@learncard/partner-connect 0.2.0

package/dist/partner-connect.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner-connect.esm.js","sources":["../src/index.ts"],"sourcesContent":["/**\n * LearnCard Partner Connect SDK\n * \n * A Promise-based JavaScript utility for managing cross-origin message communication\n * between partner apps and the LearnCard host application.\n * \n * @example\n * ```typescript\n * import { createPartnerConnect } from '@learncard/partner-connect';\n * \n * const learnCard = createPartnerConnect({\n *   hostOrigin: 'https://learncard.app'\n * });\n * \n * // Request user identity (SSO)\n * const identity = await learnCard.requestIdentity();\n * console.log('User DID:', identity.user.did);\n * ```\n */\n\nimport type {\n  PartnerConnectOptions,\n  IdentityResponse,\n  SendCredentialResponse,\n  VerifiablePresentationRequest,\n  CredentialSearchResponse,\n  CredentialSpecificResponse,\n  ConsentResponse,\n  TemplateIssueResponse,\n  LearnCardError,\n  PostMessageRequest,\n  PostMessageResponse,\n  PendingRequest,\n} from './types';\n\nexport type * from './types';\n\n/**\n * LearnCard Partner Connect SDK class\n */\nexport class PartnerConnect {\n  /** Default host origin (security anchor) */\n  public static readonly DEFAULT_HOST_ORIGIN = 'https://learncard.app';\n  \n  private hostOrigins: string[] = ['https://learncard.app'];\n  private activeHostOrigin: string = 'https://learncard.app';\n  private allowNativeAppOrigins: boolean = true;\n  private protocol: string = 'LEARNCARD_V1';\n  private requestTimeout: number = 30000;\n  private pendingRequests: Map<string, PendingRequest>;\n  private messageListener: ((event: MessageEvent) => void) | null = null;\n  private isInitialized = false;\n\n  constructor(options?: PartnerConnectOptions) {\n    // Normalize hostOrigin to an array for whitelist validation\n    const hostOrigin = options?.hostOrigin || PartnerConnect.DEFAULT_HOST_ORIGIN;\n    this.hostOrigins = Array.isArray(hostOrigin) ? hostOrigin : [hostOrigin];\n    \n    this.protocol = options?.protocol || 'LEARNCARD_V1';\n    this.requestTimeout = options?.requestTimeout || 30000;\n    this.allowNativeAppOrigins = options?.allowNativeAppOrigins ?? true;\n    this.pendingRequests = new Map();\n    this.configureActiveOrigin();\n    this.setupMessageListener();\n  }\n\n  /**\n   * Configure the active host origin using the following hierarchy:\n   * 1. Check for `lc_host_override` query parameter (for staging/testing)\n   * 2. Fall back to first configured origin\n   * 3. Fall back to DEFAULT_HOST_ORIGIN\n   * \n   * This origin will be used for all outgoing messages and incoming message validation.\n   */\n  private configureActiveOrigin(): void {\n    if (typeof window === 'undefined') {\n      this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n      return;\n    }\n\n    try {\n      // Check for lc_host_override query parameter\n      const urlParams = new URLSearchParams(window.location.search);\n      const hostOverride = urlParams.get('lc_host_override');\n\n      if (hostOverride) {\n        // Validate override against whitelist (if provided)\n        if (this.hostOrigins.length > 0 && !this.isOriginInWhitelist(hostOverride)) {\n          console.warn(\n            '[LearnCard SDK] lc_host_override value is not in the configured whitelist:',\n            hostOverride,\n            'Allowed:',\n            this.hostOrigins\n          );\n          this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n        } else {\n          this.activeHostOrigin = hostOverride;\n          console.log('[LearnCard SDK] Using lc_host_override:', hostOverride);\n        }\n      } else {\n        // Use first configured origin or default\n        this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n        console.log('[LearnCard SDK] Using configured origin:', this.activeHostOrigin);\n      }\n    } catch (error) {\n      console.error('[LearnCard SDK] Error configuring active origin:', error);\n      this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n    }\n  }\n\n  private isOriginNativeApp(origin: string): boolean {\n    return origin.startsWith('capacitor://') || origin.startsWith('ionic://') || origin.startsWith('https://localhost') || origin.startsWith('http://localhost') || origin.startsWith('http://127.0.0.1') || origin.startsWith('http://192.168.1.164')\n  }\n\n  /**\n   * Check if an origin is in the configured whitelist\n   */\n  private isOriginInWhitelist(origin: string): boolean {\n    return this.hostOrigins.includes(origin) || (this.allowNativeAppOrigins && this.isOriginNativeApp(origin));\n  }\n\n  /**\n   * Check if an event origin is valid against the active host origin\n   * \n   * Security Rule: Incoming messages must exactly match the active host origin.\n   * This prevents malicious actors from spoofing origins via query parameters.\n   * \n   * @param eventOrigin - The origin from the MessageEvent\n   * @returns true if the origin is valid\n   */\n  private isValidOrigin(eventOrigin: string): boolean {\n    // STRICT: Exact match with active host origin only\n    return eventOrigin === this.activeHostOrigin;\n  }\n\n  /**\n   * Set up the central message listener to handle responses from the LearnCard host\n   */\n  private setupMessageListener(): void {\n    if (typeof window === 'undefined') {\n      throw new Error('PartnerConnect SDK can only be used in a browser environment');\n    }\n\n    this.messageListener = (event: MessageEvent) => {\n      // SECURITY CHECK 1: Strict origin validation - must exactly match active host origin\n      if (!this.isValidOrigin(event.origin)) {\n        // Silently ignore messages from unauthorized origins\n        return;\n      }\n\n      const data = event.data as PostMessageResponse;\n\n      // SECURITY CHECK 2: Validate protocol and requestId\n      if (data.protocol !== this.protocol || !data.requestId) {\n        return;\n      }\n\n      // Look up the pending request\n      const pending = this.pendingRequests.get(data.requestId);\n      if (!pending) {\n        return; // Ignore stale or unrecognized responses\n      }\n\n      // Clean up\n      clearTimeout(pending.timeoutId);\n      this.pendingRequests.delete(data.requestId);\n\n      // Resolve or reject the promise\n      if (data.type === 'SUCCESS') {\n        pending.resolve(data.data);\n      } else if (data.type === 'ERROR') {\n        pending.reject(data.error || { code: 'UNKNOWN_ERROR', message: 'An unknown error occurred' });\n      }\n    };\n\n    window.addEventListener('message', this.messageListener);\n    this.isInitialized = true;\n  }\n\n  /**\n   * Generate a unique request ID\n   */\n  private generateRequestId(action: string): string {\n    return `${action}-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;\n  }\n\n  /**\n   * Send a message to the parent window and return a Promise\n   */\n  private sendMessage<T = unknown>(action: string, payload?: unknown): Promise<T> {\n    if (!this.isInitialized) {\n      return Promise.reject({\n        code: 'SDK_NOT_INITIALIZED',\n        message: 'SDK is not initialized',\n      } as LearnCardError);\n    }\n\n    return new Promise<T>((resolve, reject) => {\n      const requestId = this.generateRequestId(action);\n\n      // Set up timeout\n      const timeoutId = setTimeout(() => {\n        if (this.pendingRequests.has(requestId)) {\n          this.pendingRequests.delete(requestId);\n          reject({\n            code: 'LC_TIMEOUT',\n            message: `Request ${action} timed out after ${this.requestTimeout}ms`,\n          } as LearnCardError);\n        }\n      }, this.requestTimeout);\n\n      // Store the pending request\n      this.pendingRequests.set(requestId, {\n        resolve: resolve as (value: unknown) => void,\n        reject,\n        timeoutId,\n      });\n\n      // Construct the message\n      const message: PostMessageRequest = {\n        protocol: this.protocol,\n        action,\n        requestId,\n        payload,\n      };\n\n      // Send to parent window with the active host origin (configured or overridden)\n      window.parent.postMessage(message, this.activeHostOrigin);\n    });\n  }\n\n  /**\n   * Request user identity (Single Sign-On)\n   * \n   * @returns Promise resolving to user identity including DID and JWT token\n   * @throws {LearnCardError} When user is not authenticated or request fails\n   * \n   * @example\n   * ```typescript\n   * const identity = await learnCard.requestIdentity();\n   * console.log('User DID:', identity.user.did);\n   * console.log('JWT Token:', identity.token);\n   * ```\n   */\n  public requestIdentity(): Promise<IdentityResponse> {\n    return this.sendMessage<IdentityResponse>('REQUEST_IDENTITY', { challenge: `${Date.now()}-${Math.random().toString(36).substring(2, 9)}` });\n  }\n\n  /**\n   * Send a credential to the user's LearnCard wallet\n   * \n   * @param credential - The verifiable credential to send\n   * @returns Promise resolving to credential ID\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.sendCredential({\n   *   '@context': ['https://www.w3.org/2018/credentials/v1'],\n   *   type: ['VerifiableCredential'],\n   *   credentialSubject: { id: 'did:example:123' }\n   * });\n   * console.log('Credential ID:', response.credentialId);\n   * ```\n   */\n  public sendCredential(credential: unknown): Promise<SendCredentialResponse> {\n    return this.sendMessage<SendCredentialResponse>('SEND_CREDENTIAL', { credential });\n  }\n\n  /**\n   * Launch a feature in the LearnCard host application\n   * \n   * @param featurePath - Path to the feature (e.g., '/ai/topics')\n   * @param initialPrompt - Optional initial prompt or data\n   * \n   * @example\n   * ```typescript\n   * await learnCard.launchFeature(\n   *   '/ai/topics?shortCircuitStep=newTopic',\n   *   'Help me understand cryptography'\n   * );\n   * ```\n   */\n  public launchFeature(featurePath: string, initialPrompt?: string): Promise<void> {\n    return this.sendMessage<void>('LAUNCH_FEATURE', { featurePath, initialPrompt });\n  }\n\n  /**\n   * Request credentials from the user's wallet using a query\n   * \n   * @param verifiablePresentationRequest - VPR with query criteria\n   * @returns Promise resolving to verifiable presentation\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.askCredentialSearch({\n   *   query: [{\n   *     type: 'QueryByTitle',\n   *     credentialQuery: {\n   *       reason: 'We need to verify your skills',\n   *       title: 'JavaScript Expert'\n   *     }\n   *   }],\n   *   challenge: 'challenge-123',\n   *   domain: window.location.hostname\n   * });\n   * \n   * if (response.verifiablePresentation) {\n   *   console.log('Received credentials:', response.verifiablePresentation.verifiableCredential);\n   * }\n   * ```\n   */\n  public askCredentialSearch(\n    verifiablePresentationRequest: VerifiablePresentationRequest\n  ): Promise<CredentialSearchResponse> {\n    return this.sendMessage<CredentialSearchResponse>('ASK_CREDENTIAL_SEARCH', {\n      verifiablePresentationRequest,\n    });\n  }\n\n  /**\n   * Request a specific credential by ID\n   * \n   * @param credentialId - The ID of the credential to request\n   * @returns Promise resolving to the credential\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.askCredentialSpecific('credential-id-123');\n   * if (response.credential) {\n   *   console.log('Received credential:', response.credential);\n   * }\n   * ```\n   */\n  public askCredentialSpecific(credentialId: string): Promise<CredentialSpecificResponse> {\n    return this.sendMessage<CredentialSpecificResponse>('ASK_CREDENTIAL_SPECIFIC', {\n      credentialId,\n    });\n  }\n\n  /**\n   * Request user consent for permissions\n   * \n   * @param contractUri - URI of the consent contract\n   * @returns Promise resolving to consent response\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.requestConsent('lc:network:network.learncard.com/trpc:contract:abc123');\n   * if (response.granted) {\n   *   console.log('User granted consent');\n   * }\n   * ```\n   */\n  public requestConsent(contractUri: string): Promise<ConsentResponse> {\n    return this.sendMessage<ConsentResponse>('REQUEST_CONSENT', { contractUri });\n  }\n\n  /**\n   * Initiate a template-based credential issuance flow\n   * \n   * @param templateId - ID of the template/boost to issue\n   * @param draftRecipients - Optional array of recipient DIDs\n   * @returns Promise resolving to template issue response\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.initiateTemplateIssue(\n   *   'lc:network:network.learncard.com/trpc:boost:xyz789',\n   *   ['did:key:abc', 'did:key:def']\n   * );\n   * \n   * if (response.issued) {\n   *   console.log('Template issued successfully');\n   * }\n   * ```\n   */\n  public initiateTemplateIssue(\n    templateId: string,\n    draftRecipients?: string[]\n  ): Promise<TemplateIssueResponse> {\n    return this.sendMessage<TemplateIssueResponse>('INITIATE_TEMPLATE_ISSUE', {\n      templateId,\n      draftRecipients: draftRecipients || [],\n    });\n  }\n\n  /**\n   * Clean up the SDK and remove event listeners\n   */\n  public destroy(): void {\n    if (this.messageListener) {\n      window.removeEventListener('message', this.messageListener);\n      this.messageListener = null;\n    }\n\n    // Reject all pending requests\n    for (const [requestId, pending] of this.pendingRequests.entries()) {\n      clearTimeout(pending.timeoutId);\n      pending.reject({\n        code: 'SDK_DESTROYED',\n        message: 'SDK was destroyed before request completed',\n      });\n    }\n\n    this.pendingRequests.clear();\n    this.isInitialized = false;\n  }\n}\n\n/**\n * Factory function to create a PartnerConnect instance\n * \n * @param options - Configuration options\n * @returns PartnerConnect instance\n * \n * @example\n * ```typescript\n * const learnCard = createPartnerConnect({\n *   hostOrigin: 'https://learncard.app',\n *   protocol: 'LEARNCARD_V1',\n *   requestTimeout: 30000\n * });\n * ```\n */\nexport function createPartnerConnect(options: PartnerConnectOptions): PartnerConnect {\n  return new PartnerConnect(options);\n}\n\n// Default export for convenience\nexport default createPartnerConnect;\n"],"names":[],"mappings":";;;AAwCO,MAAM,eAAA,GAAN,MAAM,eAAe,CAAA;AAAA,EAa1B,YAAY,OAAiC,EAAA;AAT7C,IAAQ,aAAA,CAAA,IAAA,EAAA,aAAA,EAAwB,CAAC,uBAAuB,CAAA,CAAA,CAAA;AACxD,IAAA,aAAA,CAAA,IAAA,EAAQ,kBAA2B,EAAA,uBAAA,CAAA,CAAA;AACnC,IAAA,aAAA,CAAA,IAAA,EAAQ,uBAAiC,EAAA,IAAA,CAAA,CAAA;AACzC,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAmB,EAAA,cAAA,CAAA,CAAA;AAC3B,IAAA,aAAA,CAAA,IAAA,EAAQ,gBAAyB,EAAA,GAAA,CAAA,CAAA;AACjC,IAAQ,aAAA,CAAA,IAAA,EAAA,iBAAA,CAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,iBAA0D,EAAA,IAAA,CAAA,CAAA;AAClE,IAAA,aAAA,CAAA,IAAA,EAAQ,eAAgB,EAAA,KAAA,CAAA,CAAA;AAnD1B,IAAA,IAAA,EAAA,CAAA;AAuDI,IAAM,MAAA,UAAA,GAAA,CAAa,OAAS,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAA,UAAA,KAAc,eAAe,CAAA,mBAAA,CAAA;AACzD,IAAA,IAAA,CAAK,cAAc,KAAM,CAAA,OAAA,CAAQ,UAAU,CAAI,GAAA,UAAA,GAAa,CAAC,UAAU,CAAA,CAAA;AAEvE,IAAK,IAAA,CAAA,QAAA,GAAA,CAAW,mCAAS,QAAY,KAAA,cAAA,CAAA;AACrC,IAAK,IAAA,CAAA,cAAA,GAAA,CAAiB,mCAAS,cAAkB,KAAA,GAAA,CAAA;AACjD,IAAK,IAAA,CAAA,qBAAA,GAAA,CAAwB,EAAS,GAAA,OAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAA,qBAAA,KAAT,IAAkC,GAAA,EAAA,GAAA,IAAA,CAAA;AAC/D,IAAK,IAAA,CAAA,eAAA,uBAAsB,GAAI,EAAA,CAAA;AAC/B,IAAA,IAAA,CAAK,qBAAsB,EAAA,CAAA;AAC3B,IAAA,IAAA,CAAK,oBAAqB,EAAA,CAAA;AAAA,GAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,qBAA8B,GAAA;AACpC,IAAI,IAAA,OAAO,WAAW,WAAa,EAAA;AACjC,MAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAC9D,MAAA,OAAA;AAAA,KACF;AAEA,IAAI,IAAA;AAEF,MAAA,MAAM,SAAY,GAAA,IAAI,eAAgB,CAAA,MAAA,CAAO,SAAS,MAAM,CAAA,CAAA;AAC5D,MAAM,MAAA,YAAA,GAAe,SAAU,CAAA,GAAA,CAAI,kBAAkB,CAAA,CAAA;AAErD,MAAA,IAAI,YAAc,EAAA;AAEhB,QAAI,IAAA,IAAA,CAAK,YAAY,MAAS,GAAA,CAAA,IAAK,CAAC,IAAK,CAAA,mBAAA,CAAoB,YAAY,CAAG,EAAA;AAC1E,UAAQ,OAAA,CAAA,IAAA;AAAA,YACN,4EAAA;AAAA,YACA,YAAA;AAAA,YACA,UAAA;AAAA,YACA,IAAK,CAAA,WAAA;AAAA,WACP,CAAA;AACA,UAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAAA,SACzD,MAAA;AACL,UAAA,IAAA,CAAK,gBAAmB,GAAA,YAAA,CAAA;AACxB,UAAQ,OAAA,CAAA,GAAA,CAAI,2CAA2C,YAAY,CAAA,CAAA;AAAA,SACrE;AAAA,OACK,MAAA;AAEL,QAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAC9D,QAAQ,OAAA,CAAA,GAAA,CAAI,0CAA4C,EAAA,IAAA,CAAK,gBAAgB,CAAA,CAAA;AAAA,OAC/E;AAAA,aACO,KAAO,EAAA;AACd,MAAQ,OAAA,CAAA,KAAA,CAAM,oDAAoD,KAAK,CAAA,CAAA;AACvE,MAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAAA,KAChE;AAAA,GACF;AAAA,EAEQ,kBAAkB,MAAyB,EAAA;AACjD,IAAO,OAAA,MAAA,CAAO,WAAW,cAAc,CAAA,IAAK,OAAO,UAAW,CAAA,UAAU,CAAK,IAAA,MAAA,CAAO,UAAW,CAAA,mBAAmB,KAAK,MAAO,CAAA,UAAA,CAAW,kBAAkB,CAAK,IAAA,MAAA,CAAO,WAAW,kBAAkB,CAAA,IAAK,MAAO,CAAA,UAAA,CAAW,sBAAsB,CAAA,CAAA;AAAA,GACnP;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAAoB,MAAyB,EAAA;AACnD,IAAO,OAAA,IAAA,CAAK,YAAY,QAAS,CAAA,MAAM,KAAM,IAAK,CAAA,qBAAA,IAAyB,IAAK,CAAA,iBAAA,CAAkB,MAAM,CAAA,CAAA;AAAA,GAC1G;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,cAAc,WAA8B,EAAA;AAElD,IAAA,OAAO,gBAAgB,IAAK,CAAA,gBAAA,CAAA;AAAA,GAC9B;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAA6B,GAAA;AACnC,IAAI,IAAA,OAAO,WAAW,WAAa,EAAA;AACjC,MAAM,MAAA,IAAI,MAAM,8DAA8D,CAAA,CAAA;AAAA,KAChF;AAEA,IAAK,IAAA,CAAA,eAAA,GAAkB,CAAC,KAAwB,KAAA;AAE9C,MAAA,IAAI,CAAC,IAAA,CAAK,aAAc,CAAA,KAAA,CAAM,MAAM,CAAG,EAAA;AAErC,QAAA,OAAA;AAAA,OACF;AAEA,MAAA,MAAM,OAAO,KAAM,CAAA,IAAA,CAAA;AAGnB,MAAA,IAAI,KAAK,QAAa,KAAA,IAAA,CAAK,QAAY,IAAA,CAAC,KAAK,SAAW,EAAA;AACtD,QAAA,OAAA;AAAA,OACF;AAGA,MAAA,MAAM,OAAU,GAAA,IAAA,CAAK,eAAgB,CAAA,GAAA,CAAI,KAAK,SAAS,CAAA,CAAA;AACvD,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAA,OAAA;AAAA,OACF;AAGA,MAAA,YAAA,CAAa,QAAQ,SAAS,CAAA,CAAA;AAC9B,MAAK,IAAA,CAAA,eAAA,CAAgB,MAAO,CAAA,IAAA,CAAK,SAAS,CAAA,CAAA;AAG1C,MAAI,IAAA,IAAA,CAAK,SAAS,SAAW,EAAA;AAC3B,QAAQ,OAAA,CAAA,OAAA,CAAQ,KAAK,IAAI,CAAA,CAAA;AAAA,OAC3B,MAAA,IAAW,IAAK,CAAA,IAAA,KAAS,OAAS,EAAA;AAChC,QAAQ,OAAA,CAAA,MAAA,CAAO,KAAK,KAAS,IAAA,EAAE,MAAM,eAAiB,EAAA,OAAA,EAAS,6BAA6B,CAAA,CAAA;AAAA,OAC9F;AAAA,KACF,CAAA;AAEA,IAAO,MAAA,CAAA,gBAAA,CAAiB,SAAW,EAAA,IAAA,CAAK,eAAe,CAAA,CAAA;AACvD,IAAA,IAAA,CAAK,aAAgB,GAAA,IAAA,CAAA;AAAA,GACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,MAAwB,EAAA;AAChD,IAAA,OAAO,GAAG,MAAM,CAAA,CAAA,EAAI,IAAK,CAAA,GAAA,EAAK,CAAI,CAAA,EAAA,IAAA,CAAK,MAAO,EAAA,CAAE,SAAS,EAAE,CAAA,CAAE,SAAU,CAAA,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,CAAA;AAAA,GAC9E;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAA,CAAyB,QAAgB,OAA+B,EAAA;AAC9E,IAAI,IAAA,CAAC,KAAK,aAAe,EAAA;AACvB,MAAA,OAAO,QAAQ,MAAO,CAAA;AAAA,QACpB,IAAM,EAAA,qBAAA;AAAA,QACN,OAAS,EAAA,wBAAA;AAAA,OACQ,CAAA,CAAA;AAAA,KACrB;AAEA,IAAA,OAAO,IAAI,OAAA,CAAW,CAAC,OAAA,EAAS,MAAW,KAAA;AACzC,MAAM,MAAA,SAAA,GAAY,IAAK,CAAA,iBAAA,CAAkB,MAAM,CAAA,CAAA;AAG/C,MAAM,MAAA,SAAA,GAAY,WAAW,MAAM;AACjC,QAAA,IAAI,IAAK,CAAA,eAAA,CAAgB,GAAI,CAAA,SAAS,CAAG,EAAA;AACvC,UAAK,IAAA,CAAA,eAAA,CAAgB,OAAO,SAAS,CAAA,CAAA;AACrC,UAAO,MAAA,CAAA;AAAA,YACL,IAAM,EAAA,YAAA;AAAA,YACN,OAAS,EAAA,CAAA,QAAA,EAAW,MAAM,CAAA,iBAAA,EAAoB,KAAK,cAAc,CAAA,EAAA,CAAA;AAAA,WAChD,CAAA,CAAA;AAAA,SACrB;AAAA,OACF,EAAG,KAAK,cAAc,CAAA,CAAA;AAGtB,MAAK,IAAA,CAAA,eAAA,CAAgB,IAAI,SAAW,EAAA;AAAA,QAClC,OAAA;AAAA,QACA,MAAA;AAAA,QACA,SAAA;AAAA,OACD,CAAA,CAAA;AAGD,MAAA,MAAM,OAA8B,GAAA;AAAA,QAClC,UAAU,IAAK,CAAA,QAAA;AAAA,QACf,MAAA;AAAA,QACA,SAAA;AAAA,QACA,OAAA;AAAA,OACF,CAAA;AAGA,MAAA,MAAA,CAAO,MAAO,CAAA,WAAA,CAAY,OAAS,EAAA,IAAA,CAAK,gBAAgB,CAAA,CAAA;AAAA,KACzD,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeO,eAA6C,GAAA;AAClD,IAAO,OAAA,IAAA,CAAK,YAA8B,kBAAoB,EAAA,EAAE,WAAW,CAAG,EAAA,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAO,EAAA,CAAE,SAAS,EAAE,CAAA,CAAE,UAAU,CAAG,EAAA,CAAC,CAAC,CAAA,CAAA,EAAI,CAAA,CAAA;AAAA,GAC5I;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBO,eAAe,UAAsD,EAAA;AAC1E,IAAA,OAAO,IAAK,CAAA,WAAA,CAAoC,iBAAmB,EAAA,EAAE,YAAY,CAAA,CAAA;AAAA,GACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,aAAA,CAAc,aAAqB,aAAuC,EAAA;AAC/E,IAAA,OAAO,KAAK,WAAkB,CAAA,gBAAA,EAAkB,EAAE,WAAA,EAAa,eAAe,CAAA,CAAA;AAAA,GAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2BO,oBACL,6BACmC,EAAA;AACnC,IAAO,OAAA,IAAA,CAAK,YAAsC,uBAAyB,EAAA;AAAA,MACzE,6BAAA;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,sBAAsB,YAA2D,EAAA;AACtF,IAAO,OAAA,IAAA,CAAK,YAAwC,yBAA2B,EAAA;AAAA,MAC7E,YAAA;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,eAAe,WAA+C,EAAA;AACnE,IAAA,OAAO,IAAK,CAAA,WAAA,CAA6B,iBAAmB,EAAA,EAAE,aAAa,CAAA,CAAA;AAAA,GAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBO,qBAAA,CACL,YACA,eACgC,EAAA;AAChC,IAAO,OAAA,IAAA,CAAK,YAAmC,yBAA2B,EAAA;AAAA,MACxE,UAAA;AAAA,MACA,eAAA,EAAiB,mBAAmB,EAAC;AAAA,KACtC,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA,EAKO,OAAgB,GAAA;AACrB,IAAA,IAAI,KAAK,eAAiB,EAAA;AACxB,MAAO,MAAA,CAAA,mBAAA,CAAoB,SAAW,EAAA,IAAA,CAAK,eAAe,CAAA,CAAA;AAC1D,MAAA,IAAA,CAAK,eAAkB,GAAA,IAAA,CAAA;AAAA,KACzB;AAGA,IAAA,KAAA,MAAW,CAAC,SAAW,EAAA,OAAO,KAAK,IAAK,CAAA,eAAA,CAAgB,SAAW,EAAA;AACjE,MAAA,YAAA,CAAa,QAAQ,SAAS,CAAA,CAAA;AAC9B,MAAA,OAAA,CAAQ,MAAO,CAAA;AAAA,QACb,IAAM,EAAA,eAAA;AAAA,QACN,OAAS,EAAA,4CAAA;AAAA,OACV,CAAA,CAAA;AAAA,KACH;AAEA,IAAA,IAAA,CAAK,gBAAgB,KAAM,EAAA,CAAA;AAC3B,IAAA,IAAA,CAAK,aAAgB,GAAA,KAAA,CAAA;AAAA,GACvB;AACF,CAAA,CAAA;AAAA;AA7WE,aAAA,CAFW,iBAEY,qBAAsB,EAAA,uBAAA,CAAA,CAAA;AAFxC,IAAM,cAAN,GAAA,gBAAA;AAgYA,SAAS,qBAAqB,OAAgD,EAAA;AACnF,EAAO,OAAA,IAAI,eAAe,OAAO,CAAA,CAAA;AACnC;;;;"}

package/dist/partner-connect.js

@@ -0,0 +1,330 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+const _PartnerConnect = class _PartnerConnect {
+  constructor(options) {
+    __publicField(this, "hostOrigins", ["https://learncard.app"]);
+    __publicField(this, "activeHostOrigin", "https://learncard.app");
+    __publicField(this, "allowNativeAppOrigins", true);
+    __publicField(this, "protocol", "LEARNCARD_V1");
+    __publicField(this, "requestTimeout", 3e4);
+    __publicField(this, "pendingRequests");
+    __publicField(this, "messageListener", null);
+    __publicField(this, "isInitialized", false);
+    var _a;
+    const hostOrigin = (options == null ? void 0 : options.hostOrigin) || _PartnerConnect.DEFAULT_HOST_ORIGIN;
+    this.hostOrigins = Array.isArray(hostOrigin) ? hostOrigin : [hostOrigin];
+    this.protocol = (options == null ? void 0 : options.protocol) || "LEARNCARD_V1";
+    this.requestTimeout = (options == null ? void 0 : options.requestTimeout) || 3e4;
+    this.allowNativeAppOrigins = (_a = options == null ? void 0 : options.allowNativeAppOrigins) != null ? _a : true;
+    this.pendingRequests = /* @__PURE__ */ new Map();
+    this.configureActiveOrigin();
+    this.setupMessageListener();
+  }
+  /**
+   * Configure the active host origin using the following hierarchy:
+   * 1. Check for `lc_host_override` query parameter (for staging/testing)
+   * 2. Fall back to first configured origin
+   * 3. Fall back to DEFAULT_HOST_ORIGIN
+   * 
+   * This origin will be used for all outgoing messages and incoming message validation.
+   */
+  configureActiveOrigin() {
+    if (typeof window === "undefined") {
+      this.activeHostOrigin = this.hostOrigins[0] || _PartnerConnect.DEFAULT_HOST_ORIGIN;
+      return;
+    }
+    try {
+      const urlParams = new URLSearchParams(window.location.search);
+      const hostOverride = urlParams.get("lc_host_override");
+      if (hostOverride) {
+        if (this.hostOrigins.length > 0 && !this.isOriginInWhitelist(hostOverride)) {
+          console.warn(
+            "[LearnCard SDK] lc_host_override value is not in the configured whitelist:",
+            hostOverride,
+            "Allowed:",
+            this.hostOrigins
+          );
+          this.activeHostOrigin = this.hostOrigins[0] || _PartnerConnect.DEFAULT_HOST_ORIGIN;
+        } else {
+          this.activeHostOrigin = hostOverride;
+          console.log("[LearnCard SDK] Using lc_host_override:", hostOverride);
+        }
+      } else {
+        this.activeHostOrigin = this.hostOrigins[0] || _PartnerConnect.DEFAULT_HOST_ORIGIN;
+        console.log("[LearnCard SDK] Using configured origin:", this.activeHostOrigin);
+      }
+    } catch (error) {
+      console.error("[LearnCard SDK] Error configuring active origin:", error);
+      this.activeHostOrigin = this.hostOrigins[0] || _PartnerConnect.DEFAULT_HOST_ORIGIN;
+    }
+  }
+  isOriginNativeApp(origin) {
+    return origin.startsWith("capacitor://") || origin.startsWith("ionic://") || origin.startsWith("https://localhost") || origin.startsWith("http://localhost") || origin.startsWith("http://127.0.0.1") || origin.startsWith("http://192.168.1.164");
+  }
+  /**
+   * Check if an origin is in the configured whitelist
+   */
+  isOriginInWhitelist(origin) {
+    return this.hostOrigins.includes(origin) || this.allowNativeAppOrigins && this.isOriginNativeApp(origin);
+  }
+  /**
+   * Check if an event origin is valid against the active host origin
+   * 
+   * Security Rule: Incoming messages must exactly match the active host origin.
+   * This prevents malicious actors from spoofing origins via query parameters.
+   * 
+   * @param eventOrigin - The origin from the MessageEvent
+   * @returns true if the origin is valid
+   */
+  isValidOrigin(eventOrigin) {
+    return eventOrigin === this.activeHostOrigin;
+  }
+  /**
+   * Set up the central message listener to handle responses from the LearnCard host
+   */
+  setupMessageListener() {
+    if (typeof window === "undefined") {
+      throw new Error("PartnerConnect SDK can only be used in a browser environment");
+    }
+    this.messageListener = (event) => {
+      if (!this.isValidOrigin(event.origin)) {
+        return;
+      }
+      const data = event.data;
+      if (data.protocol !== this.protocol || !data.requestId) {
+        return;
+      }
+      const pending = this.pendingRequests.get(data.requestId);
+      if (!pending) {
+        return;
+      }
+      clearTimeout(pending.timeoutId);
+      this.pendingRequests.delete(data.requestId);
+      if (data.type === "SUCCESS") {
+        pending.resolve(data.data);
+      } else if (data.type === "ERROR") {
+        pending.reject(data.error || { code: "UNKNOWN_ERROR", message: "An unknown error occurred" });
+      }
+    };
+    window.addEventListener("message", this.messageListener);
+    this.isInitialized = true;
+  }
+  /**
+   * Generate a unique request ID
+   */
+  generateRequestId(action) {
+    return `${action}-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;
+  }
+  /**
+   * Send a message to the parent window and return a Promise
+   */
+  sendMessage(action, payload) {
+    if (!this.isInitialized) {
+      return Promise.reject({
+        code: "SDK_NOT_INITIALIZED",
+        message: "SDK is not initialized"
+      });
+    }
+    return new Promise((resolve, reject) => {
+      const requestId = this.generateRequestId(action);
+      const timeoutId = setTimeout(() => {
+        if (this.pendingRequests.has(requestId)) {
+          this.pendingRequests.delete(requestId);
+          reject({
+            code: "LC_TIMEOUT",
+            message: `Request ${action} timed out after ${this.requestTimeout}ms`
+          });
+        }
+      }, this.requestTimeout);
+      this.pendingRequests.set(requestId, {
+        resolve,
+        reject,
+        timeoutId
+      });
+      const message = {
+        protocol: this.protocol,
+        action,
+        requestId,
+        payload
+      };
+      window.parent.postMessage(message, this.activeHostOrigin);
+    });
+  }
+  /**
+   * Request user identity (Single Sign-On)
+   * 
+   * @returns Promise resolving to user identity including DID and JWT token
+   * @throws {LearnCardError} When user is not authenticated or request fails
+   * 
+   * @example
+   * ```typescript
+   * const identity = await learnCard.requestIdentity();
+   * console.log('User DID:', identity.user.did);
+   * console.log('JWT Token:', identity.token);
+   * ```
+   */
+  requestIdentity() {
+    return this.sendMessage("REQUEST_IDENTITY", { challenge: `${Date.now()}-${Math.random().toString(36).substring(2, 9)}` });
+  }
+  /**
+   * Send a credential to the user's LearnCard wallet
+   * 
+   * @param credential - The verifiable credential to send
+   * @returns Promise resolving to credential ID
+   * 
+   * @example
+   * ```typescript
+   * const response = await learnCard.sendCredential({
+   *   '@context': ['https://www.w3.org/2018/credentials/v1'],
+   *   type: ['VerifiableCredential'],
+   *   credentialSubject: { id: 'did:example:123' }
+   * });
+   * console.log('Credential ID:', response.credentialId);
+   * ```
+   */
+  sendCredential(credential) {
+    return this.sendMessage("SEND_CREDENTIAL", { credential });
+  }
+  /**
+   * Launch a feature in the LearnCard host application
+   * 
+   * @param featurePath - Path to the feature (e.g., '/ai/topics')
+   * @param initialPrompt - Optional initial prompt or data
+   * 
+   * @example
+   * ```typescript
+   * await learnCard.launchFeature(
+   *   '/ai/topics?shortCircuitStep=newTopic',
+   *   'Help me understand cryptography'
+   * );
+   * ```
+   */
+  launchFeature(featurePath, initialPrompt) {
+    return this.sendMessage("LAUNCH_FEATURE", { featurePath, initialPrompt });
+  }
+  /**
+   * Request credentials from the user's wallet using a query
+   * 
+   * @param verifiablePresentationRequest - VPR with query criteria
+   * @returns Promise resolving to verifiable presentation
+   * 
+   * @example
+   * ```typescript
+   * const response = await learnCard.askCredentialSearch({
+   *   query: [{
+   *     type: 'QueryByTitle',
+   *     credentialQuery: {
+   *       reason: 'We need to verify your skills',
+   *       title: 'JavaScript Expert'
+   *     }
+   *   }],
+   *   challenge: 'challenge-123',
+   *   domain: window.location.hostname
+   * });
+   * 
+   * if (response.verifiablePresentation) {
+   *   console.log('Received credentials:', response.verifiablePresentation.verifiableCredential);
+   * }
+   * ```
+   */
+  askCredentialSearch(verifiablePresentationRequest) {
+    return this.sendMessage("ASK_CREDENTIAL_SEARCH", {
+      verifiablePresentationRequest
+    });
+  }
+  /**
+   * Request a specific credential by ID
+   * 
+   * @param credentialId - The ID of the credential to request
+   * @returns Promise resolving to the credential
+   * 
+   * @example
+   * ```typescript
+   * const response = await learnCard.askCredentialSpecific('credential-id-123');
+   * if (response.credential) {
+   *   console.log('Received credential:', response.credential);
+   * }
+   * ```
+   */
+  askCredentialSpecific(credentialId) {
+    return this.sendMessage("ASK_CREDENTIAL_SPECIFIC", {
+      credentialId
+    });
+  }
+  /**
+   * Request user consent for permissions
+   * 
+   * @param contractUri - URI of the consent contract
+   * @returns Promise resolving to consent response
+   * 
+   * @example
+   * ```typescript
+   * const response = await learnCard.requestConsent('lc:network:network.learncard.com/trpc:contract:abc123');
+   * if (response.granted) {
+   *   console.log('User granted consent');
+   * }
+   * ```
+   */
+  requestConsent(contractUri) {
+    return this.sendMessage("REQUEST_CONSENT", { contractUri });
+  }
+  /**
+   * Initiate a template-based credential issuance flow
+   * 
+   * @param templateId - ID of the template/boost to issue
+   * @param draftRecipients - Optional array of recipient DIDs
+   * @returns Promise resolving to template issue response
+   * 
+   * @example
+   * ```typescript
+   * const response = await learnCard.initiateTemplateIssue(
+   *   'lc:network:network.learncard.com/trpc:boost:xyz789',
+   *   ['did:key:abc', 'did:key:def']
+   * );
+   * 
+   * if (response.issued) {
+   *   console.log('Template issued successfully');
+   * }
+   * ```
+   */
+  initiateTemplateIssue(templateId, draftRecipients) {
+    return this.sendMessage("INITIATE_TEMPLATE_ISSUE", {
+      templateId,
+      draftRecipients: draftRecipients || []
+    });
+  }
+  /**
+   * Clean up the SDK and remove event listeners
+   */
+  destroy() {
+    if (this.messageListener) {
+      window.removeEventListener("message", this.messageListener);
+      this.messageListener = null;
+    }
+    for (const [requestId, pending] of this.pendingRequests.entries()) {
+      clearTimeout(pending.timeoutId);
+      pending.reject({
+        code: "SDK_DESTROYED",
+        message: "SDK was destroyed before request completed"
+      });
+    }
+    this.pendingRequests.clear();
+    this.isInitialized = false;
+  }
+};
+/** Default host origin (security anchor) */
+__publicField(_PartnerConnect, "DEFAULT_HOST_ORIGIN", "https://learncard.app");
+let PartnerConnect = _PartnerConnect;
+function createPartnerConnect(options) {
+  return new PartnerConnect(options);
+}
+
+exports.PartnerConnect = PartnerConnect;
+exports.createPartnerConnect = createPartnerConnect;
+exports["default"] = createPartnerConnect;
+//# sourceMappingURL=partner-connect.js.map

package/dist/partner-connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner-connect.js","sources":["../src/index.ts"],"sourcesContent":["/**\n * LearnCard Partner Connect SDK\n * \n * A Promise-based JavaScript utility for managing cross-origin message communication\n * between partner apps and the LearnCard host application.\n * \n * @example\n * ```typescript\n * import { createPartnerConnect } from '@learncard/partner-connect';\n * \n * const learnCard = createPartnerConnect({\n *   hostOrigin: 'https://learncard.app'\n * });\n * \n * // Request user identity (SSO)\n * const identity = await learnCard.requestIdentity();\n * console.log('User DID:', identity.user.did);\n * ```\n */\n\nimport type {\n  PartnerConnectOptions,\n  IdentityResponse,\n  SendCredentialResponse,\n  VerifiablePresentationRequest,\n  CredentialSearchResponse,\n  CredentialSpecificResponse,\n  ConsentResponse,\n  TemplateIssueResponse,\n  LearnCardError,\n  PostMessageRequest,\n  PostMessageResponse,\n  PendingRequest,\n} from './types';\n\nexport type * from './types';\n\n/**\n * LearnCard Partner Connect SDK class\n */\nexport class PartnerConnect {\n  /** Default host origin (security anchor) */\n  public static readonly DEFAULT_HOST_ORIGIN = 'https://learncard.app';\n  \n  private hostOrigins: string[] = ['https://learncard.app'];\n  private activeHostOrigin: string = 'https://learncard.app';\n  private allowNativeAppOrigins: boolean = true;\n  private protocol: string = 'LEARNCARD_V1';\n  private requestTimeout: number = 30000;\n  private pendingRequests: Map<string, PendingRequest>;\n  private messageListener: ((event: MessageEvent) => void) | null = null;\n  private isInitialized = false;\n\n  constructor(options?: PartnerConnectOptions) {\n    // Normalize hostOrigin to an array for whitelist validation\n    const hostOrigin = options?.hostOrigin || PartnerConnect.DEFAULT_HOST_ORIGIN;\n    this.hostOrigins = Array.isArray(hostOrigin) ? hostOrigin : [hostOrigin];\n    \n    this.protocol = options?.protocol || 'LEARNCARD_V1';\n    this.requestTimeout = options?.requestTimeout || 30000;\n    this.allowNativeAppOrigins = options?.allowNativeAppOrigins ?? true;\n    this.pendingRequests = new Map();\n    this.configureActiveOrigin();\n    this.setupMessageListener();\n  }\n\n  /**\n   * Configure the active host origin using the following hierarchy:\n   * 1. Check for `lc_host_override` query parameter (for staging/testing)\n   * 2. Fall back to first configured origin\n   * 3. Fall back to DEFAULT_HOST_ORIGIN\n   * \n   * This origin will be used for all outgoing messages and incoming message validation.\n   */\n  private configureActiveOrigin(): void {\n    if (typeof window === 'undefined') {\n      this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n      return;\n    }\n\n    try {\n      // Check for lc_host_override query parameter\n      const urlParams = new URLSearchParams(window.location.search);\n      const hostOverride = urlParams.get('lc_host_override');\n\n      if (hostOverride) {\n        // Validate override against whitelist (if provided)\n        if (this.hostOrigins.length > 0 && !this.isOriginInWhitelist(hostOverride)) {\n          console.warn(\n            '[LearnCard SDK] lc_host_override value is not in the configured whitelist:',\n            hostOverride,\n            'Allowed:',\n            this.hostOrigins\n          );\n          this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n        } else {\n          this.activeHostOrigin = hostOverride;\n          console.log('[LearnCard SDK] Using lc_host_override:', hostOverride);\n        }\n      } else {\n        // Use first configured origin or default\n        this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n        console.log('[LearnCard SDK] Using configured origin:', this.activeHostOrigin);\n      }\n    } catch (error) {\n      console.error('[LearnCard SDK] Error configuring active origin:', error);\n      this.activeHostOrigin = this.hostOrigins[0] || PartnerConnect.DEFAULT_HOST_ORIGIN;\n    }\n  }\n\n  private isOriginNativeApp(origin: string): boolean {\n    return origin.startsWith('capacitor://') || origin.startsWith('ionic://') || origin.startsWith('https://localhost') || origin.startsWith('http://localhost') || origin.startsWith('http://127.0.0.1') || origin.startsWith('http://192.168.1.164')\n  }\n\n  /**\n   * Check if an origin is in the configured whitelist\n   */\n  private isOriginInWhitelist(origin: string): boolean {\n    return this.hostOrigins.includes(origin) || (this.allowNativeAppOrigins && this.isOriginNativeApp(origin));\n  }\n\n  /**\n   * Check if an event origin is valid against the active host origin\n   * \n   * Security Rule: Incoming messages must exactly match the active host origin.\n   * This prevents malicious actors from spoofing origins via query parameters.\n   * \n   * @param eventOrigin - The origin from the MessageEvent\n   * @returns true if the origin is valid\n   */\n  private isValidOrigin(eventOrigin: string): boolean {\n    // STRICT: Exact match with active host origin only\n    return eventOrigin === this.activeHostOrigin;\n  }\n\n  /**\n   * Set up the central message listener to handle responses from the LearnCard host\n   */\n  private setupMessageListener(): void {\n    if (typeof window === 'undefined') {\n      throw new Error('PartnerConnect SDK can only be used in a browser environment');\n    }\n\n    this.messageListener = (event: MessageEvent) => {\n      // SECURITY CHECK 1: Strict origin validation - must exactly match active host origin\n      if (!this.isValidOrigin(event.origin)) {\n        // Silently ignore messages from unauthorized origins\n        return;\n      }\n\n      const data = event.data as PostMessageResponse;\n\n      // SECURITY CHECK 2: Validate protocol and requestId\n      if (data.protocol !== this.protocol || !data.requestId) {\n        return;\n      }\n\n      // Look up the pending request\n      const pending = this.pendingRequests.get(data.requestId);\n      if (!pending) {\n        return; // Ignore stale or unrecognized responses\n      }\n\n      // Clean up\n      clearTimeout(pending.timeoutId);\n      this.pendingRequests.delete(data.requestId);\n\n      // Resolve or reject the promise\n      if (data.type === 'SUCCESS') {\n        pending.resolve(data.data);\n      } else if (data.type === 'ERROR') {\n        pending.reject(data.error || { code: 'UNKNOWN_ERROR', message: 'An unknown error occurred' });\n      }\n    };\n\n    window.addEventListener('message', this.messageListener);\n    this.isInitialized = true;\n  }\n\n  /**\n   * Generate a unique request ID\n   */\n  private generateRequestId(action: string): string {\n    return `${action}-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;\n  }\n\n  /**\n   * Send a message to the parent window and return a Promise\n   */\n  private sendMessage<T = unknown>(action: string, payload?: unknown): Promise<T> {\n    if (!this.isInitialized) {\n      return Promise.reject({\n        code: 'SDK_NOT_INITIALIZED',\n        message: 'SDK is not initialized',\n      } as LearnCardError);\n    }\n\n    return new Promise<T>((resolve, reject) => {\n      const requestId = this.generateRequestId(action);\n\n      // Set up timeout\n      const timeoutId = setTimeout(() => {\n        if (this.pendingRequests.has(requestId)) {\n          this.pendingRequests.delete(requestId);\n          reject({\n            code: 'LC_TIMEOUT',\n            message: `Request ${action} timed out after ${this.requestTimeout}ms`,\n          } as LearnCardError);\n        }\n      }, this.requestTimeout);\n\n      // Store the pending request\n      this.pendingRequests.set(requestId, {\n        resolve: resolve as (value: unknown) => void,\n        reject,\n        timeoutId,\n      });\n\n      // Construct the message\n      const message: PostMessageRequest = {\n        protocol: this.protocol,\n        action,\n        requestId,\n        payload,\n      };\n\n      // Send to parent window with the active host origin (configured or overridden)\n      window.parent.postMessage(message, this.activeHostOrigin);\n    });\n  }\n\n  /**\n   * Request user identity (Single Sign-On)\n   * \n   * @returns Promise resolving to user identity including DID and JWT token\n   * @throws {LearnCardError} When user is not authenticated or request fails\n   * \n   * @example\n   * ```typescript\n   * const identity = await learnCard.requestIdentity();\n   * console.log('User DID:', identity.user.did);\n   * console.log('JWT Token:', identity.token);\n   * ```\n   */\n  public requestIdentity(): Promise<IdentityResponse> {\n    return this.sendMessage<IdentityResponse>('REQUEST_IDENTITY', { challenge: `${Date.now()}-${Math.random().toString(36).substring(2, 9)}` });\n  }\n\n  /**\n   * Send a credential to the user's LearnCard wallet\n   * \n   * @param credential - The verifiable credential to send\n   * @returns Promise resolving to credential ID\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.sendCredential({\n   *   '@context': ['https://www.w3.org/2018/credentials/v1'],\n   *   type: ['VerifiableCredential'],\n   *   credentialSubject: { id: 'did:example:123' }\n   * });\n   * console.log('Credential ID:', response.credentialId);\n   * ```\n   */\n  public sendCredential(credential: unknown): Promise<SendCredentialResponse> {\n    return this.sendMessage<SendCredentialResponse>('SEND_CREDENTIAL', { credential });\n  }\n\n  /**\n   * Launch a feature in the LearnCard host application\n   * \n   * @param featurePath - Path to the feature (e.g., '/ai/topics')\n   * @param initialPrompt - Optional initial prompt or data\n   * \n   * @example\n   * ```typescript\n   * await learnCard.launchFeature(\n   *   '/ai/topics?shortCircuitStep=newTopic',\n   *   'Help me understand cryptography'\n   * );\n   * ```\n   */\n  public launchFeature(featurePath: string, initialPrompt?: string): Promise<void> {\n    return this.sendMessage<void>('LAUNCH_FEATURE', { featurePath, initialPrompt });\n  }\n\n  /**\n   * Request credentials from the user's wallet using a query\n   * \n   * @param verifiablePresentationRequest - VPR with query criteria\n   * @returns Promise resolving to verifiable presentation\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.askCredentialSearch({\n   *   query: [{\n   *     type: 'QueryByTitle',\n   *     credentialQuery: {\n   *       reason: 'We need to verify your skills',\n   *       title: 'JavaScript Expert'\n   *     }\n   *   }],\n   *   challenge: 'challenge-123',\n   *   domain: window.location.hostname\n   * });\n   * \n   * if (response.verifiablePresentation) {\n   *   console.log('Received credentials:', response.verifiablePresentation.verifiableCredential);\n   * }\n   * ```\n   */\n  public askCredentialSearch(\n    verifiablePresentationRequest: VerifiablePresentationRequest\n  ): Promise<CredentialSearchResponse> {\n    return this.sendMessage<CredentialSearchResponse>('ASK_CREDENTIAL_SEARCH', {\n      verifiablePresentationRequest,\n    });\n  }\n\n  /**\n   * Request a specific credential by ID\n   * \n   * @param credentialId - The ID of the credential to request\n   * @returns Promise resolving to the credential\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.askCredentialSpecific('credential-id-123');\n   * if (response.credential) {\n   *   console.log('Received credential:', response.credential);\n   * }\n   * ```\n   */\n  public askCredentialSpecific(credentialId: string): Promise<CredentialSpecificResponse> {\n    return this.sendMessage<CredentialSpecificResponse>('ASK_CREDENTIAL_SPECIFIC', {\n      credentialId,\n    });\n  }\n\n  /**\n   * Request user consent for permissions\n   * \n   * @param contractUri - URI of the consent contract\n   * @returns Promise resolving to consent response\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.requestConsent('lc:network:network.learncard.com/trpc:contract:abc123');\n   * if (response.granted) {\n   *   console.log('User granted consent');\n   * }\n   * ```\n   */\n  public requestConsent(contractUri: string): Promise<ConsentResponse> {\n    return this.sendMessage<ConsentResponse>('REQUEST_CONSENT', { contractUri });\n  }\n\n  /**\n   * Initiate a template-based credential issuance flow\n   * \n   * @param templateId - ID of the template/boost to issue\n   * @param draftRecipients - Optional array of recipient DIDs\n   * @returns Promise resolving to template issue response\n   * \n   * @example\n   * ```typescript\n   * const response = await learnCard.initiateTemplateIssue(\n   *   'lc:network:network.learncard.com/trpc:boost:xyz789',\n   *   ['did:key:abc', 'did:key:def']\n   * );\n   * \n   * if (response.issued) {\n   *   console.log('Template issued successfully');\n   * }\n   * ```\n   */\n  public initiateTemplateIssue(\n    templateId: string,\n    draftRecipients?: string[]\n  ): Promise<TemplateIssueResponse> {\n    return this.sendMessage<TemplateIssueResponse>('INITIATE_TEMPLATE_ISSUE', {\n      templateId,\n      draftRecipients: draftRecipients || [],\n    });\n  }\n\n  /**\n   * Clean up the SDK and remove event listeners\n   */\n  public destroy(): void {\n    if (this.messageListener) {\n      window.removeEventListener('message', this.messageListener);\n      this.messageListener = null;\n    }\n\n    // Reject all pending requests\n    for (const [requestId, pending] of this.pendingRequests.entries()) {\n      clearTimeout(pending.timeoutId);\n      pending.reject({\n        code: 'SDK_DESTROYED',\n        message: 'SDK was destroyed before request completed',\n      });\n    }\n\n    this.pendingRequests.clear();\n    this.isInitialized = false;\n  }\n}\n\n/**\n * Factory function to create a PartnerConnect instance\n * \n * @param options - Configuration options\n * @returns PartnerConnect instance\n * \n * @example\n * ```typescript\n * const learnCard = createPartnerConnect({\n *   hostOrigin: 'https://learncard.app',\n *   protocol: 'LEARNCARD_V1',\n *   requestTimeout: 30000\n * });\n * ```\n */\nexport function createPartnerConnect(options: PartnerConnectOptions): PartnerConnect {\n  return new PartnerConnect(options);\n}\n\n// Default export for convenience\nexport default createPartnerConnect;\n"],"names":[],"mappings":";;;;;;;AAwCO,MAAM,eAAA,GAAN,MAAM,eAAe,CAAA;AAAA,EAa1B,YAAY,OAAiC,EAAA;AAT7C,IAAQ,aAAA,CAAA,IAAA,EAAA,aAAA,EAAwB,CAAC,uBAAuB,CAAA,CAAA,CAAA;AACxD,IAAA,aAAA,CAAA,IAAA,EAAQ,kBAA2B,EAAA,uBAAA,CAAA,CAAA;AACnC,IAAA,aAAA,CAAA,IAAA,EAAQ,uBAAiC,EAAA,IAAA,CAAA,CAAA;AACzC,IAAA,aAAA,CAAA,IAAA,EAAQ,UAAmB,EAAA,cAAA,CAAA,CAAA;AAC3B,IAAA,aAAA,CAAA,IAAA,EAAQ,gBAAyB,EAAA,GAAA,CAAA,CAAA;AACjC,IAAQ,aAAA,CAAA,IAAA,EAAA,iBAAA,CAAA,CAAA;AACR,IAAA,aAAA,CAAA,IAAA,EAAQ,iBAA0D,EAAA,IAAA,CAAA,CAAA;AAClE,IAAA,aAAA,CAAA,IAAA,EAAQ,eAAgB,EAAA,KAAA,CAAA,CAAA;AAnD1B,IAAA,IAAA,EAAA,CAAA;AAuDI,IAAM,MAAA,UAAA,GAAA,CAAa,OAAS,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAA,UAAA,KAAc,eAAe,CAAA,mBAAA,CAAA;AACzD,IAAA,IAAA,CAAK,cAAc,KAAM,CAAA,OAAA,CAAQ,UAAU,CAAI,GAAA,UAAA,GAAa,CAAC,UAAU,CAAA,CAAA;AAEvE,IAAK,IAAA,CAAA,QAAA,GAAA,CAAW,mCAAS,QAAY,KAAA,cAAA,CAAA;AACrC,IAAK,IAAA,CAAA,cAAA,GAAA,CAAiB,mCAAS,cAAkB,KAAA,GAAA,CAAA;AACjD,IAAK,IAAA,CAAA,qBAAA,GAAA,CAAwB,EAAS,GAAA,OAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAA,qBAAA,KAAT,IAAkC,GAAA,EAAA,GAAA,IAAA,CAAA;AAC/D,IAAK,IAAA,CAAA,eAAA,uBAAsB,GAAI,EAAA,CAAA;AAC/B,IAAA,IAAA,CAAK,qBAAsB,EAAA,CAAA;AAC3B,IAAA,IAAA,CAAK,oBAAqB,EAAA,CAAA;AAAA,GAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,qBAA8B,GAAA;AACpC,IAAI,IAAA,OAAO,WAAW,WAAa,EAAA;AACjC,MAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAC9D,MAAA,OAAA;AAAA,KACF;AAEA,IAAI,IAAA;AAEF,MAAA,MAAM,SAAY,GAAA,IAAI,eAAgB,CAAA,MAAA,CAAO,SAAS,MAAM,CAAA,CAAA;AAC5D,MAAM,MAAA,YAAA,GAAe,SAAU,CAAA,GAAA,CAAI,kBAAkB,CAAA,CAAA;AAErD,MAAA,IAAI,YAAc,EAAA;AAEhB,QAAI,IAAA,IAAA,CAAK,YAAY,MAAS,GAAA,CAAA,IAAK,CAAC,IAAK,CAAA,mBAAA,CAAoB,YAAY,CAAG,EAAA;AAC1E,UAAQ,OAAA,CAAA,IAAA;AAAA,YACN,4EAAA;AAAA,YACA,YAAA;AAAA,YACA,UAAA;AAAA,YACA,IAAK,CAAA,WAAA;AAAA,WACP,CAAA;AACA,UAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAAA,SACzD,MAAA;AACL,UAAA,IAAA,CAAK,gBAAmB,GAAA,YAAA,CAAA;AACxB,UAAQ,OAAA,CAAA,GAAA,CAAI,2CAA2C,YAAY,CAAA,CAAA;AAAA,SACrE;AAAA,OACK,MAAA;AAEL,QAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAC9D,QAAQ,OAAA,CAAA,GAAA,CAAI,0CAA4C,EAAA,IAAA,CAAK,gBAAgB,CAAA,CAAA;AAAA,OAC/E;AAAA,aACO,KAAO,EAAA;AACd,MAAQ,OAAA,CAAA,KAAA,CAAM,oDAAoD,KAAK,CAAA,CAAA;AACvE,MAAA,IAAA,CAAK,gBAAmB,GAAA,IAAA,CAAK,WAAY,CAAA,CAAC,KAAK,eAAe,CAAA,mBAAA,CAAA;AAAA,KAChE;AAAA,GACF;AAAA,EAEQ,kBAAkB,MAAyB,EAAA;AACjD,IAAO,OAAA,MAAA,CAAO,WAAW,cAAc,CAAA,IAAK,OAAO,UAAW,CAAA,UAAU,CAAK,IAAA,MAAA,CAAO,UAAW,CAAA,mBAAmB,KAAK,MAAO,CAAA,UAAA,CAAW,kBAAkB,CAAK,IAAA,MAAA,CAAO,WAAW,kBAAkB,CAAA,IAAK,MAAO,CAAA,UAAA,CAAW,sBAAsB,CAAA,CAAA;AAAA,GACnP;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAAoB,MAAyB,EAAA;AACnD,IAAO,OAAA,IAAA,CAAK,YAAY,QAAS,CAAA,MAAM,KAAM,IAAK,CAAA,qBAAA,IAAyB,IAAK,CAAA,iBAAA,CAAkB,MAAM,CAAA,CAAA;AAAA,GAC1G;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,cAAc,WAA8B,EAAA;AAElD,IAAA,OAAO,gBAAgB,IAAK,CAAA,gBAAA,CAAA;AAAA,GAC9B;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAA6B,GAAA;AACnC,IAAI,IAAA,OAAO,WAAW,WAAa,EAAA;AACjC,MAAM,MAAA,IAAI,MAAM,8DAA8D,CAAA,CAAA;AAAA,KAChF;AAEA,IAAK,IAAA,CAAA,eAAA,GAAkB,CAAC,KAAwB,KAAA;AAE9C,MAAA,IAAI,CAAC,IAAA,CAAK,aAAc,CAAA,KAAA,CAAM,MAAM,CAAG,EAAA;AAErC,QAAA,OAAA;AAAA,OACF;AAEA,MAAA,MAAM,OAAO,KAAM,CAAA,IAAA,CAAA;AAGnB,MAAA,IAAI,KAAK,QAAa,KAAA,IAAA,CAAK,QAAY,IAAA,CAAC,KAAK,SAAW,EAAA;AACtD,QAAA,OAAA;AAAA,OACF;AAGA,MAAA,MAAM,OAAU,GAAA,IAAA,CAAK,eAAgB,CAAA,GAAA,CAAI,KAAK,SAAS,CAAA,CAAA;AACvD,MAAA,IAAI,CAAC,OAAS,EAAA;AACZ,QAAA,OAAA;AAAA,OACF;AAGA,MAAA,YAAA,CAAa,QAAQ,SAAS,CAAA,CAAA;AAC9B,MAAK,IAAA,CAAA,eAAA,CAAgB,MAAO,CAAA,IAAA,CAAK,SAAS,CAAA,CAAA;AAG1C,MAAI,IAAA,IAAA,CAAK,SAAS,SAAW,EAAA;AAC3B,QAAQ,OAAA,CAAA,OAAA,CAAQ,KAAK,IAAI,CAAA,CAAA;AAAA,OAC3B,MAAA,IAAW,IAAK,CAAA,IAAA,KAAS,OAAS,EAAA;AAChC,QAAQ,OAAA,CAAA,MAAA,CAAO,KAAK,KAAS,IAAA,EAAE,MAAM,eAAiB,EAAA,OAAA,EAAS,6BAA6B,CAAA,CAAA;AAAA,OAC9F;AAAA,KACF,CAAA;AAEA,IAAO,MAAA,CAAA,gBAAA,CAAiB,SAAW,EAAA,IAAA,CAAK,eAAe,CAAA,CAAA;AACvD,IAAA,IAAA,CAAK,aAAgB,GAAA,IAAA,CAAA;AAAA,GACvB;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,MAAwB,EAAA;AAChD,IAAA,OAAO,GAAG,MAAM,CAAA,CAAA,EAAI,IAAK,CAAA,GAAA,EAAK,CAAI,CAAA,EAAA,IAAA,CAAK,MAAO,EAAA,CAAE,SAAS,EAAE,CAAA,CAAE,SAAU,CAAA,CAAA,EAAG,CAAC,CAAC,CAAA,CAAA,CAAA;AAAA,GAC9E;AAAA;AAAA;AAAA;AAAA,EAKQ,WAAA,CAAyB,QAAgB,OAA+B,EAAA;AAC9E,IAAI,IAAA,CAAC,KAAK,aAAe,EAAA;AACvB,MAAA,OAAO,QAAQ,MAAO,CAAA;AAAA,QACpB,IAAM,EAAA,qBAAA;AAAA,QACN,OAAS,EAAA,wBAAA;AAAA,OACQ,CAAA,CAAA;AAAA,KACrB;AAEA,IAAA,OAAO,IAAI,OAAA,CAAW,CAAC,OAAA,EAAS,MAAW,KAAA;AACzC,MAAM,MAAA,SAAA,GAAY,IAAK,CAAA,iBAAA,CAAkB,MAAM,CAAA,CAAA;AAG/C,MAAM,MAAA,SAAA,GAAY,WAAW,MAAM;AACjC,QAAA,IAAI,IAAK,CAAA,eAAA,CAAgB,GAAI,CAAA,SAAS,CAAG,EAAA;AACvC,UAAK,IAAA,CAAA,eAAA,CAAgB,OAAO,SAAS,CAAA,CAAA;AACrC,UAAO,MAAA,CAAA;AAAA,YACL,IAAM,EAAA,YAAA;AAAA,YACN,OAAS,EAAA,CAAA,QAAA,EAAW,MAAM,CAAA,iBAAA,EAAoB,KAAK,cAAc,CAAA,EAAA,CAAA;AAAA,WAChD,CAAA,CAAA;AAAA,SACrB;AAAA,OACF,EAAG,KAAK,cAAc,CAAA,CAAA;AAGtB,MAAK,IAAA,CAAA,eAAA,CAAgB,IAAI,SAAW,EAAA;AAAA,QAClC,OAAA;AAAA,QACA,MAAA;AAAA,QACA,SAAA;AAAA,OACD,CAAA,CAAA;AAGD,MAAA,MAAM,OAA8B,GAAA;AAAA,QAClC,UAAU,IAAK,CAAA,QAAA;AAAA,QACf,MAAA;AAAA,QACA,SAAA;AAAA,QACA,OAAA;AAAA,OACF,CAAA;AAGA,MAAA,MAAA,CAAO,MAAO,CAAA,WAAA,CAAY,OAAS,EAAA,IAAA,CAAK,gBAAgB,CAAA,CAAA;AAAA,KACzD,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeO,eAA6C,GAAA;AAClD,IAAO,OAAA,IAAA,CAAK,YAA8B,kBAAoB,EAAA,EAAE,WAAW,CAAG,EAAA,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAO,EAAA,CAAE,SAAS,EAAE,CAAA,CAAE,UAAU,CAAG,EAAA,CAAC,CAAC,CAAA,CAAA,EAAI,CAAA,CAAA;AAAA,GAC5I;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBO,eAAe,UAAsD,EAAA;AAC1E,IAAA,OAAO,IAAK,CAAA,WAAA,CAAoC,iBAAmB,EAAA,EAAE,YAAY,CAAA,CAAA;AAAA,GACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,aAAA,CAAc,aAAqB,aAAuC,EAAA;AAC/E,IAAA,OAAO,KAAK,WAAkB,CAAA,gBAAA,EAAkB,EAAE,WAAA,EAAa,eAAe,CAAA,CAAA;AAAA,GAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2BO,oBACL,6BACmC,EAAA;AACnC,IAAO,OAAA,IAAA,CAAK,YAAsC,uBAAyB,EAAA;AAAA,MACzE,6BAAA;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,sBAAsB,YAA2D,EAAA;AACtF,IAAO,OAAA,IAAA,CAAK,YAAwC,yBAA2B,EAAA;AAAA,MAC7E,YAAA;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,eAAe,WAA+C,EAAA;AACnE,IAAA,OAAO,IAAK,CAAA,WAAA,CAA6B,iBAAmB,EAAA,EAAE,aAAa,CAAA,CAAA;AAAA,GAC7E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBO,qBAAA,CACL,YACA,eACgC,EAAA;AAChC,IAAO,OAAA,IAAA,CAAK,YAAmC,yBAA2B,EAAA;AAAA,MACxE,UAAA;AAAA,MACA,eAAA,EAAiB,mBAAmB,EAAC;AAAA,KACtC,CAAA,CAAA;AAAA,GACH;AAAA;AAAA;AAAA;AAAA,EAKO,OAAgB,GAAA;AACrB,IAAA,IAAI,KAAK,eAAiB,EAAA;AACxB,MAAO,MAAA,CAAA,mBAAA,CAAoB,SAAW,EAAA,IAAA,CAAK,eAAe,CAAA,CAAA;AAC1D,MAAA,IAAA,CAAK,eAAkB,GAAA,IAAA,CAAA;AAAA,KACzB;AAGA,IAAA,KAAA,MAAW,CAAC,SAAW,EAAA,OAAO,KAAK,IAAK,CAAA,eAAA,CAAgB,SAAW,EAAA;AACjE,MAAA,YAAA,CAAa,QAAQ,SAAS,CAAA,CAAA;AAC9B,MAAA,OAAA,CAAQ,MAAO,CAAA;AAAA,QACb,IAAM,EAAA,eAAA;AAAA,QACN,OAAS,EAAA,4CAAA;AAAA,OACV,CAAA,CAAA;AAAA,KACH;AAEA,IAAA,IAAA,CAAK,gBAAgB,KAAM,EAAA,CAAA;AAC3B,IAAA,IAAA,CAAK,aAAgB,GAAA,KAAA,CAAA;AAAA,GACvB;AACF,CAAA,CAAA;AAAA;AA7WE,aAAA,CAFW,iBAEY,qBAAsB,EAAA,uBAAA,CAAA,CAAA;AAFxC,IAAM,cAAN,GAAA,gBAAA;AAgYA,SAAS,qBAAqB,OAAgD,EAAA;AACnF,EAAO,OAAA,IAAI,eAAe,OAAO,CAAA,CAAA;AACnC;;;;;;"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@learncard/partner-connect",
+  "version": "0.2.0",
+  "description": "LearnCard Partner Connect SDK - Promise-based cross-origin messaging for partner apps",
+  "main": "dist/partner-connect.js",
+  "module": "dist/partner-connect.esm.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/partner-connect.esm.js",
+      "require": "./dist/partner-connect.js",
+      "default": "./dist/partner-connect.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "sideEffects": false,
+  "keywords": [
+    "learncard",
+    "partner",
+    "connect",
+    "postmessage",
+    "iframe",
+    "credentials",
+    "sso"
+  ],
+  "license": "MIT",
+  "author": "Learning Economy Foundation (www.learningeconomy.io)",
+  "devDependencies": {
+    "@rollup/plugin-commonjs": "^22.0.2",
+    "@rollup/plugin-node-resolve": "^13.3.0",
+    "@types/node": "^18.19.64",
+    "rollup": "^2.79.1",
+    "rollup-plugin-dts": "^4.2.2",
+    "rollup-plugin-esbuild": "^4.9.1",
+    "typescript": "^5.4.5"
+  },
+  "files": [
+    "dist/**"
+  ],
+  "scripts": {
+    "build": "rollup -c",
+    "dev": "rollup -c -w",
+    "typecheck": "tsc --noEmit"
+  }
+}