
       capgoUpdateActionValidator: /* @__PURE__ */ __name2(() => capgoUpdateActionValidator, "capgoUpdateActionValidator"),
+      classifyShareManifest: /* @__PURE__ */ __name2(() => classifyShareManifest, "classifyShareManifest"),
+      decodeBase64Url: /* @__PURE__ */ __name2(() => decodeBase64Url, "decodeBase64Url"),
+      decodedBase64UrlByteLength: /* @__PURE__ */ __name2(() => decodedBase64UrlByteLength, "decodedBase64UrlByteLength"),
       dismissActionValidator: /* @__PURE__ */ __name2(() => dismissActionValidator, "dismissActionValidator"),
+      encodeBase64Url: /* @__PURE__ */ __name2(() => encodeBase64Url, "encodeBase64Url"),
+      escrowPinMismatchMessage: /* @__PURE__ */ __name2(() => escrowPinMismatchMessage, "escrowPinMismatchMessage"),
       externalLinkActionValidator: /* @__PURE__ */ __name2(() => externalLinkActionValidator, "externalLinkActionValidator"),
       inAppMessageActionStyleValidator: /* @__PURE__ */ __name2(() => inAppMessageActionStyleValidator, "inAppMessageActionStyleValidator"),
       inAppMessageActionTargetValidator: /* @__PURE__ */ __name2(() => inAppMessageActionTargetValidator, "inAppMessageActionTargetValidator"),
@@ -16276,10 +16333,12 @@ var require_types_cjs_development = __commonJS({
       inAppMessageVersionSourceValidator: /* @__PURE__ */ __name2(() => inAppMessageVersionSourceValidator, "inAppMessageVersionSourceValidator"),
       inAppMessagesFlagValidator: /* @__PURE__ */ __name2(() => inAppMessagesFlagValidator, "inAppMessagesFlagValidator"),
       internalLinkActionValidator: /* @__PURE__ */ __name2(() => internalLinkActionValidator, "internalLinkActionValidator"),
+      isCanonicalBase64Url: /* @__PURE__ */ __name2(() => isCanonicalBase64Url, "isCanonicalBase64Url"),
       isStoredCredentialEnvelope: /* @__PURE__ */ __name2(() => isStoredCredentialEnvelope2, "isStoredCredentialEnvelope"),
       parseInAppMessagesFlag: /* @__PURE__ */ __name2(() => parseInAppMessagesFlag, "parseInAppMessagesFlag"),
       platformPredicateValidator: /* @__PURE__ */ __name2(() => platformPredicateValidator, "platformPredicateValidator"),
       rolePredicateValidator: /* @__PURE__ */ __name2(() => rolePredicateValidator, "rolePredicateValidator"),
+      utf8ByteLength: /* @__PURE__ */ __name2(() => utf8ByteLength, "utf8ByteLength"),
       versionPredicateValidator: /* @__PURE__ */ __name2(() => versionPredicateValidator, "versionPredicateValidator")
     });
     module.exports = __toCommonJS(index_exports);
@@ -34371,6 +34430,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         __name22(this, "AuthSessionError");
       }
     };
+    var ESCROW_PIN_LOCKED_MESSAGE = "Too many incorrect PIN attempts. You can still recover by waiting.";
+    var ESCROW_PIN_UNAVAILABLE_MESSAGE = "PIN recovery is not available for this account.";
+    var ESCROW_PIN_MISMATCH_PATTERN = /^Incorrect PIN\. (\d+) attempts left\.$/;
+    var escrowPinMismatchMessage = /* @__PURE__ */ __name22((attemptsRemaining) => `Incorrect PIN. ${attemptsRemaining} attempts left.`, "escrowPinMismatchMessage");
+    var EscrowPinStatusValidator = external_exports2.object({
+      state: external_exports2.enum(["none", "enabled", "locked", "stale"]),
+      enabled: external_exports2.boolean(),
+      attemptsRemaining: external_exports2.number().int().nonnegative(),
+      salt: external_exports2.string().optional()
+    });
     var BITSTRING_STATUS_PURPOSES = ["revocation", "suspension"];
     var DEFAULT_BITSTRING_STATUS_LIST_SIZE = 131072;
     var BitstringStatusPurposeValidator = external_exports2.enum(BITSTRING_STATUS_PURPOSES);
@@ -34485,6 +34554,458 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       const result = inAppMessagesFlagValidator.safeParse(raw);
       return result.success ? result.data : EMPTY_IN_APP_MESSAGES_FLAG;
     }, "parseInAppMessagesFlag");
+    var SHARE_LINK_ID_BYTES = 16;
+    var SHARE_CONTENT_KEY_BYTES = 32;
+    var SHARE_IV_BYTES = 12;
+    var SHARE_TAG_BYTES = 16;
+    var MAX_SHARE_CIPHERTEXT_BYTES = 512 * 1024;
+    var MAX_SHARE_RECOVERY_JWE_BYTES = 64 * 1024;
+    var MAX_SELECTED_CREDENTIALS = 50;
+    var MAX_ENDORSEMENTS = 200;
+    var MAX_VP_MEMBERS = MAX_SELECTED_CREDENTIALS + MAX_ENDORSEMENTS;
+    var MAX_SHARE_SOURCE_URI_CHARS = 2048;
+    var MAX_SHARE_LINK_REQUEST_BYTES = 1024 * 1024;
+    var SHARE_LINK_PROTOCOL = "lc-share/v1";
+    var SHARE_RECOVERY_PROTOCOL = "lc-share-recovery/v1";
+    var SHARE_AAD_PREFIX = "lc-share:v1";
+    var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+    var BASE64URL_LOOKUP = (() => {
+      const table = new Int16Array(128).fill(-1);
+      for (let index = 0; index < BASE64URL_ALPHABET.length; index += 1) {
+        table[BASE64URL_ALPHABET.charCodeAt(index)] = index;
+      }
+      return table;
+    })();
+    var encodeBase64Url = /* @__PURE__ */ __name22((bytes) => {
+      let output = "";
+      for (let index = 0; index < bytes.length; index += 3) {
+        const first = bytes[index];
+        const second = bytes[index + 1];
+        const third = bytes[index + 2];
+        output += BASE64URL_ALPHABET[first >> 2];
+        output += BASE64URL_ALPHABET[(first & 3) << 4 | (second ?? 0) >> 4];
+        if (second === void 0) break;
+        output += BASE64URL_ALPHABET[(second & 15) << 2 | (third ?? 0) >> 6];
+        if (third === void 0) break;
+        output += BASE64URL_ALPHABET[third & 63];
+      }
+      return output;
+    }, "encodeBase64Url");
+    var decodeBase64Url = /* @__PURE__ */ __name22((value) => {
+      if (typeof value !== "string") return null;
+      const output = new Uint8Array(Math.floor(value.length * 6 / 8));
+      let bits = 0;
+      let bitCount = 0;
+      let outputIndex = 0;
+      for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        const digit = code < 128 ? BASE64URL_LOOKUP[code] : -1;
+        if (digit < 0) return null;
+        bits = bits << 6 | digit;
+        bitCount += 6;
+        if (bitCount >= 8) {
+          bitCount -= 8;
+          output[outputIndex] = bits >> bitCount & 255;
+          outputIndex += 1;
+        }
+      }
+      return output;
+    }, "decodeBase64Url");
+    var isCanonicalBase64Url = /* @__PURE__ */ __name22((value, expectedBytes) => {
+      if (typeof value !== "string") return false;
+      if (expectedBytes !== void 0 && value.length !== Math.ceil(expectedBytes * 4 / 3))
+        return false;
+      const decoded = decodeBase64Url(value);
+      if (decoded === null) return false;
+      if (expectedBytes !== void 0 && decoded.length !== expectedBytes) return false;
+      return encodeBase64Url(decoded) === value;
+    }, "isCanonicalBase64Url");
+    var decodedBase64UrlByteLength = /* @__PURE__ */ __name22((value) => decodeBase64Url(value)?.length ?? null, "decodedBase64UrlByteLength");
+    var utf8ByteLength = /* @__PURE__ */ __name22((value) => new TextEncoder().encode(value).length, "utf8ByteLength");
+    var canonicalBase64Url = /* @__PURE__ */ __name22((bytes) => external_exports2.string().refine((value) => isCanonicalBase64Url(value, bytes), {
+      message: `must be canonical base64url for exactly ${bytes} bytes`
+    }), "canonicalBase64Url");
+    var ShareLinkIdValidator = canonicalBase64Url(SHARE_LINK_ID_BYTES);
+    var ShareContentKeyValidator = canonicalBase64Url(SHARE_CONTENT_KEY_BYTES);
+    var ShareIvValidator = canonicalBase64Url(SHARE_IV_BYTES);
+    var ShareCiphertextValidator = external_exports2.string().refine(
+      (value) => {
+        if (value.length > Math.ceil(MAX_SHARE_CIPHERTEXT_BYTES * 4 / 3)) return false;
+        const decoded = decodeBase64Url(value);
+        if (decoded === null) return false;
+        if (encodeBase64Url(decoded) !== value) return false;
+        return decoded.length >= SHARE_TAG_BYTES && decoded.length <= MAX_SHARE_CIPHERTEXT_BYTES;
+      },
+      {
+        message: `must be canonical base64url decoding to ${SHARE_TAG_BYTES}..${MAX_SHARE_CIPHERTEXT_BYTES} bytes`
+      }
+    );
+    var ShareEnvelopeValidator = external_exports2.object({
+      v: external_exports2.literal(1),
+      alg: external_exports2.literal("A256GCM"),
+      iv: ShareIvValidator,
+      ct: ShareCiphertextValidator
+    }).strict();
+    var safeVersion = external_exports2.number().int().min(1).max(2 ** 31 - 1);
+    var safeCredentialIndex = external_exports2.number().int().min(0).max(MAX_VP_MEMBERS - 1);
+    var ShareSelectionEntryValidator = external_exports2.object({ credentialIndex: safeCredentialIndex }).strict();
+    var ShareEndorsementEntryValidator = external_exports2.object({ credentialIndex: safeCredentialIndex, targetCredentialIndex: safeCredentialIndex }).strict();
+    var ShareSharerValidator = external_exports2.object({
+      profileId: external_exports2.string().min(1).max(128),
+      displayName: external_exports2.string().min(1).max(120),
+      avatar: external_exports2.string().max(2048).optional()
+    }).strict();
+    var presentationShape = VPValidator.extend({
+      verifiableCredential: VCValidator.array().min(1).max(MAX_VP_MEMBERS)
+    });
+    var hasBoundedPresentation = /* @__PURE__ */ __name22((value) => {
+      let credentialCount = 0;
+      const ancestors = /* @__PURE__ */ new Set();
+      const visit = /* @__PURE__ */ __name22((node, depth) => {
+        if (node === null || typeof node !== "object") return true;
+        if (depth > 32 || ancestors.has(node)) return false;
+        ancestors.add(node);
+        try {
+          for (const [key, child] of Object.entries(node)) {
+            if (key === "verifiableCredential") {
+              credentialCount += Array.isArray(child) ? child.length : 1;
+              if (credentialCount > MAX_VP_MEMBERS) return false;
+            }
+            if (!visit(child, depth + 1)) return false;
+          }
+          return true;
+        } finally {
+          ancestors.delete(node);
+        }
+      }, "visit");
+      return visit(value, 0);
+    }, "hasBoundedPresentation");
+    var ShareManifestPresentationValidator = external_exports2.custom(
+      (value) => hasBoundedPresentation(value) && presentationShape.safeParse(value).success,
+      { message: "invalid share presentation" }
+    );
+    var SharePayloadValidatorShape = external_exports2.object({
+      protocol: external_exports2.literal(SHARE_LINK_PROTOCOL),
+      shareId: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      createdAt: external_exports2.iso.datetime(),
+      sharer: ShareSharerValidator,
+      presentation: ShareManifestPresentationValidator,
+      selection: ShareSelectionEntryValidator.array().min(1).max(MAX_SELECTED_CREDENTIALS),
+      endorsements: ShareEndorsementEntryValidator.array().max(MAX_ENDORSEMENTS).default([])
+    }).strict();
+    var classificationFailure = /* @__PURE__ */ __name22((code, message, path = []) => ({ ok: false, code, message, path }), "classificationFailure");
+    var readSignedClaimId = /* @__PURE__ */ __name22((member) => {
+      if (member === null || typeof member !== "object") return void 0;
+      const record22 = member;
+      const claim = record22.credentialSubject ?? record22.endorsement;
+      if (claim === null || typeof claim !== "object") return void 0;
+      const claimRecord = claim;
+      const nested = claimRecord.endorsement;
+      const nestedId = nested !== null && typeof nested === "object" ? nested.id : void 0;
+      return claimRecord.id ?? nestedId;
+    }, "readSignedClaimId");
+    var classifyShareManifest = /* @__PURE__ */ __name22((payload) => {
+      const members = payload.presentation?.verifiableCredential;
+      if (!Array.isArray(members) || members.length === 0) {
+        return classificationFailure("NO_PRESENTATION_MEMBERS", "presentation has no credentials");
+      }
+      if (members.length > MAX_VP_MEMBERS) {
+        return classificationFailure(
+          "TOO_MANY_VP_MEMBERS",
+          `presentation has ${members.length} members, over the ${MAX_VP_MEMBERS} bound`
+        );
+      }
+      const selection = payload.selection;
+      const endorsements = payload.endorsements ?? [];
+      if (!Array.isArray(selection) || selection.length < 1 || selection.length > MAX_SELECTED_CREDENTIALS) {
+        return classificationFailure("BAD_SELECTION", "selection must contain 1..50 entries");
+      }
+      if (!Array.isArray(endorsements) || endorsements.length > MAX_ENDORSEMENTS) {
+        return classificationFailure(
+          "BAD_ENDORSEMENTS",
+          "endorsements must contain at most 200 entries"
+        );
+      }
+      const selectedIndices = [];
+      const selected = /* @__PURE__ */ new Set();
+      for (let index = 0; index < selection.length; index += 1) {
+        const entry = selection[index];
+        const credentialIndex = entry?.credentialIndex;
+        if (!Number.isSafeInteger(credentialIndex) || credentialIndex < 0 || credentialIndex >= members.length) {
+          return classificationFailure(
+            "SELECTION_INDEX_OUT_OF_BOUNDS",
+            `selection[${index}].credentialIndex is out of bounds`,
+            ["selection", index, "credentialIndex"]
+          );
+        }
+        if (selected.has(credentialIndex)) {
+          return classificationFailure(
+            "SELECTION_INDEX_DUPLICATE",
+            `selection[${index}].credentialIndex is duplicated`,
+            ["selection", index, "credentialIndex"]
+          );
+        }
+        selected.add(credentialIndex);
+        selectedIndices.push(credentialIndex);
+      }
+      const classified = new Set(selected);
+      const endorsementIndices = [];
+      for (let index = 0; index < endorsements.length; index += 1) {
+        const entry = endorsements[index];
+        const credentialIndex = entry?.credentialIndex;
+        const targetIndex = entry?.targetCredentialIndex;
+        if (!Number.isSafeInteger(credentialIndex) || credentialIndex < 0 || credentialIndex >= members.length) {
+          return classificationFailure(
+            "ENDORSEMENT_INDEX_OUT_OF_BOUNDS",
+            `endorsements[${index}].credentialIndex is out of bounds`,
+            ["endorsements", index, "credentialIndex"]
+          );
+        }
+        if (classified.has(credentialIndex)) {
+          return classificationFailure(
+            "VP_MEMBER_CLASSIFIED_TWICE",
+            `endorsements[${index}].credentialIndex was already classified`,
+            ["endorsements", index, "credentialIndex"]
+          );
+        }
+        if (!selected.has(targetIndex)) {
+          return classificationFailure(
+            "ENDORSEMENT_TARGET_NOT_SELECTED",
+            `endorsements[${index}].targetCredentialIndex must reference a selected credential`,
+            ["endorsements", index, "targetCredentialIndex"]
+          );
+        }
+        const referenced = readSignedClaimId(members[credentialIndex]);
+        const target = members[targetIndex];
+        const targetId = target !== null && typeof target === "object" ? target.id : void 0;
+        if (typeof referenced !== "string" || typeof targetId !== "string" || referenced !== targetId) {
+          return classificationFailure(
+            "ENDORSEMENT_TARGET_UNBOUND",
+            `endorsements[${index}] claim does not reference the target credential id`,
+            ["endorsements", index]
+          );
+        }
+        classified.add(credentialIndex);
+        endorsementIndices.push(credentialIndex);
+      }
+      if (classified.size !== members.length) {
+        return classificationFailure(
+          "UNCLASSIFIED_VP_MEMBER",
+          "every presentation member must be classified exactly once",
+          ["presentation", "verifiableCredential"]
+        );
+      }
+      return {
+        ok: true,
+        classification: { selectedIndices, endorsementIndices, memberCount: members.length }
+      };
+    }, "classifyShareManifest");
+    var SharePayloadValidator = SharePayloadValidatorShape.superRefine((payload, ctx) => {
+      const result = classifyShareManifest(payload);
+      if (!result.ok) {
+        ctx.addIssue({
+          code: "custom",
+          message: result.message,
+          path: result.path,
+          params: { shareLinkCode: result.code }
+        });
+      }
+    });
+    var ShareRecoverySelectionValidator = external_exports2.object({
+      ref: external_exports2.string().min(1).max(MAX_SHARE_SOURCE_URI_CHARS),
+      order: external_exports2.number().int().min(0).max(MAX_SELECTED_CREDENTIALS - 1)
+    }).strict();
+    var ShareRecoveryEndorsementValidator = external_exports2.object({ targetRef: external_exports2.string().min(1).max(MAX_SHARE_SOURCE_URI_CHARS) }).strict();
+    var ShareRecoveryPlaintextValidator = external_exports2.object({
+      protocol: external_exports2.literal(SHARE_RECOVERY_PROTOCOL),
+      shareId: ShareLinkIdValidator,
+      ownerProfileId: external_exports2.string().min(1).max(128),
+      createdAt: external_exports2.iso.datetime(),
+      latest: external_exports2.object({ contentVersion: safeVersion, key: ShareContentKeyValidator }).strict(),
+      selection: ShareRecoverySelectionValidator.array().min(1).max(MAX_SELECTED_CREDENTIALS),
+      endorsements: ShareRecoveryEndorsementValidator.array().max(MAX_ENDORSEMENTS).default([])
+    }).strict().superRefine((recovery, ctx) => {
+      const orders = /* @__PURE__ */ new Set();
+      recovery.selection.forEach((entry, index) => {
+        if (entry.order >= recovery.selection.length) {
+          ctx.addIssue({
+            code: "custom",
+            message: "order must be within the selection bounds",
+            path: ["selection", index, "order"]
+          });
+        }
+        if (orders.has(entry.order)) {
+          ctx.addIssue({
+            code: "custom",
+            message: "order must be unique within the selection",
+            path: ["selection", index, "order"]
+          });
+        }
+        orders.add(entry.order);
+      });
+    });
+    var ShareOwnerRecoveryValidator = JWEValidator2.refine(
+      (value) => utf8ByteLength(JSON.stringify(value)) <= MAX_SHARE_RECOVERY_JWE_BYTES,
+      { message: `serialized recovery JWE must be at most ${MAX_SHARE_RECOVERY_JWE_BYTES} bytes` }
+    );
+    var ShareLinkStatusValidator = external_exports2.enum(["pending", "active", "stopped"]);
+    var ShareContentStateValidator = external_exports2.enum(["staging", "finalized", "content_missing"]);
+    var ShareLinkValidator = external_exports2.object({
+      id: ShareLinkIdValidator,
+      title: external_exports2.string().min(1).max(120),
+      note: external_exports2.string().max(500).optional(),
+      selectedCount: external_exports2.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+      version: safeVersion,
+      contentVersion: safeVersion,
+      status: ShareLinkStatusValidator,
+      contentState: ShareContentStateValidator,
+      createdAt: external_exports2.iso.datetime(),
+      updatedAt: external_exports2.iso.datetime(),
+      expiresAt: external_exports2.iso.datetime().nullable(),
+      stoppedAt: external_exports2.iso.datetime().nullable(),
+      lastViewedAt: external_exports2.iso.datetime().nullable(),
+      viewCount: external_exports2.number().int().min(0).optional(),
+      passcodeProtected: external_exports2.boolean(),
+      notifyOnView: external_exports2.boolean(),
+      minorPolicy: external_exports2.object({
+        isMinor: external_exports2.boolean().nullable(),
+        policyResolved: external_exports2.boolean(),
+        defaultExpiryDays: external_exports2.union([external_exports2.literal(30), external_exports2.literal(365)]),
+        viewCountingEnabled: external_exports2.boolean()
+      }),
+      /**
+       * Guarded application/API URL for the content. Optional because owner APIs in
+       * D1 have no public resolve/content endpoint yet; it must never be a
+       * LearnCloud object URL or carry a fabricated decryption key.
+       */
+      contentUrl: external_exports2.string().optional()
+    });
+    var clientRequestId = external_exports2.string().uuid();
+    var CreateShareLinkInputValidator = external_exports2.object({
+      id: ShareLinkIdValidator,
+      clientRequestId,
+      title: external_exports2.string().min(1).max(120),
+      note: external_exports2.string().max(500).optional(),
+      expiresAt: external_exports2.iso.datetime().nullable().optional(),
+      passcode: external_exports2.string().min(8).max(64).optional(),
+      notifyOnView: external_exports2.boolean().default(false),
+      selectedCount: external_exports2.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+      contentVersion: external_exports2.literal(1),
+      envelope: ShareEnvelopeValidator,
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator
+    }).strict();
+    var UpdateShareLinkInputValidator = external_exports2.object({
+      id: ShareLinkIdValidator,
+      expectedVersion: safeVersion,
+      clientRequestId,
+      title: external_exports2.string().min(1).max(120).optional(),
+      note: external_exports2.string().max(500).nullable().optional(),
+      expiresAt: external_exports2.iso.datetime().nullable().optional(),
+      /** Omitted preserves the current passcode, null removes it, and a string replaces it. */
+      passcode: external_exports2.string().min(8).max(64).nullable().optional(),
+      notifyOnView: external_exports2.boolean().optional(),
+      contentVersion: safeVersion.optional(),
+      selectedCount: external_exports2.number().int().min(1).max(MAX_SELECTED_CREDENTIALS).optional(),
+      envelope: ShareEnvelopeValidator.optional(),
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator.optional()
+    }).strict().superRefine((value, ctx) => {
+      const provided = [
+        value.contentVersion,
+        value.selectedCount,
+        value.envelope,
+        value.ownerEncryptedRecovery
+      ].filter((field) => field !== void 0).length;
+      if (provided !== 0 && provided !== 4) {
+        ctx.addIssue({
+          code: "custom",
+          message: "content replacement requires contentVersion, selectedCount, envelope and ownerEncryptedRecovery together"
+        });
+      }
+    });
+    var ShareLinkIdInputValidator = external_exports2.object({ id: ShareLinkIdValidator }).strict();
+    var ShareLinkOperationKeyInputValidator = external_exports2.object({ id: ShareLinkIdValidator, operationId: external_exports2.string().uuid() }).strict();
+    var ShareLinkOwnerCommitOutputValidator = external_exports2.discriminatedUnion("status", [
+      external_exports2.object({ status: external_exports2.literal("completed"), share: ShareLinkValidator }).strict(),
+      external_exports2.object({
+        status: external_exports2.literal("pending"),
+        id: ShareLinkIdValidator,
+        operationId: external_exports2.string().uuid()
+      }).strict()
+    ]);
+    var ShareLinkOwnerStatusOutputValidator = external_exports2.discriminatedUnion("status", [
+      external_exports2.object({ status: external_exports2.literal("found"), share: ShareLinkValidator }).strict(),
+      external_exports2.object({
+        status: external_exports2.literal("pending"),
+        id: ShareLinkIdValidator,
+        operationId: external_exports2.string().uuid()
+      }).strict(),
+      external_exports2.object({ status: external_exports2.literal("not_found"), id: ShareLinkIdValidator }).strict()
+    ]);
+    var ShareLinkOwnerRecoveryOutputValidator = external_exports2.object({ recovery: ShareOwnerRecoveryValidator }).strict();
+    var ShareLinkOwnerContentOutputValidator = external_exports2.object({
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      envelope: ShareEnvelopeValidator
+    }).strict();
+    var ResolveShareLinkInputValidator = external_exports2.object({
+      id: ShareLinkIdValidator,
+      /** Sent only in a POST body; it must never be placed in a share URL. */
+      passcode: external_exports2.string().min(4).max(64).optional()
+    }).strict();
+    var ShareLinkPublicStateValidator = external_exports2.discriminatedUnion("state", [
+      external_exports2.object({
+        state: external_exports2.literal("passcode_required"),
+        id: ShareLinkIdValidator
+      }).strict(),
+      external_exports2.object({ state: external_exports2.literal("try_later"), id: ShareLinkIdValidator }).strict(),
+      external_exports2.object({
+        state: external_exports2.literal("active"),
+        id: ShareLinkIdValidator,
+        title: external_exports2.string().max(120),
+        note: external_exports2.string().max(500).optional(),
+        selectedCount: external_exports2.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+        contentVersion: safeVersion,
+        contentUrl: external_exports2.string(),
+        sharer: external_exports2.object({
+          displayName: external_exports2.string().max(120),
+          avatar: external_exports2.string().max(2048).optional()
+        }),
+        createdAt: external_exports2.iso.datetime(),
+        updatedAt: external_exports2.iso.datetime(),
+        expiresAt: external_exports2.iso.datetime().nullable()
+      }).strict(),
+      external_exports2.object({
+        state: external_exports2.literal("expired"),
+        id: ShareLinkIdValidator,
+        expiresAt: external_exports2.iso.datetime()
+      }).strict(),
+      external_exports2.object({
+        state: external_exports2.literal("stopped"),
+        id: ShareLinkIdValidator,
+        stoppedAt: external_exports2.iso.datetime()
+      }).strict(),
+      external_exports2.object({ state: external_exports2.literal("not_found"), id: ShareLinkIdValidator }).strict()
+    ]);
+    var ListShareLinksInputValidator = external_exports2.object({
+      limit: external_exports2.number().int().min(1).max(50).default(25),
+      cursor: external_exports2.string().max(512).optional()
+    }).strict();
+    var PaginatedShareLinksValidator = PaginationResponseValidator.extend({
+      records: ShareLinkValidator.array()
+    });
+    var AcknowledgeViewInputValidator = external_exports2.object({
+      receipt: external_exports2.string().min(22).max(128).regex(/^[A-Za-z0-9_-]+$/)
+    }).strict();
+    var AcknowledgeViewOutputValidator = external_exports2.object({ ok: external_exports2.literal(true) }).strict();
+    var SHARE_VIEW_RECEIPT_TTL_SECONDS = 10 * 60;
+    var ShareLinkPublicContentViewValidator = external_exports2.object({
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      envelope: ShareEnvelopeValidator,
+      contentUrl: external_exports2.string(),
+      receipt: external_exports2.string().min(22).max(128).regex(/^[A-Za-z0-9_-]+$/)
+    }).strict();
   }
 });
 var require_dist = __commonJS({
@@ -34823,6 +35344,20 @@ var optionalEnvironmentPort = external_exports.preprocess(
   (value) => value === "" || value === void 0 ? void 0 : value,
   environmentPort.optional()
 );
+var DEFAULT_MAX_CANONICAL_BYTES = 2 * 1024 * 1024;
+var ShareContentCanonicalizationError = class extends Error {
+  static {
+    __name(this, "ShareContentCanonicalizationError");
+  }
+  constructor(message) {
+    super(message);
+    this.code = "UNSUPPORTED_REQUEST_VALUE";
+    this.name = "ShareContentCanonicalizationError";
+  }
+  static {
+    __name2(this, "ShareContentCanonicalizationError");
+  }
+};
 var RegExpTransformer = {
   serialize(object2) {
     return JSON.stringify(object2, (_key, value) => {