@learncard/render-method-plugin 5.0.1 → 7.0.0

package/dist/render-method-plugin.cjs.development.cjs

@@ -15993,6 +15993,8 @@ var require_types_cjs_development = __commonJS({
       AgeRatingValidator: /* @__PURE__ */ __name2(() => AgeRatingValidator2, "AgeRatingValidator"),
       AlignmentTargetTypeValidator: /* @__PURE__ */ __name2(() => AlignmentTargetTypeValidator2, "AlignmentTargetTypeValidator"),
       AlignmentValidator: /* @__PURE__ */ __name2(() => AlignmentValidator2, "AlignmentValidator"),
+      AllocateCredentialRefreshInputValidator: /* @__PURE__ */ __name2(() => AllocateCredentialRefreshInputValidator2, "AllocateCredentialRefreshInputValidator"),
+      AllocateCredentialRefreshResultValidator: /* @__PURE__ */ __name2(() => AllocateCredentialRefreshResultValidator2, "AllocateCredentialRefreshResultValidator"),
       AllocateCredentialStatusInputValidator: /* @__PURE__ */ __name2(() => AllocateCredentialStatusInputValidator2, "AllocateCredentialStatusInputValidator"),
       AllocatedBitstringStatusListEntryValidator: /* @__PURE__ */ __name2(() => AllocatedBitstringStatusListEntryValidator2, "AllocatedBitstringStatusListEntryValidator"),
       AllowConnectionRequestsEnum: /* @__PURE__ */ __name2(() => AllowConnectionRequestsEnum2, "AllowConnectionRequestsEnum"),
@@ -16042,6 +16044,7 @@ var require_types_cjs_development = __commonJS({
       ConsentFlowContractValidator: /* @__PURE__ */ __name2(() => ConsentFlowContractValidator2, "ConsentFlowContractValidator"),
       ConsentFlowDataForDidQueryValidator: /* @__PURE__ */ __name2(() => ConsentFlowDataForDidQueryValidator2, "ConsentFlowDataForDidQueryValidator"),
       ConsentFlowDataQueryValidator: /* @__PURE__ */ __name2(() => ConsentFlowDataQueryValidator2, "ConsentFlowDataQueryValidator"),
+      ConsentFlowGuardianApprovalValidator: /* @__PURE__ */ __name2(() => ConsentFlowGuardianApprovalValidator2, "ConsentFlowGuardianApprovalValidator"),
       ConsentFlowTermValidator: /* @__PURE__ */ __name2(() => ConsentFlowTermValidator2, "ConsentFlowTermValidator"),
       ConsentFlowTermsQueryValidator: /* @__PURE__ */ __name2(() => ConsentFlowTermsQueryValidator2, "ConsentFlowTermsQueryValidator"),
       ConsentFlowTermsStatusValidator: /* @__PURE__ */ __name2(() => ConsentFlowTermsStatusValidator2, "ConsentFlowTermsStatusValidator"),
@@ -16074,6 +16077,16 @@ var require_types_cjs_development = __commonJS({
       CredentialInfoValidator: /* @__PURE__ */ __name2(() => CredentialInfoValidator2, "CredentialInfoValidator"),
       CredentialNameRefValidator: /* @__PURE__ */ __name2(() => CredentialNameRefValidator2, "CredentialNameRefValidator"),
       CredentialRecordValidator: /* @__PURE__ */ __name2(() => CredentialRecordValidator2, "CredentialRecordValidator"),
+      CredentialRefreshChallengeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshChallengeValidator2, "CredentialRefreshChallengeValidator"),
+      CredentialRefreshFailedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshFailedResultValidator2, "CredentialRefreshFailedResultValidator"),
+      CredentialRefreshFailureCodeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshFailureCodeValidator2, "CredentialRefreshFailureCodeValidator"),
+      CredentialRefreshResponseEnvelopeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshResponseEnvelopeValidator2, "CredentialRefreshResponseEnvelopeValidator"),
+      CredentialRefreshResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshResultValidator2, "CredentialRefreshResultValidator"),
+      CredentialRefreshSigningModeValidator: /* @__PURE__ */ __name2(() => CredentialRefreshSigningModeValidator2, "CredentialRefreshSigningModeValidator"),
+      CredentialRefreshUnchangedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshUnchangedResultValidator2, "CredentialRefreshUnchangedResultValidator"),
+      CredentialRefreshUnsupportedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshUnsupportedResultValidator2, "CredentialRefreshUnsupportedResultValidator"),
+      CredentialRefreshUpdatedResultValidator: /* @__PURE__ */ __name2(() => CredentialRefreshUpdatedResultValidator2, "CredentialRefreshUpdatedResultValidator"),
+      CredentialRefreshVersionMetadataValidator: /* @__PURE__ */ __name2(() => CredentialRefreshVersionMetadataValidator2, "CredentialRefreshVersionMetadataValidator"),
       CredentialSchemaValidator: /* @__PURE__ */ __name2(() => CredentialSchemaValidator2, "CredentialSchemaValidator"),
       CredentialStatusValidator: /* @__PURE__ */ __name2(() => CredentialStatusValidator2, "CredentialStatusValidator"),
       CredentialSubjectValidator: /* @__PURE__ */ __name2(() => CredentialSubjectValidator2, "CredentialSubjectValidator"),
@@ -16094,6 +16107,8 @@ var require_types_cjs_development = __commonJS({
       GeoCoordinatesValidator: /* @__PURE__ */ __name2(() => GeoCoordinatesValidator2, "GeoCoordinatesValidator"),
       GetCounterEventValidator: /* @__PURE__ */ __name2(() => GetCounterEventValidator2, "GetCounterEventValidator"),
       GetCountersEventValidator: /* @__PURE__ */ __name2(() => GetCountersEventValidator2, "GetCountersEventValidator"),
+      GetCredentialRefreshHistoryInputValidator: /* @__PURE__ */ __name2(() => GetCredentialRefreshHistoryInputValidator2, "GetCredentialRefreshHistoryInputValidator"),
+      GetCredentialRefreshHistoryResultValidator: /* @__PURE__ */ __name2(() => GetCredentialRefreshHistoryResultValidator2, "GetCredentialRefreshHistoryResultValidator"),
       GetFullSkillTreeInputValidator: /* @__PURE__ */ __name2(() => GetFullSkillTreeInputValidator2, "GetFullSkillTreeInputValidator"),
       GetFullSkillTreeResultValidator: /* @__PURE__ */ __name2(() => GetFullSkillTreeResultValidator2, "GetFullSkillTreeResultValidator"),
       GetSkillPathInputValidator: /* @__PURE__ */ __name2(() => GetSkillPathInputValidator2, "GetSkillPathInputValidator"),
@@ -16118,6 +16133,7 @@ var require_types_cjs_development = __commonJS({
       JWEValidator: /* @__PURE__ */ __name2(() => JWEValidator2, "JWEValidator"),
       JWKValidator: /* @__PURE__ */ __name2(() => JWKValidator2, "JWKValidator"),
       JWKWithPrivateKeyValidator: /* @__PURE__ */ __name2(() => JWKWithPrivateKeyValidator2, "JWKWithPrivateKeyValidator"),
+      JweCredentialRefreshEnvelopeValidator: /* @__PURE__ */ __name2(() => JweCredentialRefreshEnvelopeValidator2, "JweCredentialRefreshEnvelopeValidator"),
       KnownAchievementTypeValidator: /* @__PURE__ */ __name2(() => KnownAchievementTypeValidator2, "KnownAchievementTypeValidator"),
       LCNAuthedProfileValidator: /* @__PURE__ */ __name2(() => LCNAuthedProfileValidator2, "LCNAuthedProfileValidator"),
       LCNBoostClaimLinkOptionsValidator: /* @__PURE__ */ __name2(() => LCNBoostClaimLinkOptionsValidator2, "LCNBoostClaimLinkOptionsValidator"),
@@ -16155,7 +16171,9 @@ var require_types_cjs_development = __commonJS({
       LCNSigningAuthorityValidator: /* @__PURE__ */ __name2(() => LCNSigningAuthorityValidator2, "LCNSigningAuthorityValidator"),
       LCNVisibleProfileValidator: /* @__PURE__ */ __name2(() => LCNVisibleProfileValidator2, "LCNVisibleProfileValidator"),
       LaunchTypeValidator: /* @__PURE__ */ __name2(() => LaunchTypeValidator2, "LaunchTypeValidator"),
+      LearnCardRefreshAuthorizationValidator: /* @__PURE__ */ __name2(() => LearnCardRefreshAuthorizationValidator2, "LearnCardRefreshAuthorizationValidator"),
       LinkProviderFrameworkInputValidator: /* @__PURE__ */ __name2(() => LinkProviderFrameworkInputValidator2, "LinkProviderFrameworkInputValidator"),
+      ManagedCredentialRefreshServiceValidator: /* @__PURE__ */ __name2(() => ManagedCredentialRefreshServiceValidator2, "ManagedCredentialRefreshServiceValidator"),
       PaginatedAppStoreListingsValidator: /* @__PURE__ */ __name2(() => PaginatedAppStoreListingsValidator2, "PaginatedAppStoreListingsValidator"),
       PaginatedBoostRecipientsValidator: /* @__PURE__ */ __name2(() => PaginatedBoostRecipientsValidator2, "PaginatedBoostRecipientsValidator"),
       PaginatedBoostRecipientsWithChildrenValidator: /* @__PURE__ */ __name2(() => PaginatedBoostRecipientsWithChildrenValidator2, "PaginatedBoostRecipientsWithChildrenValidator"),
@@ -16185,6 +16203,12 @@ var require_types_cjs_development = __commonJS({
       ProfileVisibilityEnum: /* @__PURE__ */ __name2(() => ProfileVisibilityEnum2, "ProfileVisibilityEnum"),
       PromotionLevelValidator: /* @__PURE__ */ __name2(() => PromotionLevelValidator2, "PromotionLevelValidator"),
       ProofValidator: /* @__PURE__ */ __name2(() => ProofValidator2, "ProofValidator"),
+      PublicCredentialRefreshEnvelopeValidator: /* @__PURE__ */ __name2(() => PublicCredentialRefreshEnvelopeValidator2, "PublicCredentialRefreshEnvelopeValidator"),
+      PublishCredentialRefreshInputValidator: /* @__PURE__ */ __name2(() => PublishCredentialRefreshInputValidator2, "PublishCredentialRefreshInputValidator"),
+      PublishCredentialRefreshNotificationValidator: /* @__PURE__ */ __name2(() => PublishCredentialRefreshNotificationValidator2, "PublishCredentialRefreshNotificationValidator"),
+      PublishCredentialRefreshResultValidator: /* @__PURE__ */ __name2(() => PublishCredentialRefreshResultValidator2, "PublishCredentialRefreshResultValidator"),
+      PublishIssuerSignedRefreshValidator: /* @__PURE__ */ __name2(() => PublishIssuerSignedRefreshValidator2, "PublishIssuerSignedRefreshValidator"),
+      PublishSigningAuthorityRefreshValidator: /* @__PURE__ */ __name2(() => PublishSigningAuthorityRefreshValidator2, "PublishSigningAuthorityRefreshValidator"),
       RefreshServiceValidator: /* @__PURE__ */ __name2(() => RefreshServiceValidator2, "RefreshServiceValidator"),
       RegExpValidator: /* @__PURE__ */ __name2(() => RegExpValidator2, "RegExpValidator"),
       RelatedValidator: /* @__PURE__ */ __name2(() => RelatedValidator2, "RelatedValidator"),
@@ -16225,11 +16249,13 @@ var require_types_cjs_development = __commonJS({
       SkillTreeNodeInputValidator: /* @__PURE__ */ __name2(() => SkillTreeNodeInputValidator2, "SkillTreeNodeInputValidator"),
       SkillTreeNodeValidator: /* @__PURE__ */ __name2(() => SkillTreeNodeValidator2, "SkillTreeNodeValidator"),
       SkillValidator: /* @__PURE__ */ __name2(() => SkillValidator2, "SkillValidator"),
+      StandardCredentialRefreshServiceValidator: /* @__PURE__ */ __name2(() => StandardCredentialRefreshServiceValidator2, "StandardCredentialRefreshServiceValidator"),
       StatusCheckEntryValidator: /* @__PURE__ */ __name2(() => StatusCheckEntryValidator2, "StatusCheckEntryValidator"),
       StoredCredentialEnvelopeValidator: /* @__PURE__ */ __name2(() => StoredCredentialEnvelopeValidator2, "StoredCredentialEnvelopeValidator"),
       StringQuery: /* @__PURE__ */ __name2(() => StringQuery2, "StringQuery"),
       SummaryCredentialDataValidator: /* @__PURE__ */ __name2(() => SummaryCredentialDataValidator2, "SummaryCredentialDataValidator"),
       SummaryCredentialKeywordValidator: /* @__PURE__ */ __name2(() => SummaryCredentialKeywordValidator2, "SummaryCredentialKeywordValidator"),
+      SupportedCredentialRefreshServiceValidator: /* @__PURE__ */ __name2(() => SupportedCredentialRefreshServiceValidator2, "SupportedCredentialRefreshServiceValidator"),
       SyncFrameworkInputValidator: /* @__PURE__ */ __name2(() => SyncFrameworkInputValidator2, "SyncFrameworkInputValidator"),
       TagValidator: /* @__PURE__ */ __name2(() => TagValidator2, "TagValidator"),
       TemplateRenderMethodValidator: /* @__PURE__ */ __name2(() => TemplateRenderMethodValidator2, "TemplateRenderMethodValidator"),
@@ -32058,14 +32084,22 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     }).catchall(external_exports2.any());
     var ProofValidator2 = external_exports2.object({
       type: external_exports2.string(),
-      created: external_exports2.string(),
+      created: external_exports2.string().optional(),
       challenge: external_exports2.string().optional(),
       domain: external_exports2.string().optional(),
       nonce: external_exports2.string().optional(),
       proofPurpose: external_exports2.string(),
       verificationMethod: external_exports2.string(),
       jws: external_exports2.string().optional()
-    }).catchall(external_exports2.any());
+    }).catchall(external_exports2.any()).superRefine((proof, ctx) => {
+      if (proof.created === void 0 && (proof.type !== "DataIntegrityProof" || proof.cryptosuite !== "ecdsa-rdfc-2019")) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["created"],
+          message: "created is required for this proof suite"
+        });
+      }
+    });
     var VCValidator2 = UnsignedVCValidator2.extend({
       proof: ProofValidator2.or(ProofValidator2.array())
     });
@@ -32826,7 +32860,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       webhookUrl: external_exports2.string().url().optional().describe("Webhook URL to receive claim notifications"),
       suppressDelivery: external_exports2.boolean().optional().describe("If true, returns claimUrl without sending email/SMS"),
       branding: SendBrandingOptionsValidator2.optional().describe("Branding for email/SMS delivery"),
-      guardianEmail: external_exports2.string().email().optional().describe("Guardian email that must approve before student can claim")
+      guardianEmail: external_exports2.string().email().optional().describe("Guardian email that must approve before student can claim"),
+      expiresInDays: external_exports2.number().int().min(1).max(720).optional().describe(
+        "How many days the credential stays claimable in the Universal Inbox (default 30). Does not change the credential validity period."
+      )
     });
     var SendBoostInputValidator2 = external_exports2.object({
       type: external_exports2.literal("boost"),
@@ -32947,15 +32984,6 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     var PaginatedConsentFlowDataValidator2 = PaginationResponseValidator2.extend({
       records: ConsentFlowContractDataValidator2.array()
     });
-    var ConsentFlowContractDataForDidValidator2 = external_exports2.object({
-      credentials: external_exports2.object({ category: external_exports2.string(), uri: external_exports2.string() }).array(),
-      personal: external_exports2.record(external_exports2.string(), external_exports2.string()).default({}),
-      date: external_exports2.string(),
-      contractUri: external_exports2.string()
-    });
-    var PaginatedConsentFlowDataForDidValidator2 = PaginationResponseValidator2.extend({
-      records: ConsentFlowContractDataForDidValidator2.array()
-    });
     var ConsentFlowTermValidator2 = external_exports2.object({
       sharing: external_exports2.boolean().optional(),
       shared: external_exports2.string().array().optional(),
@@ -32989,6 +33017,34 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         status: ConsentFlowTermsStatusValidator2
       }).array()
     });
+    var ConsentFlowGuardianApprovalValidator2 = external_exports2.object({
+      guardianProfileId: external_exports2.string(),
+      guardianDid: external_exports2.string(),
+      approvedAt: external_exports2.string().datetime(),
+      contractUpdatedAt: external_exports2.string()
+    });
+    var ConsentFlowContractDataForDidValidator2 = external_exports2.object({
+      credentials: external_exports2.object({ category: external_exports2.string(), uri: external_exports2.string() }).array(),
+      personal: external_exports2.record(external_exports2.string(), external_exports2.string()).default({}),
+      date: external_exports2.string(),
+      createdAt: external_exports2.string().optional(),
+      contractUpdatedAt: external_exports2.string(),
+      contractExpiresAt: external_exports2.string().optional(),
+      reasonForAccessing: external_exports2.string().optional(),
+      guardian: external_exports2.object({
+        required: external_exports2.boolean(),
+        approved: external_exports2.boolean(),
+        approval: ConsentFlowGuardianApprovalValidator2.optional()
+      }),
+      contractUri: external_exports2.string(),
+      termsUri: external_exports2.string(),
+      status: ConsentFlowTermsStatusValidator2,
+      expiresAt: external_exports2.string().optional(),
+      terms: ConsentFlowTermsValidator2
+    });
+    var PaginatedConsentFlowDataForDidValidator2 = PaginationResponseValidator2.extend({
+      records: ConsentFlowContractDataForDidValidator2.array()
+    });
     var ConsentFlowContractQueryValidator2 = external_exports2.object({
       read: external_exports2.object({
         anonymize: external_exports2.boolean().optional(),
@@ -33049,6 +33105,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       expiresAt: external_exports2.string().optional(),
       oneTime: external_exports2.boolean().optional(),
       terms: ConsentFlowTermsValidator2.optional(),
+      guardianApproval: ConsentFlowGuardianApprovalValidator2.optional(),
       id: external_exports2.string(),
       action: ConsentFlowTransactionActionValidator2,
       date: external_exports2.string(),
@@ -33121,7 +33178,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       "APP_NOTIFICATION",
       "CREDENTIAL_REVOKED",
       "CREDENTIAL_SUSPENDED",
-      "CREDENTIAL_UNSUSPENDED"
+      "CREDENTIAL_UNSUSPENDED",
+      "CREDENTIAL_REFRESHED"
     ]);
     var LCNNotificationMessageValidator2 = external_exports2.object({
       title: external_exports2.string().optional(),
@@ -33253,12 +33311,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     });
     var InboxCredentialValidator2 = external_exports2.object({
       id: external_exports2.string(),
-      credential: external_exports2.string(),
+      credential: external_exports2.string().optional(),
       isSigned: external_exports2.boolean(),
       currentStatus: LCNInboxStatusEnumValidator2,
       isAccepted: external_exports2.boolean().optional(),
       expiresAt: external_exports2.string(),
       createdAt: external_exports2.string(),
+      finalizedAt: external_exports2.string().optional(),
+      expiredAt: external_exports2.string().optional(),
+      credentialName: external_exports2.string().optional(),
+      achievementType: external_exports2.string().optional(),
       issuerDid: external_exports2.string(),
       webhookUrl: external_exports2.string().optional(),
       boostUri: external_exports2.string().optional(),
@@ -33312,7 +33374,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           "The signing authority to use for the credential. If not provided, the users default signing authority will be used if the credential is not signed."
         ),
         webhookUrl: external_exports2.string().url().optional().describe("The webhook URL to receive credential issuance events."),
-        expiresInDays: external_exports2.number().min(1).max(365).optional().describe("The number of days the credential will be valid for."),
+        expiresInDays: external_exports2.number().int().min(1).max(720).optional().describe(
+          "How many days the encrypted inbox payload remains claimable. This does not change the credential validity period."
+        ),
         templateData: external_exports2.record(external_exports2.string(), external_exports2.unknown()).optional().describe(
           "Template data to render into the boost credential template using Mustache syntax. Only used when boostUri is provided."
         ),
@@ -33375,6 +33439,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       credential: VCValidator2.or(VPValidator2).or(UnsignedVCValidator2).or(CredentialNameRefValidator2).describe("The credential to issue, or a { name } reference to resolve a boost template."),
       configuration: external_exports2.object({
         publishableKey: external_exports2.string(),
+        expiresInDays: external_exports2.number().int().min(1).max(720).optional().describe(
+          "Inbox claim window in days. Defaults to 720; use a shorter window for sensitive records."
+        ),
         signingAuthorityName: external_exports2.string().optional(),
         listingId: external_exports2.string().optional(),
         listingSlug: external_exports2.string().optional()
@@ -34006,6 +34073,191 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       const result = inAppMessagesFlagValidator2.safeParse(raw);
       return result.success ? result.data : EMPTY_IN_APP_MESSAGES_FLAG;
     }, "parseInAppMessagesFlag");
+    var LearnCardRefreshAuthorizationValidator2 = external_exports2.object({ type: external_exports2.literal("LearnCardDIDAuth") }).catchall(external_exports2.any());
+    var ManagedCredentialRefreshServiceValidator2 = external_exports2.object({
+      id: external_exports2.string().min(1),
+      type: external_exports2.literal("LearnCardCredentialRefresh2026"),
+      authorization: LearnCardRefreshAuthorizationValidator2.optional()
+    }).catchall(external_exports2.any());
+    var StandardCredentialRefreshServiceValidator2 = external_exports2.object({
+      id: external_exports2.string().min(1),
+      type: external_exports2.literal("1EdTechCredentialRefresh")
+    }).catchall(external_exports2.any());
+    var SupportedCredentialRefreshServiceValidator2 = external_exports2.union([
+      ManagedCredentialRefreshServiceValidator2,
+      StandardCredentialRefreshServiceValidator2
+    ]);
+    var AllocateCredentialRefreshInputValidator2 = external_exports2.object({
+      holder: external_exports2.object({
+        profileId: external_exports2.string().optional(),
+        did: external_exports2.string().min(1)
+      }),
+      credentialId: external_exports2.string().min(1)
+    });
+    var AllocateCredentialRefreshResultValidator2 = external_exports2.object({
+      refreshId: external_exports2.string().min(1),
+      refreshService: ManagedCredentialRefreshServiceValidator2.extend({
+        authorization: LearnCardRefreshAuthorizationValidator2
+      })
+    });
+    var CredentialRefreshSigningModeValidator2 = external_exports2.enum(["issuer-signed", "signing-authority"]);
+    var PublishCredentialRefreshBaseFields2 = {
+      refreshId: external_exports2.string().min(1),
+      notifyHolder: external_exports2.boolean().optional(),
+      updateSummary: external_exports2.string().optional(),
+      idempotencyKey: external_exports2.string().optional()
+    };
+    var PublishIssuerSignedRefreshValidator2 = external_exports2.object({
+      ...PublishCredentialRefreshBaseFields2,
+      mode: external_exports2.literal("issuer-signed"),
+      signedCredential: VCValidator2
+    });
+    var PublishSigningAuthorityRefreshValidator2 = external_exports2.object({
+      ...PublishCredentialRefreshBaseFields2,
+      mode: external_exports2.literal("signing-authority"),
+      credential: UnsignedVCValidator2,
+      signingAuthority: external_exports2.object({
+        type: external_exports2.string().min(1)
+      }).catchall(external_exports2.any())
+    });
+    var PublishCredentialRefreshInputValidator2 = external_exports2.object({
+      ...PublishCredentialRefreshBaseFields2,
+      mode: CredentialRefreshSigningModeValidator2,
+      signedCredential: VCValidator2.optional(),
+      credential: UnsignedVCValidator2.optional(),
+      signingAuthority: external_exports2.object({
+        type: external_exports2.string().min(1)
+      }).catchall(external_exports2.any()).optional()
+    }).superRefine((input, ctx) => {
+      if (input.mode === "issuer-signed" && !input.signedCredential) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["signedCredential"],
+          message: "signedCredential is required for issuer-signed publication"
+        });
+      }
+      if (input.mode === "issuer-signed" && (input.credential !== void 0 || input.signingAuthority !== void 0)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["mode"],
+          message: "issuer-signed publication cannot include signing-authority fields"
+        });
+      }
+      if (input.mode === "signing-authority") {
+        if (input.signedCredential !== void 0) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["signedCredential"],
+            message: "signing-authority publication cannot include signedCredential"
+          });
+        }
+        if (!input.credential) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["credential"],
+            message: "credential is required for signing-authority publication"
+          });
+        }
+        if (!input.signingAuthority) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["signingAuthority"],
+            message: "signingAuthority is required for signing-authority publication"
+          });
+        }
+      }
+    });
+    var PublishCredentialRefreshNotificationValidator2 = external_exports2.enum([
+      "queued",
+      "suppressed",
+      "not-applicable",
+      /** Publication succeeded, but the post-commit notification enqueue must be retried. */
+      "delivery-failed"
+    ]);
+    var PublishCredentialRefreshResultValidator2 = external_exports2.object({
+      refreshId: external_exports2.string().min(1),
+      version: external_exports2.number().int().positive(),
+      publishedAt: external_exports2.string().min(1),
+      notification: PublishCredentialRefreshNotificationValidator2
+    });
+    var CredentialRefreshVersionMetadataValidator2 = external_exports2.object({
+      version: external_exports2.number().int().positive(),
+      publishedAt: external_exports2.string().min(1),
+      effectiveAt: external_exports2.string().optional(),
+      etag: external_exports2.string().optional(),
+      signingMode: CredentialRefreshSigningModeValidator2.optional(),
+      updateSummary: external_exports2.string().optional()
+    });
+    var GetCredentialRefreshHistoryInputValidator2 = external_exports2.object({
+      refreshId: external_exports2.string().min(1),
+      cursor: external_exports2.string().optional(),
+      limit: external_exports2.number().int().positive().optional()
+    });
+    var GetCredentialRefreshHistoryResultValidator2 = external_exports2.object({
+      records: CredentialRefreshVersionMetadataValidator2.array(),
+      hasMore: external_exports2.boolean(),
+      cursor: external_exports2.string().optional()
+    });
+    var CredentialRefreshChallengeValidator2 = external_exports2.object({
+      challenge: external_exports2.string().min(1),
+      expiresAt: external_exports2.string().min(1),
+      domain: external_exports2.string().optional(),
+      scheme: external_exports2.literal("LearnCardDIDAuth").optional()
+    });
+    var PublicCredentialRefreshEnvelopeValidator2 = external_exports2.object({
+      format: external_exports2.literal("vc"),
+      credential: VCValidator2,
+      etag: external_exports2.string().optional()
+    });
+    var JweCredentialRefreshEnvelopeValidator2 = external_exports2.object({
+      format: external_exports2.literal("jwe"),
+      jwe: JWEValidator2,
+      etag: external_exports2.string().optional(),
+      /** Present on LearnCard-managed endpoints; optional for interoperable JWE services. */
+      version: external_exports2.number().int().positive().optional()
+    });
+    var CredentialRefreshResponseEnvelopeValidator2 = external_exports2.discriminatedUnion("format", [
+      PublicCredentialRefreshEnvelopeValidator2,
+      JweCredentialRefreshEnvelopeValidator2
+    ]);
+    var CredentialRefreshFailureCodeValidator2 = external_exports2.enum([
+      "UNAVAILABLE",
+      "TIMEOUT",
+      "UNSUPPORTED_SERVICE",
+      "UNAUTHORIZED",
+      "MALFORMED_RESPONSE",
+      "INVALID_PROOF",
+      "ISSUER_MISMATCH",
+      "ID_MISMATCH",
+      "ROLLBACK",
+      "REVOKED",
+      "UNSAFE_ENDPOINT"
+    ]);
+    var CredentialRefreshUpdatedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("updated"),
+      credential: VCValidator2,
+      etag: external_exports2.string().optional(),
+      managedVersion: external_exports2.number().int().positive().optional()
+    });
+    var CredentialRefreshUnchangedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("unchanged"),
+      checkedAt: external_exports2.string().min(1),
+      etag: external_exports2.string().optional()
+    });
+    var CredentialRefreshUnsupportedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("unsupported")
+    });
+    var CredentialRefreshFailedResultValidator2 = external_exports2.object({
+      status: external_exports2.literal("failed"),
+      code: CredentialRefreshFailureCodeValidator2,
+      retryable: external_exports2.boolean()
+    });
+    var CredentialRefreshResultValidator2 = external_exports2.discriminatedUnion("status", [
+      CredentialRefreshUpdatedResultValidator2,
+      CredentialRefreshUnchangedResultValidator2,
+      CredentialRefreshUnsupportedResultValidator2,
+      CredentialRefreshFailedResultValidator2
+    ]);
   }
 });
 var require_dist = __commonJS({
@@ -34018,7 +34270,7 @@ var require_dist = __commonJS({
     }
   }
 });
-var import_types2 = __toESM(require_dist());
+var import_types3 = __toESM(require_dist());
 var filestack_helpers_exports = {};
 __export2(filestack_helpers_exports, {
   changeQuality: /* @__PURE__ */ __name(() => changeQuality, "changeQuality"),
@@ -34299,7 +34551,8 @@ var ImageWithLoadingStateValdator = external_exports.object({
   image: external_exports.string(),
   loading: external_exports.union([ImageResizingValidator, ImageUploadingValidator]).optional()
 });
-var import_types3 = __toESM(require_dist());
+var import_types2 = __toESM(require_dist());
+var import_types22 = __toESM(require_dist());
 var _a4;
 var EnvironmentConfigurationError = (_a4 = class extends Error {
   constructor(message) {
@@ -34472,14 +34725,22 @@ var UnsignedVCValidator = external_exports.object({
 }).catchall(external_exports.any());
 var ProofValidator = external_exports.object({
   type: external_exports.string(),
-  created: external_exports.string(),
+  created: external_exports.string().optional(),
   challenge: external_exports.string().optional(),
   domain: external_exports.string().optional(),
   nonce: external_exports.string().optional(),
   proofPurpose: external_exports.string(),
   verificationMethod: external_exports.string(),
   jws: external_exports.string().optional()
-}).catchall(external_exports.any());
+}).catchall(external_exports.any()).superRefine((proof, ctx) => {
+  if (proof.created === void 0 && (proof.type !== "DataIntegrityProof" || proof.cryptosuite !== "ecdsa-rdfc-2019")) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["created"],
+      message: "created is required for this proof suite"
+    });
+  }
+});
 var VCValidator = UnsignedVCValidator.extend({
   proof: ProofValidator.or(ProofValidator.array())
 });
@@ -35233,7 +35494,10 @@ var SendOptionsValidator = external_exports.object({
   webhookUrl: external_exports.string().url().optional().describe("Webhook URL to receive claim notifications"),
   suppressDelivery: external_exports.boolean().optional().describe("If true, returns claimUrl without sending email/SMS"),
   branding: SendBrandingOptionsValidator.optional().describe("Branding for email/SMS delivery"),
-  guardianEmail: external_exports.string().email().optional().describe("Guardian email that must approve before student can claim")
+  guardianEmail: external_exports.string().email().optional().describe("Guardian email that must approve before student can claim"),
+  expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+    "How many days the credential stays claimable in the Universal Inbox (default 30). Does not change the credential validity period."
+  )
 });
 var SendBoostInputValidator = external_exports.object({
   type: external_exports.literal("boost"),
@@ -35354,15 +35618,6 @@ var ConsentFlowContractDataValidator = external_exports.object({
 var PaginatedConsentFlowDataValidator = PaginationResponseValidator.extend({
   records: ConsentFlowContractDataValidator.array()
 });
-var ConsentFlowContractDataForDidValidator = external_exports.object({
-  credentials: external_exports.object({ category: external_exports.string(), uri: external_exports.string() }).array(),
-  personal: external_exports.record(external_exports.string(), external_exports.string()).default({}),
-  date: external_exports.string(),
-  contractUri: external_exports.string()
-});
-var PaginatedConsentFlowDataForDidValidator = PaginationResponseValidator.extend({
-  records: ConsentFlowContractDataForDidValidator.array()
-});
 var ConsentFlowTermValidator = external_exports.object({
   sharing: external_exports.boolean().optional(),
   shared: external_exports.string().array().optional(),
@@ -35396,6 +35651,34 @@ var PaginatedConsentFlowTermsValidator = PaginationResponseValidator.extend({
     status: ConsentFlowTermsStatusValidator
   }).array()
 });
+var ConsentFlowGuardianApprovalValidator = external_exports.object({
+  guardianProfileId: external_exports.string(),
+  guardianDid: external_exports.string(),
+  approvedAt: external_exports.string().datetime(),
+  contractUpdatedAt: external_exports.string()
+});
+var ConsentFlowContractDataForDidValidator = external_exports.object({
+  credentials: external_exports.object({ category: external_exports.string(), uri: external_exports.string() }).array(),
+  personal: external_exports.record(external_exports.string(), external_exports.string()).default({}),
+  date: external_exports.string(),
+  createdAt: external_exports.string().optional(),
+  contractUpdatedAt: external_exports.string(),
+  contractExpiresAt: external_exports.string().optional(),
+  reasonForAccessing: external_exports.string().optional(),
+  guardian: external_exports.object({
+    required: external_exports.boolean(),
+    approved: external_exports.boolean(),
+    approval: ConsentFlowGuardianApprovalValidator.optional()
+  }),
+  contractUri: external_exports.string(),
+  termsUri: external_exports.string(),
+  status: ConsentFlowTermsStatusValidator,
+  expiresAt: external_exports.string().optional(),
+  terms: ConsentFlowTermsValidator
+});
+var PaginatedConsentFlowDataForDidValidator = PaginationResponseValidator.extend({
+  records: ConsentFlowContractDataForDidValidator.array()
+});
 var ConsentFlowContractQueryValidator = external_exports.object({
   read: external_exports.object({
     anonymize: external_exports.boolean().optional(),
@@ -35456,6 +35739,7 @@ var ConsentFlowTransactionValidator = external_exports.object({
   expiresAt: external_exports.string().optional(),
   oneTime: external_exports.boolean().optional(),
   terms: ConsentFlowTermsValidator.optional(),
+  guardianApproval: ConsentFlowGuardianApprovalValidator.optional(),
   id: external_exports.string(),
   action: ConsentFlowTransactionActionValidator,
   date: external_exports.string(),
@@ -35528,7 +35812,8 @@ var LCNNotificationTypeEnumValidator = external_exports.enum([
   "APP_NOTIFICATION",
   "CREDENTIAL_REVOKED",
   "CREDENTIAL_SUSPENDED",
-  "CREDENTIAL_UNSUSPENDED"
+  "CREDENTIAL_UNSUSPENDED",
+  "CREDENTIAL_REFRESHED"
 ]);
 var LCNNotificationMessageValidator = external_exports.object({
   title: external_exports.string().optional(),
@@ -35660,12 +35945,16 @@ var CreateContactMethodSessionResponseValidator = external_exports.object({
 });
 var InboxCredentialValidator = external_exports.object({
   id: external_exports.string(),
-  credential: external_exports.string(),
+  credential: external_exports.string().optional(),
   isSigned: external_exports.boolean(),
   currentStatus: LCNInboxStatusEnumValidator,
   isAccepted: external_exports.boolean().optional(),
   expiresAt: external_exports.string(),
   createdAt: external_exports.string(),
+  finalizedAt: external_exports.string().optional(),
+  expiredAt: external_exports.string().optional(),
+  credentialName: external_exports.string().optional(),
+  achievementType: external_exports.string().optional(),
   issuerDid: external_exports.string(),
   webhookUrl: external_exports.string().optional(),
   boostUri: external_exports.string().optional(),
@@ -35719,7 +36008,9 @@ var IssueInboxCredentialValidator = external_exports.object({
       "The signing authority to use for the credential. If not provided, the users default signing authority will be used if the credential is not signed."
     ),
     webhookUrl: external_exports.string().url().optional().describe("The webhook URL to receive credential issuance events."),
-    expiresInDays: external_exports.number().min(1).max(365).optional().describe("The number of days the credential will be valid for."),
+    expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+      "How many days the encrypted inbox payload remains claimable. This does not change the credential validity period."
+    ),
     templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional().describe(
       "Template data to render into the boost credential template using Mustache syntax. Only used when boostUri is provided."
     ),
@@ -35782,6 +36073,9 @@ var ClaimInboxCredentialValidator = external_exports.object({
   credential: VCValidator.or(VPValidator).or(UnsignedVCValidator).or(CredentialNameRefValidator).describe("The credential to issue, or a { name } reference to resolve a boost template."),
   configuration: external_exports.object({
     publishableKey: external_exports.string(),
+    expiresInDays: external_exports.number().int().min(1).max(720).optional().describe(
+      "Inbox claim window in days. Defaults to 720; use a shorter window for sensitive records."
+    ),
     signingAuthorityName: external_exports.string().optional(),
     listingId: external_exports.string().optional(),
     listingSlug: external_exports.string().optional()
@@ -36408,6 +36702,191 @@ var inAppMessagesFlagValidator = external_exports.object({
   version: external_exports.number().default(1),
   messages: external_exports.array(inAppMessageValidator).default([])
 }).passthrough();
+var LearnCardRefreshAuthorizationValidator = external_exports.object({ type: external_exports.literal("LearnCardDIDAuth") }).catchall(external_exports.any());
+var ManagedCredentialRefreshServiceValidator = external_exports.object({
+  id: external_exports.string().min(1),
+  type: external_exports.literal("LearnCardCredentialRefresh2026"),
+  authorization: LearnCardRefreshAuthorizationValidator.optional()
+}).catchall(external_exports.any());
+var StandardCredentialRefreshServiceValidator = external_exports.object({
+  id: external_exports.string().min(1),
+  type: external_exports.literal("1EdTechCredentialRefresh")
+}).catchall(external_exports.any());
+var SupportedCredentialRefreshServiceValidator = external_exports.union([
+  ManagedCredentialRefreshServiceValidator,
+  StandardCredentialRefreshServiceValidator
+]);
+var AllocateCredentialRefreshInputValidator = external_exports.object({
+  holder: external_exports.object({
+    profileId: external_exports.string().optional(),
+    did: external_exports.string().min(1)
+  }),
+  credentialId: external_exports.string().min(1)
+});
+var AllocateCredentialRefreshResultValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  refreshService: ManagedCredentialRefreshServiceValidator.extend({
+    authorization: LearnCardRefreshAuthorizationValidator
+  })
+});
+var CredentialRefreshSigningModeValidator = external_exports.enum(["issuer-signed", "signing-authority"]);
+var PublishCredentialRefreshBaseFields = {
+  refreshId: external_exports.string().min(1),
+  notifyHolder: external_exports.boolean().optional(),
+  updateSummary: external_exports.string().optional(),
+  idempotencyKey: external_exports.string().optional()
+};
+var PublishIssuerSignedRefreshValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: external_exports.literal("issuer-signed"),
+  signedCredential: VCValidator
+});
+var PublishSigningAuthorityRefreshValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: external_exports.literal("signing-authority"),
+  credential: UnsignedVCValidator,
+  signingAuthority: external_exports.object({
+    type: external_exports.string().min(1)
+  }).catchall(external_exports.any())
+});
+var PublishCredentialRefreshInputValidator = external_exports.object({
+  ...PublishCredentialRefreshBaseFields,
+  mode: CredentialRefreshSigningModeValidator,
+  signedCredential: VCValidator.optional(),
+  credential: UnsignedVCValidator.optional(),
+  signingAuthority: external_exports.object({
+    type: external_exports.string().min(1)
+  }).catchall(external_exports.any()).optional()
+}).superRefine((input, ctx) => {
+  if (input.mode === "issuer-signed" && !input.signedCredential) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["signedCredential"],
+      message: "signedCredential is required for issuer-signed publication"
+    });
+  }
+  if (input.mode === "issuer-signed" && (input.credential !== void 0 || input.signingAuthority !== void 0)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["mode"],
+      message: "issuer-signed publication cannot include signing-authority fields"
+    });
+  }
+  if (input.mode === "signing-authority") {
+    if (input.signedCredential !== void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["signedCredential"],
+        message: "signing-authority publication cannot include signedCredential"
+      });
+    }
+    if (!input.credential) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["credential"],
+        message: "credential is required for signing-authority publication"
+      });
+    }
+    if (!input.signingAuthority) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["signingAuthority"],
+        message: "signingAuthority is required for signing-authority publication"
+      });
+    }
+  }
+});
+var PublishCredentialRefreshNotificationValidator = external_exports.enum([
+  "queued",
+  "suppressed",
+  "not-applicable",
+  /** Publication succeeded, but the post-commit notification enqueue must be retried. */
+  "delivery-failed"
+]);
+var PublishCredentialRefreshResultValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  version: external_exports.number().int().positive(),
+  publishedAt: external_exports.string().min(1),
+  notification: PublishCredentialRefreshNotificationValidator
+});
+var CredentialRefreshVersionMetadataValidator = external_exports.object({
+  version: external_exports.number().int().positive(),
+  publishedAt: external_exports.string().min(1),
+  effectiveAt: external_exports.string().optional(),
+  etag: external_exports.string().optional(),
+  signingMode: CredentialRefreshSigningModeValidator.optional(),
+  updateSummary: external_exports.string().optional()
+});
+var GetCredentialRefreshHistoryInputValidator = external_exports.object({
+  refreshId: external_exports.string().min(1),
+  cursor: external_exports.string().optional(),
+  limit: external_exports.number().int().positive().optional()
+});
+var GetCredentialRefreshHistoryResultValidator = external_exports.object({
+  records: CredentialRefreshVersionMetadataValidator.array(),
+  hasMore: external_exports.boolean(),
+  cursor: external_exports.string().optional()
+});
+var CredentialRefreshChallengeValidator = external_exports.object({
+  challenge: external_exports.string().min(1),
+  expiresAt: external_exports.string().min(1),
+  domain: external_exports.string().optional(),
+  scheme: external_exports.literal("LearnCardDIDAuth").optional()
+});
+var PublicCredentialRefreshEnvelopeValidator = external_exports.object({
+  format: external_exports.literal("vc"),
+  credential: VCValidator,
+  etag: external_exports.string().optional()
+});
+var JweCredentialRefreshEnvelopeValidator = external_exports.object({
+  format: external_exports.literal("jwe"),
+  jwe: JWEValidator,
+  etag: external_exports.string().optional(),
+  /** Present on LearnCard-managed endpoints; optional for interoperable JWE services. */
+  version: external_exports.number().int().positive().optional()
+});
+var CredentialRefreshResponseEnvelopeValidator = external_exports.discriminatedUnion("format", [
+  PublicCredentialRefreshEnvelopeValidator,
+  JweCredentialRefreshEnvelopeValidator
+]);
+var CredentialRefreshFailureCodeValidator = external_exports.enum([
+  "UNAVAILABLE",
+  "TIMEOUT",
+  "UNSUPPORTED_SERVICE",
+  "UNAUTHORIZED",
+  "MALFORMED_RESPONSE",
+  "INVALID_PROOF",
+  "ISSUER_MISMATCH",
+  "ID_MISMATCH",
+  "ROLLBACK",
+  "REVOKED",
+  "UNSAFE_ENDPOINT"
+]);
+var CredentialRefreshUpdatedResultValidator = external_exports.object({
+  status: external_exports.literal("updated"),
+  credential: VCValidator,
+  etag: external_exports.string().optional(),
+  managedVersion: external_exports.number().int().positive().optional()
+});
+var CredentialRefreshUnchangedResultValidator = external_exports.object({
+  status: external_exports.literal("unchanged"),
+  checkedAt: external_exports.string().min(1),
+  etag: external_exports.string().optional()
+});
+var CredentialRefreshUnsupportedResultValidator = external_exports.object({
+  status: external_exports.literal("unsupported")
+});
+var CredentialRefreshFailedResultValidator = external_exports.object({
+  status: external_exports.literal("failed"),
+  code: CredentialRefreshFailureCodeValidator,
+  retryable: external_exports.boolean()
+});
+var CredentialRefreshResultValidator = external_exports.discriminatedUnion("status", [
+  CredentialRefreshUpdatedResultValidator,
+  CredentialRefreshUnchangedResultValidator,
+  CredentialRefreshUnsupportedResultValidator,
+  CredentialRefreshFailedResultValidator
+]);
 
 // src/read.ts
 var isTemplateRenderMethod = /* @__PURE__ */ __name((rm) => TemplateRenderMethodValidator.safeParse(rm).success, "isTemplateRenderMethod");