@learncard/network-plugin 3.0.0 → 3.1.0

package/dist/lcn-plugin.esm.js

@@ -617,10 +617,10 @@ function $constructor(name, initializer3, params) {
   let Definition = _Definition;
   Object.defineProperty(Definition, "name", { value: name });
   function _(def) {
-    var _a4;
+    var _a5;
     const inst = params?.Parent ? new Definition() : this;
     init(inst, def);
-    (_a4 = inst._zod).deferred ?? (_a4.deferred = []);
+    (_a5 = inst._zod).deferred ?? (_a5.deferred = []);
     for (const fn of inst._zod.deferred) {
       fn();
     }
@@ -1286,8 +1286,8 @@ function explicitlyAborted(x, startIndex = 0) {
 __name(explicitlyAborted, "explicitlyAborted");
 function prefixIssues(path, issues) {
   return issues.map((iss) => {
-    var _a4;
-    (_a4 = iss).path ?? (_a4.path = []);
+    var _a5;
+    (_a5 = iss).path ?? (_a5.path = []);
     iss.path.unshift(path);
     return iss;
   });
@@ -1490,7 +1490,7 @@ __name(formatError, "formatError");
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
   const processError = /* @__PURE__ */ __name((error52, path = []) => {
-    var _a4, _b;
+    var _a5, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
         issue2.errors.map((issues) => processError({ issues }, [...path, ...issue2.path]));
@@ -1511,7 +1511,7 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
           const terminal = i === fullpath.length - 1;
           if (typeof el === "string") {
             curr.properties ?? (curr.properties = {});
-            (_a4 = curr.properties)[el] ?? (_a4[el] = { errors: [] });
+            (_a5 = curr.properties)[el] ?? (_a5[el] = { errors: [] });
             curr = curr.properties[el];
           } else {
             curr.items ?? (curr.items = []);
@@ -1816,10 +1816,10 @@ var sha512_base64url = /* @__PURE__ */ fixedBase64url(86);
 
 // ../../../node_modules/zod/v4/core/checks.js
 var $ZodCheck = /* @__PURE__ */ $constructor("$ZodCheck", (inst, def) => {
-  var _a4;
+  var _a5;
   inst._zod ?? (inst._zod = {});
   inst._zod.def = def;
-  (_a4 = inst._zod).onattach ?? (_a4.onattach = []);
+  (_a5 = inst._zod).onattach ?? (_a5.onattach = []);
 });
 var numericOriginMap = {
   number: "number",
@@ -1885,8 +1885,8 @@ var $ZodCheckGreaterThan = /* @__PURE__ */ $constructor("$ZodCheckGreaterThan",
 var $ZodCheckMultipleOf = /* @__PURE__ */ $constructor("$ZodCheckMultipleOf", (inst, def) => {
   $ZodCheck.init(inst, def);
   inst._zod.onattach.push((inst2) => {
-    var _a4;
-    (_a4 = inst2._zod.bag).multipleOf ?? (_a4.multipleOf = def.value);
+    var _a5;
+    (_a5 = inst2._zod.bag).multipleOf ?? (_a5.multipleOf = def.value);
   });
   inst._zod.check = (payload) => {
     if (typeof payload.value !== typeof def.value)
@@ -2019,9 +2019,9 @@ var $ZodCheckBigIntFormat = /* @__PURE__ */ $constructor("$ZodCheckBigIntFormat"
   };
 });
 var $ZodCheckMaxSize = /* @__PURE__ */ $constructor("$ZodCheckMaxSize", (inst, def) => {
-  var _a4;
+  var _a5;
   $ZodCheck.init(inst, def);
-  (_a4 = inst._zod.def).when ?? (_a4.when = (payload) => {
+  (_a5 = inst._zod.def).when ?? (_a5.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.size !== void 0;
   });
@@ -2047,9 +2047,9 @@ var $ZodCheckMaxSize = /* @__PURE__ */ $constructor("$ZodCheckMaxSize", (inst, d
   };
 });
 var $ZodCheckMinSize = /* @__PURE__ */ $constructor("$ZodCheckMinSize", (inst, def) => {
-  var _a4;
+  var _a5;
   $ZodCheck.init(inst, def);
-  (_a4 = inst._zod.def).when ?? (_a4.when = (payload) => {
+  (_a5 = inst._zod.def).when ?? (_a5.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.size !== void 0;
   });
@@ -2075,9 +2075,9 @@ var $ZodCheckMinSize = /* @__PURE__ */ $constructor("$ZodCheckMinSize", (inst, d
   };
 });
 var $ZodCheckSizeEquals = /* @__PURE__ */ $constructor("$ZodCheckSizeEquals", (inst, def) => {
-  var _a4;
+  var _a5;
   $ZodCheck.init(inst, def);
-  (_a4 = inst._zod.def).when ?? (_a4.when = (payload) => {
+  (_a5 = inst._zod.def).when ?? (_a5.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.size !== void 0;
   });
@@ -2105,9 +2105,9 @@ var $ZodCheckSizeEquals = /* @__PURE__ */ $constructor("$ZodCheckSizeEquals", (i
   };
 });
 var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (inst, def) => {
-  var _a4;
+  var _a5;
   $ZodCheck.init(inst, def);
-  (_a4 = inst._zod.def).when ?? (_a4.when = (payload) => {
+  (_a5 = inst._zod.def).when ?? (_a5.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.length !== void 0;
   });
@@ -2134,9 +2134,9 @@ var $ZodCheckMaxLength = /* @__PURE__ */ $constructor("$ZodCheckMaxLength", (ins
   };
 });
 var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (inst, def) => {
-  var _a4;
+  var _a5;
   $ZodCheck.init(inst, def);
-  (_a4 = inst._zod.def).when ?? (_a4.when = (payload) => {
+  (_a5 = inst._zod.def).when ?? (_a5.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.length !== void 0;
   });
@@ -2163,9 +2163,9 @@ var $ZodCheckMinLength = /* @__PURE__ */ $constructor("$ZodCheckMinLength", (ins
   };
 });
 var $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals", (inst, def) => {
-  var _a4;
+  var _a5;
   $ZodCheck.init(inst, def);
-  (_a4 = inst._zod.def).when ?? (_a4.when = (payload) => {
+  (_a5 = inst._zod.def).when ?? (_a5.when = (payload) => {
     const val = payload.value;
     return !nullish(val) && val.length !== void 0;
   });
@@ -2194,7 +2194,7 @@ var $ZodCheckLengthEquals = /* @__PURE__ */ $constructor("$ZodCheckLengthEquals"
   };
 });
 var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat", (inst, def) => {
-  var _a4, _b;
+  var _a5, _b;
   $ZodCheck.init(inst, def);
   inst._zod.onattach.push((inst2) => {
     const bag = inst2._zod.bag;
@@ -2205,7 +2205,7 @@ var $ZodCheckStringFormat = /* @__PURE__ */ $constructor("$ZodCheckStringFormat"
     }
   });
   if (def.pattern)
-    (_a4 = inst._zod).check ?? (_a4.check = (payload) => {
+    (_a5 = inst._zod).check ?? (_a5.check = (payload) => {
       def.pattern.lastIndex = 0;
       if (def.pattern.test(payload.value))
         return;
@@ -2410,7 +2410,7 @@ var version = {
 
 // ../../../node_modules/zod/v4/core/schemas.js
 var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
-  var _a4;
+  var _a5;
   inst ?? (inst = {});
   inst._zod.def = def;
   inst._zod.bag = inst._zod.bag || {};
@@ -2425,7 +2425,7 @@ var $ZodType = /* @__PURE__ */ $constructor("$ZodType", (inst, def) => {
     }
   }
   if (checks.length === 0) {
-    (_a4 = inst._zod).deferred ?? (_a4.deferred = []);
+    (_a5 = inst._zod).deferred ?? (_a5.deferred = []);
     inst._zod.deferred?.push(() => {
       inst._zod.run = inst._zod.parse;
     });
@@ -11816,7 +11816,7 @@ function initializeContext(params) {
 }
 __name(initializeContext, "initializeContext");
 function process(schema, ctx, _params = { path: [], schemaPath: [] }) {
-  var _a4;
+  var _a5;
   const def = schema._zod.def;
   const seen = ctx.seen.get(schema);
   if (seen) {
@@ -11864,7 +11864,7 @@ function process(schema, ctx, _params = { path: [], schemaPath: [] }) {
     delete result.schema.default;
   }
   if (ctx.io === "input" && "_prefault" in result.schema)
-    (_a4 = result.schema).default ?? (_a4.default = result.schema._prefault);
+    (_a5 = result.schema).default ?? (_a5.default = result.schema._prefault);
   delete result.schema._prefault;
   const _result = ctx.seen.get(schema);
   return _result.schema;
@@ -15440,7 +15440,8 @@ var AssociationTypeValidator = external_exports.enum([
   "replacedBy"
 ]).or(external_exports.string());
 var AssociationValidator = external_exports.object({
-  type: external_exports.string().array().nonempty(),
+  // Accept compacted scalars while retaining the existing permissive array contract.
+  type: external_exports.string().min(1).or(external_exports.string().array().nonempty()),
   associationType: AssociationTypeValidator,
   sourceId: external_exports.string().optional(),
   targetId: external_exports.string()
@@ -16263,11 +16264,48 @@ var ConsentFlowContractDetailsValidator = external_exports.object({
   updatedAt: external_exports.string(),
   expiresAt: external_exports.string().optional(),
   autoBoosts: external_exports.string().array().optional(),
-  writers: external_exports.array(LCNProfileValidator).optional()
+  writers: external_exports.array(LCNProfileValidator).optional(),
+  recipients: external_exports.array(LCNPublicProfileValidator.extend({ did: external_exports.string() })).optional(),
+  audienceVersion: external_exports.number().int().nonnegative().optional()
 });
-var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied"]).nullable();
+var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied", "cancelled"]).nullable();
 var ConsentFlowContractRequestReadStatusValidator = external_exports.enum(["unseen", "seen"]).nullable();
-var ConsentFlowContractRequestForProfileValidator = external_exports.object({
+var ConsentFlowReferralValidator = external_exports.object({
+  requestId: external_exports.string(),
+  requestedBy: external_exports.string(),
+  externalReferenceId: external_exports.string().max(256).optional()
+});
+var ContractRequestFieldsValidator = ConsentFlowReferralValidator.partial().extend({
+  requestedAt: external_exports.string().optional(),
+  message: external_exports.string().max(500).optional()
+});
+var SendContractRequestValidator = external_exports.object({
+  contractUri: external_exports.string(),
+  targetProfileId: external_exports.string(),
+  externalReferenceId: external_exports.string().trim().min(1).max(256).optional(),
+  message: external_exports.string().trim().max(500).optional()
+});
+var ConsentFlowWebhookMetadataValidator = external_exports.object({
+  eventId: external_exports.string(),
+  deliveryKey: external_exports.string(),
+  event: external_exports.enum([
+    "request_sent",
+    "request_accepted",
+    "request_denied",
+    "request_cancelled",
+    "consent_created",
+    "consent_updated",
+    "consent_withdrawn",
+    "credentials_synced"
+  ]),
+  contractUri: external_exports.string(),
+  termsUri: external_exports.string().optional(),
+  requestId: external_exports.string().optional(),
+  requestedBy: external_exports.string().optional(),
+  externalReferenceId: external_exports.string().optional(),
+  recipientRole: external_exports.enum(["owner", "recipient", "requester", "target"])
+});
+var ConsentFlowContractRequestForProfileValidator = ContractRequestFieldsValidator.extend({
   profile: LCNProfileValidator,
   status: ConsentFlowContractRequestStatusValidator,
   readStatus: ConsentFlowContractRequestReadStatusValidator.optional()
@@ -16313,6 +16351,7 @@ var PaginatedConsentFlowTermsValidator = PaginationResponseValidator.extend({
     expiresAt: external_exports.string().optional(),
     oneTime: external_exports.boolean().optional(),
     terms: ConsentFlowTermsValidator,
+    referral: ConsentFlowReferralValidator.optional(),
     contract: ConsentFlowContractDetailsValidator,
     uri: external_exports.string(),
     consenter: LCNProfileValidator,
@@ -16408,6 +16447,7 @@ var ConsentFlowTransactionValidator = external_exports.object({
   oneTime: external_exports.boolean().optional(),
   terms: ConsentFlowTermsValidator.optional(),
   guardianApproval: ConsentFlowGuardianApprovalValidator.optional(),
+  referral: ConsentFlowReferralValidator.optional(),
   id: external_exports.string(),
   action: ConsentFlowTransactionActionValidator,
   date: external_exports.string(),
@@ -16418,6 +16458,7 @@ var HolderExportConsentRecordValidator = external_exports.object({
   status: ConsentFlowTermsStatusValidator,
   contract: ConsentFlowContractDetailsValidator,
   terms: ConsentFlowTermsValidator,
+  referral: ConsentFlowReferralValidator.optional(),
   transactions: ConsentFlowTransactionValidator.array()
 });
 var HolderExportMetadataValidator = external_exports.object({
@@ -17154,7 +17195,7 @@ var AppStoreListingSubmitterValidator = external_exports.object({
   displayName: external_exports.string(),
   email: external_exports.string().optional()
 });
-var AppStoreListingValidator = external_exports.object({
+var AppStoreListingFieldsValidator = external_exports.object({
   listing_id: external_exports.string(),
   slug: external_exports.string().optional(),
   display_name: external_exports.string(),
@@ -17180,15 +17221,33 @@ var AppStoreListingValidator = external_exports.object({
   submitter: AppStoreListingSubmitterValidator.optional(),
   contact_email: external_exports.string().email().optional()
 });
+var PendingListingUpdateStatusValidator = external_exports.enum(["DRAFT", "PENDING_REVIEW"]);
+var PendingListingUpdateValidator = external_exports.object({
+  status: PendingListingUpdateStatusValidator,
+  submitted_at: external_exports.string().optional(),
+  changes: AppStoreListingFieldsValidator.omit({
+    listing_id: true,
+    app_listing_status: true,
+    promotion_level: true,
+    submitted_at: true,
+    submitter: true
+  }).partial(),
+  manifest_version: external_exports.number().int().min(1).optional()
+});
+var AppStoreListingValidator = AppStoreListingFieldsValidator.extend({
+  pending_update: PendingListingUpdateValidator.optional()
+});
 var AppStoreListingCreateValidator = AppStoreListingValidator.omit({
   listing_id: true,
   app_listing_status: true,
-  promotion_level: true
+  promotion_level: true,
+  pending_update: true
 });
 var AppStoreListingUpdateValidator = AppStoreListingValidator.partial().omit({
   listing_id: true,
   app_listing_status: true,
-  promotion_level: true
+  promotion_level: true,
+  pending_update: true
 });
 var InstalledAppValidator = AppStoreListingValidator.extend({
   installed_at: external_exports.string()
@@ -17203,12 +17262,87 @@ var AppBoostValidator = external_exports.object({
   templateAlias: external_exports.string().min(1).max(50).regex(/^[a-z0-9-]+$/),
   boostUri: external_exports.string()
 });
-var SendCredentialEventValidator = external_exports.object({
+var InlineWalletCategoryValidator = external_exports.enum([
+  "Achievement",
+  "Skill",
+  "ID",
+  "Learning History",
+  "Work History",
+  "Social Badges",
+  "Membership",
+  "Accomplishment",
+  "Experiences",
+  "Accommodation",
+  "Family"
+]);
+var InlineAlignmentValidator = external_exports.object({
+  name: external_exports.string(),
+  url: external_exports.string(),
+  framework: external_exports.string().optional(),
+  code: external_exports.string().optional()
+}).passthrough();
+var InlineEvidenceValidator = external_exports.object({
+  id: external_exports.string().optional(),
+  name: external_exports.string().optional(),
+  narrative: external_exports.string().optional()
+}).passthrough();
+var InlineWalletSkillTagValidator = external_exports.object({
+  frameworkId: external_exports.string(),
+  id: external_exports.string(),
+  proficiencyLevel: external_exports.string().optional()
+}).passthrough();
+var SimpleInlineCredentialTemplateValidator = external_exports.object({
+  rawCredential: external_exports.undefined().optional(),
+  name: external_exports.string(),
+  description: external_exports.string().optional(),
+  image: external_exports.string().optional(),
+  issuerName: external_exports.string().optional(),
+  achievementType: external_exports.string().optional(),
+  category: InlineWalletCategoryValidator.optional(),
+  criteria: external_exports.object({
+    narrative: external_exports.string().optional(),
+    url: external_exports.string().optional()
+  }).passthrough().optional(),
+  alignments: external_exports.array(InlineAlignmentValidator).optional(),
+  tags: external_exports.array(external_exports.string()).optional(),
+  activity: external_exports.object({
+    startDate: external_exports.string().optional(),
+    endDate: external_exports.string().optional()
+  }).passthrough().optional(),
+  credits: external_exports.object({
+    earned: external_exports.union([external_exports.number(), external_exports.string()]).optional(),
+    available: external_exports.union([external_exports.number(), external_exports.string()]).optional()
+  }).passthrough().optional(),
+  validUntil: external_exports.string().optional(),
+  evidence: external_exports.array(InlineEvidenceValidator).optional(),
+  walletSkills: external_exports.array(InlineWalletSkillTagValidator).optional()
+}).passthrough();
+var RawInlineCredentialTemplateValidator = external_exports.object({
+  rawCredential: external_exports.record(external_exports.string(), external_exports.unknown()),
+  category: InlineWalletCategoryValidator.optional(),
+  walletSkills: external_exports.array(InlineWalletSkillTagValidator).optional()
+}).passthrough();
+var InlineCredentialTemplateValidator = external_exports.union([
+  RawInlineCredentialTemplateValidator,
+  SimpleInlineCredentialTemplateValidator
+]);
+var LegacySendCredentialEventValidator = external_exports.object({
   type: external_exports.literal("send-credential"),
   templateAlias: external_exports.string(),
   templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   preventDuplicateClaim: external_exports.boolean().optional()
 });
+var InlineSendCredentialEventValidator = external_exports.object({
+  type: external_exports.literal("send-credential"),
+  alias: external_exports.string(),
+  template: InlineCredentialTemplateValidator,
+  templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  preventDuplicateClaim: external_exports.boolean().optional()
+});
+var SendCredentialEventValidator = external_exports.union([
+  LegacySendCredentialEventValidator,
+  InlineSendCredentialEventValidator
+]);
 var CheckCredentialEventValidator = external_exports.object({
   type: external_exports.literal("check-credential"),
   templateAlias: external_exports.string().optional(),
@@ -17303,7 +17437,119 @@ var GetCountersEventValidator = external_exports.object({
   type: external_exports.literal("get-counters"),
   keys: external_exports.array(counterKeyValidator).min(1).max(50).optional()
 });
-var AppEventValidator = external_exports.discriminatedUnion("type", [
+var ConsentRequestWalletCategoryValidator = external_exports.enum([
+  "Achievement",
+  "Skill",
+  "ID",
+  "Learning History",
+  "Work History",
+  "Social Badges",
+  "Membership",
+  "Accomplishment",
+  "Experiences",
+  "Accommodation",
+  "Family"
+]);
+var ConsentRequestPersonalFieldValidator = external_exports.enum([
+  "name",
+  "email",
+  "phone",
+  "birthDate",
+  "country",
+  "avatar"
+]);
+var ConsentRequestValidator = external_exports.object({
+  read: external_exports.object({
+    credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).optional(),
+    personalFields: external_exports.array(ConsentRequestPersonalFieldValidator).optional()
+  }).optional(),
+  write: external_exports.object({
+    credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).optional()
+  }).optional(),
+  reason: external_exports.string().optional()
+});
+var NormalizedConsentScopesValidator = external_exports.object({
+  read: external_exports.object({
+    credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).default([]),
+    personalFields: external_exports.array(ConsentRequestPersonalFieldValidator).default([])
+  }),
+  write: external_exports.object({
+    credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).default([])
+  })
+});
+var CapturedTemplateRecordValidator = external_exports.object({
+  alias: external_exports.string(),
+  template: InlineCredentialTemplateValidator,
+  version: external_exports.number().int().min(1),
+  lastUsedAt: external_exports.string()
+}).passthrough();
+var CapturedConsentRecordValidator = external_exports.object({
+  scopes: NormalizedConsentScopesValidator,
+  reason: external_exports.string().optional(),
+  lastUsedAt: external_exports.string()
+}).passthrough();
+var AppManifestValidator = external_exports.object({
+  manifestVersion: external_exports.literal(1),
+  appUrl: external_exports.string(),
+  appKey: external_exports.string().max(200).optional(),
+  suggestedName: external_exports.string().optional(),
+  suggestedIconUrl: external_exports.string().optional(),
+  permissions: external_exports.array(external_exports.string()).default([]),
+  templates: external_exports.array(CapturedTemplateRecordValidator).default([]),
+  consentRequests: external_exports.array(CapturedConsentRecordValidator).default([]),
+  usedConsentContract: external_exports.boolean().optional(),
+  featuresLaunched: external_exports.array(external_exports.string()).default([]),
+  counterKeys: external_exports.array(external_exports.string()).default([]),
+  usedLearnerContext: external_exports.boolean(),
+  usedNotifications: external_exports.boolean(),
+  firstCapturedAt: external_exports.string(),
+  lastUpdatedAt: external_exports.string()
+}).passthrough();
+var AppManifestVersionStatusValidator = external_exports.enum(["draft", "active", "superseded"]);
+var AppManifestVersionValidator = external_exports.object({
+  id: external_exports.string(),
+  version: external_exports.number().int().min(1),
+  manifestHash: external_exports.string(),
+  manifest: AppManifestValidator,
+  status: AppManifestVersionStatusValidator,
+  createdAt: external_exports.string(),
+  activatedAt: external_exports.string().optional()
+});
+var AppManifestStringDiffValidator = external_exports.object({
+  added: external_exports.array(external_exports.string()),
+  removed: external_exports.array(external_exports.string()),
+  changed: external_exports.array(external_exports.string())
+});
+var AppManifestTemplateRefValidator = external_exports.object({
+  alias: external_exports.string(),
+  version: external_exports.number().int().min(1)
+});
+var AppManifestTemplateChangeValidator = external_exports.object({
+  alias: external_exports.string(),
+  fromVersion: external_exports.number().int().min(1),
+  toVersion: external_exports.number().int().min(1)
+});
+var AppManifestDiffValidator = external_exports.object({
+  permissions: AppManifestStringDiffValidator,
+  templates: external_exports.object({
+    added: external_exports.array(AppManifestTemplateRefValidator),
+    removed: external_exports.array(AppManifestTemplateRefValidator),
+    changed: external_exports.array(AppManifestTemplateChangeValidator)
+  }),
+  consentScopes: AppManifestStringDiffValidator,
+  featurePaths: AppManifestStringDiffValidator,
+  counterKeys: AppManifestStringDiffValidator,
+  requiresReview: external_exports.boolean()
+});
+var UpsertConsentContractEventValidator = external_exports.object({
+  type: external_exports.literal("upsert-consent-contract"),
+  scopes: ConsentRequestValidator
+});
+var UpsertConsentContractResponseValidator = external_exports.object({
+  contractUri: external_exports.string(),
+  created: external_exports.boolean()
+});
+var AppEventValidator = external_exports.union([
   SendCredentialEventValidator,
   CheckCredentialEventValidator,
   CheckIssuanceStatusEventValidator,
@@ -17313,7 +17559,8 @@ var AppEventValidator = external_exports.discriminatedUnion("type", [
   SendNotificationEventValidator,
   IncrementCounterEventValidator,
   GetCounterEventValidator,
-  GetCountersEventValidator
+  GetCountersEventValidator,
+  UpsertConsentContractEventValidator
 ]);
 var AppEventInputValidator = external_exports.object({
   listingId: external_exports.string(),
@@ -17387,6 +17634,21 @@ var AuthSessionError = (_a3 = class extends Error {
     this.name = "AuthSessionError";
   }
 }, __name(_a3, "AuthSessionError"), __name2(_a3, "AuthSessionError"), _a3);
+var _a4;
+var UnsupportedSignInOperationError = (_a4 = class extends Error {
+  constructor(operation, providerType) {
+    super(`${operation} is not supported by ${providerType}`);
+    this.operation = operation;
+    this.providerType = providerType;
+    this.name = "UnsupportedSignInOperationError";
+  }
+}, __name(_a4, "UnsupportedSignInOperationError"), __name2(_a4, "UnsupportedSignInOperationError"), _a4);
+var EscrowPinStatusValidator = external_exports.object({
+  state: external_exports.enum(["none", "enabled", "locked", "stale"]),
+  enabled: external_exports.boolean(),
+  attemptsRemaining: external_exports.number().int().nonnegative(),
+  salt: external_exports.string().optional()
+});
 var BITSTRING_STATUS_PURPOSES = ["revocation", "suspension"];
 var BitstringStatusPurposeValidator = external_exports.enum(BITSTRING_STATUS_PURPOSES);
 var BitstringStatusListEntryValidator = external_exports.object({
@@ -17495,6 +17757,501 @@ var inAppMessagesFlagValidator = external_exports.object({
   version: external_exports.number().default(1),
   messages: external_exports.array(inAppMessageValidator).default([])
 }).passthrough();
+var SHARE_LINK_ID_BYTES = 16;
+var SHARE_CONTENT_KEY_BYTES = 32;
+var SHARE_IV_BYTES = 12;
+var SHARE_TAG_BYTES = 16;
+var MAX_SHARE_CIPHERTEXT_BYTES = 512 * 1024;
+var MAX_SHARE_RECOVERY_JWE_BYTES = 64 * 1024;
+var MAX_SELECTED_CREDENTIALS = 50;
+var MAX_ENDORSEMENTS = 200;
+var MAX_VP_MEMBERS = MAX_SELECTED_CREDENTIALS + MAX_ENDORSEMENTS;
+var MAX_SHARE_SOURCE_URI_CHARS = 2048;
+var MAX_SHARE_LINK_REQUEST_BYTES = 1024 * 1024;
+var SHARE_LINK_PROTOCOL = "lc-share/v1";
+var SHARE_RECOVERY_PROTOCOL = "lc-share-recovery/v1";
+var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+var BASE64URL_LOOKUP = (() => {
+  const table = new Int16Array(128).fill(-1);
+  for (let index = 0; index < BASE64URL_ALPHABET.length; index += 1) {
+    table[BASE64URL_ALPHABET.charCodeAt(index)] = index;
+  }
+  return table;
+})();
+var encodeBase64Url = /* @__PURE__ */ __name2((bytes) => {
+  let output = "";
+  for (let index = 0; index < bytes.length; index += 3) {
+    const first = bytes[index];
+    const second = bytes[index + 1];
+    const third = bytes[index + 2];
+    output += BASE64URL_ALPHABET[first >> 2];
+    output += BASE64URL_ALPHABET[(first & 3) << 4 | (second ?? 0) >> 4];
+    if (second === void 0) break;
+    output += BASE64URL_ALPHABET[(second & 15) << 2 | (third ?? 0) >> 6];
+    if (third === void 0) break;
+    output += BASE64URL_ALPHABET[third & 63];
+  }
+  return output;
+}, "encodeBase64Url");
+var decodeBase64Url = /* @__PURE__ */ __name2((value) => {
+  if (typeof value !== "string") return null;
+  const output = new Uint8Array(Math.floor(value.length * 6 / 8));
+  let bits = 0;
+  let bitCount = 0;
+  let outputIndex = 0;
+  for (let index = 0; index < value.length; index += 1) {
+    const code = value.charCodeAt(index);
+    const digit = code < 128 ? BASE64URL_LOOKUP[code] : -1;
+    if (digit < 0) return null;
+    bits = bits << 6 | digit;
+    bitCount += 6;
+    if (bitCount >= 8) {
+      bitCount -= 8;
+      output[outputIndex] = bits >> bitCount & 255;
+      outputIndex += 1;
+    }
+  }
+  return output;
+}, "decodeBase64Url");
+var isCanonicalBase64Url = /* @__PURE__ */ __name2((value, expectedBytes) => {
+  if (typeof value !== "string") return false;
+  if (expectedBytes !== void 0 && value.length !== Math.ceil(expectedBytes * 4 / 3))
+    return false;
+  const decoded = decodeBase64Url(value);
+  if (decoded === null) return false;
+  if (expectedBytes !== void 0 && decoded.length !== expectedBytes) return false;
+  return encodeBase64Url(decoded) === value;
+}, "isCanonicalBase64Url");
+var decodedBase64UrlByteLength = /* @__PURE__ */ __name2((value) => decodeBase64Url(value)?.length ?? null, "decodedBase64UrlByteLength");
+var utf8ByteLength = /* @__PURE__ */ __name2((value) => new TextEncoder().encode(value).length, "utf8ByteLength");
+var canonicalBase64Url = /* @__PURE__ */ __name2((bytes) => external_exports.string().refine((value) => isCanonicalBase64Url(value, bytes), {
+  message: `must be canonical base64url for exactly ${bytes} bytes`
+}), "canonicalBase64Url");
+var ShareLinkIdValidator = canonicalBase64Url(SHARE_LINK_ID_BYTES);
+var ShareContentKeyValidator = canonicalBase64Url(SHARE_CONTENT_KEY_BYTES);
+var ShareIvValidator = canonicalBase64Url(SHARE_IV_BYTES);
+var ShareCiphertextValidator = external_exports.string().refine(
+  (value) => {
+    if (value.length > Math.ceil(MAX_SHARE_CIPHERTEXT_BYTES * 4 / 3)) return false;
+    const decoded = decodeBase64Url(value);
+    if (decoded === null) return false;
+    if (encodeBase64Url(decoded) !== value) return false;
+    return decoded.length >= SHARE_TAG_BYTES && decoded.length <= MAX_SHARE_CIPHERTEXT_BYTES;
+  },
+  {
+    message: `must be canonical base64url decoding to ${SHARE_TAG_BYTES}..${MAX_SHARE_CIPHERTEXT_BYTES} bytes`
+  }
+);
+var ShareEnvelopeValidator = external_exports.object({
+  v: external_exports.literal(1),
+  alg: external_exports.literal("A256GCM"),
+  iv: ShareIvValidator,
+  ct: ShareCiphertextValidator
+}).strict();
+var safeVersion = external_exports.number().int().min(1).max(2 ** 31 - 1);
+var safeCredentialIndex = external_exports.number().int().min(0).max(MAX_VP_MEMBERS - 1);
+var ShareSelectionEntryValidator = external_exports.object({ credentialIndex: safeCredentialIndex }).strict();
+var ShareEndorsementEntryValidator = external_exports.object({ credentialIndex: safeCredentialIndex, targetCredentialIndex: safeCredentialIndex }).strict();
+var ShareSharerValidator = external_exports.object({
+  profileId: external_exports.string().min(1).max(128),
+  displayName: external_exports.string().min(1).max(120),
+  avatar: external_exports.string().max(2048).optional()
+}).strict();
+var presentationShape = VPValidator.extend({
+  verifiableCredential: VCValidator.array().min(1).max(MAX_VP_MEMBERS)
+});
+var hasBoundedPresentation = /* @__PURE__ */ __name2((value) => {
+  let credentialCount = 0;
+  const ancestors = /* @__PURE__ */ new Set();
+  const visit = /* @__PURE__ */ __name2((node, depth) => {
+    if (node === null || typeof node !== "object") return true;
+    if (depth > 32 || ancestors.has(node)) return false;
+    ancestors.add(node);
+    try {
+      for (const [key, child] of Object.entries(node)) {
+        if (key === "verifiableCredential") {
+          credentialCount += Array.isArray(child) ? child.length : 1;
+          if (credentialCount > MAX_VP_MEMBERS) return false;
+        }
+        if (!visit(child, depth + 1)) return false;
+      }
+      return true;
+    } finally {
+      ancestors.delete(node);
+    }
+  }, "visit");
+  return visit(value, 0);
+}, "hasBoundedPresentation");
+var ShareManifestPresentationValidator = external_exports.custom(
+  (value) => hasBoundedPresentation(value) && presentationShape.safeParse(value).success,
+  { message: "invalid share presentation" }
+);
+var SharePayloadValidatorShape = external_exports.object({
+  protocol: external_exports.literal(SHARE_LINK_PROTOCOL),
+  shareId: ShareLinkIdValidator,
+  contentVersion: safeVersion,
+  createdAt: external_exports.iso.datetime(),
+  sharer: ShareSharerValidator,
+  presentation: ShareManifestPresentationValidator,
+  selection: ShareSelectionEntryValidator.array().min(1).max(MAX_SELECTED_CREDENTIALS),
+  endorsements: ShareEndorsementEntryValidator.array().max(MAX_ENDORSEMENTS).default([])
+}).strict();
+var classificationFailure = /* @__PURE__ */ __name2((code, message, path = []) => ({ ok: false, code, message, path }), "classificationFailure");
+var readSignedClaimId = /* @__PURE__ */ __name2((member) => {
+  if (member === null || typeof member !== "object") return void 0;
+  const record2 = member;
+  const claim = record2.credentialSubject ?? record2.endorsement;
+  if (claim === null || typeof claim !== "object") return void 0;
+  const claimRecord = claim;
+  const nested = claimRecord.endorsement;
+  const nestedId = nested !== null && typeof nested === "object" ? nested.id : void 0;
+  return claimRecord.id ?? nestedId;
+}, "readSignedClaimId");
+var classifyShareManifest = /* @__PURE__ */ __name2((payload) => {
+  const members = payload.presentation?.verifiableCredential;
+  if (!Array.isArray(members) || members.length === 0) {
+    return classificationFailure("NO_PRESENTATION_MEMBERS", "presentation has no credentials");
+  }
+  if (members.length > MAX_VP_MEMBERS) {
+    return classificationFailure(
+      "TOO_MANY_VP_MEMBERS",
+      `presentation has ${members.length} members, over the ${MAX_VP_MEMBERS} bound`
+    );
+  }
+  const selection = payload.selection;
+  const endorsements = payload.endorsements ?? [];
+  if (!Array.isArray(selection) || selection.length < 1 || selection.length > MAX_SELECTED_CREDENTIALS) {
+    return classificationFailure("BAD_SELECTION", "selection must contain 1..50 entries");
+  }
+  if (!Array.isArray(endorsements) || endorsements.length > MAX_ENDORSEMENTS) {
+    return classificationFailure(
+      "BAD_ENDORSEMENTS",
+      "endorsements must contain at most 200 entries"
+    );
+  }
+  const selectedIndices = [];
+  const selected = /* @__PURE__ */ new Set();
+  for (let index = 0; index < selection.length; index += 1) {
+    const entry = selection[index];
+    const credentialIndex = entry?.credentialIndex;
+    if (!Number.isSafeInteger(credentialIndex) || credentialIndex < 0 || credentialIndex >= members.length) {
+      return classificationFailure(
+        "SELECTION_INDEX_OUT_OF_BOUNDS",
+        `selection[${index}].credentialIndex is out of bounds`,
+        ["selection", index, "credentialIndex"]
+      );
+    }
+    if (selected.has(credentialIndex)) {
+      return classificationFailure(
+        "SELECTION_INDEX_DUPLICATE",
+        `selection[${index}].credentialIndex is duplicated`,
+        ["selection", index, "credentialIndex"]
+      );
+    }
+    selected.add(credentialIndex);
+    selectedIndices.push(credentialIndex);
+  }
+  const classified = new Set(selected);
+  const endorsementIndices = [];
+  for (let index = 0; index < endorsements.length; index += 1) {
+    const entry = endorsements[index];
+    const credentialIndex = entry?.credentialIndex;
+    const targetIndex = entry?.targetCredentialIndex;
+    if (!Number.isSafeInteger(credentialIndex) || credentialIndex < 0 || credentialIndex >= members.length) {
+      return classificationFailure(
+        "ENDORSEMENT_INDEX_OUT_OF_BOUNDS",
+        `endorsements[${index}].credentialIndex is out of bounds`,
+        ["endorsements", index, "credentialIndex"]
+      );
+    }
+    if (classified.has(credentialIndex)) {
+      return classificationFailure(
+        "VP_MEMBER_CLASSIFIED_TWICE",
+        `endorsements[${index}].credentialIndex was already classified`,
+        ["endorsements", index, "credentialIndex"]
+      );
+    }
+    if (!selected.has(targetIndex)) {
+      return classificationFailure(
+        "ENDORSEMENT_TARGET_NOT_SELECTED",
+        `endorsements[${index}].targetCredentialIndex must reference a selected credential`,
+        ["endorsements", index, "targetCredentialIndex"]
+      );
+    }
+    const referenced = readSignedClaimId(members[credentialIndex]);
+    const target = members[targetIndex];
+    const targetId = target !== null && typeof target === "object" ? target.id : void 0;
+    if (typeof referenced !== "string" || typeof targetId !== "string" || referenced !== targetId) {
+      return classificationFailure(
+        "ENDORSEMENT_TARGET_UNBOUND",
+        `endorsements[${index}] claim does not reference the target credential id`,
+        ["endorsements", index]
+      );
+    }
+    classified.add(credentialIndex);
+    endorsementIndices.push(credentialIndex);
+  }
+  if (classified.size !== members.length) {
+    return classificationFailure(
+      "UNCLASSIFIED_VP_MEMBER",
+      "every presentation member must be classified exactly once",
+      ["presentation", "verifiableCredential"]
+    );
+  }
+  return {
+    ok: true,
+    classification: { selectedIndices, endorsementIndices, memberCount: members.length }
+  };
+}, "classifyShareManifest");
+var SharePayloadValidator = SharePayloadValidatorShape.superRefine((payload, ctx) => {
+  const result = classifyShareManifest(payload);
+  if (!result.ok) {
+    ctx.addIssue({
+      code: "custom",
+      message: result.message,
+      path: result.path,
+      params: { shareLinkCode: result.code }
+    });
+  }
+});
+var ShareRecoverySelectionValidator = external_exports.object({
+  ref: external_exports.string().min(1).max(MAX_SHARE_SOURCE_URI_CHARS),
+  order: external_exports.number().int().min(0).max(MAX_SELECTED_CREDENTIALS - 1)
+}).strict();
+var ShareRecoveryEndorsementValidator = external_exports.object({ targetRef: external_exports.string().min(1).max(MAX_SHARE_SOURCE_URI_CHARS) }).strict();
+var ShareRecoveryPlaintextValidator = external_exports.object({
+  protocol: external_exports.literal(SHARE_RECOVERY_PROTOCOL),
+  shareId: ShareLinkIdValidator,
+  ownerProfileId: external_exports.string().min(1).max(128),
+  createdAt: external_exports.iso.datetime(),
+  latest: external_exports.object({ contentVersion: safeVersion, key: ShareContentKeyValidator }).strict(),
+  selection: ShareRecoverySelectionValidator.array().min(1).max(MAX_SELECTED_CREDENTIALS),
+  endorsements: ShareRecoveryEndorsementValidator.array().max(MAX_ENDORSEMENTS).default([])
+}).strict().superRefine((recovery, ctx) => {
+  const orders = /* @__PURE__ */ new Set();
+  recovery.selection.forEach((entry, index) => {
+    if (entry.order >= recovery.selection.length) {
+      ctx.addIssue({
+        code: "custom",
+        message: "order must be within the selection bounds",
+        path: ["selection", index, "order"]
+      });
+    }
+    if (orders.has(entry.order)) {
+      ctx.addIssue({
+        code: "custom",
+        message: "order must be unique within the selection",
+        path: ["selection", index, "order"]
+      });
+    }
+    orders.add(entry.order);
+  });
+});
+var ShareOwnerRecoveryValidator = JWEValidator.refine(
+  (value) => utf8ByteLength(JSON.stringify(value)) <= MAX_SHARE_RECOVERY_JWE_BYTES,
+  { message: `serialized recovery JWE must be at most ${MAX_SHARE_RECOVERY_JWE_BYTES} bytes` }
+);
+var ShareLinkStatusValidator = external_exports.enum(["pending", "active", "stopped"]);
+var ShareContentStateValidator = external_exports.enum(["staging", "finalized", "content_missing"]);
+var ShareLinkValidator = external_exports.object({
+  id: ShareLinkIdValidator,
+  title: external_exports.string().min(1).max(120),
+  note: external_exports.string().max(500).optional(),
+  selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+  version: safeVersion,
+  contentVersion: safeVersion,
+  status: ShareLinkStatusValidator,
+  attachmentId: external_exports.string().uuid().nullable().optional(),
+  attachmentChunkCount: external_exports.number().int().min(1).max(16).nullable().optional(),
+  contentState: ShareContentStateValidator,
+  createdAt: external_exports.iso.datetime(),
+  updatedAt: external_exports.iso.datetime(),
+  expiresAt: external_exports.iso.datetime().nullable(),
+  stoppedAt: external_exports.iso.datetime().nullable(),
+  lastViewedAt: external_exports.iso.datetime().nullable(),
+  viewCount: external_exports.number().int().min(0).optional(),
+  passcodeProtected: external_exports.boolean(),
+  notifyOnView: external_exports.boolean(),
+  minorPolicy: external_exports.object({
+    isMinor: external_exports.boolean().nullable(),
+    policyResolved: external_exports.boolean(),
+    defaultExpiryDays: external_exports.union([external_exports.literal(30), external_exports.literal(365)]),
+    viewCountingEnabled: external_exports.boolean()
+  }),
+  /**
+   * Guarded application/API URL for the content. Optional because owner APIs in
+   * D1 have no public resolve/content endpoint yet; it must never be a
+   * LearnCloud object URL or carry a fabricated decryption key.
+   */
+  contentUrl: external_exports.string().optional()
+});
+var clientRequestId = external_exports.string().uuid();
+var ShareLinkAttachmentValidator = external_exports.object({
+  id: external_exports.string().uuid(),
+  chunkCount: external_exports.number().int().min(1).max(16)
+}).strict();
+var attachmentChunkKey = {
+  id: ShareLinkIdValidator,
+  contentVersion: safeVersion,
+  attachmentId: external_exports.string().uuid(),
+  chunkIndex: external_exports.number().int().min(0).max(15)
+};
+var ShareLinkAttachmentChunkEnvelopeValidator = ShareEnvelopeValidator.refine(
+  (value) => (decodedBase64UrlByteLength(value.ct) ?? Infinity) <= 256 * 1024 + SHARE_TAG_BYTES
+);
+var PutShareLinkAttachmentChunkInputValidator = external_exports.object({
+  ...attachmentChunkKey,
+  chunkCount: external_exports.number().int().min(1).max(16),
+  envelope: ShareLinkAttachmentChunkEnvelopeValidator,
+  ownerEncryptedRecovery: ShareOwnerRecoveryValidator
+}).strict().refine((value) => value.chunkIndex < value.chunkCount);
+var GetShareLinkAttachmentChunkInputValidator = external_exports.object({
+  ...attachmentChunkKey,
+  passcode: external_exports.string().min(4).max(64).optional(),
+  accessToken: external_exports.string().min(1).max(2048).optional()
+}).strict();
+var ShareLinkAttachmentChunkOutputValidator = external_exports.object({
+  ...attachmentChunkKey,
+  envelope: ShareLinkAttachmentChunkEnvelopeValidator,
+  accessToken: external_exports.string().min(1).max(2048).optional()
+}).strict();
+var DeleteShareLinkAttachmentChunksInputValidator = external_exports.object({
+  id: ShareLinkIdValidator,
+  contentVersion: safeVersion,
+  attachmentId: external_exports.string().uuid(),
+  chunkCount: external_exports.number().int().min(1).max(16)
+}).strict();
+var PutShareLinkAttachmentChunkOutputValidator = external_exports.object({ ok: external_exports.literal(true) }).strict();
+var DeleteShareLinkAttachmentChunksOutputValidator = external_exports.object({ ok: external_exports.boolean() }).strict();
+var CreateShareLinkInputValidator = external_exports.object({
+  id: ShareLinkIdValidator,
+  clientRequestId,
+  title: external_exports.string().min(1).max(120),
+  note: external_exports.string().max(500).optional(),
+  expiresAt: external_exports.iso.datetime().nullable().optional(),
+  passcode: external_exports.string().min(8).max(64).optional(),
+  notifyOnView: external_exports.boolean().default(false),
+  selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+  contentVersion: external_exports.literal(1),
+  envelope: ShareEnvelopeValidator,
+  ownerEncryptedRecovery: ShareOwnerRecoveryValidator,
+  attachment: ShareLinkAttachmentValidator.optional()
+}).strict();
+var UpdateShareLinkInputValidator = external_exports.object({
+  id: ShareLinkIdValidator,
+  expectedVersion: safeVersion,
+  clientRequestId,
+  title: external_exports.string().min(1).max(120).optional(),
+  note: external_exports.string().max(500).nullable().optional(),
+  expiresAt: external_exports.iso.datetime().nullable().optional(),
+  /** Omitted preserves the current passcode, null removes it, and a string replaces it. */
+  passcode: external_exports.string().min(8).max(64).nullable().optional(),
+  notifyOnView: external_exports.boolean().optional(),
+  contentVersion: safeVersion.optional(),
+  selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS).optional(),
+  envelope: ShareEnvelopeValidator.optional(),
+  ownerEncryptedRecovery: ShareOwnerRecoveryValidator.optional(),
+  attachment: ShareLinkAttachmentValidator.optional()
+}).strict().superRefine((value, ctx) => {
+  const provided = [
+    value.contentVersion,
+    value.selectedCount,
+    value.envelope,
+    value.ownerEncryptedRecovery
+  ].filter((field) => field !== void 0).length;
+  if (provided !== 0 && provided !== 4) {
+    ctx.addIssue({
+      code: "custom",
+      message: "content replacement requires contentVersion, selectedCount, envelope and ownerEncryptedRecovery together"
+    });
+  }
+  if (value.attachment !== void 0 && provided !== 4) {
+    ctx.addIssue({ code: "custom", message: "attachment requires a content replacement" });
+  }
+});
+var ShareLinkIdInputValidator = external_exports.object({ id: ShareLinkIdValidator }).strict();
+var ShareLinkOperationKeyInputValidator = external_exports.object({ id: ShareLinkIdValidator, operationId: external_exports.string().uuid() }).strict();
+var ShareLinkOwnerCommitOutputValidator = external_exports.discriminatedUnion("status", [
+  external_exports.object({ status: external_exports.literal("completed"), share: ShareLinkValidator }).strict(),
+  external_exports.object({
+    status: external_exports.literal("pending"),
+    id: ShareLinkIdValidator,
+    operationId: external_exports.string().uuid()
+  }).strict()
+]);
+var ShareLinkOwnerStatusOutputValidator = external_exports.discriminatedUnion("status", [
+  external_exports.object({ status: external_exports.literal("found"), share: ShareLinkValidator }).strict(),
+  external_exports.object({
+    status: external_exports.literal("pending"),
+    id: ShareLinkIdValidator,
+    operationId: external_exports.string().uuid()
+  }).strict(),
+  external_exports.object({ status: external_exports.literal("not_found"), id: ShareLinkIdValidator }).strict()
+]);
+var ShareLinkOwnerRecoveryOutputValidator = external_exports.object({ recovery: ShareOwnerRecoveryValidator }).strict();
+var ShareLinkOwnerContentOutputValidator = external_exports.object({
+  id: ShareLinkIdValidator,
+  contentVersion: safeVersion,
+  envelope: ShareEnvelopeValidator
+}).strict();
+var ResolveShareLinkInputValidator = external_exports.object({
+  id: ShareLinkIdValidator,
+  /** Sent only in a POST body; it must never be placed in a share URL. */
+  passcode: external_exports.string().min(4).max(64).optional()
+}).strict();
+var ShareLinkPublicStateValidator = external_exports.discriminatedUnion("state", [
+  external_exports.object({
+    state: external_exports.literal("passcode_required"),
+    id: ShareLinkIdValidator
+  }).strict(),
+  external_exports.object({ state: external_exports.literal("try_later"), id: ShareLinkIdValidator }).strict(),
+  external_exports.object({
+    state: external_exports.literal("active"),
+    id: ShareLinkIdValidator,
+    title: external_exports.string().max(120),
+    note: external_exports.string().max(500).optional(),
+    selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+    contentVersion: safeVersion,
+    contentUrl: external_exports.string(),
+    sharer: external_exports.object({
+      displayName: external_exports.string().max(120),
+      avatar: external_exports.string().max(2048).optional()
+    }),
+    createdAt: external_exports.iso.datetime(),
+    updatedAt: external_exports.iso.datetime(),
+    expiresAt: external_exports.iso.datetime().nullable()
+  }).strict(),
+  external_exports.object({
+    state: external_exports.literal("expired"),
+    id: ShareLinkIdValidator,
+    expiresAt: external_exports.iso.datetime()
+  }).strict(),
+  external_exports.object({
+    state: external_exports.literal("stopped"),
+    id: ShareLinkIdValidator,
+    stoppedAt: external_exports.iso.datetime()
+  }).strict(),
+  external_exports.object({ state: external_exports.literal("not_found"), id: ShareLinkIdValidator }).strict()
+]);
+var ListShareLinksInputValidator = external_exports.object({
+  limit: external_exports.number().int().min(1).max(50).default(25),
+  cursor: external_exports.string().max(512).optional()
+}).strict();
+var PaginatedShareLinksValidator = PaginationResponseValidator.extend({
+  records: ShareLinkValidator.array()
+});
+var AcknowledgeViewInputValidator = external_exports.object({
+  receipt: external_exports.string().min(22).max(128).regex(/^[A-Za-z0-9_-]+$/)
+}).strict();
+var AcknowledgeViewOutputValidator = external_exports.object({ ok: external_exports.literal(true) }).strict();
+var SHARE_VIEW_RECEIPT_TTL_SECONDS = 10 * 60;
+var ShareLinkPublicContentViewValidator = external_exports.object({
+  id: ShareLinkIdValidator,
+  contentVersion: safeVersion,
+  envelope: ShareEnvelopeValidator,
+  contentUrl: external_exports.string(),
+  receipt: external_exports.string().min(22).max(128).regex(/^[A-Za-z0-9_-]+$/)
+}).strict();
 
 // src/plugin.ts
 import {
@@ -17502,6 +18259,7 @@ import {
   getCredentialStatusArray,
   injectManagedRefreshService as injectSharedManagedRefreshService,
   isVC2Format,
+  isEncrypted,
   resolveStorageReadResult
 } from "@learncard/helpers";
 
@@ -18152,6 +18910,7 @@ var isActAsDenial = /* @__PURE__ */ __name((error51) => {
   }
   return false;
 }, "isActAsDenial");
+var getInboxFailureReason = /* @__PURE__ */ __name((reason) => reason instanceof Error ? `${reason.name}: ${reason.message}` : String(reason), "getInboxFailureReason");
 async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, options) {
   const apiToken = typeof apiTokenOrOptions === "string" ? apiTokenOrOptions : void 0;
   const resolvedOptions = (typeof apiTokenOrOptions === "object" ? apiTokenOrOptions : options) ?? {};
@@ -18564,6 +19323,58 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.profile.invalidateInvite.mutate({ challenge });
       }, "invalidateInvite"),
+      createShareLink: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.create.mutate(input);
+      }, "createShareLink"),
+      putShareLinkAttachmentChunk: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.putAttachmentChunk.mutate(input);
+      }, "putShareLinkAttachmentChunk"),
+      deleteShareLinkAttachmentChunks: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.deleteAttachmentChunks.mutate(input);
+      }, "deleteShareLinkAttachmentChunks"),
+      getShareLinkAttachmentChunk: /* @__PURE__ */ __name(async (_learnCard, input) => client.publicShareLinks.attachmentChunk.mutate(input), "getShareLinkAttachmentChunk"),
+      updateShareLink: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.update.mutate(input);
+      }, "updateShareLink"),
+      revokeShareLink: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.revoke.mutate(input);
+      }, "revokeShareLink"),
+      getShareLink: /* @__PURE__ */ __name(async (_learnCard, id) => {
+        await ensureUser();
+        return client.shareLinks.get.query({ id });
+      }, "getShareLink"),
+      getShareLinkOperationStatus: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.getOperationStatus.query(input);
+      }, "getShareLinkOperationStatus"),
+      retryShareLinkOperation: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.retry.mutate(input);
+      }, "retryShareLinkOperation"),
+      getShareLinkRecovery: /* @__PURE__ */ __name(async (_learnCard, id) => {
+        await ensureUser();
+        return client.shareLinks.getRecovery.query({ id });
+      }, "getShareLinkRecovery"),
+      getShareLinkOwnerContent: /* @__PURE__ */ __name(async (_learnCard, id) => {
+        await ensureUser();
+        return client.shareLinks.getContent.query({ id });
+      }, "getShareLinkOwnerContent"),
+      listShareLinks: /* @__PURE__ */ __name(async (_learnCard, input) => {
+        await ensureUser();
+        return client.shareLinks.list.query(input);
+      }, "listShareLinks"),
+      // Anonymous public methods: deliberately NO `ensureUser()`. A viewer
+      // has no account and must not need one.
+      // POST keeps an optional passcode in the request body and out of URLs,
+      // access logs, browser history and referrers.
+      resolveShareLink: /* @__PURE__ */ __name(async (_learnCard, id, passcode) => client.publicShareLinks.resolve.mutate({ id, passcode }), "resolveShareLink"),
+      getShareLinkContent: /* @__PURE__ */ __name(async (_learnCard, id, passcode) => client.publicShareLinks.content.mutate({ id, passcode }), "getShareLinkContent"),
+      acknowledgeShareLinkView: /* @__PURE__ */ __name(async (_learnCard, receipt) => client.publicShareLinks.acknowledgeView.mutate({ receipt }), "acknowledgeShareLinkView"),
       blockProfile: /* @__PURE__ */ __name(async (_learnCard, profileId) => {
         await ensureUser();
         return client.profile.blockProfile.mutate({ profileId });
@@ -18678,12 +19489,15 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.credential.deleteCredential.mutate({ uri });
       }, "deleteCredential"),
-      sendPresentation: /* @__PURE__ */ __name(async (_learnCard, profileId, vp, encrypt = true) => {
+      sendPresentation: /* @__PURE__ */ __name(async (_learnCard, profileId, vp, metadataOrEncrypt, encrypt) => {
         await ensureUser();
-        if (!encrypt) {
+        const metadata = typeof metadataOrEncrypt === "object" ? metadataOrEncrypt : void 0;
+        const shouldEncrypt = typeof metadataOrEncrypt === "boolean" ? metadataOrEncrypt : encrypt ?? true;
+        if (!shouldEncrypt) {
           return client.presentation.sendPresentation.mutate({
             profileId,
-            presentation: vp
+            presentation: vp,
+            metadata
           });
         }
         const target = await _learnCard.invoke.getProfile(profileId);
@@ -18693,7 +19507,11 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
           _learnCard.id.did(),
           target.did
         ]);
-        return client.presentation.sendPresentation.mutate({ profileId, presentation });
+        return client.presentation.sendPresentation.mutate({
+          profileId,
+          presentation,
+          metadata
+        });
       }, "sendPresentation"),
       acceptPresentation: /* @__PURE__ */ __name(async (_learnCard, uri) => {
         await ensureUser();
@@ -19373,6 +20191,14 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
           boostUris
         });
       }, "removeAutoBoostsFromContract"),
+      addContractRecipient: /* @__PURE__ */ __name(async (_learnCard, contractUri, recipient) => {
+        await ensureUser();
+        return client.contracts.addContractRecipient.mutate({ contractUri, recipient });
+      }, "addContractRecipient"),
+      removeContractRecipient: /* @__PURE__ */ __name(async (_learnCard, contractUri, recipient) => {
+        await ensureUser();
+        return client.contracts.removeContractRecipient.mutate({ contractUri, recipient });
+      }, "removeContractRecipient"),
       getContract: /* @__PURE__ */ __name(async (_learnCard, uri) => {
         return client.contracts.getConsentFlowContract.query({ uri });
       }, "getContract"),
@@ -19405,13 +20231,15 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
           boostUri
         });
       }, "writeCredentialToContract"),
-      consentToContract: /* @__PURE__ */ __name(async (_learnCard, contractUri, { terms, expiresAt, oneTime }, recipientToken) => {
+      consentToContract: /* @__PURE__ */ __name(async (_learnCard, contractUri, { terms, expiresAt, oneTime, audienceVersion, expectedRequestId }, recipientToken) => {
         await ensureUser();
         return client.contracts.consentToContract.mutate({
           contractUri,
           terms,
           expiresAt,
           oneTime,
+          audienceVersion,
+          expectedRequestId,
           recipientToken
           // for SmartResume
         });
@@ -19420,13 +20248,14 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.contracts.getConsentedContracts.query(options2);
       }, "getConsentedContracts"),
-      updateContractTerms: /* @__PURE__ */ __name(async (_learnCard, uri, { terms, expiresAt, oneTime }) => {
+      updateContractTerms: /* @__PURE__ */ __name(async (_learnCard, uri, { terms, expiresAt, oneTime, audienceVersion }) => {
         await ensureUser();
         return client.contracts.updateConsentedContractTerms.mutate({
           uri,
           terms,
           expiresAt,
-          oneTime
+          oneTime,
+          audienceVersion
         });
       }, "updateContractTerms"),
       withdrawConsent: /* @__PURE__ */ __name(async (_learnCard, uri) => {
@@ -19453,11 +20282,12 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.contracts.verifyConsent.query({ uri, profileId });
       }, "verifyConsent"),
-      syncCredentialsToContract: /* @__PURE__ */ __name(async (_learnCard, termsUri, categories) => {
+      syncCredentialsToContract: /* @__PURE__ */ __name(async (_learnCard, termsUri, categories, audienceVersion) => {
         await ensureUser();
         return client.contracts.syncCredentialsToContract.mutate({
           termsUri,
-          categories
+          categories,
+          audienceVersion
         });
       }, "syncCredentialsToContract"),
       deleteCredentialFromAllContracts: /* @__PURE__ */ __name(async (_learnCard, deletedUris) => {
@@ -19466,6 +20296,14 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
           deletedUris
         });
       }, "deleteCredentialFromAllContracts"),
+      sendContractRequest: /* @__PURE__ */ __name(async (_learnCard, request) => {
+        await ensureUser();
+        return client.contracts.sendContractRequest.mutate(request);
+      }, "sendContractRequest"),
+      denyContractRequest: /* @__PURE__ */ __name(async (_learnCard, contractUri) => {
+        await ensureUser();
+        return client.contracts.denyContractRequest.mutate({ contractUri });
+      }, "denyContractRequest"),
       sendAiInsightsContractRequest: /* @__PURE__ */ __name(async (_learnCard, contractUri, targetProfileId, shareLink) => {
         await ensureUser();
         return client.contracts.sendAiInsightsContractRequest.mutate({
@@ -19651,9 +20489,32 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.inbox.getInboxCredential.query({ credentialId: id });
       }, "getInboxCredential"),
-      finalizeInboxCredentials: /* @__PURE__ */ __name(async (_learnCard) => {
+      finalizeInboxCredentials: /* @__PURE__ */ __name(async (learnCard2) => {
         await ensureUser();
-        return client.inbox.finalize.mutate();
+        const result = await client.inbox.finalize.mutate();
+        const results = await Promise.allSettled(
+          result.deliveries.map(async (delivery) => ({
+            ...delivery,
+            credential: VCValidator.parse(
+              isEncrypted(delivery.credential) ? await learnCard2.invoke.decryptDagJwe(delivery.credential, [
+                learnCard2.id.keypair()
+              ]) : delivery.credential
+            )
+          }))
+        );
+        const deliveries = results.flatMap((delivery, index) => {
+          if (delivery.status === "fulfilled") return [delivery.value];
+          console.warn(
+            `Failed to finalize inbox delivery ${result.deliveries[index].id}: ${getInboxFailureReason(delivery.reason)}`
+          );
+          return [];
+        });
+        return {
+          ...result,
+          deliveries,
+          verifiableCredentials: deliveries.map((delivery) => delivery.credential),
+          errors: result.errors + results.length - deliveries.length
+        };
       }, "finalizeInboxCredentials"),
       recoverInboxCredentials: /* @__PURE__ */ __name(async (learnCard2, options2 = {}) => {
         const result = await client.inbox.getMyInboxDeliveries.query(options2);
@@ -19667,9 +20528,13 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
             )
           }))
         );
-        const records = results.flatMap(
-          (record2) => record2.status === "fulfilled" ? [record2.value] : []
-        );
+        const records = results.flatMap((record2, index) => {
+          if (record2.status === "fulfilled") return [record2.value];
+          console.warn(
+            `Failed to recover inbox delivery ${result.records[index].id}: ${getInboxFailureReason(record2.reason)}`
+          );
+          return [];
+        });
         return { ...result, records, failed: results.length - records.length };
       }, "recoverInboxCredentials"),
       sendGuardianApprovalEmail: /* @__PURE__ */ __name(async (_learnCard, options2) => {
@@ -19936,6 +20801,18 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.appStore.unsubmitForReview.mutate({ listingId });
       }, "unsubmitAppStoreListing"),
+      submitAppStoreListingUpdate: /* @__PURE__ */ __name(async (_learnCard, listingId) => {
+        await ensureUser();
+        return client.appStore.submitListingUpdate.mutate({ listingId });
+      }, "submitAppStoreListingUpdate"),
+      withdrawAppStoreListingUpdate: /* @__PURE__ */ __name(async (_learnCard, listingId) => {
+        await ensureUser();
+        return client.appStore.withdrawListingUpdate.mutate({ listingId });
+      }, "withdrawAppStoreListingUpdate"),
+      discardAppStoreListingUpdate: /* @__PURE__ */ __name(async (_learnCard, listingId) => {
+        await ensureUser();
+        return client.appStore.discardListingUpdate.mutate({ listingId });
+      }, "discardAppStoreListingUpdate"),
       getListingsForIntegration: /* @__PURE__ */ __name(async (_learnCard, integrationId, options2 = {}) => {
         await ensureUser();
         return client.appStore.getListingsForIntegration.query({
@@ -19947,6 +20824,34 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.appStore.countListingsForIntegration.query({ integrationId });
       }, "countListingsForIntegration"),
+      submitAppManifest: /* @__PURE__ */ __name(async (_learnCard, integrationId, manifest) => {
+        await ensureUser();
+        return client.appStore.submitAppManifest.mutate({ integrationId, manifest });
+      }, "submitAppManifest"),
+      getManifestVersions: /* @__PURE__ */ __name(async (_learnCard, integrationId, options2) => {
+        await ensureUser();
+        return client.appStore.getManifestVersions.query({ integrationId, ...options2 });
+      }, "getManifestVersions"),
+      getManifestVersion: /* @__PURE__ */ __name(async (_learnCard, integrationId, version2) => {
+        await ensureUser();
+        return client.appStore.getManifestVersion.query({ integrationId, version: version2 });
+      }, "getManifestVersion"),
+      getManifestDiff: /* @__PURE__ */ __name(async (_learnCard, integrationId, toVersion, fromVersion) => {
+        await ensureUser();
+        return client.appStore.getManifestDiff.query({
+          integrationId,
+          toVersion,
+          fromVersion
+        });
+      }, "getManifestDiff"),
+      applyManifestVersion: /* @__PURE__ */ __name(async (_learnCard, integrationId, version2, listingId) => {
+        await ensureUser();
+        return client.appStore.applyManifestVersion.mutate({
+          integrationId,
+          version: version2,
+          listingId
+        });
+      }, "applyManifestVersion"),
       browseAppStore: /* @__PURE__ */ __name(async (_learnCard, options2) => {
         return client.appStore.browseListedApps.query(options2);
       }, "browseAppStore"),
@@ -20002,6 +20907,10 @@ async function getLearnCardNetworkPlugin(learnCard, url2, apiTokenOrOptions, opt
         await ensureUser();
         return client.appStore.adminGetAllListings.query(options2);
       }, "adminGetAllListings"),
+      adminReviewListingUpdate: /* @__PURE__ */ __name(async (_learnCard, listingId, approve) => {
+        await ensureUser();
+        return client.appStore.adminReviewListingUpdate.mutate({ listingId, approve });
+      }, "adminReviewListingUpdate"),
       // App Store Boost Management
       addBoostToApp: /* @__PURE__ */ __name(async (_learnCard, listingId, boostUri, templateAlias) => {
         await ensureUser();