@learncard/render-method-plugin 5.0.1 → 6.0.0

package/dist/render-method-plugin.cjs.development.cjs

@@ -15993,6 +15993,8 @@ var require_types_cjs_development = __commonJS({
       AgeRatingValidator: /* @__PURE__ */ __name2(() => AgeRatingValidator2, "AgeRatingValidator"),
       AlignmentTargetTypeValidator: /* @__PURE__ */ __name2(() => AlignmentTargetTypeValidator2, "AlignmentTargetTypeValidator"),
       AlignmentValidator: /* @__PURE__ */ __name2(() => AlignmentValidator2, "AlignmentValidator"),
+      AllocateCredentialRefreshInputValidator: /* @__PURE__ */ __name2(() => AllocateCredentialRefreshInputValidator2, "AllocateCredentialRefreshInputValidator"),
+      AllocateCredentialRefreshResultValidator: /* @__PURE__ */ __name2(() => AllocateCredentialRefreshResultValidator2, "AllocateCredentialRefreshResultValidator"),
       AllocateCredentialStatusInputValidator: /* @__PURE__ */ __name2(() => AllocateCredentialStatusInputValidator2, "AllocateCredentialStatusInputValidator"),
       AllocatedBitstringStatusListEntryValidator: /* @__PURE__ */ __name2(() => AllocatedBitstringStatusListEntryValidator2, "AllocatedBitstringStatusListEntryValidator"),
       AllowConnectionRequestsEnum: /* @__PURE__ */ __name2(() => AllowConnectionRequestsEnum2, "AllowConnectionRequestsEnum"),
@@ -16074,6 +16076,16 @@ var require_types_cjs_development = __commonJS({
       CredentialInfoValidator: /* @__PURE__ */ __name2(() => CredentialInfoValidator2, "CredentialInfoValidator"),
       CredentialNameRefValidator: /* @__PURE__ */ __name2(() => CredentialNameRefValidator2, "CredentialNameRefValidator"),
       CredentialRecordValidator: /* @__PURE__ */ __name2(() => CredentialRecordValidator2, "CredentialRecordValidator"),
+      CredentialRefreshChallengeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshChallengeValidator2, "CredentialRefreshChallengeValidator"),
+      CredentialRefreshFailedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshFailedResultValidator2, "CredentialRefreshFailedResultValidator"),
+      CredentialRefreshFailureCodeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshFailureCodeValidator2, "CredentialRefreshFailureCodeValidator"),
+      CredentialRefreshResponseEnvelopeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshResponseEnvelopeValidator2, "CredentialRefreshResponseEnvelopeValidator"),
+      CredentialRefreshResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshResultValidator2, "CredentialRefreshResultValidator"),
+      CredentialRefreshSigningModeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshSigningModeValidator2, "CredentialRefreshSigningModeValidator"),
+      CredentialRefreshUnchangedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshUnchangedResultValidator2, "CredentialRefreshUnchangedResultValidator"),
+      CredentialRefreshUnsupportedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshUnsupportedResultValidator2, "CredentialRefreshUnsupportedResultValidator"),
+      CredentialRefreshUpdatedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshUpdatedResultValidator2, "CredentialRefreshUpdatedResultValidator"),
+      CredentialRefreshVersionMetadataValidator: /* @__PURE__ */ __name2(() => CredentialRefreshVersionMetadataValidator2, "CredentialRefreshVersionMetadataValidator"),
       CredentialSchemaValidator: /* @__PURE__ */ __name2(() => CredentialSchemaValidator2, "CredentialSchemaValidator"),
       CredentialStatusValidator: /* @__PURE__ */ __name2(() => CredentialStatusValidator2, "CredentialStatusValidator"),
       CredentialSubjectValidator: /* @__PURE__ */ __name2(() => CredentialSubjectValidator2, "CredentialSubjectValidator"),
@@ -16094,6 +16106,8 @@ var require_types_cjs_development = __commonJS({
       GeoCoordinatesValidator: /* @__PURE__ */ __name2(() => GeoCoordinatesValidator2, "GeoCoordinatesValidator"),
       GetCounterEventValidator: /* @__PURE__ */ __name2(() => GetCounterEventValidator2, "GetCounterEventValidator"),
       GetCountersEventValidator: /* @__PURE__ */ __name2(() => GetCountersEventValidator2, "GetCountersEventValidator"),
+      GetCredentialRefreshHistoryInputValidator: /* @__PURE__ */ __name2(() => GetCredentialRefreshHistoryInputValidator2, "GetCredentialRefreshHistoryInputValidator"),
+      GetCredentialRefreshHistoryResultValidator: /* @__PURE__ */ __name2(() => GetCredentialRefreshHistoryResultValidator2, "GetCredentialRefreshHistoryResultValidator"),
       GetFullSkillTreeInputValidator: /* @__PURE__ */ __name2(() => GetFullSkillTreeInputValidator2, "GetFullSkillTreeInputValidator"),
       GetFullSkillTreeResultValidator: /* @__PURE__ */ __name2(() => GetFullSkillTreeResultValidator2, "GetFullSkillTreeResultValidator"),
       GetSkillPathInputValidator: /* @__PURE__ */ __name2(() => GetSkillPathInputValidator2, "GetSkillPathInputValidator"),
@@ -16118,6 +16132,7 @@ var require_types_cjs_development = __commonJS({
       JWEValidator: /* @__PURE__ */ __name2(() => JWEValidator2, "JWEValidator"),
       JWKValidator: /* @__PURE__ */ __name2(() => JWKValidator2, "JWKValidator"),
       JWKWithPrivateKeyValidator: /* @__PURE__ */ __name2(() => JWKWithPrivateKeyValidator2, "JWKWithPrivateKeyValidator"),
+      JweCredentialRefreshEnvelopeValidator: /* @__PURE__ */ __name2(() => JweCredentialRefreshEnvelopeValidator2, "JweCredentialRefreshEnvelopeValidator"),
       KnownAchievementTypeValidator: /* @__PURE__ */ __name2(() => KnownAchievementTypeValidator2, "KnownAchievementTypeValidator"),
       LCNAuthedProfileValidator: /* @__PURE__ */ __name2(() => LCNAuthedProfileValidator2, "LCNAuthedProfileValidator"),
       LCNBoostClaimLinkOptionsValidator: /* @__PURE__ */ __name2(() => LCNBoostClaimLinkOptionsValidator2, "LCNBoostClaimLinkOptionsValidator"),
@@ -16155,7 +16170,9 @@ var require_types_cjs_development = __commonJS({
       LCNSigningAuthorityValidator: /* @__PURE__ */ __name2(() => LCNSigningAuthorityValidator2, "LCNSigningAuthorityValidator"),
       LCNVisibleProfileValidator: /* @__PURE__ */ __name2(() => LCNVisibleProfileValidator2, "LCNVisibleProfileValidator"),
       LaunchTypeValidator: /* @__PURE__ */ __name2(() => LaunchTypeValidator2, "LaunchTypeValidator"),
+      LearnCardRefreshAuthorizationValidator: /* @__PURE__ */ __name2(() => LearnCardRefreshAuthorizationValidator2, "LearnCardRefreshAuthorizationValidator"),
       LinkProviderFrameworkInputValidator: /* @__PURE__ */ __name2(() => LinkProviderFrameworkInputValidator2, "LinkProviderFrameworkInputValidator"),
+      ManagedCredentialRefreshServiceValidator: /* @__PURE__ */ __name2(() => ManagedCredentialRefreshServiceValidator2, "ManagedCredentialRefreshServiceValidator"),
       PaginatedAppStoreListingsValidator: /* @__PURE__ */ __name2(() => PaginatedAppStoreListingsValidator2, "PaginatedAppStoreListingsValidator"),
       PaginatedBoostRecipientsValidator: /* @__PURE__ */ __name2(() => PaginatedBoostRecipientsValidator2, "PaginatedBoostRecipientsValidator"),
       PaginatedBoostRecipientsWithChildrenValidator: /* @__PURE__ */ __name2(() => PaginatedBoostRecipientsWithChildrenValidator2, "PaginatedBoostRecipientsWithChildrenValidator"),
@@ -16185,6 +16202,12 @@ var require_types_cjs_development = __commonJS({
       ProfileVisibilityEnum: /* @__PURE__ */ __name2(() => ProfileVisibilityEnum2, "ProfileVisibilityEnum"),
       PromotionLevelValidator: /* @__PURE__ */ __name2(() => PromotionLevelValidator2, "PromotionLevelValidator"),
       ProofValidator: /* @__PURE__ */ __name2(() => ProofValidator2, "ProofValidator"),
+      PublicCredentialRefreshEnvelopeValidator: /* @__PURE__ */ __name2(() => PublicCredentialRefreshEnvelopeValidator2, "PublicCredentialRefreshEnvelopeValidator"),
+      PublishCredentialRefreshInputValidator: /* @__PURE__ */ __name2(() => PublishCredentialRefreshInputValidator2, "PublishCredentialRefreshInputValidator"),
+      PublishCredentialRefreshNotificationValidator: /* @__PURE__ */ __name2(() => PublishCredentialRefreshNotificationValidator2, "PublishCredentialRefreshNotificationValidator"),
+      PublishCredentialRefreshResultValidator: /* @__PURE__ */ __name2(() => PublishCredentialRefreshResultValidator2, "PublishCredentialRefreshResultValidator"),
+      PublishIssuerSignedRefreshValidator: /* @__PURE__ */ __name2(() => PublishIssuerSignedRefreshValidator2, "PublishIssuerSignedRefreshValidator"),
+      PublishSigningAuthorityRefreshValidator: /* @__PURE__ */ __name2(() => PublishSigningAuthorityRefreshValidator2, "PublishSigningAuthorityRefreshValidator"),
       RefreshServiceValidator: /* @__PURE__ */ __name2(() => RefreshServiceValidator2, "RefreshServiceValidator"),
       RegExpValidator: /* @__PURE__ */ __name2(() => RegExpValidator2, "RegExpValidator"),
       RelatedValidator: /* @__PURE__ */ __name2(() => RelatedValidator2, "RelatedValidator"),
@@ -16225,11 +16248,13 @@ var require_types_cjs_development = __commonJS({
       SkillTreeNodeInputValidator: /* @__PURE__ */ __name2(() => SkillTreeNodeInputValidator2, "SkillTreeNodeInputValidator"),
       SkillTreeNodeValidator: /* @__PURE__ */ __name2(() => SkillTreeNodeValidator2, "SkillTreeNodeValidator"),
       SkillValidator: /* @__PURE__ */ __name2(() => SkillValidator2, "SkillValidator"),
+      StandardCredentialRefreshServiceValidator: /* @__PURE__ */ __name2(() => StandardCredentialRefreshServiceValidator2, "StandardCredentialRefreshServiceValidator"),
       StatusCheckEntryValidator: /* @__PURE__ */ __name2(() => StatusCheckEntryValidator2, "StatusCheckEntryValidator"),
       StoredCredentialEnvelopeValidator: /* @__PURE__ */ __name2(() => StoredCredentialEnvelopeValidator2, "StoredCredentialEnvelopeValidator"),
       StringQuery: /* @__PURE__ */ __name2(() => StringQuery2, "StringQuery"),
       SummaryCredentialDataValidator: /* @__PURE__ */ __name2(() => SummaryCredentialDataValidator2, "SummaryCredentialDataValidator"),
       SummaryCredentialKeywordValidator: /* @__PURE__ */ __name2(() => SummaryCredentialKeywordValidator2, "SummaryCredentialKeywordValidator"),
+      SupportedCredentialRefreshServiceValidator: /* @__PURE__ */ __name2(() => SupportedCredentialRefreshServiceValidator2, "SupportedCredentialRefreshServiceValidator"),
       SyncFrameworkInputValidator: /* @__PURE__ */ __name2(() => SyncFrameworkInputValidator2, "SyncFrameworkInputValidator"),
       TagValidator: /* @__PURE__ */ __name2(() => TagValidator2, "TagValidator"),
       TemplateRenderMethodValidator: /* @__PURE__ */ __name2(() => TemplateRenderMethodValidator2, "TemplateRenderMethodValidator"),
@@ -32826,7 +32851,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       webhookUrl: external_exports2.string().url().optional().describe("Webhook URL to receive claim notifications"),
       suppressDelivery: external_exports2.boolean().optional().describe("If true, returns claimUrl without sending email/SMS"),
       branding: SendBrandingOptionsValidator2.optional().describe("Branding for email/SMS delivery"),
-      guardianEmail: external_exports2.string().email().optional().describe("Guardian email that must approve before student can claim")
+      guardianEmail: external_exports2.string().email().optional().describe("Guardian email that must approve before student can claim"),
+      expiresInDays: external_exports2.number().int().min(1).max(720).optional().describe(
+        "How many days the credential stays claimable in the Universal Inbox (default 30). Does not change the credential validity period."
+      )
     });
     var SendBoostInputValidator2 = external_exports2.object({
       type: external_exports2.literal("boost"),
@@ -33121,7 +33149,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       "APP_NOTIFICATION",
       "CREDENTIAL_REVOKED",
       "CREDENTIAL_SUSPENDED",
-      "CREDENTIAL_UNSUSPENDED"
+      "CREDENTIAL_UNSUSPENDED",
+      "CREDENTIAL_REFRESHED"
     ]);
     var LCNNotificationMessageValidator2 = external_exports2.object({
       title: external_exports2.string().optional(),
@@ -33253,12 +33282,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     });
     var InboxCredentialValidator2 = external_exports2.object({
       id: external_exports2.string(),
-      credential: external_exports2.string(),
+      credential: external_exports2.string().optional(),
       isSigned: external_exports2.boolean(),
       currentStatus: LCNInboxStatusEnumValidator2,
       isAccepted: external_exports2.boolean().optional(),
       expiresAt: external_exports2.string(),
       createdAt: external_exports2.string(),
+      finalizedAt: external_exports2.string().optional(),
+      expiredAt: external_exports2.string().optional(),
+      credentialName: external_exports2.string().optional(),
+      achievementType: external_exports2.string().optional(),
       issuerDid: external_exports2.string(),
       webhookUrl: external_exports2.string().optional(),
       boostUri: external_exports2.string().optional(),
@@ -33312,7 +33345,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           "The signing authority to use for the credential. If not provided, the users default signing authority will be used if the credential is not signed."
         ),
         webhookUrl: external_exports2.string().url().optional().describe("The webhook URL to receive credential issuance events."),
-        expiresInDays: external_exports2.number().min(1).max(365).optional().describe("The number of days the credential will be valid for."),
+        expiresInDays: external_exports2.number().int().min(1).max(720).optional().describe(
+          "How many days the encrypted inbox payload remains claimable. This does not change the credential validity period."
+        ),
         templateData: external_exports2.record(external_exports2.string(), external_exports2.unknown()).optional().describe(
           "Template data to render into the boost credential template using Mustache syntax. Only used when boostUri is provided."
         ),
@@ -33375,6 +33410,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       credential: VCValidator2.or(VPValidator2).or(UnsignedVCValidator2).or(CredentialNameRefValidator2).describe("The credential to issue, or a { name } reference to resolve a boost template."),
       configuration: external_exports2.object({
         publishableKey: external_exports2.string(),
+        expiresInDays: external_exports2.number().int().min(1).max(720).optional().describe(
+          "Inbox claim window in days. Defaults to 720; use a shorter window for sensitive records."
+        ),
         signingAuthorityName: external_exports2.string().optional(),
         listingId: external_exports2.string().optional(),
         listingSlug: external_exports2.string().optional()
@@ -34006,6 +34044,191 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       const result = inAppMessagesFlagValidator2.safeParse(raw);
       return result.success ? result.data : EMPTY_IN_APP_MESSAGES_FLAG;
     }, "parseInAppMessagesFlag");
+    var LearnCardRefreshAuthorizationValidator2 = external_exports2.object({ type: external_exports2.literal("LearnCardDIDAuth") }).catchall(external_exports2.any());
+    var ManagedCredentialRefreshServiceValidator2 = external_exports2.object({
+      id: external_exports2.string().min(1),
+      type: external_exports2.literal("LearnCardCredentialRefresh2026"),
+      authorization: LearnCardRefreshAuthorizationValidator2.optional()
+    }).catchall(external_exports2.any());
+    var StandardCredentialRefreshServiceValidator2 = external_exports2.object({
+      id: external_exports2.string().min(1),
+      type: external_exports2.literal("1EdTechCredentialRefresh")
+    }).catchall(external_exports2.any());
+    var SupportedCredentialRefreshServiceValidator2 = external_exports2.union([
+      ManagedCredentialRefreshServiceValidator2,
+      StandardCredentialRefreshServiceValidator2
+    ]);
+    var AllocateCredentialRefreshInputValidator2 = external_exports2.object({
+      holder: external_exports2.object({
+        profileId: external_exports2.string().optional(),
+        did: external_exports2.string().min(1)
+      }),
+      credentialId: external_exports2.string().min(1)
+    });
+    var AllocateCredentialRefreshResultValidator2 = external_exports2.object({
+      refreshId: external_exports2.string().min(1),
+      refreshService: ManagedCredentialRefreshServiceValidator2.extend({
+        authorization: LearnCardRefreshAuthorizationValidator2
+      })
+    });
+    var CredentialRefreshSigningModeValidator2 = external_exports2.enum(["issuer-signed", "signing-authority"]);
+    var PublishCredentialRefreshBaseFields2 = {
+      refreshId: external_exports2.string().min(1),
+      notifyHolder: external_exports2.boolean().optional(),
+      updateSummary: external_exports2.string().optional(),
+      idempotencyKey: external_exports2.string().optional()
+    };
+    var PublishIssuerSignedRefreshValidator2 = external_exports2.object({
+      ...PublishCredentialRefreshBaseFields2,
+      mode: external_exports2.literal("issuer-signed"),
+      signedCredential: VCValidator2
+    });
+    var PublishSigningAuthorityRefreshValidator2 = external_exports2.object({
+      ...PublishCredentialRefreshBaseFields2,
+      mode: external_exports2.literal("signing-authority"),
+      credential: UnsignedVCValidator2,
+      signingAuthority: external_exports2.object({
+        type: external_exports2.string().min(1)
+      }).catchall(external_exports2.any())
+    });
+    var PublishCredentialRefreshInputValidator2 = external_exports2.object({
+      ...PublishCredentialRefreshBaseFields2,
+      mode: CredentialRefreshSigningModeValidator2,
+      signedCredential: VCValidator2.optional(),
+      credential: UnsignedVCValidator2.optional(),
+      signingAuthority: external_exports2.object({
+        type: external_exports2.string().min(1)
+      }).catchall(external_exports2.any()).optional()
+    }).superRefine((input, ctx) => {
+      if (input.mode === "issuer-signed" && !input.signedCredential) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["signedCredential"],
+          message: "signedCredential is required for issuer-signed publication"
+        });
+      }
+      if (input.mode === "issuer-signed" && (input.credential !== void 0 || input.signingAuthority !== void 0)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["mode"],
+          message: "issuer-signed publication cannot include signing-authority fields"
+        });
+      }
+      if (input.mode === "signing-authority") {
+        if (input.signedCredential !== void 0) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["signedCredential"],
+            message: "signing-authority publication cannot include signedCredential"
+          });
+        }
+        if (!input.credential) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["credential"],
+            message: "credential is required for signing-authority publication"
+          });
+        }
+        if (!input.signingAuthority) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["signingAuthority"],
+            message: "signingAuthority is required for signing-authority publication"
+          });
+        }
+      }
+    });
+    var PublishCredentialRefreshNotificationValidator2 = external_exports2.enum([
+      "queued",
+      "suppressed",
+      "not-applicable",
+      /** Publication succeeded, but the post-commit notification enqueue must be retried. */
+      "delivery-failed"
+    ]);
+    var PublishCredentialRefreshResultValidator2 = external_exports2.object({
+      refreshId: external_exports2.string().min(1),
+      version: external_exports2.number().int().positive(),
+      publishedAt: external_exports2.string().min(1),
+      notification: PublishCredentialRefreshNotificationValidator2
+    });
+    var CredentialRefreshVersionMetadataValidator2 = external_exports2.object({
+      version: external_exports2.number().int().positive(),
+      publishedAt: external_exports2.string().min(1),
+      effectiveAt: external_exports2.string().optional(),
+      etag: external_exports2.string().optional(),
+      signingMode: CredentialRefreshSigningModeValidator2.optional(),
+      updateSummary: external_exports2.string().optional()
+    });
+    var GetCredentialRefreshHistoryInputValidator2 = external_exports2.object({
+      refreshId: external_exports2.string().min(1),
+      cursor: external_exports2.string().optional(),
+      limit: external_exports2.number().int().positive().optional()
+    });
+    var GetCredentialRefreshHistoryResultValidator2 = external_exports2.object({
+      records: CredentialRefreshVersionMetadataValidator2.array(),
+      hasMore: external_exports2.boolean(),
+      cursor: external_exports2.string().optional()
+    });
+    var CredentialRefreshChallengeValidator2 = external_exports2.object({
+      challenge: external_exports2.string().min(1),
+      expiresAt: external_exports2.string().min(1),
+      domain: external_exports2.string().optional(),
+      scheme: external_exports2.literal("LearnCardDIDAuth").optional()
+    });
+    var PublicCredentialRefreshEnvelopeValidator2 = external_exports2.object({
+      format: external_exports2.literal("vc"),
+      credential: VCValidator2,
+      etag: external_exports2.string().optional()
+    });
+    var JweCredentialRefreshEnvelopeValidator2 = external_exports2.object({
+      format: external_exports2.literal("jwe"),
+      jwe: JWEValidator2,
+      etag: external_exports2.string().optional(),
+      /** Present on LearnCard-managed endpoints; optional for interoperable JWE services. */
+      version: external_exports2.number().int().positive().optional()
+    });
+    var CredentialRefreshResponseEnvelopeValidator2 = external_exports2.discriminatedUnion("format", [
+      PublicCredentialRefreshEnvelopeValidator2,
+      JweCredentialRefreshEnvelopeValidator2
+    ]);
+    var CredentialRefreshFailureCodeValidator2 = external_exports2.enum([
+      "UNAVAILABLE",
+      "TIMEOUT",
+      "UNSUPPORTED_SERVICE",
+      "UNAUTHORIZED",
+      "MALFORMED_RESPONSE",
+      "INVALID_PROOF",
+      "ISSUER_MISMATCH",
+      "ID_MISMATCH",
+      "ROLLBACK",
+      "REVOKED",
+      "UNSAFE_ENDPOINT"
+    ]);
+    var CredentialRefreshUpdatedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("updated"),
+      credential: VCValidator2,
+      etag: external_exports2.string().optional(),
+      managedVersion: external_exports2.number().int().positive().optional()
+    });
+    var CredentialRefreshUnchangedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("unchanged"),
+      checkedAt: external_exports2.string().min(1),
+      etag: external_exports2.string().optional()
+    });
+    var CredentialRefreshUnsupportedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("unsupported")
+    });
+    var CredentialRefreshFailedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("failed"),
+      code: CredentialRefreshFailureCodeValidator2,
+      retryable: external_exports2.boolean()
+    });
+    var CredentialRefreshResultValidator2 = external_exports2.discriminatedUnion("status", [
+      CredentialRefreshUpdatedResultValidator2,
+      CredentialRefreshUnchangedResultValidator2,
+      CredentialRefreshUnsupportedResultValidator2,
+      CredentialRefreshFailedResultValidator2
+    ]);
   }
 });
 var require_dist = __commonJS({
@@ -34018,7 +34241,7 @@ var require_dist = __commonJS({
     }
   }
 });
-var import_types2 = __toESM(require_dist());
+var import_types3 = __toESM(require_dist());
 var filestack_helpers_exports = {};
 __export2(filestack_helpers_exports, {
   changeQuality: /* @__PURE__ */ __name(() => changeQuality, "changeQuality"),
@@ -34299,7 +34522,8 @@ var ImageWithLoadingStateValdator = external_exports.object({
   image: external_exports.string(),
   loading: external_exports.union([ImageResizingValidator, ImageUploadingValidator]).optional()
 });
-var import_types3 = __toESM(require_dist());
+var import_types2 = __toESM(require_dist());
+var import_types22 = __toESM(require_dist());
 var _a4;
 var EnvironmentConfigurationError = (_a4 = class extends Error {
   constructor(message) {
@@ -35233,7 +35457,10 @@ var SendOptionsValidator = external_exports.object({
   webhookUrl: external_exports.string().url().optional().describe("Webhook URL to receive claim notifications"),
   suppressDelivery: external_exports.boolean().optional().describe("If true, returns claimUrl without sending email/SMS"),
   branding: SendBrandingOptionsValidator.optional().describe("Branding for email/SMS delivery"),
-  guardianEmail: external_exports.string().email().optional().describe("Guardian email that must approve before student can claim")
+  guardianEmail: external_exports.string().email().optional().describe("Guardian email that must approve before student can claim"),
+  expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+    "How many days the credential stays claimable in the Universal Inbox (default 30). Does not change the credential validity period."
+  )
 });
 var SendBoostInputValidator = external_exports.object({
   type: external_exports.literal("boost"),
@@ -35528,7 +35755,8 @@ var LCNNotificationTypeEnumValidator = external_exports.enum([
   "APP_NOTIFICATION",
   "CREDENTIAL_REVOKED",
   "CREDENTIAL_SUSPENDED",
-  "CREDENTIAL_UNSUSPENDED"
+  "CREDENTIAL_UNSUSPENDED",
+  "CREDENTIAL_REFRESHED"
 ]);
 var LCNNotificationMessageValidator = external_exports.object({
   title: external_exports.string().optional(),
@@ -35660,12 +35888,16 @@ var CreateContactMethodSessionResponseValidator = external_exports.object({
 });
 var InboxCredentialValidator = external_exports.object({
   id: external_exports.string(),
-  credential: external_exports.string(),
+  credential: external_exports.string().optional(),
   isSigned: external_exports.boolean(),
   currentStatus: LCNInboxStatusEnumValidator,
   isAccepted: external_exports.boolean().optional(),
   expiresAt: external_exports.string(),
   createdAt: external_exports.string(),
+  finalizedAt: external_exports.string().optional(),
+  expiredAt: external_exports.string().optional(),
+  credentialName: external_exports.string().optional(),
+  achievementType: external_exports.string().optional(),
   issuerDid: external_exports.string(),
   webhookUrl: external_exports.string().optional(),
   boostUri: external_exports.string().optional(),
@@ -35719,7 +35951,9 @@ var IssueInboxCredentialValidator = external_exports.object({
       "The signing authority to use for the credential. If not provided, the users default signing authority will be used if the credential is not signed."
     ),
     webhookUrl: external_exports.string().url().optional().describe("The webhook URL to receive credential issuance events."),
-    expiresInDays: external_exports.number().min(1).max(365).optional().describe("The number of days the credential will be valid for."),
+    expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+      "How many days the encrypted inbox payload remains claimable. This does not change the credential validity period."
+    ),
     templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional().describe(
       "Template data to render into the boost credential template using Mustache syntax. Only used when boostUri is provided."
     ),
@@ -35782,6 +36016,9 @@ var ClaimInboxCredentialValidator = external_exports.object({
   credential: VCValidator.or(VPValidator).or(UnsignedVCValidator).or(CredentialNameRefValidator).describe("The credential to issue, or a { name } reference to resolve a boost template."),
   configuration: external_exports.object({
     publishableKey: external_exports.string(),
+    expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+      "Inbox claim window in days. Defaults to 720; use a shorter window for sensitive records."
+    ),
     signingAuthorityName: external_exports.string().optional(),
     listingId: external_exports.string().optional(),
     listingSlug: external_exports.string().optional()
@@ -36408,6 +36645,191 @@ var inAppMessagesFlagValidator = external_exports.object({
   version: external_exports.number().default(1),
   messages: external_exports.array(inAppMessageValidator).default([])
 }).passthrough();
+var LearnCardRefreshAuthorizationValidator = external_exports.object({ type: external_exports.literal("LearnCardDIDAuth") }).catchall(external_exports.any());
+var ManagedCredentialRefreshServiceValidator = external_exports.object({
+  id: external_exports.string().min(1),
+  type: external_exports.literal("LearnCardCredentialRefresh2026"),
+  authorization: LearnCardRefreshAuthorizationValidator.optional()
+}).catchall(external_exports.any());
+var StandardCredentialRefreshServiceValidator = external_exports.object({
+  id: external_exports.string().min(1),
+  type: external_exports.literal("1EdTechCredentialRefresh")
+}).catchall(external_exports.any());
+var SupportedCredentialRefreshServiceValidator = external_exports.union([
+  ManagedCredentialRefreshServiceValidator,
+  StandardCredentialRefreshServiceValidator
+]);
+var AllocateCredentialRefreshInputValidator = external_exports.object({
+  holder: external_exports.object({
+    profileId: external_exports.string().optional(),
+    did: external_exports.string().min(1)
+  }),
+  credentialId: external_exports.string().min(1)
+});
+var AllocateCredentialRefreshResultValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  refreshService: ManagedCredentialRefreshServiceValidator.extend({
+    authorization: LearnCardRefreshAuthorizationValidator
+  })
+});
+var CredentialRefreshSigningModeValidator = external_exports.enum(["issuer-signed", "signing-authority"]);
+var PublishCredentialRefreshBaseFields = {
+  refreshId: external_exports.string().min(1),
+  notifyHolder: external_exports.boolean().optional(),
+  updateSummary: external_exports.string().optional(),
+  idempotencyKey: external_exports.string().optional()
+};
+var PublishIssuerSignedRefreshValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: external_exports.literal("issuer-signed"),
+  signedCredential: VCValidator
+});
+var PublishSigningAuthorityRefreshValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: external_exports.literal("signing-authority"),
+  credential: UnsignedVCValidator,
+  signingAuthority: external_exports.object({
+    type: external_exports.string().min(1)
+  }).catchall(external_exports.any())
+});
+var PublishCredentialRefreshInputValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: CredentialRefreshSigningModeValidator,
+  signedCredential: VCValidator.optional(),
+  credential: UnsignedVCValidator.optional(),
+  signingAuthority: external_exports.object({
+    type: external_exports.string().min(1)
+  }).catchall(external_exports.any()).optional()
+}).superRefine((input, ctx) => {
+  if (input.mode === "issuer-signed" && !input.signedCredential) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["signedCredential"],
+      message: "signedCredential is required for issuer-signed publication"
+    });
+  }
+  if (input.mode === "issuer-signed" && (input.credential !== void 0 || input.signingAuthority !== void 0)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["mode"],
+      message: "issuer-signed publication cannot include signing-authority fields"
+    });
+  }
+  if (input.mode === "signing-authority") {
+    if (input.signedCredential !== void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["signedCredential"],
+        message: "signing-authority publication cannot include signedCredential"
+      });
+    }
+    if (!input.credential) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["credential"],
+        message: "credential is required for signing-authority publication"
+      });
+    }
+    if (!input.signingAuthority) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["signingAuthority"],
+        message: "signingAuthority is required for signing-authority publication"
+      });
+    }
+  }
+});
+var PublishCredentialRefreshNotificationValidator = external_exports.enum([
+  "queued",
+  "suppressed",
+  "not-applicable",
+  /** Publication succeeded, but the post-commit notification enqueue must be retried. */
+  "delivery-failed"
+]);
+var PublishCredentialRefreshResultValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  version: external_exports.number().int().positive(),
+  publishedAt: external_exports.string().min(1),
+  notification: PublishCredentialRefreshNotificationValidator
+});
+var CredentialRefreshVersionMetadataValidator = external_exports.object({
+  version: external_exports.number().int().positive(),
+  publishedAt: external_exports.string().min(1),
+  effectiveAt: external_exports.string().optional(),
+  etag: external_exports.string().optional(),
+  signingMode: CredentialRefreshSigningModeValidator.optional(),
+  updateSummary: external_exports.string().optional()
+});
+var GetCredentialRefreshHistoryInputValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  cursor: external_exports.string().optional(),
+  limit: external_exports.number().int().positive().optional()
+});
+var GetCredentialRefreshHistoryResultValidator = external_exports.object({
+  records: CredentialRefreshVersionMetadataValidator.array(),
+  hasMore: external_exports.boolean(),
+  cursor: external_exports.string().optional()
+});
+var CredentialRefreshChallengeValidator = external_exports.object({
+  challenge: external_exports.string().min(1),
+  expiresAt: external_exports.string().min(1),
+  domain: external_exports.string().optional(),
+  scheme: external_exports.literal("LearnCardDIDAuth").optional()
+});
+var PublicCredentialRefreshEnvelopeValidator = external_exports.object({
+  format: external_exports.literal("vc"),
+  credential: VCValidator,
+  etag: external_exports.string().optional()
+});
+var JweCredentialRefreshEnvelopeValidator = external_exports.object({
+  format: external_exports.literal("jwe"),
+  jwe: JWEValidator,
+  etag: external_exports.string().optional(),
+  /** Present on LearnCard-managed endpoints; optional for interoperable JWE services. */
+  version: external_exports.number().int().positive().optional()
+});
+var CredentialRefreshResponseEnvelopeValidator = external_exports.discriminatedUnion("format", [
+  PublicCredentialRefreshEnvelopeValidator,
+  JweCredentialRefreshEnvelopeValidator
+]);
+var CredentialRefreshFailureCodeValidator = external_exports.enum([
+  "UNAVAILABLE",
+  "TIMEOUT",
+  "UNSUPPORTED_SERVICE",
+  "UNAUTHORIZED",
+  "MALFORMED_RESPONSE",
+  "INVALID_PROOF",
+  "ISSUER_MISMATCH",
+  "ID_MISMATCH",
+  "ROLLBACK",
+  "REVOKED",
+  "UNSAFE_ENDPOINT"
+]);
+var CredentialRefreshUpdatedResultValidator = external_exports.object({
+  status: external_exports.literal("updated"),
+  credential: VCValidator,
+  etag: external_exports.string().optional(),
+  managedVersion: external_exports.number().int().positive().optional()
+});
+var CredentialRefreshUnchangedResultValidator = external_exports.object({
+  status: external_exports.literal("unchanged"),
+  checkedAt: external_exports.string().min(1),
+  etag: external_exports.string().optional()
+});
+var CredentialRefreshUnsupportedResultValidator = external_exports.object({
+  status: external_exports.literal("unsupported")
+});
+var CredentialRefreshFailedResultValidator = external_exports.object({
+  status: external_exports.literal("failed"),
+  code: CredentialRefreshFailureCodeValidator,
+  retryable: external_exports.boolean()
+});
+var CredentialRefreshResultValidator = external_exports.discriminatedUnion("status", [
+  CredentialRefreshUpdatedResultValidator,
+  CredentialRefreshUnchangedResultValidator,
+  CredentialRefreshUnsupportedResultValidator,
+  CredentialRefreshFailedResultValidator
+]);
 
 // src/read.ts
 var isTemplateRenderMethod = /* @__PURE__ */ __name((rm) => TemplateRenderMethodValidator.safeParse(rm).success, "isTemplateRenderMethod");