@learncard/network-brain-service 3.18.0 → 3.19.0

package/.env.example

@@ -22,6 +22,10 @@ OIDC_EXPECTED_AUDIENCE=
 
 AWS_REGION=
 NOTIFICATIONS_QUEUE_URL=
+INBOX_QUEUE_URL=
+INBOX_DEAD_LETTER_QUEUE_URL=
+# Set only for a local SQS emulator; production uses the AWS endpoint and IAM role.
+INBOX_QUEUE_ENDPOINT=
 NOTIFICATIONS_QUEUE_POLL_URL=
 NOTIFICATIONS_SERVICE_WEBHOOK_URL=
 NOTIFICATIONS_SERVICE_PORT=5100

package/CHANGELOG.md

@@ -1,5 +1,85 @@
 # @learncard/network-brain-service
 
+## 3.19.0
+
+### Minor Changes
+
+- [#1585](https://github.com/learningeconomy/LearnCard/pull/1585) [`0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e`](https://github.com/learningeconomy/LearnCard/commit/0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e) Thanks [@goblincore](https://github.com/goblincore)! - Send managed credential update emails to a bound holder's verified email (or a verified manager for managed accounts). Include the issuer display name and a bounded credential title, with a translated link to app notifications; exclude grades, subject data, and update summaries. Keep email failures independent of publication and in-app notifications, and persist a single delivery attempt per publication notification window so retries cannot send duplicate email.
+
+    Email delivery is best effort: a failed or ambiguous provider attempt is recorded and not retried within that window. A later material update in a new window can send another email. There is no background email retry worker.
+
+    Existing verified Universal Inbox recipients also receive an initial email pointing to their app notifications when delivery is not suppressed. Local claim and update links use the frontend address.
+
+    Preserve recipient profile identities when local webhook delivery normalizes notification DIDs, so the subsequent update-email lookup can still find verified contacts.
+
+- [#1591](https://github.com/learningeconomy/LearnCard/pull/1591) [`928e587378b3674766cf58a8bbe1cbd4d66d3a9f`](https://github.com/learningeconomy/LearnCard/commit/928e587378b3674766cf58a8bbe1cbd4d66d3a9f) Thanks [@gerardopar](https://github.com/gerardopar)! - Add Universal Inbox batch issuance through `sendCredentialsViaInbox`, tRPC
+  `inbox.issueBatch`, and `POST /inbox/issue-batch`, with public batch input and result
+  validators/types, shared configuration defaults, ordered per-item outcomes, and
+  24-hour issuer-scoped idempotency keys. Later duplicate keys in one batch conflict
+  deterministically. Completed issuances include reconciliation IDs if replay storage
+  cannot be confirmed; side-effect-free preflight failures release their keys.
+
+    Enforce a 4 MiB JSON payload budget and atomic batch quota admission without
+    charging rejected batches. Batch submission returns HTTP 202 with a durable
+    receipt. Poll `GET /inbox/batches/{batchId}` or
+    `getInboxCredentialBatch` for ordered progress and outcomes. Batch-level request IDs
+    make submission retries safe. Jobs, quota admission, dispatch records, and encrypted
+    results are stored in Neo4j; a dedicated SQS queue processes items independently of
+    notifications. Submission retries report the current batch state. Transient preparation
+    and signing failures retry before delivery. Terminal batches release their original
+    payload and remain available for 30 days, including uncertain outcomes; unresolved
+    client-keyed replay reservations stay blocked for reconciliation after job expiry.
+    Orphaned internal reservations for unkeyed items are collected after job pruning.
+    Container-backed tests exercise Neo4j, Redis, and an SQS emulator, including worker
+    recovery, duplicate delivery, polling authorization, and submission replay.
+
+    The existing single-issue route now accepts `configuration.guardianEmail`, exposing
+    guardian approval to single-issue clients. Both routes reject guardian self-approval
+    case-insensitively. Rate-limit errors use `TOO_MANY_REQUESTS` (HTTP 429); remove stale
+    TypeScript casts to `BAD_REQUEST` from existing callers. Those casts did not change
+    the runtime status code.
+
+### Patch Changes
+
+- [#1585](https://github.com/learningeconomy/LearnCard/pull/1585) [`0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e`](https://github.com/learningeconomy/LearnCard/commit/0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e) Thanks [@goblincore](https://github.com/goblincore)! - Managed refreshable sends through the standard send paths (LC-2198). `send({ type: 'boost', refresh: true })` now issues refreshable credentials for profile/DID recipients: with local signing the SDK asks the server to run every managed-send guard, create or reuse the boost and allocate the managed refresh service in one step, injects the service (with its inline JSON-LD context) before signing, and hands the signed credential to the server's unified send so activity/contract behavior and the canonical receipt are preserved; without local signing the request is served by the signing-authority path. Email/phone recipients now use Universal Inbox deferred issuance: allocate a stable refresh service at issue, queue unsigned updates in encrypted inbox escrow, and bind/sign the latest content at verified claim. The deferred receipt is returned at `inbox.refresh`; direct `inbox/issue` returns it at `refresh`.
+
+    `sendBoost` with literal `{ enableRefresh: true }` now returns `{ credentialUri, refresh }` instead of a plain URI string, where `refresh` is the metadata-only issuance receipt (refreshId, refreshService, credentialId, issuerDid, holderDid, credentialStatus) needed to publish future versions via `publishCredentialRefresh`. Legacy callers — boolean options, omitted options, or object options without `enableRefresh` — still receive the credential URI string; a dynamically typed `enableRefresh` degrades the result to `string | { credentialUri, refresh }`. Delivered managed credentials remain holder-encrypted even when `encrypt: false`. Pending Inbox content uses the existing service-readable encrypted escrow until claim, when it is wiped.
+
+    `@learncard/types` adds the `ManagedCredentialRefreshReceipt` validator plus optional `refresh` on the unified send input/response validators; `@learncard/helpers` adds the shared managed context preparation helpers (`prepareManagedRefreshContext`, `injectManagedRefreshService`) now also used by SDK `issueCredential` signing.
+
+    Refreshable `send` accepts an optional `idempotencyKey` so a whole call can be retried without duplicating the boost, refresh allocation or delivery.
+
+    Completed-send comparisons canonicalize nested result keys so equivalent receipts remain idempotent regardless of property insertion order. Keyed sends reuse the recipient validation already performed in the request.
+
+    Keyed pre-signed retries now recover the original result when delivery bound successfully but its intent result was not recorded, matching preparation and signing-authority retries. Pending receipt fallbacks use the holder's network profile DID consistently.
+
+    Signing a credential with a managed refresh service now rejects conflicting inline JSON-LD term definitions (including `authorization`) instead of producing a credential whose refresh terms are not correctly signed. Credentials without a managed service are unaffected.
+
+    Managed send and refresh publication recover from a stale local issuer DID document after signing-authority registration: if proof verification fails, the server refreshes the authenticated issuer's document and verifies once more without relaxing signature checks.
+
+    Universal Inbox accepts `refresh: true` and an issuance `idempotencyKey`; both claim paths bind the latest revision atomically. Publication keys survive claim, and issuer `getInboxCredential` exposes the metadata-only receipt with its bound holder DID.
+
+- [#1585](https://github.com/learningeconomy/LearnCard/pull/1585) [`0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e`](https://github.com/learningeconomy/LearnCard/commit/0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e) Thanks [@goblincore](https://github.com/goblincore)! - Honor delegated boost issuance permissions for managed refresh delivery. Expire saved post-login destinations after 30 minutes, discard legacy untimed destinations, and clear superseded claim redirects during sign-in.
+
+- [#1591](https://github.com/learningeconomy/LearnCard/pull/1591) [`928e587378b3674766cf58a8bbe1cbd4d66d3a9f`](https://github.com/learningeconomy/LearnCard/commit/928e587378b3674766cf58a8bbe1cbd4d66d3a9f) Thanks [@gerardopar](https://github.com/gerardopar)! - Support managed refresh through batch and item configuration, with item overrides including explicit false. Forward refresh options and template anchors to issuance, preserve caller permissions for background processing, and return refresh receipts in item results and replays.
+
+- Updated dependencies [[`2991bd32b03e26736239dd8e586e2f720d9bcd45`](https://github.com/learningeconomy/LearnCard/commit/2991bd32b03e26736239dd8e586e2f720d9bcd45), [`0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e`](https://github.com/learningeconomy/LearnCard/commit/0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e), [`0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e`](https://github.com/learningeconomy/LearnCard/commit/0c1bf9a8a33e6392d5fd279479d9ab4fb0449b5e), [`3174c09b97fde6f7b5251390245038cf6b7ea9ba`](https://github.com/learningeconomy/LearnCard/commit/3174c09b97fde6f7b5251390245038cf6b7ea9ba), [`928e587378b3674766cf58a8bbe1cbd4d66d3a9f`](https://github.com/learningeconomy/LearnCard/commit/928e587378b3674766cf58a8bbe1cbd4d66d3a9f), [`928e587378b3674766cf58a8bbe1cbd4d66d3a9f`](https://github.com/learningeconomy/LearnCard/commit/928e587378b3674766cf58a8bbe1cbd4d66d3a9f)]:
+    - @learncard/types@5.21.0
+    - @learncard/helpers@1.6.0
+    - @learncard/vc-plugin@1.6.2
+    - @learncard/email-templates@1.1.0
+    - @learncard/core@9.4.36
+    - @learncard/did-web-plugin@1.1.36
+    - @learncard/didkey-plugin@1.1.36
+    - @learncard/didkit-plugin@1.10.1
+    - @learncard/didkit-plugin-node@0.3.1
+    - @learncard/encryption-plugin@1.1.36
+    - @learncard/learn-card-plugin@1.2.36
+    - @learncard/vc-templates-plugin@1.1.36
+    - @learncard/crypto-plugin@1.1.36
+    - @learncard/dynamic-loader-plugin@1.1.36
+    - @learncard/expiration-plugin@1.2.36
+
 ## 3.18.0
 
 ### Minor Changes

package/compose.inbox.yml

@@ -0,0 +1,7 @@
+services:
+    inbox-sqs:
+        image: softwaremill/elasticmq-native:1.6.15
+        ports:
+            - '9324:9324'
+        volumes:
+            - ./inbox-elasticmq.conf:/opt/elasticmq.conf:ro

package/dist/accesslayer/auth-grant/read.d.ts

@@ -12,5 +12,6 @@ export declare const isAuthGrantAssociatedWithProfile: (authGrantId: string, pro
 export declare const isAuthGrantChallengeValidForDID: (challenge: string, did: string) => Promise<{
     isChallengeValid: boolean;
     scope: string;
+    actAs?: string;
 }>;
 //# sourceMappingURL=read.d.ts.map

package/dist/accesslayer/auth-grant/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/auth-grant/read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,aAAa,EAA4B,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAU5C,eAAO,MAAM,gBAAgB,GAAU,IAAI,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAgB/E,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAChC,SAAS,WAAW,EACpB,uCAIG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,cAAc,CAAA;CAAE,KAC9D,OAAO,CAAC,KAAK,CAAC,aAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAiCpD,CAAC;AAEF,eAAO,MAAM,gCAAgC,GACzC,aAAa,MAAM,EACnB,WAAW,MAAM,KAClB,OAAO,CAAC,OAAO,CAmBjB,CAAC;AAEF,eAAO,MAAM,+BAA+B,GACxC,WAAW,MAAM,EACjB,KAAK,MAAM,KACZ,OAAO,CAAC;IAAE,gBAAgB,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA6BtD,CAAC"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/auth-grant/read.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,aAAa,EAA4B,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAU5C,eAAO,MAAM,gBAAgB,GAAU,IAAI,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAgB/E,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAChC,SAAS,WAAW,EACpB,uCAIG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,cAAc,CAAA;CAAE,KAC9D,OAAO,CAAC,KAAK,CAAC,aAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAiCpD,CAAC;AAEF,eAAO,MAAM,gCAAgC,GACzC,aAAa,MAAM,EACnB,WAAW,MAAM,KAClB,OAAO,CAAC,OAAO,CAmBjB,CAAC;AAEF,eAAO,MAAM,+BAA+B,GACxC,WAAW,MAAM,EACjB,KAAK,MAAM,KACZ,OAAO,CAAC;IAAE,gBAAgB,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA8BtE,CAAC"}

package/dist/accesslayer/credential-activity/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-activity/create.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAQ7D,eAAO,MAAM,wBAAwB,GACjC,QAAQ,2BAA2B,KACpC,OAAO,CAAC,MAAM,CAoDhB,CAAC"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-activity/create.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAQ7D,eAAO,MAAM,wBAAwB,GACjC,QAAQ,2BAA2B,KACpC,OAAO,CAAC,MAAM,CAqDhB,CAAC"}

package/dist/accesslayer/credential-refresh/email-delivery.d.ts

@@ -0,0 +1,18 @@
+export type CredentialRefreshEmailDeliveryState = 'claimed' | 'delivered' | 'failed';
+export declare const claimCredentialRefreshEmailDelivery: (params: {
+    refreshId: string;
+    windowKey: string;
+}) => Promise<"claimed" | "duplicate">;
+export declare const finalizeCredentialRefreshEmailDelivery: (params: {
+    refreshId: string;
+    windowKey: string;
+    state: Extract<CredentialRefreshEmailDeliveryState, "delivered" | "failed">;
+}) => Promise<void>;
+export declare const getCredentialRefreshEmailDelivery: (refreshId: string, windowKey: string) => Promise<{
+    deliveryKey: string;
+    refreshId: string;
+    windowKey: string;
+    state: CredentialRefreshEmailDeliveryState;
+    attempts: number;
+} | null>;
+//# sourceMappingURL=email-delivery.d.ts.map

package/dist/accesslayer/credential-refresh/email-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-delivery.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-refresh/email-delivery.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,mCAAmC,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAkBrF,eAAO,MAAM,mCAAmC,GAAU,QAAQ;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB,KAAG,OAAO,CAAC,SAAS,GAAG,WAAW,CA6BlC,CAAC;AAGF,eAAO,MAAM,sCAAsC,GAAU,QAAQ;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC,mCAAmC,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CAC/E,KAAG,OAAO,CAAC,IAAI,CASf,CAAC;AAGF,eAAO,MAAM,iCAAiC,GAC1C,WAAW,MAAM,EACjB,WAAW,MAAM,KAClB,OAAO,CAAC;IACP,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,mCAAmC,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAmBP,CAAC"}

package/dist/accesslayer/credential-refresh/index.d.ts

@@ -1,4 +1,5 @@
 export * from './create';
+export * from './email-delivery';
 export * from './read';
 export * from './update';
 //# sourceMappingURL=index.d.ts.map

package/dist/accesslayer/credential-refresh/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-refresh/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-refresh/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}

package/dist/accesslayer/credential-refresh/read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-refresh/read.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,uBAAuB,EAEvB,4BAA4B,EAE5B,8BAA8B,EAEjC,MAAM,0BAA0B,CAAC;AAgBlC,eAAO,MAAM,oBAAoB,GAC7B,WAAW,MAAM,KAClB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAWxC,CAAC;AAGF,eAAO,MAAM,wBAAwB,GACjC,WAAW,MAAM,KAClB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAY7C,CAAC;AAGF,eAAO,MAAM,2BAA2B,GACpC,WAAW,MAAM,EACjB,SAAS,MAAM,KAChB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAY7C,CAAC;AAGF,eAAO,MAAM,2CAA2C,GACpD,WAAW,MAAM,EACjB,gBAAgB,MAAM,KACvB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAW7C,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAE9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC7C,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iCAAiC,CAAC,CAAC,IAC3C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAkBxF,eAAO,MAAM,iCAAiC,GAC1C,WAAW,MAAM,KAClB,OAAO,CAAC,iCAAiC,CAAC,4BAA4B,CAAC,CAqBzE,CAAC;AAGF,eAAO,MAAM,oCAAoC,GAC7C,WAAW,MAAM,EACjB,SAAS,MAAM,KAChB,OAAO,CAAC,iCAAiC,CAAC,4BAA4B,CAAC,CAqBzE,CAAC;AAGF,eAAO,MAAM,qCAAqC,GAC9C,WAAW,MAAM,EACjB,UAAS,mCAAwC,KAClD,OAAO,CAAC,iCAAiC,CAAC,kCAAkC,CAAC,CA6D/E,CAAC;AAMF,eAAO,MAAM,4BAA4B,GACrC,WAAW,MAAM,EACjB,UAAS,mCAAwC,KAClD,OAAO,CAAC,kCAAkC,CAoD5C,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAE9C,QAAQ,EAAE,OAAO,CAAC;IAElB,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAUF,eAAO,MAAM,sCAAsC,GAC/C,WAAW,MAAM,KAClB,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAoBpD,CAAC"}
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-refresh/read.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,uBAAuB,EAEvB,4BAA4B,EAE5B,8BAA8B,EAEjC,MAAM,0BAA0B,CAAC;AAgBlC,eAAO,MAAM,oBAAoB,GAC7B,WAAW,MAAM,KAClB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAWxC,CAAC;AAGF,eAAO,MAAM,wBAAwB,GACjC,WAAW,MAAM,KAClB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAY7C,CAAC;AAGF,eAAO,MAAM,2BAA2B,GACpC,WAAW,MAAM,EACjB,SAAS,MAAM,KAChB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAY7C,CAAC;AAGF,eAAO,MAAM,2CAA2C,GACpD,WAAW,MAAM,EACjB,gBAAgB,MAAM,KACvB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAW7C,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAE9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC7C,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iCAAiC,CAAC,CAAC,IAC3C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAkBxF,eAAO,MAAM,iCAAiC,GAC1C,WAAW,MAAM,KAClB,OAAO,CAAC,iCAAiC,CAAC,4BAA4B,CAAC,CAqBzE,CAAC;AAGF,eAAO,MAAM,oCAAoC,GAC7C,WAAW,MAAM,EACjB,SAAS,MAAM,KAChB,OAAO,CAAC,iCAAiC,CAAC,4BAA4B,CAAC,CAqBzE,CAAC;AAGF,eAAO,MAAM,qCAAqC,GAC9C,WAAW,MAAM,EACjB,UAAS,mCAAwC,KAClD,OAAO,CAAC,iCAAiC,CAAC,kCAAkC,CAAC,CA6D/E,CAAC;AAMF,eAAO,MAAM,4BAA4B,GACrC,WAAW,MAAM,EACjB,UAAS,mCAAwC,KAClD,OAAO,CAAC,kCAAkC,CA0D5C,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAE9C,QAAQ,EAAE,OAAO,CAAC;IAElB,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAUF,eAAO,MAAM,sCAAsC,GAC/C,WAAW,MAAM,KAClB,OAAO,CAAC,mCAAmC,GAAG,IAAI,CAoBpD,CAAC"}

package/dist/accesslayer/credential-refresh/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-refresh/update.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,kCAAkC,EAElC,kCAAkC,EAClC,uBAAuB,EAEvB,sBAAsB,EACzB,MAAM,0BAA0B,CAAC;AAuDlC,eAAO,MAAM,4BAA4B,GACrC,QAAQ,kCAAkC,KAC3C,OAAO,CAAC,kCAAkC,CAuK5C,CAAC;AASF,eAAO,MAAM,mCAAmC,GAAU,QAAQ;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAEhB,cAAc,EAAE,MAAM,CAAC;IAEvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACtB,KAAG,OAAO,CAAC,IAAI,CAyBf,CAAC;AAGF,eAAO,MAAM,yBAAyB,GAClC,WAAW,MAAM,EACjB,OAAO,sBAAsB,EAC7B,gBAAgB,sBAAsB,KACvC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAgBxC,CAAC;AAWF,eAAO,MAAM,8CAA8C,GACvD,kBAAkB,MAAM,EACxB,iBAAiB,MAAM,KACxB,OAAO,CAAC,OAAO,CAYjB,CAAC;AAOF,eAAO,MAAM,oCAAoC,GAC7C,kBAAkB,MAAM,KACzB,OAAO,CAAC,OAAO,CAYjB,CAAC"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/credential-refresh/update.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,kCAAkC,EAElC,kCAAkC,EAClC,uBAAuB,EAEvB,sBAAsB,EACzB,MAAM,0BAA0B,CAAC;AAuDlC,eAAO,MAAM,4BAA4B,GACrC,QAAQ,kCAAkC,KAC3C,OAAO,CAAC,kCAAkC,CA2K5C,CAAC;AASF,eAAO,MAAM,mCAAmC,GAAU,QAAQ;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAEhB,cAAc,EAAE,MAAM,CAAC;IAEvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACtB,KAAG,OAAO,CAAC,IAAI,CAyBf,CAAC;AAGF,eAAO,MAAM,yBAAyB,GAClC,WAAW,MAAM,EACjB,OAAO,sBAAsB,EAC7B,gBAAgB,sBAAsB,KACvC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAgBxC,CAAC;AAWF,eAAO,MAAM,8CAA8C,GACvD,kBAAkB,MAAM,EACxB,iBAAiB,MAAM,KACxB,OAAO,CAAC,OAAO,CAYjB,CAAC;AAOF,eAAO,MAAM,oCAAoC,GAC7C,kBAAkB,MAAM,KACzB,OAAO,CAAC,OAAO,CAYjB,CAAC"}

package/dist/accesslayer/inbox-batch/store.d.ts

@@ -0,0 +1,33 @@
+import type { InboxBatchReceipt, IssueInboxCredentialBatchItemResult } from '@learncard/types';
+import type { BatchItem, BatchJob, BatchReplayStore, InboxDispatchLease } from '../../types/inbox-batch';
+export declare const DAY = 86400000;
+export declare const LEASE_MS = 360000;
+export declare const ensureInboxBatchConstraints: () => Promise<void>;
+export declare const createBatchJob: (input: {
+    issuer: string;
+    requestId?: string;
+    requestHash: string;
+    payload: string;
+    items: {
+        replayKey: string;
+        duplicate: boolean;
+        correlation?: string;
+    }[];
+    limit: number;
+}) => Promise<InboxBatchReceipt>;
+export declare const readBatchJob: (id: string, issuer: string) => Promise<{
+    job: BatchJob;
+    items: BatchItem[];
+}>;
+export declare const claimBatchItem: (id: string, owner: string) => Promise<{
+    job: BatchJob;
+    item: BatchItem;
+} | undefined>;
+export declare const markBatchIssuanceStarted: (id: string, owner: string) => Promise<void>;
+export declare const batchReplayStore: (itemId: string, owner: string, replayKey: string) => BatchReplayStore;
+export declare const finishBatchItem: (id: string, owner: string, result: IssueInboxCredentialBatchItemResult) => Promise<void>;
+export declare const takeInboxDispatches: () => Promise<InboxDispatchLease[]>;
+export declare const acknowledgeInboxDispatches: (leases: InboxDispatchLease[]) => Promise<void>;
+export declare const deadLetterBatchItem: (id: string) => Promise<void>;
+export declare const recoverInboxJobs: (deadline?: number) => Promise<void>;
+//# sourceMappingURL=store.d.ts.map

package/dist/accesslayer/inbox-batch/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/inbox-batch/store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,mCAAmC,EAAE,MAAM,kBAAkB,CAAC;AAG/F,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGnG,eAAO,MAAM,GAAG,WAAa,CAAC;AAC9B,eAAO,MAAM,QAAQ,SAAU,CAAC;AAIhC,eAAO,MAAM,2BAA2B,QAAO,OAAO,CAAC,IAAI,CAoC1D,CAAC;AAaF,eAAO,MAAM,cAAc,GAAU,OAAO;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACzE,KAAK,EAAE,MAAM,CAAC;CACjB,KAAG,OAAO,CAAC,iBAAiB,CAkE5B,CAAC;AAEF,eAAO,MAAM,YAAY,GACrB,IAAI,MAAM,EACV,QAAQ,MAAM,KACf,OAAO,CAAC;IAAE,GAAG,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,SAAS,EAAE,CAAA;CAAE,CAW/C,CAAC;AAGF,eAAO,MAAM,cAAc,GACvB,IAAI,MAAM,EACV,OAAO,MAAM,KACd,OAAO,CAAC;IAAE,GAAG,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG,SAAS,CAgBnD,CAAC;AAsBP,eAAO,MAAM,wBAAwB,GAAU,IAAI,MAAM,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,IAAI,CAIjF,CAAC;AAMP,eAAO,MAAM,gBAAgB,GACzB,QAAQ,MAAM,EACd,OAAO,MAAM,EACb,WAAW,MAAM,KAClB,gBA2DD,CAAC;AAgBH,eAAO,MAAM,eAAe,GACxB,IAAI,MAAM,EACV,OAAO,MAAM,EACb,QAAQ,mCAAmC,KAC5C,OAAO,CAAC,IAAI,CA+Bd,CAAC;AAGF,eAAO,MAAM,mBAAmB,QAAa,OAAO,CAAC,kBAAkB,EAAE,CAanE,CAAC;AAEP,eAAO,MAAM,0BAA0B,GAAU,QAAQ,kBAAkB,EAAE,KAAG,OAAO,CAAC,IAAI,CAQ3F,CAAC;AAGF,eAAO,MAAM,mBAAmB,GAAU,IAAI,MAAM,KAAG,OAAO,CAAC,IAAI,CA8B7D,CAAC;AAGP,eAAO,MAAM,gBAAgB,GAAU,iBAA8B,KAAG,OAAO,CAAC,IAAI,CAsFnF,CAAC"}

package/dist/accesslayer/inbox-credential/create.d.ts

@@ -3,6 +3,11 @@ import { ProfileType } from '../../types/profile';
 export declare const DEFAULT_INBOX_EXPIRY_DAYS = 30;
 export declare const createInboxCredential: (input: {
     credential: string;
+    refresh?: {
+        aggregate: Record<string, unknown>;
+        issueKey: string;
+        requestDigest: string;
+    };
     delivered?: boolean;
     isSigned: boolean;
     isAccepted?: boolean;

package/dist/accesslayer/inbox-credential/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/inbox-credential/create.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAK/E,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAI5C,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,eAAO,MAAM,qBAAqB,GAAU,OAAO;IAC/C,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,sBAAsB,CAAC;IAClC,aAAa,EAAE,WAAW,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;CACpF,KAAG,OAAO,CAAC,mBAAmB,CAsG9B,CAAC"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/inbox-credential/create.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAK/E,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAK5C,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,eAAO,MAAM,qBAAqB,GAAU,OAAO;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAE1F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,sBAAsB,CAAC;IAClC,aAAa,EAAE,WAAW,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;CACpF,KAAG,OAAO,CAAC,mBAAmB,CAoI9B,CAAC"}

package/dist/accesslayer/inbox-credential/refresh.d.ts

@@ -0,0 +1,71 @@
+import type { InboxCredentialType, PublishCredentialRefreshResult } from '@learncard/types';
+export declare const getInboxRefreshIssue: (issueKey: string) => Promise<{
+    inbox: InboxCredentialType;
+    requestDigest: string;
+    claimUrl?: string;
+} | null>;
+export declare const createPendingInboxRefresh: (params: {
+    inbox: Record<string, unknown>;
+    aggregate: Record<string, unknown>;
+    issueKey: string;
+    requestDigest: string;
+}) => Promise<InboxCredentialType>;
+export declare const getPendingInboxPublication: (refreshId: string, idempotencyKey?: string) => Promise<PublishCredentialRefreshResult | null>;
+export declare const advancePendingInboxRefresh: (params: {
+    refreshId: string;
+    expectedVersion: number;
+    credential: string;
+    credentialName?: string;
+    materialDigest: string;
+    idempotencyKey?: string;
+    updateSummary?: string;
+}) => Promise<PublishCredentialRefreshResult | null>;
+export declare const bindPendingInboxRefresh: (params: {
+    inboxId: string;
+    refreshId: string;
+    expectedVersion: number;
+    holderDid: string;
+    holderProfileId?: string;
+    issuerProfileId: string;
+    root: Record<string, unknown>;
+    aggregate: Record<string, unknown>;
+    deliveryCredential: string;
+    deliveryExpiresAt: string;
+    accepted: boolean;
+    boostId?: string;
+}) => Promise<boolean>;
+export declare const getInboxRefreshSnapshot: (inboxId: string) => Promise<{
+    inbox: any;
+    aggregate: {
+        refreshId: string;
+        issuerProfileId: string;
+        issuerDid: string;
+        credentialId: string;
+        state: "active" | "revoked" | "pending_holder" | "awaiting_claim";
+        currentVersion: number;
+        createdAt: string;
+        updatedAt: string;
+        inboxCredentialId?: string | undefined;
+        inboxCredentialStatus?: string | undefined;
+        holderProfileId?: string | undefined;
+        holderDid?: string | undefined;
+        etag?: string | undefined;
+        materialDigest?: string | undefined;
+        rootMaterialDigest?: string | undefined;
+        credentialStatusDigest?: string | undefined;
+        credentialSubjectDigest?: string | undefined;
+        boostId?: string | undefined;
+        signingMode?: "issuer-signed" | "signing-authority" | undefined;
+        idempotencyKey?: string | undefined;
+        updateSummary?: string | undefined;
+        credentialDisplayName?: string | undefined;
+        lastPublishedAt?: string | undefined;
+        notificationWindowKey?: string | undefined;
+        lastNotificationId?: string | undefined;
+        lastNotificationAt?: string | undefined;
+        initialNotificationSentAt?: string | undefined;
+        initialNotificationSuppressed?: boolean | undefined;
+    };
+} | null>;
+export declare const recordInboxRefreshClaimUrl: (id: string, claimUrl: string) => Promise<string>;
+//# sourceMappingURL=refresh.d.ts.map

package/dist/accesslayer/inbox-credential/refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/inbox-credential/refresh.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAG5F,eAAO,MAAM,oBAAoB,GAC7B,UAAU,MAAM,KACjB,OAAO,CAAC;IACP,KAAK,EAAE,mBAAmB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAaP,CAAC;AAGF,eAAO,MAAM,yBAAyB,GAAU,QAAQ;IACpD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,KAAG,OAAO,CAAC,mBAAmB,CAuB9B,CAAC;AAGF,eAAO,MAAM,0BAA0B,GACnC,WAAW,MAAM,EACjB,iBAAiB,MAAM,KACxB,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAe/C,CAAC;AAGF,eAAO,MAAM,0BAA0B,GAAU,QAAQ;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,KAAG,OAAO,CAAC,8BAA8B,GAAG,IAAI,CA6ChD,CAAC;AAGF,eAAO,MAAM,uBAAuB,GAAU,QAAQ;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,KAAG,OAAO,CAAC,OAAO,CAwClB,CAAC;AAGF,eAAO,MAAM,uBAAuB,GAAU,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SAiB5D,CAAC;AAEF,eAAO,MAAM,0BAA0B,GAAU,IAAI,MAAM,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAQ7F,CAAC"}

package/dist/accesslayer/inbox-credential/update.d.ts

@@ -1,6 +1,6 @@
 import { InboxCredentialType } from '@learncard/types';
 import { InboxDelivery } from '../../types/inbox-delivery';
-export declare const updateInboxCredential: (id: string, updates: Partial<Omit<InboxCredentialType, "id" | "createdAt" | "credential">>) => Promise<InboxCredentialType | null>;
+export declare const updateInboxCredential: (id: string, updates: Partial<Omit<InboxCredentialType, "id" | "createdAt" | "credential" | "refresh">>) => Promise<InboxCredentialType | null>;
 export declare const finalizeAndWipeInboxCredential: (id: string, delivery: InboxDelivery, { isAccepted }?: {
     isAccepted?: boolean;
 }) => Promise<InboxCredentialType | null>;

package/dist/accesslayer/inbox-credential/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/inbox-credential/update.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EACH,aAAa,EAGhB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,qBAAqB,GAC9B,IAAI,MAAM,EACV,SAAS,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,WAAW,GAAG,YAAY,CAAC,CAAC,KAC/E,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAcpC,CAAC;AAGF,eAAO,MAAM,8BAA8B,GACvC,IAAI,MAAM,EACV,UAAU,aAAa,EACvB,iBAAuB;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,KACrD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAsCpC,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAC/B,cAAoC,KACrC,OAAO,CAAC,MAAM,CAyBhB,CAAC;AAKF,eAAO,MAAM,0BAA0B,GACnC,cAAoC,KACrC,OAAO,CAAC,MAAM,CAWhB,CAAC"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/accesslayer/inbox-credential/update.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EACH,aAAa,EAGhB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,qBAAqB,GAC9B,IAAI,MAAM,EACV,SAAS,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAC,CAAC,KAC3F,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAcpC,CAAC;AAGF,eAAO,MAAM,8BAA8B,GACvC,IAAI,MAAM,EACV,UAAU,aAAa,EACvB,iBAAuB;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,KACrD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAsCpC,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAC/B,cAAoC,KACrC,OAAO,CAAC,MAAM,CAyBhB,CAAC;AAKF,eAAO,MAAM,0BAA0B,GACnC,cAAoC,KACrC,OAAO,CAAC,MAAM,CAWhB,CAAC"}

package/dist/cache/atomic-counter.test-helpers.d.ts

@@ -0,0 +1,3 @@
+import type { Cache } from './index';
+export declare const testAtomicCacheCounter: (cache: Cache) => void;
+//# sourceMappingURL=atomic-counter.test-helpers.d.ts.map

package/dist/cache/atomic-counter.test-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-counter.test-helpers.d.ts","sourceRoot":"","sources":["../../src/cache/atomic-counter.test-helpers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGrC,eAAO,MAAM,sBAAsB,GAAI,OAAO,KAAK,KAAG,IAsBrD,CAAC"}

package/dist/cache/atomic-counter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=atomic-counter.test.d.ts.map

package/dist/cache/atomic-counter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-counter.test.d.ts","sourceRoot":"","sources":["../../src/cache/atomic-counter.test.ts"],"names":[],"mappings":""}

package/dist/cache/index.d.ts

@@ -12,7 +12,7 @@ export type Cache = {
     ttl: (key: RedisKey) => Promise<number | undefined>;
     rpush: (key: RedisKey, ...values: RedisValue[]) => Promise<number | undefined>;
     lrange: (key: RedisKey, start: number, stop: number) => Promise<string[] | undefined>;
-    incr: (key: RedisKey, ttl?: number) => Promise<number | undefined>;
+    incr: (key: RedisKey, ttl?: number, amount?: number) => Promise<number | undefined>;
 };
 export declare const getCache: () => Cache;
 declare const _default: Cache;

package/dist/cache/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtD,OAAoB,EAAE,KAAK,IAAI,aAAa,EAAE,MAAM,cAAc,CAAC;AAiCnE,MAAM,MAAM,KAAK,GAAG;IAEhB,IAAI,EAAE,aAAa,CAAC;IAGpB,KAAK,CAAC,EAAE,KAAK,CAAC;IAMd,GAAG,EAAE,CACD,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,UAAU,EACjB,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,EACpB,OAAO,CAAC,EAAE,OAAO,KAChB,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAM/B,IAAI,EAAE,CACF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EAClC,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,KAChB,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAG/B,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAG7F,MAAM,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAG9D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC;IAG3D,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAG1D,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAGpD,KAAK,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAG/E,MAAM,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAOtF,IAAI,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACtE,CAAC;AAKF,eAAO,MAAM,QAAQ,QAAO,KAwL3B,CAAC;;AAEF,wBAA0B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtD,OAAoB,EAAE,KAAK,IAAI,aAAa,EAAE,MAAM,cAAc,CAAC;AAiCnE,MAAM,MAAM,KAAK,GAAG;IAEhB,IAAI,EAAE,aAAa,CAAC;IAGpB,KAAK,CAAC,EAAE,KAAK,CAAC;IAMd,GAAG,EAAE,CACD,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,UAAU,EACjB,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,EACpB,OAAO,CAAC,EAAE,OAAO,KAChB,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAM/B,IAAI,EAAE,CACF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EAClC,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,KAChB,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAG/B,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAG7F,MAAM,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAG9D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAC;IAG3D,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAG1D,GAAG,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAGpD,KAAK,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAG/E,MAAM,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAOtF,IAAI,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACvF,CAAC;AAKF,eAAO,MAAM,QAAQ,QAAO,KAoM3B,CAAC;;AAEF,wBAA0B"}

package/dist/config/environment.d.ts

@@ -24,6 +24,9 @@ export declare const brainServiceEnvironmentShape: {
     OIDC_EXPECTED_AUDIENCE: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
     AWS_REGION: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
     NOTIFICATIONS_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_DEAD_LETTER_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_QUEUE_ENDPOINT: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
     NOTIFICATIONS_QUEUE_POLL_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
     NOTIFICATIONS_SERVICE_WEBHOOK_URL: z.ZodUnion<[z.ZodPreprocess<z.ZodOptional<z.ZodURL>>, z.ZodLiteral<"false">]>;
     NOTIFICATIONS_SERVICE_PORT: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
@@ -93,6 +96,8 @@ export declare const brainServiceEnvironmentShape: {
         true: "true";
         false: "false";
     }>, z.ZodTransform<boolean, "0" | "1" | "false" | "true">>>>>;
+    INBOX_BATCH_ITEMS_PER_HOUR: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    AWS_LAMBDA_FUNCTION_NAME: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
     ENABLE_BENCH_ROUTES: z.ZodDefault<z.ZodPreprocess<z.ZodOptional<z.ZodPipe<z.ZodEnum<{
         0: "0";
         1: "1";
@@ -184,6 +189,9 @@ export declare const brainServiceEnvironmentSchema: z.ZodPipe<z.ZodObject<{
     OIDC_EXPECTED_AUDIENCE: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
     AWS_REGION: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
     NOTIFICATIONS_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_DEAD_LETTER_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_QUEUE_ENDPOINT: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
     NOTIFICATIONS_QUEUE_POLL_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
     NOTIFICATIONS_SERVICE_WEBHOOK_URL: z.ZodUnion<[z.ZodPreprocess<z.ZodOptional<z.ZodURL>>, z.ZodLiteral<"false">]>;
     NOTIFICATIONS_SERVICE_PORT: z.ZodPreprocess<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
@@ -253,6 +261,8 @@ export declare const brainServiceEnvironmentSchema: z.ZodPipe<z.ZodObject<{
         true: "true";
         false: "false";
     }>, z.ZodTransform<boolean, "0" | "1" | "false" | "true">>>>>;
+    INBOX_BATCH_ITEMS_PER_HOUR: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    AWS_LAMBDA_FUNCTION_NAME: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
     ENABLE_BENCH_ROUTES: z.ZodDefault<z.ZodPreprocess<z.ZodOptional<z.ZodPipe<z.ZodEnum<{
         0: "0";
         1: "1";
@@ -357,6 +367,9 @@ export declare const brainServiceEnvironmentSchema: z.ZodPipe<z.ZodObject<{
     OIDC_EXPECTED_AUDIENCE?: string | undefined;
     AWS_REGION?: string | undefined;
     NOTIFICATIONS_QUEUE_URL?: string | undefined;
+    INBOX_QUEUE_URL?: string | undefined;
+    INBOX_DEAD_LETTER_QUEUE_URL?: string | undefined;
+    INBOX_QUEUE_ENDPOINT?: string | undefined;
     NOTIFICATIONS_QUEUE_POLL_URL?: string | undefined;
     NOTIFICATIONS_SERVICE_WEBHOOK_URL?: string | undefined;
     BRAIN_SERVICE_REGISTRY_URL?: string | undefined;
@@ -394,6 +407,8 @@ export declare const brainServiceEnvironmentSchema: z.ZodPipe<z.ZodObject<{
     SKILL_SEMANTIC_SEARCH_RATE_LIMIT_PER_MIN?: number | undefined;
     BITSTRING_STATUS_LIST_SIZE?: number | undefined;
     CREDENTIAL_REFRESH_DIGEST_SECRET?: string | undefined;
+    INBOX_BATCH_ITEMS_PER_HOUR?: string | undefined;
+    AWS_LAMBDA_FUNCTION_NAME?: string | undefined;
 }, {
     NODE_ENV: "development" | "test" | "production";
     PORT: number;
@@ -431,6 +446,9 @@ export declare const brainServiceEnvironmentSchema: z.ZodPipe<z.ZodObject<{
     OIDC_EXPECTED_AUDIENCE?: string | undefined;
     AWS_REGION?: string | undefined;
     NOTIFICATIONS_QUEUE_URL?: string | undefined;
+    INBOX_QUEUE_URL?: string | undefined;
+    INBOX_DEAD_LETTER_QUEUE_URL?: string | undefined;
+    INBOX_QUEUE_ENDPOINT?: string | undefined;
     NOTIFICATIONS_QUEUE_POLL_URL?: string | undefined;
     NOTIFICATIONS_SERVICE_WEBHOOK_URL?: string | undefined;
     NOTIFICATIONS_SERVICE_PORT?: number | undefined;
@@ -469,6 +487,8 @@ export declare const brainServiceEnvironmentSchema: z.ZodPipe<z.ZodObject<{
     SKILL_SEMANTIC_SEARCH_RATE_LIMIT_PER_MIN?: number | undefined;
     BITSTRING_STATUS_LIST_SIZE?: number | undefined;
     CREDENTIAL_REFRESH_DIGEST_SECRET?: string | undefined;
+    INBOX_BATCH_ITEMS_PER_HOUR?: string | undefined;
+    AWS_LAMBDA_FUNCTION_NAME?: string | undefined;
 }>>;
 declare const notificationRuntimeEnvironmentSchema: z.ZodPipe<z.ZodObject<{
     NODE_ENV: z.ZodDefault<z.ZodEnum<{
@@ -529,6 +549,27 @@ declare const credentialRefreshRuntimeEnvironmentSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type CredentialRefreshRuntimeEnvironment = z.output<typeof credentialRefreshRuntimeEnvironmentSchema>;
 export declare const getCredentialRefreshRuntimeEnvironment: () => CredentialRefreshRuntimeEnvironment;
+declare const inboxBatchRuntimeEnvironmentSchema: z.ZodObject<{
+    INBOX_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_DEAD_LETTER_QUEUE_URL: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    INBOX_QUEUE_ENDPOINT: z.ZodPreprocess<z.ZodOptional<z.ZodURL>>;
+    AWS_REGION: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    NODE_ENV: z.ZodDefault<z.ZodEnum<{
+        development: "development";
+        test: "test";
+        production: "production";
+    }>>;
+    IS_OFFLINE: z.ZodDefault<z.ZodPreprocess<z.ZodOptional<z.ZodPipe<z.ZodEnum<{
+        0: "0";
+        1: "1";
+        true: "true";
+        false: "false";
+    }>, z.ZodTransform<boolean, "0" | "1" | "false" | "true">>>>>;
+    AWS_LAMBDA_FUNCTION_NAME: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+    INBOX_BATCH_ITEMS_PER_HOUR: z.ZodPreprocess<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+export type InboxBatchRuntimeEnvironment = z.output<typeof inboxBatchRuntimeEnvironmentSchema>;
+export declare const getInboxBatchRuntimeEnvironment: () => InboxBatchRuntimeEnvironment;
 export type BrainServiceEnvironment = z.output<typeof brainServiceEnvironmentSchema>;
 export declare const parseBrainServiceEnvironment: (raw: Record<string, unknown>, source?: string) => BrainServiceEnvironment;
 export declare const environment: {
@@ -569,6 +610,9 @@ export declare const environment: {
     OIDC_EXPECTED_AUDIENCE?: string | undefined;
     AWS_REGION?: string | undefined;
     NOTIFICATIONS_QUEUE_URL?: string | undefined;
+    INBOX_QUEUE_URL?: string | undefined;
+    INBOX_DEAD_LETTER_QUEUE_URL?: string | undefined;
+    INBOX_QUEUE_ENDPOINT?: string | undefined;
     NOTIFICATIONS_QUEUE_POLL_URL?: string | undefined;
     NOTIFICATIONS_SERVICE_WEBHOOK_URL?: string | undefined;
     BRAIN_SERVICE_REGISTRY_URL?: string | undefined;
@@ -606,6 +650,8 @@ export declare const environment: {
     SKILL_SEMANTIC_SEARCH_RATE_LIMIT_PER_MIN?: number | undefined;
     BITSTRING_STATUS_LIST_SIZE?: number | undefined;
     CREDENTIAL_REFRESH_DIGEST_SECRET?: string | undefined;
+    INBOX_BATCH_ITEMS_PER_HOUR?: string | undefined;
+    AWS_LAMBDA_FUNCTION_NAME?: string | undefined;
 };
 export {};
 //# sourceMappingURL=environment.d.ts.map

package/dist/config/environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/config/environment.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2EhB,CAAC;AAE1B,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDpC,CAAC;AAEP,QAAA,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAcnC,CAAC;AAER,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAEnG,eAAO,MAAM,iCAAiC,QAAO,8BAK/C,CAAC;AAEP,QAAA,MAAM,yCAAyC;;;;;;;;;;;;;;;iBAsBzC,CAAC;AAEP,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CACtD,OAAO,yCAAyC,CACnD,CAAC;AAGF,eAAO,MAAM,sCAAsC,QAAO,mCAKpD,CAAC;AAEP,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAErF,eAAO,MAAM,4BAA4B,GACrC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAA8B,KAC/B,uBAoBF,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA4C,CAAC"}
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/config/environment.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgFhB,CAAC;AAE1B,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDpC,CAAC;AAEP,QAAA,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAcnC,CAAC;AAER,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAEnG,eAAO,MAAM,iCAAiC,QAAO,8BAK/C,CAAC;AAEP,QAAA,MAAM,yCAAyC;;;;;;;;;;;;;;;iBAsBzC,CAAC;AAEP,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CACtD,OAAO,yCAAyC,CACnD,CAAC;AAGF,eAAO,MAAM,sCAAsC,QAAO,mCAKpD,CAAC;AAEP,QAAA,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;iBAStC,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAG/F,eAAO,MAAM,+BAA+B,QAAO,4BAK7C,CAAC;AAEP,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAErF,eAAO,MAAM,4BAA4B,GACrC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAA8B,KAC/B,uBAoBF,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAA4C,CAAC"}

package/dist/credential-refresh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-refresh.d.ts","sourceRoot":"","sources":["../src/credential-refresh.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AAgBpF,OAAO,EACH,8BAA8B,EAKjC,MAAM,0CAA0C,CAAC;AAclD,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAE1C,eAAO,MAAM,0BAA0B,QAAO,OACyB,CAAC;AAExE,MAAM,MAAM,8BAA8B,GAAG;IAEzC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AA+MF,eAAO,MAAM,8BAA8B,EAAE,kBAAkB,CAC3D,8BAA8B,CAkKjC,CAAC;AAEF,eAAO,MAAM,GAAG;;CAAY,CAAC;AAK7B,eAAe,GAAG,CAAC"}
+{"version":3,"file":"credential-refresh.d.ts","sourceRoot":"","sources":["../src/credential-refresh.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AAgBpF,OAAO,EACH,8BAA8B,EAKjC,MAAM,0CAA0C,CAAC;AAclD,OAAO,EAAE,8BAA8B,EAAE,CAAC;AAE1C,eAAO,MAAM,0BAA0B,QAAO,OACyB,CAAC;AAExE,MAAM,MAAM,8BAA8B,GAAG;IAEzC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAEhC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAmNF,eAAO,MAAM,8BAA8B,EAAE,kBAAkB,CAC3D,8BAA8B,CAkKjC,CAAC;AAEF,eAAO,MAAM,GAAG;;CAAY,CAAC;AAK7B,eAAe,GAAG,CAAC"}

package/dist/helpers/activity.helpers.d.ts

@@ -1,6 +1,7 @@
 import type { LogCredentialActivityParams, CredentialActivityEventType, CredentialActivityRecipientType, CredentialActivitySourceType } from '../types/activity';
 export declare const logCredentialActivity: (params: LogCredentialActivityParams) => Promise<string>;
 export declare const logCredentialSent: (params: {
+    onBehalfOf?: string;
     actorProfileId?: string;
     recipientType: CredentialActivityRecipientType;
     recipientIdentifier: string;
@@ -15,6 +16,7 @@ export declare const logCredentialSent: (params: {
     activityId?: string;
 }) => Promise<string>;
 export declare const logCredentialDelivered: (params: {
+    onBehalfOf?: string;
     activityId: string;
     actorProfileId: string;
     recipientType: CredentialActivityRecipientType;
@@ -28,6 +30,7 @@ export declare const logCredentialDelivered: (params: {
     metadata?: Record<string, unknown>;
 }) => Promise<string>;
 export declare const logCredentialClaimed: (params: {
+    onBehalfOf?: string;
     activityId?: string;
     actorProfileId: string;
     recipientType: CredentialActivityRecipientType;
@@ -50,6 +53,7 @@ export declare const logCredentialExpired: (params: {
     source: CredentialActivitySourceType;
 }) => Promise<string>;
 export declare const logCredentialFailed: (params: {
+    onBehalfOf?: string;
     activityId?: string;
     actorProfileId: string;
     recipientType: CredentialActivityRecipientType;

package/dist/helpers/activity.helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"activity.helpers.d.ts","sourceRoot":"","sources":["../../src/helpers/activity.helpers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACR,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,4BAA4B,EAC/B,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,qBAAqB,GAC9B,QAAQ,2BAA2B,KACpC,OAAO,CAAC,MAAM,CAShB,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAU,QAAQ;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,KAAG,OAAO,CAAC,MAAM,CAOjB,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAU,QAAQ;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAU,QAAQ;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAU,QAAQ;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,4BAA4B,CAAC;CACxC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAU,QAAQ;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,YAAY,EACR,2BAA2B,EAC3B,+BAA+B,EAC/B,4BAA4B,GAC/B,CAAC"}
+{"version":3,"file":"activity.helpers.d.ts","sourceRoot":"","sources":["../../src/helpers/activity.helpers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACR,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,4BAA4B,EAC/B,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,qBAAqB,GAC9B,QAAQ,2BAA2B,KACpC,OAAO,CAAC,MAAM,CAShB,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAAU,QAAQ;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,KAAG,OAAO,CAAC,MAAM,CAOjB,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAU,QAAQ;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAU,QAAQ;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAU,QAAQ;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,4BAA4B,CAAC;CACxC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAU,QAAQ;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,+BAA+B,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC,KAAG,OAAO,CAAC,MAAM,CAKjB,CAAC;AAEF,YAAY,EACR,2BAA2B,EAC3B,+BAA+B,EAC/B,4BAA4B,GAC/B,CAAC"}

package/dist/helpers/contact-method.helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contact-method.helpers.d.ts","sourceRoot":"","sources":["../../src/helpers/contact-method.helpers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKlD,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AASvE,eAAO,MAAM,sCAAsC,GAC/C,iBAAiB,MAAM,EACvB,MAAM,OAAO,GAAG,OAAO,EACvB,iBAAa,EACb,oBAAoB,cAAc,GAAG,MAAM,GAAG,SAAS,KACxD,OAAO,CAAC,MAAM,CAchB,CAAC;AAEF,eAAO,MAAM,sCAAsC,GAC/C,OAAO,MAAM,KACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAUvB,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAChC,iBAAiB,MAAM,EACvB,iBAAa,EACb,iCAA+B,KAChC,OAAO,CAAC,MAAM,CAgBhB,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAU,OAAO,MAAM,KAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAgB1F,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAAU,OAAO,MAAM,KAAG,OAAO,CAAC,OAAO,CAgB9E,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,MAUhD,CAAC"}
+{"version":3,"file":"contact-method.helpers.d.ts","sourceRoot":"","sources":["../../src/helpers/contact-method.helpers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKlD,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AASvE,eAAO,MAAM,sCAAsC,GAC/C,iBAAiB,MAAM,EACvB,MAAM,OAAO,GAAG,OAAO,EACvB,iBAAa,EACb,oBAAoB,cAAc,GAAG,MAAM,GAAG,SAAS,KACxD,OAAO,CAAC,MAAM,CAchB,CAAC;AAEF,eAAO,MAAM,sCAAsC,GAC/C,OAAO,MAAM,KACd,OAAO,CAAC,MAAM,GAAG,IAAI,CAUvB,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAChC,iBAAiB,MAAM,EACvB,iBAAa,EACb,iCAA+B,KAChC,OAAO,CAAC,MAAM,CAgBhB,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAU,OAAO,MAAM,KAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAgB1F,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAAU,OAAO,MAAM,KAAG,OAAO,CAAC,OAAO,CAgB9E,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,MAShD,CAAC"}

package/dist/helpers/contact-method.helpers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contact-method.helpers.test.d.ts.map

package/dist/helpers/contact-method.helpers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contact-method.helpers.test.d.ts","sourceRoot":"","sources":["../../src/helpers/contact-method.helpers.test.ts"],"names":[],"mappings":""}