@learncard/sss-key-manager 0.1.24 → 0.2.1

package/dist/sss-key-manager.esm.js

@@ -6,7 +6,11 @@ var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
@@ -56,6 +60,8 @@ var require_types_cjs_development = __commonJS({
       AchievementSubjectValidator: /* @__PURE__ */ __name(() => AchievementSubjectValidator, "AchievementSubjectValidator"),
       AchievementTypeValidator: /* @__PURE__ */ __name(() => AchievementTypeValidator, "AchievementTypeValidator"),
       AchievementValidator: /* @__PURE__ */ __name(() => AchievementValidator, "AchievementValidator"),
+      AcknowledgeViewInputValidator: /* @__PURE__ */ __name(() => AcknowledgeViewInputValidator, "AcknowledgeViewInputValidator"),
+      AcknowledgeViewOutputValidator: /* @__PURE__ */ __name(() => AcknowledgeViewOutputValidator, "AcknowledgeViewOutputValidator"),
       AddTagInputValidator: /* @__PURE__ */ __name(() => AddTagInputValidator, "AddTagInputValidator"),
       AddressValidator: /* @__PURE__ */ __name(() => AddressValidator, "AddressValidator"),
       AgeRatingValidator: /* @__PURE__ */ __name(() => AgeRatingValidator, "AgeRatingValidator"),
@@ -71,6 +77,12 @@ var require_types_cjs_development = __commonJS({
       AppEventResponseValidator: /* @__PURE__ */ __name(() => AppEventResponseValidator, "AppEventResponseValidator"),
       AppEventValidator: /* @__PURE__ */ __name(() => AppEventValidator, "AppEventValidator"),
       AppListingStatusValidator: /* @__PURE__ */ __name(() => AppListingStatusValidator, "AppListingStatusValidator"),
+      AppManifestDiffValidator: /* @__PURE__ */ __name(() => AppManifestDiffValidator, "AppManifestDiffValidator"),
+      AppManifestTemplateChangeValidator: /* @__PURE__ */ __name(() => AppManifestTemplateChangeValidator, "AppManifestTemplateChangeValidator"),
+      AppManifestTemplateRefValidator: /* @__PURE__ */ __name(() => AppManifestTemplateRefValidator, "AppManifestTemplateRefValidator"),
+      AppManifestValidator: /* @__PURE__ */ __name(() => AppManifestValidator, "AppManifestValidator"),
+      AppManifestVersionStatusValidator: /* @__PURE__ */ __name(() => AppManifestVersionStatusValidator, "AppManifestVersionStatusValidator"),
+      AppManifestVersionValidator: /* @__PURE__ */ __name(() => AppManifestVersionValidator, "AppManifestVersionValidator"),
       AppStoreListingCreateValidator: /* @__PURE__ */ __name(() => AppStoreListingCreateValidator, "AppStoreListingCreateValidator"),
       AppStoreListingSubmitterValidator: /* @__PURE__ */ __name(() => AppStoreListingSubmitterValidator, "AppStoreListingSubmitterValidator"),
       AppStoreListingUpdateValidator: /* @__PURE__ */ __name(() => AppStoreListingUpdateValidator, "AppStoreListingUpdateValidator"),
@@ -92,6 +104,8 @@ var require_types_cjs_development = __commonJS({
       BoostRecipientValidator: /* @__PURE__ */ __name(() => BoostRecipientValidator, "BoostRecipientValidator"),
       BoostRecipientWithChildrenValidator: /* @__PURE__ */ __name(() => BoostRecipientWithChildrenValidator, "BoostRecipientWithChildrenValidator"),
       BoostValidator: /* @__PURE__ */ __name(() => BoostValidator, "BoostValidator"),
+      CapturedConsentRecordValidator: /* @__PURE__ */ __name(() => CapturedConsentRecordValidator, "CapturedConsentRecordValidator"),
+      CapturedTemplateRecordValidator: /* @__PURE__ */ __name(() => CapturedTemplateRecordValidator, "CapturedTemplateRecordValidator"),
       CheckCredentialEventValidator: /* @__PURE__ */ __name(() => CheckCredentialEventValidator, "CheckCredentialEventValidator"),
       CheckIssuanceStatusEventValidator: /* @__PURE__ */ __name(() => CheckIssuanceStatusEventValidator, "CheckIssuanceStatusEventValidator"),
       ClaimHookQueryValidator: /* @__PURE__ */ __name(() => ClaimHookQueryValidator, "ClaimHookQueryValidator"),
@@ -113,6 +127,7 @@ var require_types_cjs_development = __commonJS({
       ConsentFlowDataForDidQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowDataForDidQueryValidator, "ConsentFlowDataForDidQueryValidator"),
       ConsentFlowDataQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowDataQueryValidator, "ConsentFlowDataQueryValidator"),
       ConsentFlowGuardianApprovalValidator: /* @__PURE__ */ __name(() => ConsentFlowGuardianApprovalValidator, "ConsentFlowGuardianApprovalValidator"),
+      ConsentFlowReferralValidator: /* @__PURE__ */ __name(() => ConsentFlowReferralValidator, "ConsentFlowReferralValidator"),
       ConsentFlowTermValidator: /* @__PURE__ */ __name(() => ConsentFlowTermValidator, "ConsentFlowTermValidator"),
       ConsentFlowTermsQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowTermsQueryValidator, "ConsentFlowTermsQueryValidator"),
       ConsentFlowTermsStatusValidator: /* @__PURE__ */ __name(() => ConsentFlowTermsStatusValidator, "ConsentFlowTermsStatusValidator"),
@@ -120,6 +135,10 @@ var require_types_cjs_development = __commonJS({
       ConsentFlowTransactionActionValidator: /* @__PURE__ */ __name(() => ConsentFlowTransactionActionValidator, "ConsentFlowTransactionActionValidator"),
       ConsentFlowTransactionValidator: /* @__PURE__ */ __name(() => ConsentFlowTransactionValidator, "ConsentFlowTransactionValidator"),
       ConsentFlowTransactionsQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowTransactionsQueryValidator, "ConsentFlowTransactionsQueryValidator"),
+      ConsentFlowWebhookMetadataValidator: /* @__PURE__ */ __name(() => ConsentFlowWebhookMetadataValidator, "ConsentFlowWebhookMetadataValidator"),
+      ConsentRequestPersonalFieldValidator: /* @__PURE__ */ __name(() => ConsentRequestPersonalFieldValidator, "ConsentRequestPersonalFieldValidator"),
+      ConsentRequestValidator: /* @__PURE__ */ __name(() => ConsentRequestValidator, "ConsentRequestValidator"),
+      ConsentRequestWalletCategoryValidator: /* @__PURE__ */ __name(() => ConsentRequestWalletCategoryValidator, "ConsentRequestWalletCategoryValidator"),
       ContactMethodCreateValidator: /* @__PURE__ */ __name(() => ContactMethodCreateValidator, "ContactMethodCreateValidator"),
       ContactMethodQueryValidator: /* @__PURE__ */ __name(() => ContactMethodQueryValidator, "ContactMethodQueryValidator"),
       ContactMethodValidator: /* @__PURE__ */ __name(() => ContactMethodValidator, "ContactMethodValidator"),
@@ -127,12 +146,14 @@ var require_types_cjs_development = __commonJS({
       ContactMethodVerificationValidator: /* @__PURE__ */ __name(() => ContactMethodVerificationValidator, "ContactMethodVerificationValidator"),
       ContextValidator: /* @__PURE__ */ __name(() => ContextValidator, "ContextValidator"),
       ContractCredentialValidator: /* @__PURE__ */ __name(() => ContractCredentialValidator, "ContractCredentialValidator"),
+      ContractRequestFieldsValidator: /* @__PURE__ */ __name(() => ContractRequestFieldsValidator, "ContractRequestFieldsValidator"),
       CountSkillsInputValidator: /* @__PURE__ */ __name(() => CountSkillsInputValidator, "CountSkillsInputValidator"),
       CountSkillsResultValidator: /* @__PURE__ */ __name(() => CountSkillsResultValidator, "CountSkillsResultValidator"),
       CreateContactMethodSessionResponseValidator: /* @__PURE__ */ __name(() => CreateContactMethodSessionResponseValidator, "CreateContactMethodSessionResponseValidator"),
       CreateContactMethodSessionValidator: /* @__PURE__ */ __name(() => CreateContactMethodSessionValidator, "CreateContactMethodSessionValidator"),
       CreateManagedFrameworkBatchInputValidator: /* @__PURE__ */ __name(() => CreateManagedFrameworkBatchInputValidator, "CreateManagedFrameworkBatchInputValidator"),
       CreateManagedFrameworkInputValidator: /* @__PURE__ */ __name(() => CreateManagedFrameworkInputValidator, "CreateManagedFrameworkInputValidator"),
+      CreateShareLinkInputValidator: /* @__PURE__ */ __name(() => CreateShareLinkInputValidator, "CreateShareLinkInputValidator"),
       CreateSkillInputValidator: /* @__PURE__ */ __name(() => CreateSkillInputValidator, "CreateSkillInputValidator"),
       CreateSkillsBatchInputValidator: /* @__PURE__ */ __name(() => CreateSkillsBatchInputValidator, "CreateSkillsBatchInputValidator"),
       CredentialActivityEventTypeValidator: /* @__PURE__ */ __name(() => CredentialActivityEventTypeValidator, "CredentialActivityEventTypeValidator"),
@@ -161,13 +182,19 @@ var require_types_cjs_development = __commonJS({
       CriteriaValidator: /* @__PURE__ */ __name(() => CriteriaValidator, "CriteriaValidator"),
       DEFAULT_BITSTRING_STATUS_LIST_SIZE: /* @__PURE__ */ __name(() => DEFAULT_BITSTRING_STATUS_LIST_SIZE, "DEFAULT_BITSTRING_STATUS_LIST_SIZE"),
       DeleteFrameworkInputValidator: /* @__PURE__ */ __name(() => DeleteFrameworkInputValidator, "DeleteFrameworkInputValidator"),
+      DeleteShareLinkAttachmentChunksInputValidator: /* @__PURE__ */ __name(() => DeleteShareLinkAttachmentChunksInputValidator, "DeleteShareLinkAttachmentChunksInputValidator"),
+      DeleteShareLinkAttachmentChunksOutputValidator: /* @__PURE__ */ __name(() => DeleteShareLinkAttachmentChunksOutputValidator, "DeleteShareLinkAttachmentChunksOutputValidator"),
       DeleteSkillInputValidator: /* @__PURE__ */ __name(() => DeleteSkillInputValidator, "DeleteSkillInputValidator"),
       DidDocumentValidator: /* @__PURE__ */ __name(() => DidDocumentValidator, "DidDocumentValidator"),
       EMPTY_IN_APP_MESSAGES_FLAG: /* @__PURE__ */ __name(() => EMPTY_IN_APP_MESSAGES_FLAG, "EMPTY_IN_APP_MESSAGES_FLAG"),
+      ESCROW_PIN_LOCKED_MESSAGE: /* @__PURE__ */ __name(() => ESCROW_PIN_LOCKED_MESSAGE2, "ESCROW_PIN_LOCKED_MESSAGE"),
+      ESCROW_PIN_MISMATCH_PATTERN: /* @__PURE__ */ __name(() => ESCROW_PIN_MISMATCH_PATTERN2, "ESCROW_PIN_MISMATCH_PATTERN"),
+      ESCROW_PIN_UNAVAILABLE_MESSAGE: /* @__PURE__ */ __name(() => ESCROW_PIN_UNAVAILABLE_MESSAGE2, "ESCROW_PIN_UNAVAILABLE_MESSAGE"),
       EncryptedCredentialRecordValidator: /* @__PURE__ */ __name(() => EncryptedCredentialRecordValidator, "EncryptedCredentialRecordValidator"),
       EncryptedRecordValidator: /* @__PURE__ */ __name(() => EncryptedRecordValidator, "EncryptedRecordValidator"),
       EndorsementCredentialValidator: /* @__PURE__ */ __name(() => EndorsementCredentialValidator, "EndorsementCredentialValidator"),
       EndorsementSubjectValidator: /* @__PURE__ */ __name(() => EndorsementSubjectValidator, "EndorsementSubjectValidator"),
+      EscrowPinStatusValidator: /* @__PURE__ */ __name(() => EscrowPinStatusValidator, "EscrowPinStatusValidator"),
       EvidenceValidator: /* @__PURE__ */ __name(() => EvidenceValidator, "EvidenceValidator"),
       FlatAuthGrantValidator: /* @__PURE__ */ __name(() => FlatAuthGrantValidator, "FlatAuthGrantValidator"),
       FrameworkWithSkillsValidator: /* @__PURE__ */ __name(() => FrameworkWithSkillsValidator, "FrameworkWithSkillsValidator"),
@@ -179,6 +206,7 @@ var require_types_cjs_development = __commonJS({
       GetCredentialRefreshHistoryResultValidator: /* @__PURE__ */ __name(() => GetCredentialRefreshHistoryResultValidator, "GetCredentialRefreshHistoryResultValidator"),
       GetFullSkillTreeInputValidator: /* @__PURE__ */ __name(() => GetFullSkillTreeInputValidator, "GetFullSkillTreeInputValidator"),
       GetFullSkillTreeResultValidator: /* @__PURE__ */ __name(() => GetFullSkillTreeResultValidator, "GetFullSkillTreeResultValidator"),
+      GetShareLinkAttachmentChunkInputValidator: /* @__PURE__ */ __name(() => GetShareLinkAttachmentChunkInputValidator, "GetShareLinkAttachmentChunkInputValidator"),
       GetSkillPathInputValidator: /* @__PURE__ */ __name(() => GetSkillPathInputValidator, "GetSkillPathInputValidator"),
       GetSkillPathResultValidator: /* @__PURE__ */ __name(() => GetSkillPathResultValidator, "GetSkillPathResultValidator"),
       GetTemplateRecipientsEventValidator: /* @__PURE__ */ __name(() => GetTemplateRecipientsEventValidator, "GetTemplateRecipientsEventValidator"),
@@ -196,6 +224,12 @@ var require_types_cjs_development = __commonJS({
       InboxCredentialRefreshReceiptValidator: /* @__PURE__ */ __name(() => InboxCredentialRefreshReceiptValidator, "InboxCredentialRefreshReceiptValidator"),
       InboxCredentialValidator: /* @__PURE__ */ __name(() => InboxCredentialValidator, "InboxCredentialValidator"),
       IncrementCounterEventValidator: /* @__PURE__ */ __name(() => IncrementCounterEventValidator, "IncrementCounterEventValidator"),
+      InlineAlignmentValidator: /* @__PURE__ */ __name(() => InlineAlignmentValidator, "InlineAlignmentValidator"),
+      InlineCredentialTemplateValidator: /* @__PURE__ */ __name(() => InlineCredentialTemplateValidator, "InlineCredentialTemplateValidator"),
+      InlineEvidenceValidator: /* @__PURE__ */ __name(() => InlineEvidenceValidator, "InlineEvidenceValidator"),
+      InlineSendCredentialEventValidator: /* @__PURE__ */ __name(() => InlineSendCredentialEventValidator, "InlineSendCredentialEventValidator"),
+      InlineWalletCategoryValidator: /* @__PURE__ */ __name(() => InlineWalletCategoryValidator, "InlineWalletCategoryValidator"),
+      InlineWalletSkillTagValidator: /* @__PURE__ */ __name(() => InlineWalletSkillTagValidator, "InlineWalletSkillTagValidator"),
       InstalledAppValidator: /* @__PURE__ */ __name(() => InstalledAppValidator, "InstalledAppValidator"),
       IssueInboxCredentialBatchItemResultValidator: /* @__PURE__ */ __name(() => IssueInboxCredentialBatchItemResultValidator, "IssueInboxCredentialBatchItemResultValidator"),
       IssueInboxCredentialBatchItemValidator: /* @__PURE__ */ __name(() => IssueInboxCredentialBatchItemValidator, "IssueInboxCredentialBatchItemValidator"),
@@ -248,9 +282,19 @@ var require_types_cjs_development = __commonJS({
       LCNVisibleProfileValidator: /* @__PURE__ */ __name(() => LCNVisibleProfileValidator, "LCNVisibleProfileValidator"),
       LaunchTypeValidator: /* @__PURE__ */ __name(() => LaunchTypeValidator, "LaunchTypeValidator"),
       LearnCardRefreshAuthorizationValidator: /* @__PURE__ */ __name(() => LearnCardRefreshAuthorizationValidator, "LearnCardRefreshAuthorizationValidator"),
+      LegacySendCredentialEventValidator: /* @__PURE__ */ __name(() => LegacySendCredentialEventValidator, "LegacySendCredentialEventValidator"),
       LinkProviderFrameworkInputValidator: /* @__PURE__ */ __name(() => LinkProviderFrameworkInputValidator, "LinkProviderFrameworkInputValidator"),
+      ListShareLinksInputValidator: /* @__PURE__ */ __name(() => ListShareLinksInputValidator, "ListShareLinksInputValidator"),
+      MAX_ENDORSEMENTS: /* @__PURE__ */ __name(() => MAX_ENDORSEMENTS, "MAX_ENDORSEMENTS"),
+      MAX_SELECTED_CREDENTIALS: /* @__PURE__ */ __name(() => MAX_SELECTED_CREDENTIALS, "MAX_SELECTED_CREDENTIALS"),
+      MAX_SHARE_CIPHERTEXT_BYTES: /* @__PURE__ */ __name(() => MAX_SHARE_CIPHERTEXT_BYTES, "MAX_SHARE_CIPHERTEXT_BYTES"),
+      MAX_SHARE_LINK_REQUEST_BYTES: /* @__PURE__ */ __name(() => MAX_SHARE_LINK_REQUEST_BYTES, "MAX_SHARE_LINK_REQUEST_BYTES"),
+      MAX_SHARE_RECOVERY_JWE_BYTES: /* @__PURE__ */ __name(() => MAX_SHARE_RECOVERY_JWE_BYTES, "MAX_SHARE_RECOVERY_JWE_BYTES"),
+      MAX_SHARE_SOURCE_URI_CHARS: /* @__PURE__ */ __name(() => MAX_SHARE_SOURCE_URI_CHARS, "MAX_SHARE_SOURCE_URI_CHARS"),
+      MAX_VP_MEMBERS: /* @__PURE__ */ __name(() => MAX_VP_MEMBERS, "MAX_VP_MEMBERS"),
       ManagedCredentialRefreshReceiptValidator: /* @__PURE__ */ __name(() => ManagedCredentialRefreshReceiptValidator, "ManagedCredentialRefreshReceiptValidator"),
       ManagedCredentialRefreshServiceValidator: /* @__PURE__ */ __name(() => ManagedCredentialRefreshServiceValidator, "ManagedCredentialRefreshServiceValidator"),
+      NormalizedConsentScopesValidator: /* @__PURE__ */ __name(() => NormalizedConsentScopesValidator, "NormalizedConsentScopesValidator"),
       PaginatedAppStoreListingsValidator: /* @__PURE__ */ __name(() => PaginatedAppStoreListingsValidator, "PaginatedAppStoreListingsValidator"),
       PaginatedBoostRecipientsValidator: /* @__PURE__ */ __name(() => PaginatedBoostRecipientsValidator, "PaginatedBoostRecipientsValidator"),
       PaginatedBoostRecipientsWithChildrenValidator: /* @__PURE__ */ __name(() => PaginatedBoostRecipientsWithChildrenValidator, "PaginatedBoostRecipientsWithChildrenValidator"),
@@ -271,11 +315,14 @@ var require_types_cjs_development = __commonJS({
       PaginatedLCNProfileManagersValidator: /* @__PURE__ */ __name(() => PaginatedLCNProfileManagersValidator, "PaginatedLCNProfileManagersValidator"),
       PaginatedLCNProfilesAndManagersValidator: /* @__PURE__ */ __name(() => PaginatedLCNProfilesAndManagersValidator, "PaginatedLCNProfilesAndManagersValidator"),
       PaginatedLCNProfilesValidator: /* @__PURE__ */ __name(() => PaginatedLCNProfilesValidator, "PaginatedLCNProfilesValidator"),
+      PaginatedShareLinksValidator: /* @__PURE__ */ __name(() => PaginatedShareLinksValidator, "PaginatedShareLinksValidator"),
       PaginatedSkillFrameworksValidator: /* @__PURE__ */ __name(() => PaginatedSkillFrameworksValidator, "PaginatedSkillFrameworksValidator"),
       PaginatedSkillTreeValidator: /* @__PURE__ */ __name(() => PaginatedSkillTreeValidator, "PaginatedSkillTreeValidator"),
       PaginatedVisibleLCNProfilesValidator: /* @__PURE__ */ __name(() => PaginatedVisibleLCNProfilesValidator, "PaginatedVisibleLCNProfilesValidator"),
       PaginationOptionsValidator: /* @__PURE__ */ __name(() => PaginationOptionsValidator, "PaginationOptionsValidator"),
       PaginationResponseValidator: /* @__PURE__ */ __name(() => PaginationResponseValidator, "PaginationResponseValidator"),
+      PendingListingUpdateStatusValidator: /* @__PURE__ */ __name(() => PendingListingUpdateStatusValidator, "PendingListingUpdateStatusValidator"),
+      PendingListingUpdateValidator: /* @__PURE__ */ __name(() => PendingListingUpdateValidator, "PendingListingUpdateValidator"),
       PrepareRefreshableSendInputValidator: /* @__PURE__ */ __name(() => PrepareRefreshableSendInputValidator, "PrepareRefreshableSendInputValidator"),
       PrepareRefreshableSendResultValidator: /* @__PURE__ */ __name(() => PrepareRefreshableSendResultValidator, "PrepareRefreshableSendResultValidator"),
       ProfileValidator: /* @__PURE__ */ __name(() => ProfileValidator, "ProfileValidator"),
@@ -288,6 +335,9 @@ var require_types_cjs_development = __commonJS({
       PublishCredentialRefreshResultValidator: /* @__PURE__ */ __name(() => PublishCredentialRefreshResultValidator, "PublishCredentialRefreshResultValidator"),
       PublishIssuerSignedRefreshValidator: /* @__PURE__ */ __name(() => PublishIssuerSignedRefreshValidator, "PublishIssuerSignedRefreshValidator"),
       PublishSigningAuthorityRefreshValidator: /* @__PURE__ */ __name(() => PublishSigningAuthorityRefreshValidator, "PublishSigningAuthorityRefreshValidator"),
+      PutShareLinkAttachmentChunkInputValidator: /* @__PURE__ */ __name(() => PutShareLinkAttachmentChunkInputValidator, "PutShareLinkAttachmentChunkInputValidator"),
+      PutShareLinkAttachmentChunkOutputValidator: /* @__PURE__ */ __name(() => PutShareLinkAttachmentChunkOutputValidator, "PutShareLinkAttachmentChunkOutputValidator"),
+      RawInlineCredentialTemplateValidator: /* @__PURE__ */ __name(() => RawInlineCredentialTemplateValidator, "RawInlineCredentialTemplateValidator"),
       RefreshServiceValidator: /* @__PURE__ */ __name(() => RefreshServiceValidator, "RefreshServiceValidator"),
       RegExpValidator: /* @__PURE__ */ __name(() => RegExpValidator, "RegExpValidator"),
       RelatedValidator: /* @__PURE__ */ __name(() => RelatedValidator, "RelatedValidator"),
@@ -295,16 +345,26 @@ var require_types_cjs_development = __commonJS({
       ReplaceSkillFrameworkSkillsInputValidator: /* @__PURE__ */ __name(() => ReplaceSkillFrameworkSkillsInputValidator, "ReplaceSkillFrameworkSkillsInputValidator"),
       ReplaceSkillFrameworkSkillsResultValidator: /* @__PURE__ */ __name(() => ReplaceSkillFrameworkSkillsResultValidator, "ReplaceSkillFrameworkSkillsResultValidator"),
       RequestLearnerContextEventValidator: /* @__PURE__ */ __name(() => RequestLearnerContextEventValidator, "RequestLearnerContextEventValidator"),
+      ResolveShareLinkInputValidator: /* @__PURE__ */ __name(() => ResolveShareLinkInputValidator, "ResolveShareLinkInputValidator"),
       ResultDescriptionValidator: /* @__PURE__ */ __name(() => ResultDescriptionValidator, "ResultDescriptionValidator"),
       ResultStatusTypeValidator: /* @__PURE__ */ __name(() => ResultStatusTypeValidator, "ResultStatusTypeValidator"),
       ResultTypeValidator: /* @__PURE__ */ __name(() => ResultTypeValidator, "ResultTypeValidator"),
       ResultValidator: /* @__PURE__ */ __name(() => ResultValidator, "ResultValidator"),
       RubricCriterionValidator: /* @__PURE__ */ __name(() => RubricCriterionValidator, "RubricCriterionValidator"),
+      SHARE_AAD_PREFIX: /* @__PURE__ */ __name(() => SHARE_AAD_PREFIX, "SHARE_AAD_PREFIX"),
+      SHARE_CONTENT_KEY_BYTES: /* @__PURE__ */ __name(() => SHARE_CONTENT_KEY_BYTES, "SHARE_CONTENT_KEY_BYTES"),
+      SHARE_IV_BYTES: /* @__PURE__ */ __name(() => SHARE_IV_BYTES, "SHARE_IV_BYTES"),
+      SHARE_LINK_ID_BYTES: /* @__PURE__ */ __name(() => SHARE_LINK_ID_BYTES, "SHARE_LINK_ID_BYTES"),
+      SHARE_LINK_PROTOCOL: /* @__PURE__ */ __name(() => SHARE_LINK_PROTOCOL, "SHARE_LINK_PROTOCOL"),
+      SHARE_RECOVERY_PROTOCOL: /* @__PURE__ */ __name(() => SHARE_RECOVERY_PROTOCOL, "SHARE_RECOVERY_PROTOCOL"),
+      SHARE_TAG_BYTES: /* @__PURE__ */ __name(() => SHARE_TAG_BYTES, "SHARE_TAG_BYTES"),
+      SHARE_VIEW_RECEIPT_TTL_SECONDS: /* @__PURE__ */ __name(() => SHARE_VIEW_RECEIPT_TTL_SECONDS, "SHARE_VIEW_RECEIPT_TTL_SECONDS"),
       SendAiSessionCredentialEventValidator: /* @__PURE__ */ __name(() => SendAiSessionCredentialEventValidator, "SendAiSessionCredentialEventValidator"),
       SendBoostInputValidator: /* @__PURE__ */ __name(() => SendBoostInputValidator, "SendBoostInputValidator"),
       SendBoostResponseValidator: /* @__PURE__ */ __name(() => SendBoostResponseValidator, "SendBoostResponseValidator"),
       SendBoostTemplateValidator: /* @__PURE__ */ __name(() => SendBoostTemplateValidator, "SendBoostTemplateValidator"),
       SendBrandingOptionsValidator: /* @__PURE__ */ __name(() => SendBrandingOptionsValidator, "SendBrandingOptionsValidator"),
+      SendContractRequestValidator: /* @__PURE__ */ __name(() => SendContractRequestValidator, "SendContractRequestValidator"),
       SendCredentialEventValidator: /* @__PURE__ */ __name(() => SendCredentialEventValidator, "SendCredentialEventValidator"),
       SendInboxResponseValidator: /* @__PURE__ */ __name(() => SendInboxResponseValidator, "SendInboxResponseValidator"),
       SendInputValidator: /* @__PURE__ */ __name(() => SendInputValidator, "SendInputValidator"),
@@ -314,6 +374,36 @@ var require_types_cjs_development = __commonJS({
       SentCredentialInfoValidator: /* @__PURE__ */ __name(() => SentCredentialInfoValidator, "SentCredentialInfoValidator"),
       ServiceValidator: /* @__PURE__ */ __name(() => ServiceValidator, "ServiceValidator"),
       SetPrimaryContactMethodValidator: /* @__PURE__ */ __name(() => SetPrimaryContactMethodValidator, "SetPrimaryContactMethodValidator"),
+      ShareCiphertextValidator: /* @__PURE__ */ __name(() => ShareCiphertextValidator, "ShareCiphertextValidator"),
+      ShareContentKeyValidator: /* @__PURE__ */ __name(() => ShareContentKeyValidator, "ShareContentKeyValidator"),
+      ShareContentStateValidator: /* @__PURE__ */ __name(() => ShareContentStateValidator, "ShareContentStateValidator"),
+      ShareEndorsementEntryValidator: /* @__PURE__ */ __name(() => ShareEndorsementEntryValidator, "ShareEndorsementEntryValidator"),
+      ShareEnvelopeValidator: /* @__PURE__ */ __name(() => ShareEnvelopeValidator, "ShareEnvelopeValidator"),
+      ShareIvValidator: /* @__PURE__ */ __name(() => ShareIvValidator, "ShareIvValidator"),
+      ShareLinkAttachmentChunkEnvelopeValidator: /* @__PURE__ */ __name(() => ShareLinkAttachmentChunkEnvelopeValidator, "ShareLinkAttachmentChunkEnvelopeValidator"),
+      ShareLinkAttachmentChunkOutputValidator: /* @__PURE__ */ __name(() => ShareLinkAttachmentChunkOutputValidator, "ShareLinkAttachmentChunkOutputValidator"),
+      ShareLinkAttachmentValidator: /* @__PURE__ */ __name(() => ShareLinkAttachmentValidator, "ShareLinkAttachmentValidator"),
+      ShareLinkIdInputValidator: /* @__PURE__ */ __name(() => ShareLinkIdInputValidator, "ShareLinkIdInputValidator"),
+      ShareLinkIdValidator: /* @__PURE__ */ __name(() => ShareLinkIdValidator, "ShareLinkIdValidator"),
+      ShareLinkOperationKeyInputValidator: /* @__PURE__ */ __name(() => ShareLinkOperationKeyInputValidator, "ShareLinkOperationKeyInputValidator"),
+      ShareLinkOwnerCommitOutputValidator: /* @__PURE__ */ __name(() => ShareLinkOwnerCommitOutputValidator, "ShareLinkOwnerCommitOutputValidator"),
+      ShareLinkOwnerContentOutputValidator: /* @__PURE__ */ __name(() => ShareLinkOwnerContentOutputValidator, "ShareLinkOwnerContentOutputValidator"),
+      ShareLinkOwnerRecoveryOutputValidator: /* @__PURE__ */ __name(() => ShareLinkOwnerRecoveryOutputValidator, "ShareLinkOwnerRecoveryOutputValidator"),
+      ShareLinkOwnerStatusOutputValidator: /* @__PURE__ */ __name(() => ShareLinkOwnerStatusOutputValidator, "ShareLinkOwnerStatusOutputValidator"),
+      ShareLinkPublicContentViewValidator: /* @__PURE__ */ __name(() => ShareLinkPublicContentViewValidator, "ShareLinkPublicContentViewValidator"),
+      ShareLinkPublicStateValidator: /* @__PURE__ */ __name(() => ShareLinkPublicStateValidator, "ShareLinkPublicStateValidator"),
+      ShareLinkStatusValidator: /* @__PURE__ */ __name(() => ShareLinkStatusValidator, "ShareLinkStatusValidator"),
+      ShareLinkValidator: /* @__PURE__ */ __name(() => ShareLinkValidator, "ShareLinkValidator"),
+      ShareManifestPresentationValidator: /* @__PURE__ */ __name(() => ShareManifestPresentationValidator, "ShareManifestPresentationValidator"),
+      ShareOwnerRecoveryValidator: /* @__PURE__ */ __name(() => ShareOwnerRecoveryValidator, "ShareOwnerRecoveryValidator"),
+      SharePayloadValidator: /* @__PURE__ */ __name(() => SharePayloadValidator, "SharePayloadValidator"),
+      SharePayloadValidatorShape: /* @__PURE__ */ __name(() => SharePayloadValidatorShape, "SharePayloadValidatorShape"),
+      ShareRecoveryEndorsementValidator: /* @__PURE__ */ __name(() => ShareRecoveryEndorsementValidator, "ShareRecoveryEndorsementValidator"),
+      ShareRecoveryPlaintextValidator: /* @__PURE__ */ __name(() => ShareRecoveryPlaintextValidator, "ShareRecoveryPlaintextValidator"),
+      ShareRecoverySelectionValidator: /* @__PURE__ */ __name(() => ShareRecoverySelectionValidator, "ShareRecoverySelectionValidator"),
+      ShareSelectionEntryValidator: /* @__PURE__ */ __name(() => ShareSelectionEntryValidator, "ShareSelectionEntryValidator"),
+      ShareSharerValidator: /* @__PURE__ */ __name(() => ShareSharerValidator, "ShareSharerValidator"),
+      SimpleInlineCredentialTemplateValidator: /* @__PURE__ */ __name(() => SimpleInlineCredentialTemplateValidator, "SimpleInlineCredentialTemplateValidator"),
       SkillDeletionStrategyValidator: /* @__PURE__ */ __name(() => SkillDeletionStrategyValidator, "SkillDeletionStrategyValidator"),
       SkillFrameworkAdminInputValidator: /* @__PURE__ */ __name(() => SkillFrameworkAdminInputValidator, "SkillFrameworkAdminInputValidator"),
       SkillFrameworkAdminsValidator: /* @__PURE__ */ __name(() => SkillFrameworkAdminsValidator, "SkillFrameworkAdminsValidator"),
@@ -344,8 +434,12 @@ var require_types_cjs_development = __commonJS({
       UnsignedClrCredentialValidator: /* @__PURE__ */ __name(() => UnsignedClrCredentialValidator, "UnsignedClrCredentialValidator"),
       UnsignedVCValidator: /* @__PURE__ */ __name(() => UnsignedVCValidator, "UnsignedVCValidator"),
       UnsignedVPValidator: /* @__PURE__ */ __name(() => UnsignedVPValidator, "UnsignedVPValidator"),
+      UnsupportedSignInOperationError: /* @__PURE__ */ __name(() => UnsupportedSignInOperationError, "UnsupportedSignInOperationError"),
       UpdateFrameworkInputValidator: /* @__PURE__ */ __name(() => UpdateFrameworkInputValidator, "UpdateFrameworkInputValidator"),
+      UpdateShareLinkInputValidator: /* @__PURE__ */ __name(() => UpdateShareLinkInputValidator, "UpdateShareLinkInputValidator"),
       UpdateSkillInputValidator: /* @__PURE__ */ __name(() => UpdateSkillInputValidator, "UpdateSkillInputValidator"),
+      UpsertConsentContractEventValidator: /* @__PURE__ */ __name(() => UpsertConsentContractEventValidator, "UpsertConsentContractEventValidator"),
+      UpsertConsentContractResponseValidator: /* @__PURE__ */ __name(() => UpsertConsentContractResponseValidator, "UpsertConsentContractResponseValidator"),
       VC2EvidenceValidator: /* @__PURE__ */ __name(() => VC2EvidenceValidator, "VC2EvidenceValidator"),
       VCValidator: /* @__PURE__ */ __name(() => VCValidator, "VCValidator"),
       VPValidator: /* @__PURE__ */ __name(() => VPValidator, "VPValidator"),
@@ -356,7 +450,12 @@ var require_types_cjs_development = __commonJS({
       VerificationStatusValidator: /* @__PURE__ */ __name(() => VerificationStatusValidator, "VerificationStatusValidator"),
       appStoreActionValidator: /* @__PURE__ */ __name(() => appStoreActionValidator, "appStoreActionValidator"),
       capgoUpdateActionValidator: /* @__PURE__ */ __name(() => capgoUpdateActionValidator, "capgoUpdateActionValidator"),
+      classifyShareManifest: /* @__PURE__ */ __name(() => classifyShareManifest, "classifyShareManifest"),
+      decodeBase64Url: /* @__PURE__ */ __name(() => decodeBase64Url, "decodeBase64Url"),
+      decodedBase64UrlByteLength: /* @__PURE__ */ __name(() => decodedBase64UrlByteLength, "decodedBase64UrlByteLength"),
       dismissActionValidator: /* @__PURE__ */ __name(() => dismissActionValidator, "dismissActionValidator"),
+      encodeBase64Url: /* @__PURE__ */ __name(() => encodeBase64Url, "encodeBase64Url"),
+      escrowPinMismatchMessage: /* @__PURE__ */ __name(() => escrowPinMismatchMessage, "escrowPinMismatchMessage"),
       externalLinkActionValidator: /* @__PURE__ */ __name(() => externalLinkActionValidator, "externalLinkActionValidator"),
       inAppMessageActionStyleValidator: /* @__PURE__ */ __name(() => inAppMessageActionStyleValidator, "inAppMessageActionStyleValidator"),
       inAppMessageActionTargetValidator: /* @__PURE__ */ __name(() => inAppMessageActionTargetValidator, "inAppMessageActionTargetValidator"),
@@ -371,10 +470,12 @@ var require_types_cjs_development = __commonJS({
       inAppMessageVersionSourceValidator: /* @__PURE__ */ __name(() => inAppMessageVersionSourceValidator, "inAppMessageVersionSourceValidator"),
       inAppMessagesFlagValidator: /* @__PURE__ */ __name(() => inAppMessagesFlagValidator, "inAppMessagesFlagValidator"),
       internalLinkActionValidator: /* @__PURE__ */ __name(() => internalLinkActionValidator, "internalLinkActionValidator"),
+      isCanonicalBase64Url: /* @__PURE__ */ __name(() => isCanonicalBase64Url, "isCanonicalBase64Url"),
       isStoredCredentialEnvelope: /* @__PURE__ */ __name(() => isStoredCredentialEnvelope, "isStoredCredentialEnvelope"),
       parseInAppMessagesFlag: /* @__PURE__ */ __name(() => parseInAppMessagesFlag, "parseInAppMessagesFlag"),
       platformPredicateValidator: /* @__PURE__ */ __name(() => platformPredicateValidator, "platformPredicateValidator"),
       rolePredicateValidator: /* @__PURE__ */ __name(() => rolePredicateValidator, "rolePredicateValidator"),
+      utf8ByteLength: /* @__PURE__ */ __name(() => utf8ByteLength, "utf8ByteLength"),
       versionPredicateValidator: /* @__PURE__ */ __name(() => versionPredicateValidator, "versionPredicateValidator")
     });
     module.exports = __toCommonJS(index_exports);
@@ -484,14 +585,14 @@ var require_types_cjs_development = __commonJS({
       cuid2: /* @__PURE__ */ __name(() => cuid22, "cuid2"),
       custom: /* @__PURE__ */ __name(() => custom, "custom"),
       date: /* @__PURE__ */ __name(() => date3, "date"),
-      decode: /* @__PURE__ */ __name(() => decode2, "decode"),
+      decode: /* @__PURE__ */ __name(() => decode22, "decode"),
       decodeAsync: /* @__PURE__ */ __name(() => decodeAsync2, "decodeAsync"),
       describe: /* @__PURE__ */ __name(() => describe2, "describe"),
       discriminatedUnion: /* @__PURE__ */ __name(() => discriminatedUnion, "discriminatedUnion"),
       e164: /* @__PURE__ */ __name(() => e1642, "e164"),
       email: /* @__PURE__ */ __name(() => email2, "email"),
       emoji: /* @__PURE__ */ __name(() => emoji2, "emoji"),
-      encode: /* @__PURE__ */ __name(() => encode2, "encode"),
+      encode: /* @__PURE__ */ __name(() => encode22, "encode"),
       encodeAsync: /* @__PURE__ */ __name(() => encodeAsync2, "encodeAsync"),
       endsWith: /* @__PURE__ */ __name(() => _endsWith, "endsWith"),
       enum: /* @__PURE__ */ __name(() => _enum2, "enum"),
@@ -509,7 +610,7 @@ var require_types_cjs_development = __commonJS({
       gte: /* @__PURE__ */ __name(() => _gte, "gte"),
       guid: /* @__PURE__ */ __name(() => guid2, "guid"),
       hash: /* @__PURE__ */ __name(() => hash, "hash"),
-      hex: /* @__PURE__ */ __name(() => hex2, "hex"),
+      hex: /* @__PURE__ */ __name(() => hex22, "hex"),
       hostname: /* @__PURE__ */ __name(() => hostname2, "hostname"),
       httpUrl: /* @__PURE__ */ __name(() => httpUrl, "httpUrl"),
       includes: /* @__PURE__ */ __name(() => _includes, "includes"),
@@ -536,7 +637,7 @@ var require_types_cjs_development = __commonJS({
       lt: /* @__PURE__ */ __name(() => _lt, "lt"),
       lte: /* @__PURE__ */ __name(() => _lte, "lte"),
       mac: /* @__PURE__ */ __name(() => mac2, "mac"),
-      map: /* @__PURE__ */ __name(() => map, "map"),
+      map: /* @__PURE__ */ __name(() => map2, "map"),
       maxLength: /* @__PURE__ */ __name(() => _maxLength, "maxLength"),
       maxSize: /* @__PURE__ */ __name(() => _maxSize, "maxSize"),
       meta: /* @__PURE__ */ __name(() => meta2, "meta"),
@@ -861,10 +962,10 @@ var require_types_cjs_development = __commonJS({
       config: /* @__PURE__ */ __name(() => config, "config"),
       createStandardJSONSchemaMethod: /* @__PURE__ */ __name(() => createStandardJSONSchemaMethod, "createStandardJSONSchemaMethod"),
       createToJSONSchemaMethod: /* @__PURE__ */ __name(() => createToJSONSchemaMethod, "createToJSONSchemaMethod"),
-      decode: /* @__PURE__ */ __name(() => decode, "decode"),
+      decode: /* @__PURE__ */ __name(() => decode2, "decode"),
       decodeAsync: /* @__PURE__ */ __name(() => decodeAsync, "decodeAsync"),
       describe: /* @__PURE__ */ __name(() => describe, "describe"),
-      encode: /* @__PURE__ */ __name(() => encode, "encode"),
+      encode: /* @__PURE__ */ __name(() => encode2, "encode"),
       encodeAsync: /* @__PURE__ */ __name(() => encodeAsync, "encodeAsync"),
       extractDefs: /* @__PURE__ */ __name(() => extractDefs, "extractDefs"),
       finalize: /* @__PURE__ */ __name(() => finalize, "finalize"),
@@ -1750,18 +1851,18 @@ var require_types_cjs_development = __commonJS({
     __name2(cleanEnum, "cleanEnum");
     function base64ToUint8Array(base643) {
       const binaryString = atob(base643);
-      const bytes = new Uint8Array(binaryString.length);
+      const bytes2 = new Uint8Array(binaryString.length);
       for (let i = 0; i < binaryString.length; i++) {
-        bytes[i] = binaryString.charCodeAt(i);
+        bytes2[i] = binaryString.charCodeAt(i);
       }
-      return bytes;
+      return bytes2;
     }
     __name(base64ToUint8Array, "base64ToUint8Array");
     __name2(base64ToUint8Array, "base64ToUint8Array");
-    function uint8ArrayToBase64(bytes) {
+    function uint8ArrayToBase64(bytes2) {
       let binaryString = "";
-      for (let i = 0; i < bytes.length; i++) {
-        binaryString += String.fromCharCode(bytes[i]);
+      for (let i = 0; i < bytes2.length; i++) {
+        binaryString += String.fromCharCode(bytes2[i]);
       }
       return btoa(binaryString);
     }
@@ -1774,8 +1875,8 @@ var require_types_cjs_development = __commonJS({
     }
     __name(base64urlToUint8Array, "base64urlToUint8Array");
     __name2(base64urlToUint8Array, "base64urlToUint8Array");
-    function uint8ArrayToBase64url(bytes) {
-      return uint8ArrayToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+    function uint8ArrayToBase64url(bytes2) {
+      return uint8ArrayToBase64(bytes2).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
     }
     __name(uint8ArrayToBase64url, "uint8ArrayToBase64url");
     __name2(uint8ArrayToBase64url, "uint8ArrayToBase64url");
@@ -1784,16 +1885,16 @@ var require_types_cjs_development = __commonJS({
       if (cleanHex.length % 2 !== 0) {
         throw new Error("Invalid hex string length");
       }
-      const bytes = new Uint8Array(cleanHex.length / 2);
+      const bytes2 = new Uint8Array(cleanHex.length / 2);
       for (let i = 0; i < cleanHex.length; i += 2) {
-        bytes[i / 2] = Number.parseInt(cleanHex.slice(i, i + 2), 16);
+        bytes2[i / 2] = Number.parseInt(cleanHex.slice(i, i + 2), 16);
       }
-      return bytes;
+      return bytes2;
     }
     __name(hexToUint8Array, "hexToUint8Array");
     __name2(hexToUint8Array, "hexToUint8Array");
-    function uint8ArrayToHex(bytes) {
-      return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+    function uint8ArrayToHex(bytes2) {
+      return Array.from(bytes2).map((b) => b.toString(16).padStart(2, "0")).join("");
     }
     __name(uint8ArrayToHex, "uint8ArrayToHex");
     __name2(uint8ArrayToHex, "uint8ArrayToHex");
@@ -2008,11 +2109,11 @@ var require_types_cjs_development = __commonJS({
       const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
       return _parse(_Err)(schema, value, ctx);
     }, "_encode");
-    var encode = /* @__PURE__ */ _encode($ZodRealError);
+    var encode2 = /* @__PURE__ */ _encode($ZodRealError);
     var _decode = /* @__PURE__ */ __name2((_Err) => (schema, value, _ctx) => {
       return _parse(_Err)(schema, value, _ctx);
     }, "_decode");
-    var decode = /* @__PURE__ */ _decode($ZodRealError);
+    var decode2 = /* @__PURE__ */ _decode($ZodRealError);
     var _encodeAsync = /* @__PURE__ */ __name2((_Err) => async (schema, value, _ctx) => {
       const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
       return _parseAsync(_Err)(schema, value, ctx);
@@ -2060,7 +2161,7 @@ var require_types_cjs_development = __commonJS({
       emoji: /* @__PURE__ */ __name(() => emoji, "emoji"),
       extendedDuration: /* @__PURE__ */ __name(() => extendedDuration, "extendedDuration"),
       guid: /* @__PURE__ */ __name(() => guid, "guid"),
-      hex: /* @__PURE__ */ __name(() => hex, "hex"),
+      hex: /* @__PURE__ */ __name(() => hex2, "hex"),
       hostname: /* @__PURE__ */ __name(() => hostname, "hostname"),
       html5Email: /* @__PURE__ */ __name(() => html5Email, "html5Email"),
       httpProtocol: /* @__PURE__ */ __name(() => httpProtocol, "httpProtocol"),
@@ -2183,7 +2284,7 @@ var require_types_cjs_development = __commonJS({
     var _undefined = /^undefined$/i;
     var lowercase = /^[^A-Z]*$/;
     var uppercase = /^[^a-z]*$/;
-    var hex = /^[0-9a-fA-F]*$/;
+    var hex2 = /^[0-9a-fA-F]*$/;
     function fixedBase64(bodyLength, padding) {
       return new RegExp(`^[A-Za-z0-9+/]{${bodyLength}}${padding}$`);
     }
@@ -3887,19 +3988,19 @@ var require_types_cjs_development = __commonJS({
       });
       const disc = cached(() => {
         const opts = def.options;
-        const map2 = /* @__PURE__ */ new Map();
+        const map22 = /* @__PURE__ */ new Map();
         for (const o of opts) {
           const values = o._zod.propValues?.[def.discriminator];
           if (!values || values.size === 0)
             throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(o)}"`);
           for (const v of values) {
-            if (map2.has(v)) {
+            if (map22.has(v)) {
               throw new Error(`Duplicate discriminator value "${String(v)}"`);
             }
-            map2.set(v, o);
+            map22.set(v, o);
           }
         }
-        return map2;
+        return map22;
       });
       inst._zod.parse = (payload, ctx) => {
         const input = payload.value;
@@ -13416,7 +13517,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       function: /* @__PURE__ */ __name(() => _function, "function"),
       guid: /* @__PURE__ */ __name(() => guid2, "guid"),
       hash: /* @__PURE__ */ __name(() => hash, "hash"),
-      hex: /* @__PURE__ */ __name(() => hex2, "hex"),
+      hex: /* @__PURE__ */ __name(() => hex22, "hex"),
       hostname: /* @__PURE__ */ __name(() => hostname2, "hostname"),
       httpUrl: /* @__PURE__ */ __name(() => httpUrl, "httpUrl"),
       instanceof: /* @__PURE__ */ __name(() => _instanceof, "instanceof"),
@@ -13436,7 +13537,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       looseObject: /* @__PURE__ */ __name(() => looseObject, "looseObject"),
       looseRecord: /* @__PURE__ */ __name(() => looseRecord, "looseRecord"),
       mac: /* @__PURE__ */ __name(() => mac2, "mac"),
-      map: /* @__PURE__ */ __name(() => map, "map"),
+      map: /* @__PURE__ */ __name(() => map2, "map"),
       meta: /* @__PURE__ */ __name(() => meta2, "meta"),
       nan: /* @__PURE__ */ __name(() => nan, "nan"),
       nanoid: /* @__PURE__ */ __name(() => nanoid2, "nanoid"),
@@ -13604,8 +13705,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
     var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
     var safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
-    var encode2 = /* @__PURE__ */ _encode(ZodRealError);
-    var decode2 = /* @__PURE__ */ _decode(ZodRealError);
+    var encode22 = /* @__PURE__ */ _encode(ZodRealError);
+    var decode22 = /* @__PURE__ */ _decode(ZodRealError);
     var encodeAsync2 = /* @__PURE__ */ _encodeAsync(ZodRealError);
     var decodeAsync2 = /* @__PURE__ */ _decodeAsync(ZodRealError);
     var safeEncode2 = /* @__PURE__ */ _safeEncode(ZodRealError);
@@ -13668,8 +13769,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       inst.parseAsync = async (data, params) => parseAsync2(inst, data, params, { callee: inst.parseAsync });
       inst.safeParseAsync = async (data, params) => safeParseAsync2(inst, data, params);
       inst.spa = inst.safeParseAsync;
-      inst.encode = (data, params) => encode2(inst, data, params);
-      inst.decode = (data, params) => decode2(inst, data, params);
+      inst.encode = (data, params) => encode22(inst, data, params);
+      inst.decode = (data, params) => decode22(inst, data, params);
       inst.encodeAsync = async (data, params) => encodeAsync2(inst, data, params);
       inst.decodeAsync = async (data, params) => decodeAsync2(inst, data, params);
       inst.safeEncode = (data, params) => safeEncode2(inst, data, params);
@@ -14094,11 +14195,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     }
     __name(hostname2, "hostname2");
     __name2(hostname2, "hostname");
-    function hex2(_params) {
+    function hex22(_params) {
       return /* @__PURE__ */ _stringFormat(ZodCustomStringFormat, "hex", regexes_exports.hex, _params);
     }
-    __name(hex2, "hex2");
-    __name2(hex2, "hex");
+    __name(hex22, "hex2");
+    __name2(hex22, "hex");
     function hash(alg, params) {
       const enc = params?.enc ?? "hex";
       const format = `${alg}_${enc}`;
@@ -14590,7 +14691,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       inst.max = (...args) => inst.check(/* @__PURE__ */ _maxSize(...args));
       inst.size = (...args) => inst.check(/* @__PURE__ */ _size(...args));
     });
-    function map(keyType, valueType, params) {
+    function map2(keyType, valueType, params) {
       return new ZodMap({
         type: "map",
         keyType,
@@ -14598,8 +14699,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         ...util_exports.normalizeParams(params)
       });
     }
-    __name(map, "map");
-    __name2(map, "map");
+    __name(map2, "map");
+    __name2(map2, "map");
     var ZodSet = /* @__PURE__ */ $constructor("ZodSet", (inst, def) => {
       $ZodSet.init(inst, def);
       ZodType.init(inst, def);
@@ -15099,9 +15200,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       invalid_value: "invalid_value",
       custom: "custom"
     };
-    function setErrorMap(map2) {
+    function setErrorMap(map22) {
       config({
-        customError: map2
+        customError: map22
       });
     }
     __name(setErrorMap, "setErrorMap");
@@ -16059,7 +16160,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       "replacedBy"
     ]).or(external_exports.string());
     var AssociationValidator = external_exports.object({
-      type: external_exports.string().array().nonempty(),
+      // Accept compacted scalars while retaining the existing permissive array contract.
+      type: external_exports.string().min(1).or(external_exports.string().array().nonempty()),
       associationType: AssociationTypeValidator,
       sourceId: external_exports.string().optional(),
       targetId: external_exports.string()
@@ -16882,11 +16984,48 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       updatedAt: external_exports.string(),
       expiresAt: external_exports.string().optional(),
       autoBoosts: external_exports.string().array().optional(),
-      writers: external_exports.array(LCNProfileValidator).optional()
+      writers: external_exports.array(LCNProfileValidator).optional(),
+      recipients: external_exports.array(LCNPublicProfileValidator.extend({ did: external_exports.string() })).optional(),
+      audienceVersion: external_exports.number().int().nonnegative().optional()
     });
-    var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied"]).nullable();
+    var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied", "cancelled"]).nullable();
     var ConsentFlowContractRequestReadStatusValidator = external_exports.enum(["unseen", "seen"]).nullable();
-    var ConsentFlowContractRequestForProfileValidator = external_exports.object({
+    var ConsentFlowReferralValidator = external_exports.object({
+      requestId: external_exports.string(),
+      requestedBy: external_exports.string(),
+      externalReferenceId: external_exports.string().max(256).optional()
+    });
+    var ContractRequestFieldsValidator = ConsentFlowReferralValidator.partial().extend({
+      requestedAt: external_exports.string().optional(),
+      message: external_exports.string().max(500).optional()
+    });
+    var SendContractRequestValidator = external_exports.object({
+      contractUri: external_exports.string(),
+      targetProfileId: external_exports.string(),
+      externalReferenceId: external_exports.string().trim().min(1).max(256).optional(),
+      message: external_exports.string().trim().max(500).optional()
+    });
+    var ConsentFlowWebhookMetadataValidator = external_exports.object({
+      eventId: external_exports.string(),
+      deliveryKey: external_exports.string(),
+      event: external_exports.enum([
+        "request_sent",
+        "request_accepted",
+        "request_denied",
+        "request_cancelled",
+        "consent_created",
+        "consent_updated",
+        "consent_withdrawn",
+        "credentials_synced"
+      ]),
+      contractUri: external_exports.string(),
+      termsUri: external_exports.string().optional(),
+      requestId: external_exports.string().optional(),
+      requestedBy: external_exports.string().optional(),
+      externalReferenceId: external_exports.string().optional(),
+      recipientRole: external_exports.enum(["owner", "recipient", "requester", "target"])
+    });
+    var ConsentFlowContractRequestForProfileValidator = ContractRequestFieldsValidator.extend({
       profile: LCNProfileValidator,
       status: ConsentFlowContractRequestStatusValidator,
       readStatus: ConsentFlowContractRequestReadStatusValidator.optional()
@@ -16932,6 +17071,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         expiresAt: external_exports.string().optional(),
         oneTime: external_exports.boolean().optional(),
         terms: ConsentFlowTermsValidator,
+        referral: ConsentFlowReferralValidator.optional(),
         contract: ConsentFlowContractDetailsValidator,
         uri: external_exports.string(),
         consenter: LCNProfileValidator,
@@ -17027,6 +17167,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       oneTime: external_exports.boolean().optional(),
       terms: ConsentFlowTermsValidator.optional(),
       guardianApproval: ConsentFlowGuardianApprovalValidator.optional(),
+      referral: ConsentFlowReferralValidator.optional(),
       id: external_exports.string(),
       action: ConsentFlowTransactionActionValidator,
       date: external_exports.string(),
@@ -17037,6 +17178,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       status: ConsentFlowTermsStatusValidator,
       contract: ConsentFlowContractDetailsValidator,
       terms: ConsentFlowTermsValidator,
+      referral: ConsentFlowReferralValidator.optional(),
       transactions: ConsentFlowTransactionValidator.array()
     });
     var HolderExportMetadataValidator = external_exports.object({
@@ -17773,7 +17915,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       displayName: external_exports.string(),
       email: external_exports.string().optional()
     });
-    var AppStoreListingValidator = external_exports.object({
+    var AppStoreListingFieldsValidator = external_exports.object({
       listing_id: external_exports.string(),
       slug: external_exports.string().optional(),
       display_name: external_exports.string(),
@@ -17799,15 +17941,33 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       submitter: AppStoreListingSubmitterValidator.optional(),
       contact_email: external_exports.string().email().optional()
     });
+    var PendingListingUpdateStatusValidator = external_exports.enum(["DRAFT", "PENDING_REVIEW"]);
+    var PendingListingUpdateValidator = external_exports.object({
+      status: PendingListingUpdateStatusValidator,
+      submitted_at: external_exports.string().optional(),
+      changes: AppStoreListingFieldsValidator.omit({
+        listing_id: true,
+        app_listing_status: true,
+        promotion_level: true,
+        submitted_at: true,
+        submitter: true
+      }).partial(),
+      manifest_version: external_exports.number().int().min(1).optional()
+    });
+    var AppStoreListingValidator = AppStoreListingFieldsValidator.extend({
+      pending_update: PendingListingUpdateValidator.optional()
+    });
     var AppStoreListingCreateValidator = AppStoreListingValidator.omit({
       listing_id: true,
       app_listing_status: true,
-      promotion_level: true
+      promotion_level: true,
+      pending_update: true
     });
     var AppStoreListingUpdateValidator = AppStoreListingValidator.partial().omit({
       listing_id: true,
       app_listing_status: true,
-      promotion_level: true
+      promotion_level: true,
+      pending_update: true
     });
     var InstalledAppValidator = AppStoreListingValidator.extend({
       installed_at: external_exports.string()
@@ -17822,12 +17982,87 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       templateAlias: external_exports.string().min(1).max(50).regex(/^[a-z0-9-]+$/),
       boostUri: external_exports.string()
     });
-    var SendCredentialEventValidator = external_exports.object({
+    var InlineWalletCategoryValidator = external_exports.enum([
+      "Achievement",
+      "Skill",
+      "ID",
+      "Learning History",
+      "Work History",
+      "Social Badges",
+      "Membership",
+      "Accomplishment",
+      "Experiences",
+      "Accommodation",
+      "Family"
+    ]);
+    var InlineAlignmentValidator = external_exports.object({
+      name: external_exports.string(),
+      url: external_exports.string(),
+      framework: external_exports.string().optional(),
+      code: external_exports.string().optional()
+    }).passthrough();
+    var InlineEvidenceValidator = external_exports.object({
+      id: external_exports.string().optional(),
+      name: external_exports.string().optional(),
+      narrative: external_exports.string().optional()
+    }).passthrough();
+    var InlineWalletSkillTagValidator = external_exports.object({
+      frameworkId: external_exports.string(),
+      id: external_exports.string(),
+      proficiencyLevel: external_exports.string().optional()
+    }).passthrough();
+    var SimpleInlineCredentialTemplateValidator = external_exports.object({
+      rawCredential: external_exports.undefined().optional(),
+      name: external_exports.string(),
+      description: external_exports.string().optional(),
+      image: external_exports.string().optional(),
+      issuerName: external_exports.string().optional(),
+      achievementType: external_exports.string().optional(),
+      category: InlineWalletCategoryValidator.optional(),
+      criteria: external_exports.object({
+        narrative: external_exports.string().optional(),
+        url: external_exports.string().optional()
+      }).passthrough().optional(),
+      alignments: external_exports.array(InlineAlignmentValidator).optional(),
+      tags: external_exports.array(external_exports.string()).optional(),
+      activity: external_exports.object({
+        startDate: external_exports.string().optional(),
+        endDate: external_exports.string().optional()
+      }).passthrough().optional(),
+      credits: external_exports.object({
+        earned: external_exports.union([external_exports.number(), external_exports.string()]).optional(),
+        available: external_exports.union([external_exports.number(), external_exports.string()]).optional()
+      }).passthrough().optional(),
+      validUntil: external_exports.string().optional(),
+      evidence: external_exports.array(InlineEvidenceValidator).optional(),
+      walletSkills: external_exports.array(InlineWalletSkillTagValidator).optional()
+    }).passthrough();
+    var RawInlineCredentialTemplateValidator = external_exports.object({
+      rawCredential: external_exports.record(external_exports.string(), external_exports.unknown()),
+      category: InlineWalletCategoryValidator.optional(),
+      walletSkills: external_exports.array(InlineWalletSkillTagValidator).optional()
+    }).passthrough();
+    var InlineCredentialTemplateValidator = external_exports.union([
+      RawInlineCredentialTemplateValidator,
+      SimpleInlineCredentialTemplateValidator
+    ]);
+    var LegacySendCredentialEventValidator = external_exports.object({
       type: external_exports.literal("send-credential"),
       templateAlias: external_exports.string(),
       templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
       preventDuplicateClaim: external_exports.boolean().optional()
     });
+    var InlineSendCredentialEventValidator = external_exports.object({
+      type: external_exports.literal("send-credential"),
+      alias: external_exports.string(),
+      template: InlineCredentialTemplateValidator,
+      templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+      preventDuplicateClaim: external_exports.boolean().optional()
+    });
+    var SendCredentialEventValidator = external_exports.union([
+      LegacySendCredentialEventValidator,
+      InlineSendCredentialEventValidator
+    ]);
     var CheckCredentialEventValidator = external_exports.object({
       type: external_exports.literal("check-credential"),
       templateAlias: external_exports.string().optional(),
@@ -17922,7 +18157,119 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       type: external_exports.literal("get-counters"),
       keys: external_exports.array(counterKeyValidator).min(1).max(50).optional()
     });
-    var AppEventValidator = external_exports.discriminatedUnion("type", [
+    var ConsentRequestWalletCategoryValidator = external_exports.enum([
+      "Achievement",
+      "Skill",
+      "ID",
+      "Learning History",
+      "Work History",
+      "Social Badges",
+      "Membership",
+      "Accomplishment",
+      "Experiences",
+      "Accommodation",
+      "Family"
+    ]);
+    var ConsentRequestPersonalFieldValidator = external_exports.enum([
+      "name",
+      "email",
+      "phone",
+      "birthDate",
+      "country",
+      "avatar"
+    ]);
+    var ConsentRequestValidator = external_exports.object({
+      read: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).optional(),
+        personalFields: external_exports.array(ConsentRequestPersonalFieldValidator).optional()
+      }).optional(),
+      write: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).optional()
+      }).optional(),
+      reason: external_exports.string().optional()
+    });
+    var NormalizedConsentScopesValidator = external_exports.object({
+      read: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).default([]),
+        personalFields: external_exports.array(ConsentRequestPersonalFieldValidator).default([])
+      }),
+      write: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).default([])
+      })
+    });
+    var CapturedTemplateRecordValidator = external_exports.object({
+      alias: external_exports.string(),
+      template: InlineCredentialTemplateValidator,
+      version: external_exports.number().int().min(1),
+      lastUsedAt: external_exports.string()
+    }).passthrough();
+    var CapturedConsentRecordValidator = external_exports.object({
+      scopes: NormalizedConsentScopesValidator,
+      reason: external_exports.string().optional(),
+      lastUsedAt: external_exports.string()
+    }).passthrough();
+    var AppManifestValidator = external_exports.object({
+      manifestVersion: external_exports.literal(1),
+      appUrl: external_exports.string(),
+      appKey: external_exports.string().max(200).optional(),
+      suggestedName: external_exports.string().optional(),
+      suggestedIconUrl: external_exports.string().optional(),
+      permissions: external_exports.array(external_exports.string()).default([]),
+      templates: external_exports.array(CapturedTemplateRecordValidator).default([]),
+      consentRequests: external_exports.array(CapturedConsentRecordValidator).default([]),
+      usedConsentContract: external_exports.boolean().optional(),
+      featuresLaunched: external_exports.array(external_exports.string()).default([]),
+      counterKeys: external_exports.array(external_exports.string()).default([]),
+      usedLearnerContext: external_exports.boolean(),
+      usedNotifications: external_exports.boolean(),
+      firstCapturedAt: external_exports.string(),
+      lastUpdatedAt: external_exports.string()
+    }).passthrough();
+    var AppManifestVersionStatusValidator = external_exports.enum(["draft", "active", "superseded"]);
+    var AppManifestVersionValidator = external_exports.object({
+      id: external_exports.string(),
+      version: external_exports.number().int().min(1),
+      manifestHash: external_exports.string(),
+      manifest: AppManifestValidator,
+      status: AppManifestVersionStatusValidator,
+      createdAt: external_exports.string(),
+      activatedAt: external_exports.string().optional()
+    });
+    var AppManifestStringDiffValidator = external_exports.object({
+      added: external_exports.array(external_exports.string()),
+      removed: external_exports.array(external_exports.string()),
+      changed: external_exports.array(external_exports.string())
+    });
+    var AppManifestTemplateRefValidator = external_exports.object({
+      alias: external_exports.string(),
+      version: external_exports.number().int().min(1)
+    });
+    var AppManifestTemplateChangeValidator = external_exports.object({
+      alias: external_exports.string(),
+      fromVersion: external_exports.number().int().min(1),
+      toVersion: external_exports.number().int().min(1)
+    });
+    var AppManifestDiffValidator = external_exports.object({
+      permissions: AppManifestStringDiffValidator,
+      templates: external_exports.object({
+        added: external_exports.array(AppManifestTemplateRefValidator),
+        removed: external_exports.array(AppManifestTemplateRefValidator),
+        changed: external_exports.array(AppManifestTemplateChangeValidator)
+      }),
+      consentScopes: AppManifestStringDiffValidator,
+      featurePaths: AppManifestStringDiffValidator,
+      counterKeys: AppManifestStringDiffValidator,
+      requiresReview: external_exports.boolean()
+    });
+    var UpsertConsentContractEventValidator = external_exports.object({
+      type: external_exports.literal("upsert-consent-contract"),
+      scopes: ConsentRequestValidator
+    });
+    var UpsertConsentContractResponseValidator = external_exports.object({
+      contractUri: external_exports.string(),
+      created: external_exports.boolean()
+    });
+    var AppEventValidator = external_exports.union([
       SendCredentialEventValidator,
       CheckCredentialEventValidator,
       CheckIssuanceStatusEventValidator,
@@ -17932,7 +18279,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       SendNotificationEventValidator,
       IncrementCounterEventValidator,
       GetCounterEventValidator,
-      GetCountersEventValidator
+      GetCountersEventValidator,
+      UpsertConsentContractEventValidator
     ]);
     var AppEventInputValidator = external_exports.object({
       listingId: external_exports.string(),
@@ -18011,6 +18359,30 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         __name2(this, "AuthSessionError");
       }
     };
+    var UnsupportedSignInOperationError = class extends Error {
+      static {
+        __name(this, "UnsupportedSignInOperationError");
+      }
+      constructor(operation, providerType) {
+        super(`${operation} is not supported by ${providerType}`);
+        this.operation = operation;
+        this.providerType = providerType;
+        this.name = "UnsupportedSignInOperationError";
+      }
+      static {
+        __name2(this, "UnsupportedSignInOperationError");
+      }
+    };
+    var ESCROW_PIN_LOCKED_MESSAGE2 = "Too many incorrect PIN attempts. You can still recover by waiting.";
+    var ESCROW_PIN_UNAVAILABLE_MESSAGE2 = "PIN recovery is not available for this account.";
+    var ESCROW_PIN_MISMATCH_PATTERN2 = /^Incorrect PIN\. (\d+) attempts left\.$/;
+    var escrowPinMismatchMessage = /* @__PURE__ */ __name2((attemptsRemaining) => `Incorrect PIN. ${attemptsRemaining} attempts left.`, "escrowPinMismatchMessage");
+    var EscrowPinStatusValidator = external_exports.object({
+      state: external_exports.enum(["none", "enabled", "locked", "stale"]),
+      enabled: external_exports.boolean(),
+      attemptsRemaining: external_exports.number().int().nonnegative(),
+      salt: external_exports.string().optional()
+    });
     var BITSTRING_STATUS_PURPOSES = ["revocation", "suspension"];
     var DEFAULT_BITSTRING_STATUS_LIST_SIZE = 131072;
     var BitstringStatusPurposeValidator = external_exports.enum(BITSTRING_STATUS_PURPOSES);
@@ -18125,6 +18497,502 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       const result = inAppMessagesFlagValidator.safeParse(raw);
       return result.success ? result.data : EMPTY_IN_APP_MESSAGES_FLAG;
     }, "parseInAppMessagesFlag");
+    var SHARE_LINK_ID_BYTES = 16;
+    var SHARE_CONTENT_KEY_BYTES = 32;
+    var SHARE_IV_BYTES = 12;
+    var SHARE_TAG_BYTES = 16;
+    var MAX_SHARE_CIPHERTEXT_BYTES = 512 * 1024;
+    var MAX_SHARE_RECOVERY_JWE_BYTES = 64 * 1024;
+    var MAX_SELECTED_CREDENTIALS = 50;
+    var MAX_ENDORSEMENTS = 200;
+    var MAX_VP_MEMBERS = MAX_SELECTED_CREDENTIALS + MAX_ENDORSEMENTS;
+    var MAX_SHARE_SOURCE_URI_CHARS = 2048;
+    var MAX_SHARE_LINK_REQUEST_BYTES = 1024 * 1024;
+    var SHARE_LINK_PROTOCOL = "lc-share/v1";
+    var SHARE_RECOVERY_PROTOCOL = "lc-share-recovery/v1";
+    var SHARE_AAD_PREFIX = "lc-share:v1";
+    var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+    var BASE64URL_LOOKUP = (() => {
+      const table = new Int16Array(128).fill(-1);
+      for (let index = 0; index < BASE64URL_ALPHABET.length; index += 1) {
+        table[BASE64URL_ALPHABET.charCodeAt(index)] = index;
+      }
+      return table;
+    })();
+    var encodeBase64Url = /* @__PURE__ */ __name2((bytes2) => {
+      let output = "";
+      for (let index = 0; index < bytes2.length; index += 3) {
+        const first = bytes2[index];
+        const second = bytes2[index + 1];
+        const third = bytes2[index + 2];
+        output += BASE64URL_ALPHABET[first >> 2];
+        output += BASE64URL_ALPHABET[(first & 3) << 4 | (second ?? 0) >> 4];
+        if (second === void 0) break;
+        output += BASE64URL_ALPHABET[(second & 15) << 2 | (third ?? 0) >> 6];
+        if (third === void 0) break;
+        output += BASE64URL_ALPHABET[third & 63];
+      }
+      return output;
+    }, "encodeBase64Url");
+    var decodeBase64Url = /* @__PURE__ */ __name2((value) => {
+      if (typeof value !== "string") return null;
+      const output = new Uint8Array(Math.floor(value.length * 6 / 8));
+      let bits = 0;
+      let bitCount = 0;
+      let outputIndex = 0;
+      for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        const digit = code < 128 ? BASE64URL_LOOKUP[code] : -1;
+        if (digit < 0) return null;
+        bits = bits << 6 | digit;
+        bitCount += 6;
+        if (bitCount >= 8) {
+          bitCount -= 8;
+          output[outputIndex] = bits >> bitCount & 255;
+          outputIndex += 1;
+        }
+      }
+      return output;
+    }, "decodeBase64Url");
+    var isCanonicalBase64Url = /* @__PURE__ */ __name2((value, expectedBytes) => {
+      if (typeof value !== "string") return false;
+      if (expectedBytes !== void 0 && value.length !== Math.ceil(expectedBytes * 4 / 3))
+        return false;
+      const decoded = decodeBase64Url(value);
+      if (decoded === null) return false;
+      if (expectedBytes !== void 0 && decoded.length !== expectedBytes) return false;
+      return encodeBase64Url(decoded) === value;
+    }, "isCanonicalBase64Url");
+    var decodedBase64UrlByteLength = /* @__PURE__ */ __name2((value) => decodeBase64Url(value)?.length ?? null, "decodedBase64UrlByteLength");
+    var utf8ByteLength = /* @__PURE__ */ __name2((value) => new TextEncoder().encode(value).length, "utf8ByteLength");
+    var canonicalBase64Url = /* @__PURE__ */ __name2((bytes2) => external_exports.string().refine((value) => isCanonicalBase64Url(value, bytes2), {
+      message: `must be canonical base64url for exactly ${bytes2} bytes`
+    }), "canonicalBase64Url");
+    var ShareLinkIdValidator = canonicalBase64Url(SHARE_LINK_ID_BYTES);
+    var ShareContentKeyValidator = canonicalBase64Url(SHARE_CONTENT_KEY_BYTES);
+    var ShareIvValidator = canonicalBase64Url(SHARE_IV_BYTES);
+    var ShareCiphertextValidator = external_exports.string().refine(
+      (value) => {
+        if (value.length > Math.ceil(MAX_SHARE_CIPHERTEXT_BYTES * 4 / 3)) return false;
+        const decoded = decodeBase64Url(value);
+        if (decoded === null) return false;
+        if (encodeBase64Url(decoded) !== value) return false;
+        return decoded.length >= SHARE_TAG_BYTES && decoded.length <= MAX_SHARE_CIPHERTEXT_BYTES;
+      },
+      {
+        message: `must be canonical base64url decoding to ${SHARE_TAG_BYTES}..${MAX_SHARE_CIPHERTEXT_BYTES} bytes`
+      }
+    );
+    var ShareEnvelopeValidator = external_exports.object({
+      v: external_exports.literal(1),
+      alg: external_exports.literal("A256GCM"),
+      iv: ShareIvValidator,
+      ct: ShareCiphertextValidator
+    }).strict();
+    var safeVersion = external_exports.number().int().min(1).max(2 ** 31 - 1);
+    var safeCredentialIndex = external_exports.number().int().min(0).max(MAX_VP_MEMBERS - 1);
+    var ShareSelectionEntryValidator = external_exports.object({ credentialIndex: safeCredentialIndex }).strict();
+    var ShareEndorsementEntryValidator = external_exports.object({ credentialIndex: safeCredentialIndex, targetCredentialIndex: safeCredentialIndex }).strict();
+    var ShareSharerValidator = external_exports.object({
+      profileId: external_exports.string().min(1).max(128),
+      displayName: external_exports.string().min(1).max(120),
+      avatar: external_exports.string().max(2048).optional()
+    }).strict();
+    var presentationShape = VPValidator.extend({
+      verifiableCredential: VCValidator.array().min(1).max(MAX_VP_MEMBERS)
+    });
+    var hasBoundedPresentation = /* @__PURE__ */ __name2((value) => {
+      let credentialCount = 0;
+      const ancestors = /* @__PURE__ */ new Set();
+      const visit = /* @__PURE__ */ __name2((node, depth) => {
+        if (node === null || typeof node !== "object") return true;
+        if (depth > 32 || ancestors.has(node)) return false;
+        ancestors.add(node);
+        try {
+          for (const [key, child] of Object.entries(node)) {
+            if (key === "verifiableCredential") {
+              credentialCount += Array.isArray(child) ? child.length : 1;
+              if (credentialCount > MAX_VP_MEMBERS) return false;
+            }
+            if (!visit(child, depth + 1)) return false;
+          }
+          return true;
+        } finally {
+          ancestors.delete(node);
+        }
+      }, "visit");
+      return visit(value, 0);
+    }, "hasBoundedPresentation");
+    var ShareManifestPresentationValidator = external_exports.custom(
+      (value) => hasBoundedPresentation(value) && presentationShape.safeParse(value).success,
+      { message: "invalid share presentation" }
+    );
+    var SharePayloadValidatorShape = external_exports.object({
+      protocol: external_exports.literal(SHARE_LINK_PROTOCOL),
+      shareId: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      createdAt: external_exports.iso.datetime(),
+      sharer: ShareSharerValidator,
+      presentation: ShareManifestPresentationValidator,
+      selection: ShareSelectionEntryValidator.array().min(1).max(MAX_SELECTED_CREDENTIALS),
+      endorsements: ShareEndorsementEntryValidator.array().max(MAX_ENDORSEMENTS).default([])
+    }).strict();
+    var classificationFailure = /* @__PURE__ */ __name2((code, message, path = []) => ({ ok: false, code, message, path }), "classificationFailure");
+    var readSignedClaimId = /* @__PURE__ */ __name2((member) => {
+      if (member === null || typeof member !== "object") return void 0;
+      const record2 = member;
+      const claim = record2.credentialSubject ?? record2.endorsement;
+      if (claim === null || typeof claim !== "object") return void 0;
+      const claimRecord = claim;
+      const nested = claimRecord.endorsement;
+      const nestedId = nested !== null && typeof nested === "object" ? nested.id : void 0;
+      return claimRecord.id ?? nestedId;
+    }, "readSignedClaimId");
+    var classifyShareManifest = /* @__PURE__ */ __name2((payload) => {
+      const members = payload.presentation?.verifiableCredential;
+      if (!Array.isArray(members) || members.length === 0) {
+        return classificationFailure("NO_PRESENTATION_MEMBERS", "presentation has no credentials");
+      }
+      if (members.length > MAX_VP_MEMBERS) {
+        return classificationFailure(
+          "TOO_MANY_VP_MEMBERS",
+          `presentation has ${members.length} members, over the ${MAX_VP_MEMBERS} bound`
+        );
+      }
+      const selection = payload.selection;
+      const endorsements = payload.endorsements ?? [];
+      if (!Array.isArray(selection) || selection.length < 1 || selection.length > MAX_SELECTED_CREDENTIALS) {
+        return classificationFailure("BAD_SELECTION", "selection must contain 1..50 entries");
+      }
+      if (!Array.isArray(endorsements) || endorsements.length > MAX_ENDORSEMENTS) {
+        return classificationFailure(
+          "BAD_ENDORSEMENTS",
+          "endorsements must contain at most 200 entries"
+        );
+      }
+      const selectedIndices = [];
+      const selected = /* @__PURE__ */ new Set();
+      for (let index = 0; index < selection.length; index += 1) {
+        const entry = selection[index];
+        const credentialIndex = entry?.credentialIndex;
+        if (!Number.isSafeInteger(credentialIndex) || credentialIndex < 0 || credentialIndex >= members.length) {
+          return classificationFailure(
+            "SELECTION_INDEX_OUT_OF_BOUNDS",
+            `selection[${index}].credentialIndex is out of bounds`,
+            ["selection", index, "credentialIndex"]
+          );
+        }
+        if (selected.has(credentialIndex)) {
+          return classificationFailure(
+            "SELECTION_INDEX_DUPLICATE",
+            `selection[${index}].credentialIndex is duplicated`,
+            ["selection", index, "credentialIndex"]
+          );
+        }
+        selected.add(credentialIndex);
+        selectedIndices.push(credentialIndex);
+      }
+      const classified = new Set(selected);
+      const endorsementIndices = [];
+      for (let index = 0; index < endorsements.length; index += 1) {
+        const entry = endorsements[index];
+        const credentialIndex = entry?.credentialIndex;
+        const targetIndex = entry?.targetCredentialIndex;
+        if (!Number.isSafeInteger(credentialIndex) || credentialIndex < 0 || credentialIndex >= members.length) {
+          return classificationFailure(
+            "ENDORSEMENT_INDEX_OUT_OF_BOUNDS",
+            `endorsements[${index}].credentialIndex is out of bounds`,
+            ["endorsements", index, "credentialIndex"]
+          );
+        }
+        if (classified.has(credentialIndex)) {
+          return classificationFailure(
+            "VP_MEMBER_CLASSIFIED_TWICE",
+            `endorsements[${index}].credentialIndex was already classified`,
+            ["endorsements", index, "credentialIndex"]
+          );
+        }
+        if (!selected.has(targetIndex)) {
+          return classificationFailure(
+            "ENDORSEMENT_TARGET_NOT_SELECTED",
+            `endorsements[${index}].targetCredentialIndex must reference a selected credential`,
+            ["endorsements", index, "targetCredentialIndex"]
+          );
+        }
+        const referenced = readSignedClaimId(members[credentialIndex]);
+        const target = members[targetIndex];
+        const targetId = target !== null && typeof target === "object" ? target.id : void 0;
+        if (typeof referenced !== "string" || typeof targetId !== "string" || referenced !== targetId) {
+          return classificationFailure(
+            "ENDORSEMENT_TARGET_UNBOUND",
+            `endorsements[${index}] claim does not reference the target credential id`,
+            ["endorsements", index]
+          );
+        }
+        classified.add(credentialIndex);
+        endorsementIndices.push(credentialIndex);
+      }
+      if (classified.size !== members.length) {
+        return classificationFailure(
+          "UNCLASSIFIED_VP_MEMBER",
+          "every presentation member must be classified exactly once",
+          ["presentation", "verifiableCredential"]
+        );
+      }
+      return {
+        ok: true,
+        classification: { selectedIndices, endorsementIndices, memberCount: members.length }
+      };
+    }, "classifyShareManifest");
+    var SharePayloadValidator = SharePayloadValidatorShape.superRefine((payload, ctx) => {
+      const result = classifyShareManifest(payload);
+      if (!result.ok) {
+        ctx.addIssue({
+          code: "custom",
+          message: result.message,
+          path: result.path,
+          params: { shareLinkCode: result.code }
+        });
+      }
+    });
+    var ShareRecoverySelectionValidator = external_exports.object({
+      ref: external_exports.string().min(1).max(MAX_SHARE_SOURCE_URI_CHARS),
+      order: external_exports.number().int().min(0).max(MAX_SELECTED_CREDENTIALS - 1)
+    }).strict();
+    var ShareRecoveryEndorsementValidator = external_exports.object({ targetRef: external_exports.string().min(1).max(MAX_SHARE_SOURCE_URI_CHARS) }).strict();
+    var ShareRecoveryPlaintextValidator = external_exports.object({
+      protocol: external_exports.literal(SHARE_RECOVERY_PROTOCOL),
+      shareId: ShareLinkIdValidator,
+      ownerProfileId: external_exports.string().min(1).max(128),
+      createdAt: external_exports.iso.datetime(),
+      latest: external_exports.object({ contentVersion: safeVersion, key: ShareContentKeyValidator }).strict(),
+      selection: ShareRecoverySelectionValidator.array().min(1).max(MAX_SELECTED_CREDENTIALS),
+      endorsements: ShareRecoveryEndorsementValidator.array().max(MAX_ENDORSEMENTS).default([])
+    }).strict().superRefine((recovery, ctx) => {
+      const orders = /* @__PURE__ */ new Set();
+      recovery.selection.forEach((entry, index) => {
+        if (entry.order >= recovery.selection.length) {
+          ctx.addIssue({
+            code: "custom",
+            message: "order must be within the selection bounds",
+            path: ["selection", index, "order"]
+          });
+        }
+        if (orders.has(entry.order)) {
+          ctx.addIssue({
+            code: "custom",
+            message: "order must be unique within the selection",
+            path: ["selection", index, "order"]
+          });
+        }
+        orders.add(entry.order);
+      });
+    });
+    var ShareOwnerRecoveryValidator = JWEValidator.refine(
+      (value) => utf8ByteLength(JSON.stringify(value)) <= MAX_SHARE_RECOVERY_JWE_BYTES,
+      { message: `serialized recovery JWE must be at most ${MAX_SHARE_RECOVERY_JWE_BYTES} bytes` }
+    );
+    var ShareLinkStatusValidator = external_exports.enum(["pending", "active", "stopped"]);
+    var ShareContentStateValidator = external_exports.enum(["staging", "finalized", "content_missing"]);
+    var ShareLinkValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      title: external_exports.string().min(1).max(120),
+      note: external_exports.string().max(500).optional(),
+      selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+      version: safeVersion,
+      contentVersion: safeVersion,
+      status: ShareLinkStatusValidator,
+      attachmentId: external_exports.string().uuid().nullable().optional(),
+      attachmentChunkCount: external_exports.number().int().min(1).max(16).nullable().optional(),
+      contentState: ShareContentStateValidator,
+      createdAt: external_exports.iso.datetime(),
+      updatedAt: external_exports.iso.datetime(),
+      expiresAt: external_exports.iso.datetime().nullable(),
+      stoppedAt: external_exports.iso.datetime().nullable(),
+      lastViewedAt: external_exports.iso.datetime().nullable(),
+      viewCount: external_exports.number().int().min(0).optional(),
+      passcodeProtected: external_exports.boolean(),
+      notifyOnView: external_exports.boolean(),
+      minorPolicy: external_exports.object({
+        isMinor: external_exports.boolean().nullable(),
+        policyResolved: external_exports.boolean(),
+        defaultExpiryDays: external_exports.union([external_exports.literal(30), external_exports.literal(365)]),
+        viewCountingEnabled: external_exports.boolean()
+      }),
+      /**
+       * Guarded application/API URL for the content. Optional because owner APIs in
+       * D1 have no public resolve/content endpoint yet; it must never be a
+       * LearnCloud object URL or carry a fabricated decryption key.
+       */
+      contentUrl: external_exports.string().optional()
+    });
+    var clientRequestId = external_exports.string().uuid();
+    var ShareLinkAttachmentValidator = external_exports.object({
+      id: external_exports.string().uuid(),
+      chunkCount: external_exports.number().int().min(1).max(16)
+    }).strict();
+    var attachmentChunkKey = {
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      attachmentId: external_exports.string().uuid(),
+      chunkIndex: external_exports.number().int().min(0).max(15)
+    };
+    var ShareLinkAttachmentChunkEnvelopeValidator = ShareEnvelopeValidator.refine(
+      (value) => (decodedBase64UrlByteLength(value.ct) ?? Infinity) <= 256 * 1024 + SHARE_TAG_BYTES
+    );
+    var PutShareLinkAttachmentChunkInputValidator = external_exports.object({
+      ...attachmentChunkKey,
+      chunkCount: external_exports.number().int().min(1).max(16),
+      envelope: ShareLinkAttachmentChunkEnvelopeValidator,
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator
+    }).strict().refine((value) => value.chunkIndex < value.chunkCount);
+    var GetShareLinkAttachmentChunkInputValidator = external_exports.object({
+      ...attachmentChunkKey,
+      passcode: external_exports.string().min(4).max(64).optional(),
+      accessToken: external_exports.string().min(1).max(2048).optional()
+    }).strict();
+    var ShareLinkAttachmentChunkOutputValidator = external_exports.object({
+      ...attachmentChunkKey,
+      envelope: ShareLinkAttachmentChunkEnvelopeValidator,
+      accessToken: external_exports.string().min(1).max(2048).optional()
+    }).strict();
+    var DeleteShareLinkAttachmentChunksInputValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      attachmentId: external_exports.string().uuid(),
+      chunkCount: external_exports.number().int().min(1).max(16)
+    }).strict();
+    var PutShareLinkAttachmentChunkOutputValidator = external_exports.object({ ok: external_exports.literal(true) }).strict();
+    var DeleteShareLinkAttachmentChunksOutputValidator = external_exports.object({ ok: external_exports.boolean() }).strict();
+    var CreateShareLinkInputValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      clientRequestId,
+      title: external_exports.string().min(1).max(120),
+      note: external_exports.string().max(500).optional(),
+      expiresAt: external_exports.iso.datetime().nullable().optional(),
+      passcode: external_exports.string().min(8).max(64).optional(),
+      notifyOnView: external_exports.boolean().default(false),
+      selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+      contentVersion: external_exports.literal(1),
+      envelope: ShareEnvelopeValidator,
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator,
+      attachment: ShareLinkAttachmentValidator.optional()
+    }).strict();
+    var UpdateShareLinkInputValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      expectedVersion: safeVersion,
+      clientRequestId,
+      title: external_exports.string().min(1).max(120).optional(),
+      note: external_exports.string().max(500).nullable().optional(),
+      expiresAt: external_exports.iso.datetime().nullable().optional(),
+      /** Omitted preserves the current passcode, null removes it, and a string replaces it. */
+      passcode: external_exports.string().min(8).max(64).nullable().optional(),
+      notifyOnView: external_exports.boolean().optional(),
+      contentVersion: safeVersion.optional(),
+      selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS).optional(),
+      envelope: ShareEnvelopeValidator.optional(),
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator.optional(),
+      attachment: ShareLinkAttachmentValidator.optional()
+    }).strict().superRefine((value, ctx) => {
+      const provided = [
+        value.contentVersion,
+        value.selectedCount,
+        value.envelope,
+        value.ownerEncryptedRecovery
+      ].filter((field) => field !== void 0).length;
+      if (provided !== 0 && provided !== 4) {
+        ctx.addIssue({
+          code: "custom",
+          message: "content replacement requires contentVersion, selectedCount, envelope and ownerEncryptedRecovery together"
+        });
+      }
+      if (value.attachment !== void 0 && provided !== 4) {
+        ctx.addIssue({ code: "custom", message: "attachment requires a content replacement" });
+      }
+    });
+    var ShareLinkIdInputValidator = external_exports.object({ id: ShareLinkIdValidator }).strict();
+    var ShareLinkOperationKeyInputValidator = external_exports.object({ id: ShareLinkIdValidator, operationId: external_exports.string().uuid() }).strict();
+    var ShareLinkOwnerCommitOutputValidator = external_exports.discriminatedUnion("status", [
+      external_exports.object({ status: external_exports.literal("completed"), share: ShareLinkValidator }).strict(),
+      external_exports.object({
+        status: external_exports.literal("pending"),
+        id: ShareLinkIdValidator,
+        operationId: external_exports.string().uuid()
+      }).strict()
+    ]);
+    var ShareLinkOwnerStatusOutputValidator = external_exports.discriminatedUnion("status", [
+      external_exports.object({ status: external_exports.literal("found"), share: ShareLinkValidator }).strict(),
+      external_exports.object({
+        status: external_exports.literal("pending"),
+        id: ShareLinkIdValidator,
+        operationId: external_exports.string().uuid()
+      }).strict(),
+      external_exports.object({ status: external_exports.literal("not_found"), id: ShareLinkIdValidator }).strict()
+    ]);
+    var ShareLinkOwnerRecoveryOutputValidator = external_exports.object({ recovery: ShareOwnerRecoveryValidator }).strict();
+    var ShareLinkOwnerContentOutputValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      envelope: ShareEnvelopeValidator
+    }).strict();
+    var ResolveShareLinkInputValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      /** Sent only in a POST body; it must never be placed in a share URL. */
+      passcode: external_exports.string().min(4).max(64).optional()
+    }).strict();
+    var ShareLinkPublicStateValidator = external_exports.discriminatedUnion("state", [
+      external_exports.object({
+        state: external_exports.literal("passcode_required"),
+        id: ShareLinkIdValidator
+      }).strict(),
+      external_exports.object({ state: external_exports.literal("try_later"), id: ShareLinkIdValidator }).strict(),
+      external_exports.object({
+        state: external_exports.literal("active"),
+        id: ShareLinkIdValidator,
+        title: external_exports.string().max(120),
+        note: external_exports.string().max(500).optional(),
+        selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
+        contentVersion: safeVersion,
+        contentUrl: external_exports.string(),
+        sharer: external_exports.object({
+          displayName: external_exports.string().max(120),
+          avatar: external_exports.string().max(2048).optional()
+        }),
+        createdAt: external_exports.iso.datetime(),
+        updatedAt: external_exports.iso.datetime(),
+        expiresAt: external_exports.iso.datetime().nullable()
+      }).strict(),
+      external_exports.object({
+        state: external_exports.literal("expired"),
+        id: ShareLinkIdValidator,
+        expiresAt: external_exports.iso.datetime()
+      }).strict(),
+      external_exports.object({
+        state: external_exports.literal("stopped"),
+        id: ShareLinkIdValidator,
+        stoppedAt: external_exports.iso.datetime()
+      }).strict(),
+      external_exports.object({ state: external_exports.literal("not_found"), id: ShareLinkIdValidator }).strict()
+    ]);
+    var ListShareLinksInputValidator = external_exports.object({
+      limit: external_exports.number().int().min(1).max(50).default(25),
+      cursor: external_exports.string().max(512).optional()
+    }).strict();
+    var PaginatedShareLinksValidator = PaginationResponseValidator.extend({
+      records: ShareLinkValidator.array()
+    });
+    var AcknowledgeViewInputValidator = external_exports.object({
+      receipt: external_exports.string().min(22).max(128).regex(/^[A-Za-z0-9_-]+$/)
+    }).strict();
+    var AcknowledgeViewOutputValidator = external_exports.object({ ok: external_exports.literal(true) }).strict();
+    var SHARE_VIEW_RECEIPT_TTL_SECONDS = 10 * 60;
+    var ShareLinkPublicContentViewValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      envelope: ShareEnvelopeValidator,
+      contentUrl: external_exports.string(),
+      receipt: external_exports.string().min(22).max(128).regex(/^[A-Za-z0-9_-]+$/)
+    }).strict();
   }
 });
 
@@ -18141,6 +19009,10 @@ var require_dist = __commonJS({
 });
 
 // src/api-client.ts
+var DID_CHALLENGE_REQUIRED_ERROR = "This operation requires the DID-challenge flow; use createSSSStrategy";
+var throwDidChallengeRequired = /* @__PURE__ */ __name(() => {
+  throw new Error(DID_CHALLENGE_REQUIRED_ERROR);
+}, "throwDidChallengeRequired");
 var SSSApiClient = class {
   static {
     __name(this, "SSSApiClient");
@@ -18153,20 +19025,9 @@ var SSSApiClient = class {
     const token = await this.authProvider.getIdToken();
     return {
       "Content-Type": "application/json",
-      Authorization: `Bearer ${token}`
+      "X-Auth-Token": token
     };
   }
-  async getContactMethodFromUser() {
-    const user = await this.authProvider.getCurrentUser();
-    if (!user) return null;
-    if (user.email) {
-      return { type: "email", value: user.email.toLowerCase() };
-    }
-    if (user.phone) {
-      return { type: "phone", value: user.phone };
-    }
-    return null;
-  }
   async getAuthShare() {
     const headers = await this.getAuthHeaders();
     const providerType = this.authProvider.getProviderType();
@@ -18183,52 +19044,24 @@ var SSSApiClient = class {
     }
     return response.json();
   }
-  async storeAuthShare(input) {
-    const headers = await this.getAuthHeaders();
-    const providerType = this.authProvider.getProviderType();
-    const response = await fetch(`${this.serverUrl}/keys/auth-share`, {
-      method: "PUT",
-      headers,
-      body: JSON.stringify({
-        ...input,
-        providerType
-      })
-    });
-    if (!response.ok) {
-      throw new Error(`Failed to store auth share: ${response.statusText}`);
-    }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
+  async storeAuthShare(_input) {
+    throwDidChallengeRequired();
   }
-  async addRecoveryMethod(input) {
-    const headers = await this.getAuthHeaders();
-    const providerType = this.authProvider.getProviderType();
-    const response = await fetch(`${this.serverUrl}/keys/recovery`, {
-      method: "POST",
-      headers,
-      body: JSON.stringify({
-        ...input,
-        providerType
-      })
-    });
-    if (!response.ok) {
-      throw new Error(`Failed to add recovery method: ${response.statusText}`);
-    }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
+  async addRecoveryMethod(_input) {
+    throwDidChallengeRequired();
   }
   async getRecoveryShare(type, credentialId) {
     const token = await this.authProvider.getIdToken();
     const providerType = this.authProvider.getProviderType();
-    const params = new URLSearchParams({
-      type,
-      providerType,
-      authToken: token
-    });
+    const params = new URLSearchParams({ type, providerType });
     if (credentialId) {
       params.append("credentialId", credentialId);
     }
     const response = await fetch(`${this.serverUrl}/keys/recovery?${params}`, {
       method: "GET",
-      headers: {
-        "Content-Type": "application/json"
-      }
+      headers: { "Content-Type": "application/json", "X-Auth-Token": token }
     });
     if (!response.ok) {
       if (response.status === 404) {
@@ -18238,81 +19071,81 @@ var SSSApiClient = class {
     }
     return response.json();
   }
-  async markMigrated() {
-    const headers = await this.getAuthHeaders();
-    const providerType = this.authProvider.getProviderType();
-    const response = await fetch(`${this.serverUrl}/keys/migrate`, {
+  async startIdentityRecovery(email) {
+    const response = await fetch(`${this.serverUrl}/keys/recovery-session/start`, {
       method: "POST",
-      headers,
-      body: JSON.stringify({ providerType })
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ email })
     });
     if (!response.ok) {
-      throw new Error(`Failed to mark as migrated: ${response.statusText}`);
+      throw new Error(`Failed to send recovery code: ${response.statusText}`);
     }
   }
-  async sendEmailBackupShare(emailShare, overrideEmail) {
-    const headers = await this.getAuthHeaders();
-    const providerType = this.authProvider.getProviderType();
-    let email = overrideEmail;
-    if (!email) {
-      const user = await this.authProvider.getCurrentUser();
-      email = user?.email;
-    }
-    if (!email) {
-      console.warn("Cannot send email backup share: no email address available");
-      return;
-    }
-    const response = await fetch(`${this.serverUrl}/keys/email-backup`, {
+  async verifyIdentityRecovery(email, code) {
+    const response = await fetch(`${this.serverUrl}/keys/recovery-session/verify`, {
       method: "POST",
-      headers,
-      body: JSON.stringify({
-        providerType,
-        emailShare,
-        email
-      })
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ email, code })
     });
     if (!response.ok) {
-      console.warn(`Failed to send email backup share: ${response.statusText}`);
+      throw new Error(`Failed to verify recovery code: ${response.statusText}`);
     }
+    return response.json();
   }
-  async addRecoveryEmail(email) {
-    const token = await this.authProvider.getIdToken();
-    const providerType = this.authProvider.getProviderType();
-    const response = await fetch(`${this.serverUrl}/keys/recovery-email/add`, {
+  async useIdentityRecoverySession(recoverySessionToken, type, credentialId) {
+    const response = await fetch(`${this.serverUrl}/keys/recovery-session/recover`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ authToken: token, providerType, email })
+      body: JSON.stringify({ recoverySessionToken, type, credentialId })
     });
     if (!response.ok) {
-      const data = await response.json().catch(() => ({}));
-      throw new Error(data?.message || `Failed to add recovery email: ${response.statusText}`);
+      throw new Error(`Failed to retrieve recovery data: ${response.statusText}`);
     }
+    return response.json();
   }
-  async verifyRecoveryEmail(code) {
-    const token = await this.authProvider.getIdToken();
-    const providerType = this.authProvider.getProviderType();
-    const response = await fetch(`${this.serverUrl}/keys/recovery-email/verify`, {
+  async completeIdentityRecoveryRebind(input) {
+    const response = await fetch(`${this.serverUrl}/keys/recovery-session/rebind`, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ authToken: token, providerType, code })
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${input.didAuthVp}`,
+        "X-Auth-Token": input.newAuthToken
+      },
+      body: JSON.stringify({
+        recoverySessionToken: input.recoverySessionToken,
+        providerType: input.providerType,
+        primaryDid: input.primaryDid,
+        authShare: input.authShare
+      })
     });
     if (!response.ok) {
-      const data = await response.json().catch(() => ({}));
-      throw new Error(data?.message || `Failed to verify recovery email: ${response.statusText}`);
+      throw new Error(`Failed to bind the new sign-in: ${response.statusText}`);
     }
     return response.json();
   }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
+  async markMigrated() {
+    throwDidChallengeRequired();
+  }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
+  async activate() {
+    throwDidChallengeRequired();
+  }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
+  async sendEmailBackupShare(_emailShare, _overrideEmail) {
+    throwDidChallengeRequired();
+  }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
+  async addRecoveryEmail(_email) {
+    throwDidChallengeRequired();
+  }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
+  async verifyRecoveryEmail(_code) {
+    return throwDidChallengeRequired();
+  }
+  /** @deprecated Requires DID-challenge authorization. Use `createSSSStrategy`. */
   async deleteUserKey() {
-    const headers = await this.getAuthHeaders();
-    const providerType = this.authProvider.getProviderType();
-    const response = await fetch(`${this.serverUrl}/keys`, {
-      method: "DELETE",
-      headers,
-      body: JSON.stringify({ providerType })
-    });
-    if (!response.ok) {
-      throw new Error(`Failed to delete user key: ${response.statusText}`);
-    }
+    throwDidChallengeRequired();
   }
 };
 
@@ -18332,33 +19165,33 @@ var DEFAULT_KDF_PARAMS = {
   parallelism: ARGON2_PARALLELISM
 };
 function bufferToBase64(buf) {
-  const bytes = new Uint8Array(buf);
+  const bytes2 = new Uint8Array(buf);
   let binary = "";
-  for (let i = 0; i < bytes.byteLength; i++) {
-    binary += String.fromCharCode(bytes[i]);
+  for (let i = 0; i < bytes2.byteLength; i++) {
+    binary += String.fromCharCode(bytes2[i]);
   }
   return btoa(binary);
 }
 __name(bufferToBase64, "bufferToBase64");
 function base64ToBuffer(b64) {
   const binary = atob(b64);
-  const bytes = new Uint8Array(binary.length);
+  const bytes2 = new Uint8Array(binary.length);
   for (let i = 0; i < binary.length; i++) {
-    bytes[i] = binary.charCodeAt(i);
+    bytes2[i] = binary.charCodeAt(i);
   }
-  return bytes;
+  return bytes2;
 }
 __name(base64ToBuffer, "base64ToBuffer");
-function hexToBytes(hex) {
-  const bytes = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < hex.length; i += 2) {
-    bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+function hexToBytes(hex2) {
+  const bytes2 = new Uint8Array(hex2.length / 2);
+  for (let i = 0; i < hex2.length; i += 2) {
+    bytes2[i / 2] = parseInt(hex2.slice(i, i + 2), 16);
   }
-  return bytes;
+  return bytes2;
 }
 __name(hexToBytes, "hexToBytes");
-function bytesToHex(bytes) {
-  return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+function bytesToHex(bytes2) {
+  return Array.from(bytes2).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 __name(bytesToHex, "bytesToHex");
 async function deriveKeyFromPassword(password, salt, params = DEFAULT_KDF_PARAMS) {
@@ -18507,11 +19340,10 @@ async function getOrCreateMasterKey() {
         (s) => s.get("master-key")
       );
       if (existing) return existing;
-      const key = await crypto.subtle.generateKey(
-        { name: "AES-GCM", length: 256 },
-        false,
-        ["encrypt", "decrypt"]
-      );
+      const key = await crypto.subtle.generateKey({ name: "AES-GCM", length: 256 }, false, [
+        "encrypt",
+        "decrypt"
+      ]);
       await tx(db, KEYS_STORE, "readwrite", (s) => s.put(key, "master-key"));
       return key;
     } finally {
@@ -18526,21 +19358,21 @@ async function getOrCreateMasterKey() {
 }
 __name(getOrCreateMasterKey, "getOrCreateMasterKey");
 function bufferToBase642(buf) {
-  const bytes = new Uint8Array(buf);
+  const bytes2 = new Uint8Array(buf);
   let binary = "";
-  for (let i = 0; i < bytes.byteLength; i++) {
-    binary += String.fromCharCode(bytes[i]);
+  for (let i = 0; i < bytes2.byteLength; i++) {
+    binary += String.fromCharCode(bytes2[i]);
   }
   return btoa(binary);
 }
 __name(bufferToBase642, "bufferToBase64");
 function base64ToBuffer2(b64) {
   const binary = atob(b64);
-  const bytes = new Uint8Array(binary.length);
+  const bytes2 = new Uint8Array(binary.length);
   for (let i = 0; i < binary.length; i++) {
-    bytes[i] = binary.charCodeAt(i);
+    bytes2[i] = binary.charCodeAt(i);
   }
-  return bytes.buffer;
+  return bytes2.buffer;
 }
 __name(base64ToBuffer2, "base64ToBuffer");
 async function encryptShare(share, id) {
@@ -18612,12 +19444,7 @@ __name(getShareVersion, "getShareVersion");
 async function getDeviceShare(id = DEFAULT_DEVICE_SHARE_ID) {
   const db = await openDB();
   try {
-    const raw = await tx(
-      db,
-      SHARES_STORE,
-      "readonly",
-      (s) => s.get(id)
-    );
+    const raw = await tx(db, SHARES_STORE, "readonly", (s) => s.get(id));
     if (raw == null) {
       return null;
     }
@@ -18676,7 +19503,9 @@ async function listAllDeviceShares() {
       try {
         const share = await getDeviceShare(id);
         if (!share) {
-          console.warn(`SSS Storage: removing orphaned entry that failed to decrypt: ${id}`);
+          console.warn(
+            `SSS Storage: removing orphaned entry that failed to decrypt: ${id}`
+          );
           await deleteDeviceShare(id);
           continue;
         }
@@ -18760,6 +19589,7 @@ function createAdaptiveStorage() {
     getDeviceShare: /* @__PURE__ */ __name((id) => isPublicComputerMode() ? sessionGetDeviceShare(id) : getDeviceShare(id), "getDeviceShare"),
     hasDeviceShare: /* @__PURE__ */ __name((id) => isPublicComputerMode() ? sessionHasDeviceShare(id) : hasDeviceShare(id), "hasDeviceShare"),
     clearAllShares: /* @__PURE__ */ __name((id) => isPublicComputerMode() ? sessionClearAllShares(id) : clearAllShares(id), "clearAllShares"),
+    deleteDeviceShare: /* @__PURE__ */ __name((id) => isPublicComputerMode() ? sessionDeleteDeviceShare(id) : deleteDeviceShare(id), "deleteDeviceShare"),
     storeShareVersion: /* @__PURE__ */ __name((version, id) => isPublicComputerMode() ? sessionStoreShareVersion(version, id) : storeShareVersion(version, id), "storeShareVersion"),
     getShareVersion: /* @__PURE__ */ __name((id) => isPublicComputerMode() ? sessionGetShareVersion(id) : getShareVersion(id), "getShareVersion")
   };
@@ -18950,16 +19780,16 @@ async function getWordlist() {
   return wordlistPromise;
 }
 __name(getWordlist, "getWordlist");
-function bytesToBits(bytes) {
-  return Array.from(bytes).map((b) => b.toString(2).padStart(8, "0")).join("");
+function bytesToBits(bytes2) {
+  return Array.from(bytes2).map((b) => b.toString(2).padStart(8, "0")).join("");
 }
 __name(bytesToBits, "bytesToBits");
 function bitsToBytes(bits) {
-  const bytes = new Uint8Array(Math.ceil(bits.length / 8));
-  for (let i = 0; i < bytes.length; i++) {
-    bytes[i] = parseInt(bits.slice(i * 8, (i + 1) * 8).padEnd(8, "0"), 2);
+  const bytes2 = new Uint8Array(Math.ceil(bits.length / 8));
+  for (let i = 0; i < bytes2.length; i++) {
+    bytes2[i] = parseInt(bits.slice(i * 8, (i + 1) * 8).padEnd(8, "0"), 2);
   }
-  return bytes;
+  return bytes2;
 }
 __name(bitsToBytes, "bitsToBytes");
 async function computeChecksum(data) {
@@ -18997,12 +19827,12 @@ async function recoveryPhraseToShare(phrase) {
     bits += index.toString(2).padStart(11, "0");
   }
   let dataByteCount = 0;
-  for (let bytes = 1; bytes <= 64; bytes++) {
-    const checksumBits2 = Math.floor(bytes / 4);
-    const totalBits = bytes * 8 + checksumBits2;
+  for (let bytes2 = 1; bytes2 <= 64; bytes2++) {
+    const checksumBits2 = Math.floor(bytes2 / 4);
+    const totalBits = bytes2 * 8 + checksumBits2;
     const wordsNeeded = Math.ceil(totalBits / 11);
     if (wordsNeeded === words.length) {
-      dataByteCount = bytes;
+      dataByteCount = bytes2;
     } else if (wordsNeeded > words.length) {
       break;
     }
@@ -19040,6 +19870,33 @@ function countWords(phrase) {
   return phrase.trim().split(/\s+/).filter((w) => w.length > 0).length;
 }
 __name(countWords, "countWords");
+function randomIndex(max) {
+  const limit = 4294967296 - 4294967296 % max;
+  for (; ; ) {
+    const value = crypto.getRandomValues(new Uint32Array(1))[0];
+    if (value === void 0) throw new Error("Failed to choose recovery phrase words");
+    if (value < limit) return value % max;
+  }
+}
+__name(randomIndex, "randomIndex");
+async function buildRecoveryPhraseChallengeOptions(phrase, challengeWordIndices, optionCount = 6) {
+  const words = phrase.trim().split(/\s+/);
+  const phraseWords = new Set(words);
+  const decoyPool = (await getWordlist()).filter((word) => !phraseWords.has(word));
+  return challengeWordIndices.map((wordIndex) => {
+    const answer = words[wordIndex];
+    if (!answer) throw new Error("Recovery phrase challenge index is out of range");
+    const options = /* @__PURE__ */ new Set([answer]);
+    while (options.size < optionCount) options.add(decoyPool[randomIndex(decoyPool.length)]);
+    const shuffled = [...options];
+    for (let i = shuffled.length - 1; i > 0; i--) {
+      const j = randomIndex(i + 1);
+      [shuffled[i], shuffled[j]] = [shuffled[j], shuffled[i]];
+    }
+    return shuffled;
+  });
+}
+__name(buildRecoveryPhraseChallengeOptions, "buildRecoveryPhraseChallengeOptions");
 
 // src/key-manager.ts
 var SSSKeyManager = class {
@@ -19265,23 +20122,776 @@ function createSSSKeyManager(config) {
 }
 __name(createSSSKeyManager, "createSSSKeyManager");
 
-// src/atomic-operations.ts
-var ShareVerificationError = class extends Error {
-  constructor(message, combination, expected, got) {
-    super(message);
-    this.combination = combination;
-    this.expected = expected;
-    this.got = got;
-    this.name = "ShareVerificationError";
+// src/email-relay-crypto.ts
+var EMAIL_RELAY_ENVELOPE_VERSION = 1;
+var EMAIL_RELAY_ALGORITHM = "P-256-HKDF-SHA256-AES-256-GCM";
+var encodeUtf8 = /* @__PURE__ */ __name((value) => {
+  const bytes2 = new TextEncoder().encode(value);
+  const copy = new Uint8Array(new ArrayBuffer(bytes2.byteLength));
+  copy.set(bytes2);
+  return copy;
+}, "encodeUtf8");
+var EMAIL_RELAY_INFO = encodeUtf8("learncard-email-relay-v1");
+var SIX_DIGIT_CODE_RANGE = 9e5;
+var UINT32_RANGE = 4294967296;
+var MAX_UNBIASED_UINT32 = Math.floor(UINT32_RANGE / SIX_DIGIT_CODE_RANGE) * SIX_DIGIT_CODE_RANGE;
+var isRecord = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
+var requireString = /* @__PURE__ */ __name((record, key, options) => {
+  const value = record[key];
+  if (typeof value !== "string" || value.length < (options.min ?? 1) || value.length > options.max || options.pattern && !options.pattern.test(value)) {
+    throw new Error(`Invalid email relay ${key}`);
   }
-  static {
-    __name(this, "ShareVerificationError");
+  return value;
+}, "requireString");
+var parseBranding = /* @__PURE__ */ __name((value) => {
+  if (value === void 0) return void 0;
+  if (!isRecord(value)) throw new Error("Invalid email relay branding");
+  const branding = {};
+  const keys = [
+    "brandName",
+    "logoUrl",
+    "logoAlt",
+    "primaryColor",
+    "primaryTextColor",
+    "supportEmail",
+    "websiteUrl",
+    "appUrl",
+    "fromDomain",
+    "copyrightHolder"
+  ];
+  for (const key of keys) {
+    const field = value[key];
+    if (field === void 0) continue;
+    if (typeof field !== "string" || field.length > 2048) {
+      throw new Error(`Invalid email relay branding.${key}`);
+    }
+    branding[key] = field;
   }
-};
-var AtomicUpdateError = class extends Error {
-  constructor(message, phase, rolledBack, cause) {
-    super(message);
-    this.phase = phase;
+  return branding;
+}, "parseBranding");
+var parseEmailRelayEnvelope = /* @__PURE__ */ __name((value) => {
+  if (!isRecord(value)) throw new Error("Invalid email relay envelope");
+  if (value.version !== EMAIL_RELAY_ENVELOPE_VERSION) {
+    throw new Error("Unsupported email relay envelope version");
+  }
+  if (value.algorithm !== EMAIL_RELAY_ALGORITHM) {
+    throw new Error("Unsupported email relay algorithm");
+  }
+  return {
+    version: EMAIL_RELAY_ENVELOPE_VERSION,
+    algorithm: EMAIL_RELAY_ALGORITHM,
+    keyId: requireString(value, "keyId", {
+      max: 128,
+      pattern: /^[A-Za-z0-9._-]+$/
+    }),
+    ephemeralPublicKey: requireString(value, "ephemeralPublicKey", { max: 256 }),
+    salt: requireString(value, "salt", { max: 128 }),
+    iv: requireString(value, "iv", { max: 64 }),
+    ciphertext: requireString(value, "ciphertext", { max: 16384 })
+  };
+}, "parseEmailRelayEnvelope");
+var parseEmailRelayPlaintext = /* @__PURE__ */ __name((value) => {
+  if (!isRecord(value) || value.version !== EMAIL_RELAY_ENVELOPE_VERSION) {
+    throw new Error("Invalid email relay plaintext");
+  }
+  return {
+    version: EMAIL_RELAY_ENVELOPE_VERSION,
+    targetEmail: requireString(value, "targetEmail", {
+      max: 320,
+      pattern: /^[^\s@]+@[^\s@]+\.[^\s@]+$/
+    }).trim().toLowerCase(),
+    recoveryKey: requireString(value, "recoveryKey", {
+      min: 5,
+      max: 4096,
+      pattern: /^[0-9a-f]+$/i
+    }),
+    confirmationCode: requireString(value, "confirmationCode", {
+      max: 6,
+      pattern: /^\d{6}$/
+    }),
+    branding: parseBranding(value.branding)
+  };
+}, "parseEmailRelayPlaintext");
+var getAad = /* @__PURE__ */ __name((envelope) => encodeUtf8(`${envelope.version}|${envelope.algorithm}|${envelope.keyId}`), "getAad");
+var deriveAesKey = /* @__PURE__ */ __name(async (sharedSecret, salt, usage) => {
+  const keyMaterial = await crypto.subtle.importKey("raw", sharedSecret, "HKDF", false, [
+    "deriveKey"
+  ]);
+  return crypto.subtle.deriveKey(
+    { name: "HKDF", hash: "SHA-256", salt, info: EMAIL_RELAY_INFO },
+    keyMaterial,
+    { name: "AES-GCM", length: 256 },
+    false,
+    [usage]
+  );
+}, "deriveAesKey");
+var generateEmailRelayConfirmationCode = /* @__PURE__ */ __name(() => {
+  const random = new Uint32Array(1);
+  let value;
+  do {
+    crypto.getRandomValues(random);
+    value = random[0] ?? UINT32_RANGE;
+  } while (value >= MAX_UNBIASED_UINT32);
+  return String(1e5 + value % SIX_DIGIT_CODE_RANGE);
+}, "generateEmailRelayConfirmationCode");
+var encryptEmailRelayPayload = /* @__PURE__ */ __name(async (input, publicKeyBase64, keyId) => {
+  const plaintext = parseEmailRelayPlaintext({
+    ...input,
+    version: EMAIL_RELAY_ENVELOPE_VERSION
+  });
+  const normalizedKeyId = keyId.trim();
+  if (!publicKeyBase64.trim()) throw new Error("Email relay public key is not configured");
+  if (!/^[A-Za-z0-9._-]{1,128}$/.test(normalizedKeyId)) {
+    throw new Error("Email relay key ID is not configured");
+  }
+  const recipientPublicKey = await crypto.subtle.importKey(
+    "spki",
+    base64ToBuffer(publicKeyBase64.trim()).buffer,
+    { name: "ECDH", namedCurve: "P-256" },
+    false,
+    []
+  );
+  const ephemeralKeyPair = await crypto.subtle.generateKey(
+    { name: "ECDH", namedCurve: "P-256" },
+    true,
+    ["deriveBits"]
+  );
+  const sharedSecret = await crypto.subtle.deriveBits(
+    { name: "ECDH", public: recipientPublicKey },
+    ephemeralKeyPair.privateKey,
+    256
+  );
+  const salt = crypto.getRandomValues(new Uint8Array(32));
+  const iv = crypto.getRandomValues(new Uint8Array(12));
+  const aesKey = await deriveAesKey(sharedSecret, salt, "encrypt");
+  const envelopeMetadata = {
+    version: EMAIL_RELAY_ENVELOPE_VERSION,
+    algorithm: EMAIL_RELAY_ALGORITHM,
+    keyId: normalizedKeyId
+  };
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "AES-GCM", iv, additionalData: getAad(envelopeMetadata) },
+    aesKey,
+    encodeUtf8(JSON.stringify(plaintext))
+  );
+  const ephemeralPublicKey = await crypto.subtle.exportKey("raw", ephemeralKeyPair.publicKey);
+  return {
+    ...envelopeMetadata,
+    ephemeralPublicKey: bufferToBase64(ephemeralPublicKey),
+    salt: bufferToBase64(salt.buffer),
+    iv: bufferToBase64(iv.buffer),
+    ciphertext: bufferToBase64(ciphertext)
+  };
+}, "encryptEmailRelayPayload");
+var decryptEmailRelayPayload = /* @__PURE__ */ __name(async (value, privateKeyBase64) => {
+  const envelope = parseEmailRelayEnvelope(value);
+  const privateKey = await crypto.subtle.importKey(
+    "pkcs8",
+    base64ToBuffer(privateKeyBase64.trim()).buffer,
+    { name: "ECDH", namedCurve: "P-256" },
+    false,
+    ["deriveBits"]
+  );
+  const ephemeralPublicKey = await crypto.subtle.importKey(
+    "raw",
+    base64ToBuffer(envelope.ephemeralPublicKey).buffer,
+    { name: "ECDH", namedCurve: "P-256" },
+    false,
+    []
+  );
+  const sharedSecret = await crypto.subtle.deriveBits(
+    { name: "ECDH", public: ephemeralPublicKey },
+    privateKey,
+    256
+  );
+  const salt = base64ToBuffer(envelope.salt);
+  const iv = base64ToBuffer(envelope.iv);
+  const aesKey = await deriveAesKey(sharedSecret, salt, "decrypt");
+  const decrypted = await crypto.subtle.decrypt(
+    { name: "AES-GCM", iv, additionalData: getAad(envelope) },
+    aesKey,
+    base64ToBuffer(envelope.ciphertext)
+  );
+  const parsed = JSON.parse(new TextDecoder().decode(decrypted));
+  return parseEmailRelayPlaintext(parsed);
+}, "decryptEmailRelayPayload");
+
+// src/escrow-crypto.ts
+var ESCROW_ENVELOPE_VERSION = 1;
+var ESCROW_ALGORITHM = "P-256-HKDF-SHA256-AES-256-GCM";
+var ESCROW_BLOB_INFO = "learncard-escrow-blob-v1";
+var ESCROW_RELEASE_INFO = "learncard-escrow-release-v1";
+var ESCROW_CLIENT_KEY_ID = "client";
+var encodeUtf82 = /* @__PURE__ */ __name((value) => {
+  const bytes2 = new TextEncoder().encode(value);
+  const copy = new Uint8Array(new ArrayBuffer(bytes2.byteLength));
+  copy.set(bytes2);
+  return copy;
+}, "encodeUtf8");
+var isRecord2 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
+var requireString2 = /* @__PURE__ */ __name((record, key, options) => {
+  const value = record[key];
+  if (typeof value !== "string" || value.length < (options.min ?? 1) || value.length > options.max || options.pattern && !options.pattern.test(value)) {
+    throw new Error(`Invalid escrow ${key}`);
+  }
+  return value;
+}, "requireString");
+var parseEscrowEnvelope = /* @__PURE__ */ __name((value) => {
+  if (!isRecord2(value)) throw new Error("Invalid escrow envelope");
+  if (value.version !== ESCROW_ENVELOPE_VERSION) {
+    throw new Error("Unsupported escrow envelope version");
+  }
+  if (value.algorithm !== ESCROW_ALGORITHM) {
+    throw new Error("Unsupported escrow algorithm");
+  }
+  return {
+    version: ESCROW_ENVELOPE_VERSION,
+    algorithm: ESCROW_ALGORITHM,
+    keyId: requireString2(value, "keyId", { max: 128, pattern: /^[A-Za-z0-9._-]+$/ }),
+    ephemeralPublicKey: requireString2(value, "ephemeralPublicKey", { max: 256 }),
+    salt: requireString2(value, "salt", { max: 128 }),
+    iv: requireString2(value, "iv", { max: 64 }),
+    ciphertext: requireString2(value, "ciphertext", { max: 16384 })
+  };
+}, "parseEscrowEnvelope");
+var parseEscrowBlobPlaintext = /* @__PURE__ */ __name((value) => {
+  if (!isRecord2(value) || value.version !== ESCROW_ENVELOPE_VERSION) {
+    throw new Error("Invalid escrow plaintext");
+  }
+  if (typeof value.shareVersion !== "number" || !Number.isInteger(value.shareVersion) || value.shareVersion <= 0) {
+    throw new Error("Invalid escrow shareVersion");
+  }
+  return {
+    version: ESCROW_ENVELOPE_VERSION,
+    recoveryShare: requireString2(value, "recoveryShare", {
+      min: 5,
+      max: 4096,
+      pattern: /^[0-9a-f]+$/i
+    }).toLowerCase(),
+    did: requireString2(value, "did", { max: 2048, pattern: /^did:/ }),
+    shareVersion: value.shareVersion,
+    ...value.pinVerifier !== void 0 ? {
+      pinVerifier: requireString2(value, "pinVerifier", {
+        min: 64,
+        max: 64,
+        pattern: /^[0-9a-f]{64}$/i
+      }).toLowerCase()
+    } : {}
+  };
+}, "parseEscrowBlobPlaintext");
+var parseEscrowReleasePlaintext = /* @__PURE__ */ __name((value) => {
+  const plaintext = parseEscrowBlobPlaintext(value);
+  if (!isRecord2(value)) throw new Error("Invalid escrow plaintext");
+  return {
+    ...plaintext,
+    holdId: requireString2(value, "holdId", { max: 128, pattern: /^[A-Za-z0-9._-]+$/ })
+  };
+}, "parseEscrowReleasePlaintext");
+var getAad2 = /* @__PURE__ */ __name((envelope) => encodeUtf82(`${envelope.version}|${envelope.algorithm}|${envelope.keyId}`), "getAad");
+var deriveAesKey2 = /* @__PURE__ */ __name(async (sharedSecret, salt, usage, info) => {
+  const keyMaterial = await crypto.subtle.importKey("raw", sharedSecret, "HKDF", false, [
+    "deriveKey"
+  ]);
+  return crypto.subtle.deriveKey(
+    { name: "HKDF", hash: "SHA-256", salt, info: encodeUtf82(info) },
+    keyMaterial,
+    { name: "AES-GCM", length: 256 },
+    false,
+    [usage]
+  );
+}, "deriveAesKey");
+var generateEscrowKeyPair = /* @__PURE__ */ __name(async () => {
+  const keyPair = await crypto.subtle.generateKey({ name: "ECDH", namedCurve: "P-256" }, true, [
+    "deriveBits"
+  ]);
+  const [publicKey, privateKey] = await Promise.all([
+    crypto.subtle.exportKey("spki", keyPair.publicKey),
+    crypto.subtle.exportKey("pkcs8", keyPair.privateKey)
+  ]);
+  return { publicKey: bufferToBase64(publicKey), privateKey: bufferToBase64(privateKey) };
+}, "generateEscrowKeyPair");
+var encryptToRecipient = /* @__PURE__ */ __name(async (plaintextJson, spki, keyId, info) => {
+  if (typeof spki !== "string" || !spki.trim()) {
+    throw new Error("Escrow public key is not configured");
+  }
+  const recipientKeyId = requireString2({ keyId }, "keyId", {
+    max: 128,
+    pattern: /^[A-Za-z0-9._-]+$/
+  });
+  const recipientPublicKey = await crypto.subtle.importKey(
+    "spki",
+    base64ToBuffer(spki.trim()),
+    { name: "ECDH", namedCurve: "P-256" },
+    false,
+    []
+  );
+  const ephemeralKeyPair = await crypto.subtle.generateKey(
+    { name: "ECDH", namedCurve: "P-256" },
+    true,
+    ["deriveBits"]
+  );
+  const sharedSecret = await crypto.subtle.deriveBits(
+    { name: "ECDH", public: recipientPublicKey },
+    ephemeralKeyPair.privateKey,
+    256
+  );
+  const salt = crypto.getRandomValues(new Uint8Array(32));
+  const iv = crypto.getRandomValues(new Uint8Array(12));
+  const aesKey = await deriveAesKey2(sharedSecret, salt, "encrypt", info);
+  const metadata = {
+    version: ESCROW_ENVELOPE_VERSION,
+    algorithm: ESCROW_ALGORITHM,
+    keyId: recipientKeyId
+  };
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "AES-GCM", iv, additionalData: getAad2(metadata) },
+    aesKey,
+    encodeUtf82(plaintextJson)
+  );
+  const ephemeralPublicKey = await crypto.subtle.exportKey("raw", ephemeralKeyPair.publicKey);
+  return {
+    ...metadata,
+    ephemeralPublicKey: bufferToBase64(ephemeralPublicKey),
+    salt: bufferToBase64(salt.buffer),
+    iv: bufferToBase64(iv.buffer),
+    ciphertext: bufferToBase64(ciphertext)
+  };
+}, "encryptToRecipient");
+var decryptFromEnvelope = /* @__PURE__ */ __name(async (value, pkcs8, info) => {
+  const envelope = parseEscrowEnvelope(value);
+  const privateKey = await crypto.subtle.importKey(
+    "pkcs8",
+    base64ToBuffer(pkcs8.trim()),
+    { name: "ECDH", namedCurve: "P-256" },
+    false,
+    ["deriveBits"]
+  );
+  const ephemeralPublicKey = await crypto.subtle.importKey(
+    "raw",
+    base64ToBuffer(envelope.ephemeralPublicKey),
+    { name: "ECDH", namedCurve: "P-256" },
+    false,
+    []
+  );
+  const sharedSecret = await crypto.subtle.deriveBits(
+    { name: "ECDH", public: ephemeralPublicKey },
+    privateKey,
+    256
+  );
+  const salt = base64ToBuffer(envelope.salt);
+  const iv = base64ToBuffer(envelope.iv);
+  const aesKey = await deriveAesKey2(sharedSecret, salt, "decrypt", info);
+  const decrypted = await crypto.subtle.decrypt(
+    { name: "AES-GCM", iv, additionalData: getAad2(envelope) },
+    aesKey,
+    base64ToBuffer(envelope.ciphertext)
+  );
+  const parsed = JSON.parse(new TextDecoder().decode(decrypted));
+  return parsed;
+}, "decryptFromEnvelope");
+var encryptEscrowBlob = /* @__PURE__ */ __name(async (input, enclavePublicKeySpkiB64, keyId) => {
+  const plaintext = parseEscrowBlobPlaintext({ ...input, version: ESCROW_ENVELOPE_VERSION });
+  return encryptToRecipient(
+    JSON.stringify(plaintext),
+    enclavePublicKeySpkiB64,
+    keyId,
+    ESCROW_BLOB_INFO
+  );
+}, "encryptEscrowBlob");
+var decryptEscrowBlob = /* @__PURE__ */ __name(async (envelope, enclavePrivateKeyPkcs8B64) => parseEscrowBlobPlaintext(
+  await decryptFromEnvelope(envelope, enclavePrivateKeyPkcs8B64, ESCROW_BLOB_INFO)
+), "decryptEscrowBlob");
+var sealEscrowRelease = /* @__PURE__ */ __name(async (input, clientEphemeralPublicKeySpkiB64) => {
+  const plaintext = parseEscrowReleasePlaintext({ ...input, version: ESCROW_ENVELOPE_VERSION });
+  return encryptToRecipient(
+    JSON.stringify(plaintext),
+    clientEphemeralPublicKeySpkiB64,
+    ESCROW_CLIENT_KEY_ID,
+    ESCROW_RELEASE_INFO
+  );
+}, "sealEscrowRelease");
+var openEscrowRelease = /* @__PURE__ */ __name(async (envelope, clientEphemeralPrivateKeyPkcs8B64) => parseEscrowReleasePlaintext(
+  await decryptFromEnvelope(envelope, clientEphemeralPrivateKeyPkcs8B64, ESCROW_RELEASE_INFO)
+), "openEscrowRelease");
+
+// src/escrow-nitro-attestation.ts
+import "reflect-metadata";
+import { decode, encode } from "cborg";
+import {
+  BasicConstraintsExtension,
+  KeyUsagesExtension,
+  KeyUsageFlags,
+  X509Certificate
+} from "@peculiar/x509";
+var NitroAttestationError = class extends Error {
+  constructor(reason) {
+    super(`Nitro attestation rejected: ${reason}`);
+    this.reason = reason;
+    this.name = "NitroAttestationError";
+  }
+  static {
+    __name(this, "NitroAttestationError");
+  }
+};
+var AWS_ROOT_SHA256 = "641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b";
+var fail = /* @__PURE__ */ __name((reason) => {
+  throw new NitroAttestationError(reason);
+}, "fail");
+var hex = /* @__PURE__ */ __name((bytes2) => Array.from(bytes2, (byte) => byte.toString(16).padStart(2, "0")).join(""), "hex");
+var bytes = /* @__PURE__ */ __name((value, reason) => value instanceof Uint8Array && value.length > 0 ? value : fail(reason), "bytes");
+var map = /* @__PURE__ */ __name((value, reason) => value instanceof Map ? value : fail(reason), "map");
+var decodeCbor = /* @__PURE__ */ __name((value) => {
+  try {
+    return decode(value, {
+      useMaps: true,
+      rejectDuplicateMapKeys: true,
+      allowIndefinite: false,
+      allowUndefined: false,
+      allowNaN: false,
+      allowInfinity: false,
+      allowBigInt: false
+    });
+  } catch {
+    return fail("cbor");
+  }
+}, "decodeCbor");
+var decodeUserData = /* @__PURE__ */ __name((userData) => {
+  let decoded;
+  try {
+    decoded = decode(userData, {
+      useMaps: true,
+      rejectDuplicateMapKeys: true,
+      allowIndefinite: false,
+      allowUndefined: false,
+      allowNaN: false,
+      allowInfinity: false,
+      allowBigInt: false
+    });
+  } catch {
+    return void 0;
+  }
+  if (!(decoded instanceof Map) || decoded.size !== 3) return void 0;
+  const spki = decoded.get(0);
+  const keyId = decoded.get(1);
+  const previousKeyIds = decoded.get(2);
+  const isKeyId = /* @__PURE__ */ __name((value) => typeof value === "string" && /^[A-Za-z0-9._-]{1,128}$/.test(value), "isKeyId");
+  if (!(spki instanceof Uint8Array) || spki.length === 0 || !isKeyId(keyId) || !Array.isArray(previousKeyIds) || previousKeyIds.length > 3 || !previousKeyIds.every(isKeyId)) {
+    return void 0;
+  }
+  return { spki, keyId, previousKeyIds };
+}, "decodeUserData");
+var verifyNitroAttestationDocument = /* @__PURE__ */ __name(async (documentB64, {
+  expectedNonce,
+  policy,
+  now = Date.now()
+}) => {
+  let document;
+  try {
+    if (!documentB64 || documentB64.length > 65536 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(documentB64))
+      fail("cbor");
+    document = base64ToBuffer(documentB64);
+  } catch {
+    return fail("cbor");
+  }
+  const cose = decodeCbor(document[0] === 210 ? document.subarray(1) : document);
+  if (!Array.isArray(cose) || cose.length !== 4) fail("cose");
+  const [protectedValue, unprotectedValue, payloadValue, signatureValue] = cose;
+  const protectedBytes = bytes(protectedValue, "cose");
+  const protectedHeader = map(decodeCbor(protectedBytes), "alg");
+  if (protectedHeader.size !== 1 || protectedHeader.get(1) !== -35) fail("alg");
+  if (map(unprotectedValue, "cose").size !== 0) fail("cose");
+  const payloadBytes = bytes(payloadValue, "cose");
+  const signature = bytes(signatureValue, "signature");
+  if (signature.length !== 96) fail("signature");
+  const payload = map(decodeCbor(payloadBytes), "cbor");
+  const moduleId = payload.get("module_id");
+  const timestamp = payload.get("timestamp");
+  if (typeof moduleId !== "string" || !moduleId || payload.get("digest") !== "SHA384")
+    fail("cbor");
+  if (typeof timestamp !== "number" || !Number.isSafeInteger(timestamp) || timestamp < 0)
+    fail("freshness");
+  const leafDer = bytes(payload.get("certificate"), "chain");
+  const bundle = payload.get("cabundle");
+  if (!Array.isArray(bundle) || !bundle.length || bundle.length > 16) fail("chain");
+  const ders = bundle.map((value) => bytes(value, "chain"));
+  const rootHash = hex(
+    new Uint8Array(await crypto.subtle.digest("SHA-256", new Uint8Array(ders[0])))
+  );
+  if (rootHash !== (policy.rootCertificateSha256 ?? AWS_ROOT_SHA256).toLowerCase()) fail("root");
+  let leaf;
+  try {
+    const chain = [...ders, leafDer].map((der) => new X509Certificate(new Uint8Array(der)));
+    for (let i = 0; i < chain.length; i++) {
+      const cert = chain[i];
+      const issuer = chain[Math.max(0, i - 1)];
+      if (!Number.isFinite(now) || now < cert.notBefore.getTime() || now > cert.notAfter.getTime() || cert.issuer !== issuer.subject || !await cert.verify({ publicKey: issuer.publicKey, date: new Date(now) }, crypto))
+        fail("chain");
+      if (i < chain.length - 1) {
+        const constraints = cert.getExtension(BasicConstraintsExtension);
+        const usage = cert.getExtension(KeyUsagesExtension);
+        if (!constraints?.ca || constraints.pathLength !== void 0 && chain.length - i - 2 > constraints.pathLength || usage && !(usage.usages & KeyUsageFlags.keyCertSign))
+          fail("chain");
+      }
+    }
+    leaf = chain[chain.length - 1];
+  } catch {
+    return fail("chain");
+  }
+  try {
+    const key = await crypto.subtle.importKey(
+      "spki",
+      leaf.publicKey.rawData,
+      { name: "ECDSA", namedCurve: "P-384" },
+      false,
+      ["verify"]
+    );
+    const structure = encode(["Signature1", protectedBytes, new Uint8Array(), payloadBytes]);
+    if (!await crypto.subtle.verify(
+      { name: "ECDSA", hash: "SHA-384" },
+      key,
+      new Uint8Array(signature),
+      new Uint8Array(structure)
+    ))
+      fail("signature");
+  } catch {
+    return fail("signature");
+  }
+  const rawPcrs = map(payload.get("pcrs"), "pcr");
+  const pcrs = {};
+  for (const [index, value] of rawPcrs) {
+    if (typeof index !== "number" || !Number.isInteger(index) || index < 0 || index > 31)
+      fail("pcr");
+    const pcr = bytes(value, "pcr");
+    if (pcr.length !== 48) fail("pcr");
+    pcrs[index] = hex(pcr);
+  }
+  if (pcrs[0] === "00".repeat(48)) fail("debug");
+  if (!policy.pinnedMeasurements.some(
+    (pin) => typeof pin.pcr0 === "string" && typeof pin.pcr1 === "string" && typeof pin.pcr2 === "string" && pin.pcr0.toLowerCase() === pcrs[0] && pin.pcr1.toLowerCase() === pcrs[1] && pin.pcr2.toLowerCase() === pcrs[2]
+  ))
+    fail("pcr");
+  const nonce = bytes(payload.get("nonce"), "nonce");
+  if (!(expectedNonce instanceof Uint8Array) || expectedNonce.length !== 32 || nonce.length !== expectedNonce.length)
+    fail("nonce");
+  let difference = 0;
+  for (let i = 0; i < nonce.length; i++) difference |= nonce[i] ^ expectedNonce[i];
+  if (difference !== 0) fail("nonce");
+  const maxAge = policy.maxAgeMs ?? 3e5;
+  if (!Number.isFinite(maxAge) || maxAge < 0 || now - timestamp > maxAge || timestamp > now + 6e4)
+    fail("freshness");
+  const userData = bytes(payload.get("user_data"), "user-data");
+  const newFormat = decodeUserData(new Uint8Array(userData));
+  const spki = newFormat ? newFormat.spki : userData;
+  try {
+    await crypto.subtle.importKey(
+      "spki",
+      new Uint8Array(spki),
+      { name: "ECDH", namedCurve: "P-256" },
+      false,
+      []
+    );
+  } catch {
+    return fail("user-data");
+  }
+  return {
+    escrowPublicKeySpkiB64: bufferToBase64(new Uint8Array(spki).buffer),
+    keyId: newFormat?.keyId,
+    previousKeyIds: newFormat?.previousKeyIds ?? [],
+    pcrs,
+    timestamp,
+    moduleId
+  };
+}, "verifyNitroAttestationDocument");
+
+// src/escrow-attestation.ts
+var isRecord3 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
+var normalizePublicKey = /* @__PURE__ */ __name((value) => {
+  const trimmed = value.trim();
+  if (!trimmed || trimmed.length > 512 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(trimmed)) {
+    throw new Error("Invalid escrow attestation public key");
+  }
+  return bufferToBase64(base64ToBuffer(trimmed).buffer);
+}, "normalizePublicKey");
+var verifyEnclaveAttestation = /* @__PURE__ */ __name(async (attestation, policy, nonce) => {
+  const isKeyId = /* @__PURE__ */ __name((value) => typeof value === "string" && /^[A-Za-z0-9._-]{1,128}$/.test(value), "isKeyId");
+  const fields = [
+    "mode",
+    "keyId",
+    "previousKeyIds",
+    "publicKey",
+    "measurements",
+    "document",
+    "issuedAt"
+  ];
+  if (!isRecord3(attestation) || Object.keys(attestation).some((key) => !fields.includes(key)) || attestation.mode !== "software" && attestation.mode !== "nitro" || !isKeyId(attestation.keyId) || attestation.previousKeyIds !== void 0 && (!Array.isArray(attestation.previousKeyIds) || attestation.previousKeyIds.length > 3 || !attestation.previousKeyIds.every(isKeyId)) || typeof attestation.publicKey !== "string" || !isRecord3(attestation.measurements) || Object.entries(attestation.measurements).some(
+    ([key, value]) => !["imageSha384", "pcr0", "pcr1", "pcr2"].includes(key) || typeof value !== "string" || !value || value.length > 1024
+  ) || typeof attestation.document !== "string" || !attestation.document || attestation.document.length > 65536 || typeof attestation.issuedAt !== "string" || !Number.isFinite(Date.parse(attestation.issuedAt))) {
+    throw new Error("Invalid escrow attestation");
+  }
+  const plaintextPreviousKeyIds = attestation.previousKeyIds ?? [];
+  if (attestation.mode !== policy.mode) throw new Error("Escrow attestation mode mismatch");
+  if (policy.mode === "nitro") {
+    if (!nonce) throw new NitroAttestationError("nonce");
+    const verified = await verifyNitroAttestationDocument(attestation.document, {
+      expectedNonce: nonce,
+      policy
+    });
+    try {
+      if (normalizePublicKey(attestation.publicKey) !== verified.escrowPublicKeySpkiB64) {
+        throw new NitroAttestationError("user-data");
+      }
+    } catch {
+      throw new NitroAttestationError("user-data");
+    }
+    if (verified.keyId !== void 0 && verified.keyId !== attestation.keyId) {
+      throw new NitroAttestationError("user-data");
+    }
+    if (plaintextPreviousKeyIds.length !== verified.previousKeyIds.length || !plaintextPreviousKeyIds.every((id, index) => id === verified.previousKeyIds[index])) {
+      throw new NitroAttestationError("user-data");
+    }
+    return {
+      publicKey: verified.escrowPublicKeySpkiB64,
+      keyId: attestation.keyId,
+      previousKeyIds: verified.previousKeyIds,
+      mode: "nitro"
+    };
+  }
+  const publicKey = normalizePublicKey(attestation.publicKey);
+  await crypto.subtle.importKey(
+    "spki",
+    base64ToBuffer(publicKey),
+    { name: "ECDH", namedCurve: "P-256" },
+    false,
+    []
+  );
+  if (!policy.pinnedPublicKeys.some((pin) => normalizePublicKey(pin) === publicKey)) {
+    throw new Error("Escrow attestation public key is not trusted");
+  }
+  return {
+    publicKey,
+    keyId: attestation.keyId,
+    previousKeyIds: plaintextPreviousKeyIds,
+    mode: attestation.mode
+  };
+}, "verifyEnclaveAttestation");
+
+// src/types.ts
+var import_types = __toESM(require_dist());
+var EscrowPinUnavailableError = class extends Error {
+  static {
+    __name(this, "EscrowPinUnavailableError");
+  }
+  constructor() {
+    super("PIN recovery is not available for this account.");
+    this.name = "EscrowPinUnavailableError";
+  }
+};
+var EscrowPinMismatchError = class extends Error {
+  constructor(attemptsRemaining) {
+    super("Incorrect PIN.");
+    this.attemptsRemaining = attemptsRemaining;
+    this.name = "EscrowPinMismatchError";
+  }
+  static {
+    __name(this, "EscrowPinMismatchError");
+  }
+};
+var EscrowPinThrottledError = class extends Error {
+  static {
+    __name(this, "EscrowPinThrottledError");
+  }
+  constructor() {
+    super("Too many tries right now. Wait a minute and try again.");
+    this.name = "EscrowPinThrottledError";
+  }
+};
+var EscrowHoldRestartThrottledError = class extends Error {
+  constructor(retryAfter) {
+    super("A recovery request was started recently. Please wait before restarting.");
+    this.retryAfter = retryAfter;
+    this.name = "EscrowHoldRestartThrottledError";
+  }
+  static {
+    __name(this, "EscrowHoldRestartThrottledError");
+  }
+};
+var EscrowPinLockedError = class extends Error {
+  static {
+    __name(this, "EscrowPinLockedError");
+  }
+  constructor() {
+    super("Too many incorrect PIN attempts. You can still recover by waiting.");
+    this.name = "EscrowPinLockedError";
+  }
+};
+
+// src/escrow-pin.ts
+var PIN_MIN_LENGTH = 6;
+var PIN_MAX_LENGTH = 12;
+var ESCROW_PIN_MAX_ATTEMPTS = 10;
+var TRIVIAL_PINS = /* @__PURE__ */ new Set([
+  "123456",
+  "654321",
+  "000000",
+  "111111",
+  "121212",
+  "112233",
+  "123123",
+  "696969",
+  "123321"
+]);
+var normalizePin = /* @__PURE__ */ __name((raw) => raw.trim().normalize("NFKD").replace(/\D/g, ""), "normalizePin");
+var validatePin = /* @__PURE__ */ __name((pin) => {
+  const normalized = normalizePin(pin);
+  if (normalized.length < PIN_MIN_LENGTH || normalized.length > PIN_MAX_LENGTH) {
+    return { ok: false, reason: "length" };
+  }
+  if (/^(\d)\1+$/.test(normalized) || "0123456789".includes(normalized) || "9876543210".includes(normalized) || TRIVIAL_PINS.has(normalized)) {
+    return { ok: false, reason: "trivial" };
+  }
+  return { ok: true };
+}, "validatePin");
+var generatePinSalt = /* @__PURE__ */ __name(() => bufferToBase64(crypto.getRandomValues(new Uint8Array(16)).buffer), "generatePinSalt");
+var derivePinProof = /* @__PURE__ */ __name(async (pin, pinSaltBase64) => {
+  const salt = base64ToBuffer(pinSaltBase64);
+  if (salt.length !== 16) throw new Error("Invalid escrow PIN salt length");
+  const key = await deriveKeyFromPassword(normalizePin(pin), salt);
+  try {
+    return bytesToHex(key);
+  } finally {
+    key.fill(0);
+  }
+}, "derivePinProof");
+var constantTimeEqualHex = /* @__PURE__ */ __name((a, b) => {
+  if (a.length !== b.length || !/^(?:[0-9a-f]{2})+$/i.test(a) || !/^(?:[0-9a-f]{2})+$/i.test(b)) {
+    return false;
+  }
+  const aBytes = hexToBytes(a);
+  const bBytes = hexToBytes(b);
+  let difference = 0;
+  for (let i = 0; i < aBytes.length; i++) {
+    difference |= aBytes[i] ^ bBytes[i];
+  }
+  return difference === 0;
+}, "constantTimeEqualHex");
+
+// src/atomic-operations.ts
+var ShareVerificationError = class extends Error {
+  constructor(message, combination, expected, got) {
+    super(message);
+    this.combination = combination;
+    this.expected = expected;
+    this.got = got;
+    this.name = "ShareVerificationError";
+  }
+  static {
+    __name(this, "ShareVerificationError");
+  }
+};
+var AtomicUpdateError = class extends Error {
+  constructor(message, phase, rolledBack, cause) {
+    super(message);
+    this.phase = phase;
     this.rolledBack = rolledBack;
     this.cause = cause;
     this.name = "AtomicUpdateError";
@@ -19290,6 +20900,15 @@ var AtomicUpdateError = class extends Error {
     __name(this, "AtomicUpdateError");
   }
 };
+var ShareWriteRejectedError = class extends Error {
+  static {
+    __name(this, "ShareWriteRejectedError");
+  }
+  constructor(message) {
+    super(message);
+    this.name = "ShareWriteRejectedError";
+  }
+};
 async function splitAndVerify(privateKey) {
   const shares = await splitPrivateKey(privateKey);
   const combinations = [
@@ -19346,18 +20965,37 @@ async function atomicShareUpdate(privateKey, storage, options = {}) {
   try {
     await storage.storeAuth(newShares.authShare);
   } catch (e) {
-    if (options.previousDeviceShare && deviceStored) {
+    if (!(e instanceof ShareWriteRejectedError)) {
+      throw new AtomicUpdateError(
+        "Auth share write outcome unknown; device share preserved for reconciliation",
+        "store_auth",
+        false,
+        e instanceof Error ? e : void 0
+      );
+    }
+    let rolledBack = false;
+    if (deviceStored) {
       try {
-        await storage.storeDevice(options.previousDeviceShare);
-        options.onRollback?.("Server storage failed, restored previous device share");
+        if (options.previousDeviceShare !== void 0) {
+          await storage.storeDevice(options.previousDeviceShare);
+          options.onRollback?.("Server storage failed, restored previous device share");
+          rolledBack = true;
+        } else if (storage.clearDevice) {
+          await storage.clearDevice();
+          options.onRollback?.("Server storage failed, removed new device share");
+          rolledBack = true;
+        }
       } catch (rollbackError) {
-        console.error("CRITICAL: Rollback failed after auth share storage failure", rollbackError);
+        console.error(
+          "CRITICAL: Rollback failed after auth share storage failure",
+          rollbackError
+        );
       }
     }
     throw new AtomicUpdateError(
-      "Failed to store auth share on server, rolled back device share",
+      rolledBack ? "Failed to store auth share on server, rolled back device share" : "Failed to store auth share on server; rollback did not complete",
       "store_auth",
-      !!options.previousDeviceShare,
+      rolledBack,
       e instanceof Error ? e : void 0
     );
   }
@@ -19411,12 +21049,16 @@ async function atomicRecovery(recoveryShare, authShareData, storage, options = {
 __name(atomicRecovery, "atomicRecovery");
 
 // src/sss-strategy.ts
+var import_types3 = __toESM(require_dist());
 var SSS_DB_NAME = "lcb-sss-keys";
+var DEFAULT_DEVICE_SHARE_ID2 = "sss-device-share";
+var MAX_RECONCILIATION_HISTORY = 5;
 var defaultStorage = {
   storeDeviceShare,
   getDeviceShare,
   hasDeviceShare,
   clearAllShares,
+  deleteDeviceShare,
   storeShareVersion,
   getShareVersion
 };
@@ -19425,10 +21067,24 @@ var buildHeaders = /* @__PURE__ */ __name((token, didAuthVp, tenantId) => ({
   ...didAuthVp ? { Authorization: `Bearer ${didAuthVp}` } : {},
   ...tenantId ? { "X-Tenant-Id": tenantId } : {}
 }), "buildHeaders");
+var SERVER_REQUEST_TIMEOUT_MS = 3e4;
+var requestTimeoutSignal = /* @__PURE__ */ __name((ms = SERVER_REQUEST_TIMEOUT_MS) => typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function" ? AbortSignal.timeout(ms) : void 0, "requestTimeoutSignal");
+var describeHttpStatus = /* @__PURE__ */ __name((response) => response.statusText ? `${response.status} ${response.statusText}` : `${response.status}`, "describeHttpStatus");
+var EscrowRequestError = class extends Error {
+  constructor(status) {
+    super("Escrow request failed");
+    this.status = status;
+    this.name = "EscrowRequestError";
+  }
+  static {
+    __name(this, "EscrowRequestError");
+  }
+};
 var fetchAuthShareRaw = /* @__PURE__ */ __name(async (serverUrl, token, providerType, shareVersion, tenantId) => {
   const response = await fetch(`${serverUrl}/keys/auth-share`, {
     method: "POST",
     headers: buildHeaders(token, void 0, tenantId),
+    signal: requestTimeoutSignal(),
     body: JSON.stringify({
       authToken: token,
       providerType,
@@ -19437,42 +21093,103 @@ var fetchAuthShareRaw = /* @__PURE__ */ __name(async (serverUrl, token, provider
   });
   if (!response.ok) {
     if (response.status === 404) return null;
-    throw new Error(`Failed to fetch key status: ${response.statusText}`);
+    throw new Error(`Failed to fetch key status: ${describeHttpStatus(response)}`);
   }
   return response.json();
 }, "fetchAuthShareRaw");
-var putAuthShare = /* @__PURE__ */ __name(async (serverUrl, token, providerType, authShare, primaryDid, didAuthVp, tenantId) => {
+var putAuthShare = /* @__PURE__ */ __name(async (serverUrl, token, providerType, authShare, primaryDid, didAuthVp, tenantId, expectedShareVersion) => {
   const response = await fetch(`${serverUrl}/keys/auth-share`, {
     method: "PUT",
     headers: buildHeaders(token, didAuthVp, tenantId),
+    signal: requestTimeoutSignal(),
     body: JSON.stringify({
       authToken: token,
       providerType,
       authShare: { encryptedData: authShare, encryptedDek: "", iv: "" },
       primaryDid,
-      securityLevel: "basic"
+      securityLevel: "basic",
+      sssActivationState: "provisional",
+      expectedShareVersion
     })
   });
   if (!response.ok) {
-    throw new Error(`Failed to store auth share: ${response.statusText}`);
+    const message = `Failed to store auth share: ${describeHttpStatus(response)}`;
+    if (response.status >= 400 && response.status < 500 && response.status !== 408) {
+      throw new ShareWriteRejectedError(message);
+    }
+    throw new Error(message);
   }
   const data = await response.json();
-  return { shareVersion: data.shareVersion ?? 1 };
+  return {
+    shareVersion: data.shareVersion ?? 1,
+    expectedShareVersionChecked: data.expectedShareVersionChecked === true
+  };
 }, "putAuthShare");
+var authShareToString = /* @__PURE__ */ __name((authShare) => {
+  if (typeof authShare === "string") return authShare;
+  if (typeof authShare === "object" && authShare !== null && "encryptedData" in authShare && typeof authShare.encryptedData === "string") {
+    return authShare.encryptedData;
+  }
+  return null;
+}, "authShareToString");
+var requestFreshDidAuthVp = /* @__PURE__ */ __name(async (serverUrl, privateKey, did, signDidAuthVp, tenantId) => {
+  const bootstrapVp = await signDidAuthVp(privateKey);
+  const response = await fetch(`${serverUrl}/keys/challenge`, {
+    method: "POST",
+    headers: buildHeaders("", bootstrapVp, tenantId),
+    signal: requestTimeoutSignal(),
+    body: JSON.stringify({ did })
+  });
+  if (!response.ok) {
+    throw new Error(`Failed to request DID challenge: ${describeHttpStatus(response)}`);
+  }
+  const data = await response.json();
+  if (!data.challenge) throw new Error("DID challenge response was empty");
+  return signDidAuthVp(privateKey, data.challenge);
+}, "requestFreshDidAuthVp");
 var fetchRecoveryShare = /* @__PURE__ */ __name(async (serverUrl, token, providerType, type, credentialId, tenantId) => {
-  const params = new URLSearchParams({ type, providerType, authToken: token });
+  const params = new URLSearchParams({ type, providerType });
   if (credentialId) {
     params.set("credentialId", credentialId);
   }
   const response = await fetch(`${serverUrl}/keys/recovery?${params}`, {
     method: "GET",
-    headers: buildHeaders(token, void 0, tenantId)
+    headers: {
+      "Content-Type": "application/json",
+      "X-Auth-Token": token,
+      ...tenantId ? { "X-Tenant-Id": tenantId } : {}
+    }
   });
   if (!response.ok) {
     throw new Error(`No ${type} recovery share found`);
   }
   return response.json();
 }, "fetchRecoveryShare");
+var IdentityRecoverySessionConsumedError = class extends Error {
+  static {
+    __name(this, "IdentityRecoverySessionConsumedError");
+  }
+  constructor(message) {
+    super(message);
+    this.name = "IdentityRecoverySessionConsumedError";
+  }
+};
+var postJson = /* @__PURE__ */ __name(async (url, body, headers) => {
+  const response = await fetch(url, {
+    method: "POST",
+    headers,
+    body: JSON.stringify(body)
+  });
+  if (!response.ok) {
+    const data = await response.json().catch(() => null);
+    const message = data?.error?.message || data?.message || response.statusText;
+    if (response.status >= 400 && response.status < 500 && response.status !== 408) {
+      throw new ShareWriteRejectedError(message);
+    }
+    throw new Error(message);
+  }
+  return response.json();
+}, "postJson");
 var postRecoveryMethod = /* @__PURE__ */ __name(async (serverUrl, token, providerType, body, didAuthVp, tenantId) => {
   const response = await fetch(`${serverUrl}/keys/recovery`, {
     method: "POST",
@@ -19480,9 +21197,40 @@ var postRecoveryMethod = /* @__PURE__ */ __name(async (serverUrl, token, provide
     body: JSON.stringify({ authToken: token, providerType, ...body })
   });
   if (!response.ok) {
-    throw new Error(`Failed to add recovery method: ${response.statusText}`);
+    throw new Error(`Failed to add recovery method: ${describeHttpStatus(response)}`);
   }
 }, "postRecoveryMethod");
+var postRecoveryConfirmation = /* @__PURE__ */ __name(async (serverUrl, token, providerType, body, didAuthVp, tenantId) => {
+  const response = await fetch(`${serverUrl}/keys/recovery/confirm`, {
+    method: "POST",
+    headers: buildHeaders(token, didAuthVp, tenantId),
+    body: JSON.stringify({ authToken: token, providerType, ...body })
+  });
+  if (!response.ok) {
+    const data = await response.json().catch(() => null);
+    const message = data?.error?.message || data?.message || `Failed to confirm recovery method`;
+    throw new Error(message);
+  }
+}, "postRecoveryConfirmation");
+var calculateShareChecksum = /* @__PURE__ */ __name(async (share) => {
+  const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(share));
+  return bytesToHex(new Uint8Array(digest));
+}, "calculateShareChecksum");
+var RECOVERY_PHRASE_CHALLENGE_COUNT = 2;
+var selectRecoveryPhraseChallengeIndices = /* @__PURE__ */ __name((wordCount, challengeCount = RECOVERY_PHRASE_CHALLENGE_COUNT) => {
+  if (wordCount < challengeCount) {
+    throw new Error("Recovery phrase does not contain enough words for confirmation");
+  }
+  const indices = /* @__PURE__ */ new Set();
+  const limit = 4294967296 - 4294967296 % wordCount;
+  while (indices.size < challengeCount) {
+    const randomValue = crypto.getRandomValues(new Uint32Array(1))[0];
+    if (randomValue === void 0) throw new Error("Failed to choose recovery phrase words");
+    if (randomValue >= limit) continue;
+    indices.add(randomValue % wordCount);
+  }
+  return [...indices].sort((a, b) => a - b);
+}, "selectRecoveryPhraseChallengeIndices");
 var VERSION_PREFIX_LEN = 4;
 var formatVersionedEmailShare = /* @__PURE__ */ __name((emailShare, shareVersion) => shareVersion.toString(16).padStart(VERSION_PREFIX_LEN, "0") + emailShare, "formatVersionedEmailShare");
 var parseVersionedEmailShare = /* @__PURE__ */ __name((input) => {
@@ -19495,44 +21243,532 @@ var parseVersionedEmailShare = /* @__PURE__ */ __name((input) => {
   }
   return { share: input, version: void 0 };
 }, "parseVersionedEmailShare");
-var sendEmailBackupShare = /* @__PURE__ */ __name(async (serverUrl, token, providerType, emailShare, email, shareVersion, tenantId) => {
-  try {
-    const payload = shareVersion != null ? formatVersionedEmailShare(emailShare, shareVersion) : emailShare;
-    const response = await fetch(`${serverUrl}/keys/email-backup`, {
-      method: "POST",
-      headers: buildHeaders(token, void 0, tenantId),
-      body: JSON.stringify({ authToken: token, providerType, emailShare: payload, email })
-    });
-    if (!response.ok) {
-      console.warn(`Email backup share delivery failed: ${response.statusText}`);
-    }
-  } catch (e) {
-    console.warn("Email backup share delivery failed:", e);
-  }
-}, "sendEmailBackupShare");
-var sendEmailShareToRecoveryEmail = /* @__PURE__ */ __name(async (serverUrl, token, providerType, emailShare, shareVersion, tenantId) => {
-  const payload = shareVersion != null ? formatVersionedEmailShare(emailShare, shareVersion) : emailShare;
+var sendEmailBackupShare = /* @__PURE__ */ __name(async (serverUrl, token, providerType, emailShare, email, escrowRelayPublicKey, escrowRelayKeyId, emailBranding, shareVersion, didAuthVp, tenantId) => {
+  const recoveryKey = shareVersion != null ? formatVersionedEmailShare(emailShare, shareVersion) : emailShare;
+  const confirmationCode = generateEmailRelayConfirmationCode();
+  const relayPayload = await encryptEmailRelayPayload(
+    {
+      targetEmail: email,
+      recoveryKey,
+      confirmationCode,
+      branding: emailBranding
+    },
+    escrowRelayPublicKey,
+    escrowRelayKeyId
+  );
   const response = await fetch(`${serverUrl}/keys/email-backup`, {
     method: "POST",
-    headers: buildHeaders(token, void 0, tenantId),
+    headers: buildHeaders(token, didAuthVp, tenantId),
     body: JSON.stringify({
       authToken: token,
       providerType,
-      emailShare: payload,
-      useRecoveryEmail: true
+      relayPayload,
+      confirmationCode,
+      email,
+      shareVersion
     })
   });
   if (!response.ok) {
-    throw new Error(`Failed to send recovery share to recovery email: ${response.statusText}`);
+    throw new Error(`Failed to send recovery share: ${describeHttpStatus(response)}`);
+  }
+}, "sendEmailBackupShare");
+var rotationChain = Promise.resolve();
+var withRotationLock = /* @__PURE__ */ __name((operation) => {
+  const run = rotationChain.then(operation, operation);
+  rotationChain = run.catch(() => void 0);
+  return run;
+}, "withRotationLock");
+var pendingShareId = /* @__PURE__ */ __name((storageId) => `sss-pending-share:${storageId ?? DEFAULT_DEVICE_SHARE_ID2}`, "pendingShareId");
+var PENDING_WRITE_EXPIRY_MS = 10 * 60 * 1e3;
+var MAX_PENDING_SHARE_CANDIDATES = 8;
+var readPendingShareCandidates = /* @__PURE__ */ __name(async (storage, storageId) => {
+  const raw = await storage.getDeviceShare(pendingShareId(storageId));
+  if (!raw) return [];
+  if (!raw.trimStart().startsWith("{")) return [{ share: raw, createdAt: 0 }];
+  const data = JSON.parse(raw);
+  if (!data || typeof data !== "object" || !("v" in data) || data.v !== 1 || !("candidates" in data) || !Array.isArray(data.candidates) || !data.candidates.every(
+    (candidate) => candidate !== null && typeof candidate === "object" && "share" in candidate && typeof candidate.share === "string" && "createdAt" in candidate && typeof candidate.createdAt === "number" && Number.isFinite(candidate.createdAt) && candidate.createdAt >= 0
+  ))
+    throw new Error("Invalid pending share candidates");
+  return data.candidates;
+}, "readPendingShareCandidates");
+var clearPendingShareCandidates = /* @__PURE__ */ __name(async (storage, storageId) => storage.clearAllShares(pendingShareId(storageId)), "clearPendingShareCandidates");
+var writePendingShareCandidates = /* @__PURE__ */ __name(async (storage, candidates, storageId) => {
+  if (!candidates.length) return clearPendingShareCandidates(storage, storageId);
+  await storage.storeDeviceShare(JSON.stringify({ v: 1, candidates }), pendingShareId(storageId));
+}, "writePendingShareCandidates");
+var addPendingShareCandidate = /* @__PURE__ */ __name(async (storage, candidate, storageId) => {
+  const candidates = await readPendingShareCandidates(storage, storageId);
+  if (candidates.length >= MAX_PENDING_SHARE_CANDIDATES) {
+    throw new AtomicUpdateError(
+      "Reconcile the pending share update before writing new shares",
+      "store_device",
+      false
+    );
+  }
+  await writePendingShareCandidates(storage, [...candidates, candidate], storageId);
+}, "addPendingShareCandidate");
+var removePendingShareCandidate = /* @__PURE__ */ __name(async (storage, share, storageId) => {
+  const candidates = await readPendingShareCandidates(storage, storageId);
+  await writePendingShareCandidates(
+    storage,
+    candidates.filter((candidate) => candidate.share !== share),
+    storageId
+  );
+}, "removePendingShareCandidate");
+var resolvePendingShareCandidates = /* @__PURE__ */ __name(async (storage, storageId, fetchCurrent, expectedDid, didFromPrivateKey, assertActiveUser = () => {
+}, onPromoted, fetchHistorical) => {
+  const candidates = await readPendingShareCandidates(storage, storageId);
+  const snapshot = await fetchCurrent();
+  assertActiveUser();
+  const { authShare, currentVersion } = snapshot;
+  if (authShare && (currentVersion === null || !Number.isInteger(currentVersion) || currentVersion < 1)) {
+    throw new Error("Current auth share is missing a valid share version");
+  }
+  if (authShare && currentVersion !== null) {
+    for (const candidate of candidates) {
+      const health = await verifyStoredShares(
+        { getDevice: /* @__PURE__ */ __name(async () => candidate.share, "getDevice"), getAuth: /* @__PURE__ */ __name(async () => authShare, "getAuth") },
+        expectedDid,
+        didFromPrivateKey
+      );
+      assertActiveUser();
+      if (!health.healthy) continue;
+      const privateKey = await reconstructFromShares([candidate.share, authShare]);
+      assertActiveUser();
+      await storage.storeDeviceShare(candidate.share, storageId);
+      await storage.storeShareVersion(currentVersion, storageId);
+      await removePendingShareCandidate(storage, candidate.share, storageId);
+      assertActiveUser();
+      onPromoted?.(snapshot);
+      return { snapshot, privateKey };
+    }
+  }
+  const matched = /* @__PURE__ */ new Set();
+  const history = /* @__PURE__ */ new Map();
+  let historyComplete = true;
+  if (candidates.length && currentVersion !== null) {
+    for (let version = currentVersion - 1; version >= 1 && version >= currentVersion - MAX_RECONCILIATION_HISTORY; version--) {
+      if (!fetchHistorical) {
+        historyComplete = false;
+        break;
+      }
+      try {
+        const share = await fetchHistorical(version);
+        if (share) history.set(version, share);
+      } catch {
+        historyComplete = false;
+      }
+      assertActiveUser();
+    }
   }
-}, "sendEmailShareToRecoveryEmail");
+  const mainShare = await storage.getDeviceShare(storageId);
+  let mainHealthy = false;
+  const retainedShares = [...history.values(), ...authShare ? [authShare] : []];
+  if (mainShare) {
+    for (const share of retainedShares) {
+      const health = await verifyStoredShares(
+        { getDevice: /* @__PURE__ */ __name(async () => mainShare, "getDevice"), getAuth: /* @__PURE__ */ __name(async () => share, "getAuth") },
+        expectedDid,
+        didFromPrivateKey
+      );
+      assertActiveUser();
+      if (health.healthy) {
+        mainHealthy = true;
+        break;
+      }
+    }
+  }
+  let promoted;
+  for (const candidate of candidates) {
+    for (const [version, share] of history) {
+      const health = await verifyStoredShares(
+        { getDevice: /* @__PURE__ */ __name(async () => candidate.share, "getDevice"), getAuth: /* @__PURE__ */ __name(async () => share, "getAuth") },
+        expectedDid,
+        didFromPrivateKey
+      );
+      assertActiveUser();
+      if (!health.healthy) continue;
+      matched.add(candidate.share);
+      if (!mainHealthy && !promoted) {
+        await storage.storeDeviceShare(candidate.share, storageId);
+        await storage.storeShareVersion(version, storageId);
+        assertActiveUser();
+        onPromoted?.({ currentVersion: version, authShare: share });
+        promoted = candidate.share;
+      }
+      break;
+    }
+  }
+  const live = candidates.filter(
+    (candidate) => candidate.share !== promoted && (matched.has(candidate.share) || !historyComplete || candidate.createdAt !== 0 && Date.now() - candidate.createdAt <= PENDING_WRITE_EXPIRY_MS)
+  );
+  if (live.length !== candidates.length) {
+    assertActiveUser();
+    await writePendingShareCandidates(storage, live, storageId);
+  }
+  return { snapshot, privateKey: null };
+}, "resolvePendingShareCandidates");
+var activeShareUpdates = /* @__PURE__ */ new WeakMap();
+var shareUpdateStorageOwners = /* @__PURE__ */ new WeakMap();
+var withShareUpdateLock = /* @__PURE__ */ __name(async (storage, storageId, operation) => {
+  const id = pendingShareId(storageId);
+  const owner = shareUpdateStorageOwners.get(storage) ?? storage;
+  const active = activeShareUpdates.get(owner) ?? /* @__PURE__ */ new Set();
+  activeShareUpdates.set(owner, active);
+  const busy = /* @__PURE__ */ __name(() => new AtomicUpdateError("A share update is already in progress", "store_device", false), "busy");
+  if (active.has(id)) throw busy();
+  active.add(id);
+  try {
+    if (typeof navigator !== "undefined" && navigator.locks) {
+      return await navigator.locks.request(id, { ifAvailable: true }, async (lock) => {
+        if (!lock) throw busy();
+        return operation();
+      });
+    }
+    return await operation();
+  } finally {
+    active.delete(id);
+  }
+}, "withShareUpdateLock");
+var persistSharesWithoutLock = /* @__PURE__ */ __name(async (privateKey, serverUrl, token, providerType, primaryDid, storage, storageId, didFromPrivateKey, signDidAuthVp, tenantId, onPromoted, assertActiveUser = () => {
+}) => {
+  if (primaryDid && didFromPrivateKey) {
+    const derivedDid = await didFromPrivateKey(privateKey);
+    if (derivedDid && derivedDid !== primaryDid) {
+      throw new Error(
+        "rotateShares: key does not match expected DID \u2014 refusing to overwrite server shares"
+      );
+    }
+  }
+  const { snapshot } = await resolvePendingShareCandidates(
+    storage,
+    storageId,
+    async () => {
+      const data = await fetchAuthShareRaw(
+        serverUrl,
+        token,
+        providerType,
+        void 0,
+        tenantId
+      );
+      return {
+        currentVersion: data?.shareVersion ?? null,
+        authShare: authShareToString(data?.authShare)
+      };
+    },
+    primaryDid,
+    didFromPrivateKey ?? (async (key) => key === privateKey ? primaryDid : `${primaryDid}:mismatch`),
+    assertActiveUser,
+    onPromoted,
+    async (version) => authShareToString(
+      (await fetchAuthShareRaw(serverUrl, token, providerType, version, tenantId))?.authShare
+    )
+  );
+  const didAuthVp = signDidAuthVp ? await requestFreshDidAuthVp(serverUrl, privateKey, primaryDid, signDidAuthVp, tenantId) : void 0;
+  assertActiveUser();
+  let shareVersion;
+  let stagedShare = "";
+  const shares = await atomicShareUpdate(privateKey, {
+    storeDevice: /* @__PURE__ */ __name(async (share) => {
+      assertActiveUser();
+      stagedShare = share;
+      await addPendingShareCandidate(storage, { share, createdAt: Date.now() }, storageId);
+    }, "storeDevice"),
+    clearDevice: /* @__PURE__ */ __name(() => removePendingShareCandidate(storage, stagedShare, storageId), "clearDevice"),
+    storeAuth: /* @__PURE__ */ __name(async (share) => {
+      assertActiveUser();
+      const result = await putAuthShare(
+        serverUrl,
+        token,
+        providerType,
+        share,
+        primaryDid,
+        didAuthVp,
+        tenantId,
+        snapshot.currentVersion ?? 0
+      );
+      shareVersion = result.shareVersion;
+    }, "storeAuth")
+  });
+  if (shareVersion === void 0) {
+    throw new Error("Server did not return a share version");
+  }
+  await storage.storeDeviceShare(shares.deviceShare, storageId);
+  await storage.storeShareVersion(shareVersion, storageId);
+  await removePendingShareCandidate(storage, shares.deviceShare, storageId);
+  assertActiveUser();
+  return { shares, shareVersion };
+}, "persistSharesWithoutLock");
+var persistSharesAtomically = /* @__PURE__ */ __name((...args) => withShareUpdateLock(
+  args[5],
+  args[6],
+  () => withRotationLock(() => persistSharesWithoutLock(...args))
+), "persistSharesAtomically");
 function createSSSStrategy(config) {
-  const { serverUrl, enableEmailBackupShare = false, tenantId } = config;
+  const {
+    serverUrl,
+    enableEmailBackupShare = false,
+    escrowRelayPublicKey = "",
+    escrowRelayKeyId = "",
+    emailBranding,
+    tenantId
+  } = config;
   const storage = config.storage || defaultStorage;
+  let storageGeneration = 0;
+  const localWrites = /* @__PURE__ */ new Set();
+  const guardedStorage = /* @__PURE__ */ __name(() => {
+    const generation = storageGeneration;
+    const write = /* @__PURE__ */ __name((operation) => {
+      if (generation !== storageGeneration) {
+        return Promise.reject(new Error("This recovery request was cancelled."));
+      }
+      const pending = operation();
+      localWrites.add(pending);
+      return pending.finally(() => localWrites.delete(pending));
+    }, "write");
+    const guarded = {
+      ...storage,
+      storeDeviceShare: /* @__PURE__ */ __name((share, id) => write(() => storage.storeDeviceShare(share, id)), "storeDeviceShare"),
+      storeShareVersion: /* @__PURE__ */ __name((version, id) => write(() => storage.storeShareVersion(version, id)), "storeShareVersion"),
+      clearAllShares: /* @__PURE__ */ __name((id) => write(() => storage.clearAllShares(id)), "clearAllShares"),
+      deleteDeviceShare: /* @__PURE__ */ __name((id) => write(() => storage.deleteDeviceShare(id)), "deleteDeviceShare")
+    };
+    shareUpdateStorageOwners.set(guarded, storage);
+    return guarded;
+  }, "guardedStorage");
   let activeStorageId;
   let lastEmailShare;
   let lastShareVersion;
-  let hasRecoveryEmail = false;
+  let pendingPhraseConfirmation;
+  let pendingBackupConfirmation;
+  let pendingIdentityRecovery;
+  let lastServerSnapshot = null;
+  let escrowEnrollmentInFlight;
+  let staleEscrowReenrollAttempted = false;
+  let unenrolledRotation;
+  const escrowRequest = /* @__PURE__ */ __name(async (path, init, pinAttempt = false) => {
+    const response = await fetch(`${serverUrl}/keys/escrow${path}`, {
+      signal: requestTimeoutSignal(),
+      ...init
+    });
+    if (!response.ok) {
+      if (!pinAttempt && path === "/recover" && response.status === 429) {
+        const body = await response.json().catch(() => void 0);
+        const message = body && typeof body === "object" && "message" in body && typeof body.message === "string" ? body.message : "";
+        const retryAfter = /Try again after (\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z)\./.exec(
+          message
+        )?.[1];
+        throw new EscrowHoldRestartThrottledError(
+          retryAfter && Number.isFinite(Date.parse(retryAfter)) ? retryAfter : void 0
+        );
+      }
+      if (pinAttempt && response.status === 429) {
+        const body = await response.json().catch(() => void 0);
+        if (body && typeof body === "object" && "message" in body && body.message === import_types3.ESCROW_PIN_LOCKED_MESSAGE) {
+          throw new EscrowPinLockedError();
+        }
+        throw new EscrowPinThrottledError();
+      }
+      if (pinAttempt && response.status === 403) {
+        const body = await response.json().catch(() => void 0);
+        if (body && typeof body === "object" && "message" in body && body.message === import_types3.ESCROW_PIN_UNAVAILABLE_MESSAGE) {
+          throw new EscrowPinUnavailableError();
+        }
+        if (body && typeof body === "object" && "message" in body && typeof body.message === "string" && body.message.startsWith("Incorrect PIN.")) {
+          const match = import_types3.ESCROW_PIN_MISMATCH_PATTERN.exec(body.message);
+          const remaining = match ? Number(match[1]) : 0;
+          throw new EscrowPinMismatchError(
+            Number.isSafeInteger(remaining) && remaining >= 0 && remaining < ESCROW_PIN_MAX_ATTEMPTS ? remaining : 0
+          );
+        }
+      }
+      throw new EscrowRequestError(response.status);
+    }
+    try {
+      return await response.json();
+    } catch {
+      throw new EscrowRequestError(response.status);
+    }
+  }, "escrowRequest");
+  const fetchVerifiedEnclaveKey = /* @__PURE__ */ __name(async () => {
+    if (!config.escrow?.enabled) throw new Error("Escrow enrollment is disabled");
+    const nonce = crypto.getRandomValues(new Uint8Array(32));
+    const nonceHex = Array.from(nonce, (byte) => byte.toString(16).padStart(2, "0")).join("");
+    const { attestation } = await escrowRequest(
+      `/attestation?nonce=${nonceHex}`,
+      {
+        method: "GET",
+        headers: buildHeaders("", void 0, tenantId)
+      }
+    );
+    return verifyEnclaveAttestation(attestation, config.escrow.attestation, nonce);
+  }, "fetchVerifiedEnclaveKey");
+  const enrollEscrow = /* @__PURE__ */ __name(async (token, providerType, privateKey, primaryDid, shares, shareVersion, signDidAuthVp, verifiedKey, pinMaterial, clearPin = false) => {
+    if (!config.escrow?.enabled) throw new Error("Escrow enrollment is disabled");
+    if (!signDidAuthVp) throw new Error("DID proof signing is required for escrow enrollment");
+    const { publicKey, keyId } = verifiedKey ?? await fetchVerifiedEnclaveKey();
+    const envelope = await encryptEscrowBlob(
+      {
+        recoveryShare: shares.recoveryShare,
+        did: primaryDid,
+        shareVersion,
+        ...pinMaterial ? { pinVerifier: pinMaterial.pinVerifier } : {}
+      },
+      publicKey,
+      keyId
+    );
+    const vp = await requestFreshDidAuthVp(
+      serverUrl,
+      privateKey,
+      primaryDid,
+      signDidAuthVp,
+      tenantId
+    );
+    await escrowRequest("", {
+      method: "POST",
+      headers: buildHeaders(token, vp, tenantId),
+      body: JSON.stringify({
+        authToken: token,
+        providerType,
+        envelope,
+        shareVersion,
+        enclaveKeyId: keyId,
+        ...pinMaterial ? { pinSalt: pinMaterial.pinSalt } : {},
+        ...clearPin ? { clearPin: true } : {}
+      })
+    });
+  }, "enrollEscrow");
+  const tryEnrollEscrow = /* @__PURE__ */ __name(async (...args) => {
+    if (!config.escrow?.enabled) return;
+    try {
+      await enrollEscrow(...args);
+    } catch (err) {
+      try {
+        if (config.onEscrowError) config.onEscrowError(err);
+        else console.warn("SSS: escrow enrollment failed");
+      } catch {
+        console.warn("SSS: escrow error reporting failed");
+      }
+    }
+  }, "tryEnrollEscrow");
+  const ensureEscrowEnrollmentUnguarded = /* @__PURE__ */ __name(async (self, params, storage2, forceRotate = false) => {
+    if (!config.escrow?.enabled) return { enrolled: false, reason: "disabled" };
+    const pin = params.options?.pin;
+    if (pin !== void 0) {
+      const validation = validatePin(pin);
+      if (!validation.ok)
+        throw new Error(
+          validation.reason === "length" ? "PIN must contain 6\u201312 digits." : "Choose a PIN without trivial or sequential patterns."
+        );
+    }
+    const status = await self.fetchServerKeyStatus(params.token, params.providerType);
+    if (status.escrowOptedOut) return { enrolled: false, reason: "opted-out" };
+    const currentlyEnrolled = status.shareVersion !== null && status.recoveryMethods.some(
+      (method) => method.type === "escrow" && method.shareVersion === status.shareVersion && (Boolean(method.confirmedAt) || "confirmationStatus" in method && method.confirmationStatus === "confirmed")
+    );
+    const repairingStaleBlob = pin === void 0 && !forceRotate && currentlyEnrolled && !!status.escrowStale && !staleEscrowReenrollAttempted;
+    if (!forceRotate && pin === void 0 && currentlyEnrolled && !repairingStaleBlob)
+      return { enrolled: true, changed: false };
+    if (repairingStaleBlob) staleEscrowReenrollAttempted = true;
+    if (!status.primaryDid) throw new Error("Cannot enroll escrow without a primary DID");
+    if (!params.signDidAuthVp) {
+      throw new Error("DID proof signing is required for escrow enrollment");
+    }
+    try {
+      if (!forceRotate && pin === void 0 && unenrolledRotation && unenrolledRotation.shareVersion === status.shareVersion && unenrolledRotation.primaryDid === status.primaryDid) {
+        const retry = unenrolledRotation;
+        await enrollEscrow(
+          params.token,
+          params.providerType,
+          params.privateKey,
+          retry.primaryDid,
+          retry.shares,
+          retry.shareVersion,
+          params.signDidAuthVp,
+          void 0,
+          void 0,
+          retry.clearPin
+        );
+        unenrolledRotation = void 0;
+        return { enrolled: true, changed: true, shareVersion: retry.shareVersion };
+      }
+      const verifiedKey = await fetchVerifiedEnclaveKey();
+      const pinSalt = pin !== void 0 ? generatePinSalt() : void 0;
+      const pinMaterial = pin !== void 0 && pinSalt !== void 0 ? { pinSalt, pinVerifier: await derivePinProof(pin, pinSalt) } : void 0;
+      const storageId = activeStorageId;
+      const primaryDid = status.primaryDid;
+      const { shares, shareVersion } = await withShareUpdateLock(
+        storage2,
+        storageId,
+        () => persistSharesWithoutLock(
+          params.privateKey,
+          serverUrl,
+          params.token,
+          params.providerType,
+          primaryDid,
+          storage2,
+          storageId,
+          void 0,
+          params.signDidAuthVp,
+          tenantId
+        )
+      );
+      lastEmailShare = shares.emailShare;
+      lastShareVersion = shareVersion;
+      lastServerSnapshot = {
+        currentVersion: shareVersion,
+        resolvedVersion: shareVersion,
+        authShare: shares.authShare,
+        primaryDid: status.primaryDid
+      };
+      unenrolledRotation = pinMaterial ? void 0 : { shares, shareVersion, primaryDid: status.primaryDid, clearPin: forceRotate };
+      await enrollEscrow(
+        params.token,
+        params.providerType,
+        params.privateKey,
+        status.primaryDid,
+        shares,
+        shareVersion,
+        params.signDidAuthVp,
+        verifiedKey,
+        pinMaterial,
+        forceRotate
+      );
+      unenrolledRotation = void 0;
+      return { enrolled: true, changed: true, shareVersion };
+    } catch (err) {
+      if (!repairingStaleBlob) throw err;
+      try {
+        if (config.onEscrowError) config.onEscrowError(err);
+        else console.warn("SSS: escrow enrollment failed");
+      } catch {
+        console.warn("SSS: escrow error reporting failed");
+      }
+      return { enrolled: true, changed: false };
+    }
+  }, "ensureEscrowEnrollmentUnguarded");
+  const recordPromotion = /* @__PURE__ */ __name((primaryDid) => (snapshot) => {
+    lastEmailShare = void 0;
+    lastShareVersion = snapshot.currentVersion ?? void 0;
+    lastServerSnapshot = {
+      ...snapshot,
+      resolvedVersion: snapshot.currentVersion,
+      primaryDid
+    };
+  }, "recordPromotion");
+  const captureActiveUserGuard = /* @__PURE__ */ __name(() => {
+    const storageId = activeStorageId;
+    return () => {
+      if (activeStorageId !== storageId) {
+        throw new AtomicUpdateError(
+          "Active account changed during share update",
+          "verify_stored",
+          false
+        );
+      }
+    };
+  }, "captureActiveUserGuard");
   return {
     name: "sss",
     capabilities: {
@@ -19543,23 +21779,31 @@ function createSSSStrategy(config) {
     },
     // --- User scoping ---
     setActiveUser(userId) {
+      if (activeStorageId !== `sss-device-share:${userId}`) storageGeneration++;
       activeStorageId = `sss-device-share:${userId}`;
+      lastServerSnapshot = null;
+      pendingPhraseConfirmation = void 0;
+      pendingBackupConfirmation = void 0;
     },
     // --- Key lifecycle ---
     async hasLocalKey() {
       if (await storage.hasDeviceShare(activeStorageId)) return true;
+      if ((await readPendingShareCandidates(storage, activeStorageId)).length) return true;
       if (activeStorageId) {
         return storage.hasDeviceShare();
       }
       return false;
     },
     async getLocalKey() {
-      const scoped = await storage.getDeviceShare(activeStorageId);
+      const storage2 = guardedStorage();
+      const scoped = await storage2.getDeviceShare(activeStorageId);
       if (scoped) return scoped;
+      const pending = await readPendingShareCandidates(storage2, activeStorageId);
+      if (pending.length) return pending[pending.length - 1].share;
       if (activeStorageId) {
-        const legacy = await storage.getDeviceShare();
+        const legacy = await storage2.getDeviceShare();
         if (legacy) {
-          await storage.storeDeviceShare(legacy, activeStorageId);
+          await storage2.storeDeviceShare(legacy, activeStorageId);
           return legacy;
         }
       }
@@ -19568,8 +21812,20 @@ function createSSSStrategy(config) {
     async storeLocalKey(key) {
       return storage.storeDeviceShare(key, activeStorageId);
     },
-    async clearLocalKeys() {
-      return storage.clearAllShares(activeStorageId);
+    async clearLocalKeys(options) {
+      const storageId = activeStorageId;
+      if (options?.preservePending) {
+        const storage2 = guardedStorage();
+        return withShareUpdateLock(
+          storage2,
+          storageId,
+          () => storage2.deleteDeviceShare(storageId)
+        );
+      }
+      storageGeneration++;
+      await Promise.allSettled(localWrites);
+      await clearPendingShareCandidates(storage, storageId);
+      return storage.clearAllShares(storageId);
     },
     async splitKey(privateKey) {
       const { shares } = await splitAndVerify(privateKey);
@@ -19593,9 +21849,175 @@ function createSSSStrategy(config) {
       );
       return result.healthy;
     },
+    async getFreshDidAuthVp(privateKey, did, signDidAuthVp) {
+      return requestFreshDidAuthVp(serverUrl, privateKey, did, signDidAuthVp, tenantId);
+    },
+    async atomicUpdateShares(params) {
+      const storage2 = guardedStorage();
+      const result = await persistSharesAtomically(
+        params.privateKey,
+        serverUrl,
+        params.token,
+        params.providerType,
+        params.did,
+        storage2,
+        activeStorageId,
+        void 0,
+        params.signDidAuthVp,
+        tenantId,
+        recordPromotion(params.did),
+        captureActiveUserGuard()
+      );
+      lastEmailShare = result.shares.emailShare;
+      lastShareVersion = result.shareVersion;
+      lastServerSnapshot = {
+        currentVersion: result.shareVersion,
+        resolvedVersion: result.shareVersion,
+        authShare: result.shares.authShare,
+        primaryDid: params.did
+      };
+    },
+    async reconcileShares(params) {
+      const storage2 = guardedStorage();
+      const storageId = activeStorageId;
+      const assertActiveUser = /* @__PURE__ */ __name(() => {
+        if (activeStorageId !== storageId) {
+          throw new AtomicUpdateError(
+            "Active account changed during reconciliation",
+            "verify_stored",
+            false
+          );
+        }
+      }, "assertActiveUser");
+      return withShareUpdateLock(storage2, storageId, async () => {
+        let deviceShare = await storage2.getDeviceShare(storageId);
+        const pending = await readPendingShareCandidates(storage2, storageId);
+        if (!deviceShare && !pending.length) return null;
+        const resolution = await resolvePendingShareCandidates(
+          storage2,
+          storageId,
+          async () => {
+            const data = await fetchAuthShareRaw(
+              serverUrl,
+              params.token,
+              params.providerType,
+              void 0,
+              tenantId
+            );
+            return {
+              currentVersion: data?.shareVersion ?? null,
+              authShare: authShareToString(data?.authShare)
+            };
+          },
+          params.expectedDid,
+          params.didFromPrivateKey,
+          assertActiveUser,
+          recordPromotion(params.expectedDid),
+          async (version) => authShareToString(
+            (await fetchAuthShareRaw(
+              serverUrl,
+              params.token,
+              params.providerType,
+              version,
+              tenantId
+            ))?.authShare
+          )
+        );
+        assertActiveUser();
+        if (resolution.privateKey) {
+          return { privateKey: resolution.privateKey, did: params.expectedDid };
+        }
+        const { currentVersion, authShare: currentAuthShare } = resolution.snapshot;
+        if (currentVersion === null && !currentAuthShare) return null;
+        deviceShare = await storage2.getDeviceShare(storageId);
+        const localVersion = await storage2.getShareVersion(storageId);
+        if (!deviceShare) return null;
+        const candidates = /* @__PURE__ */ new Map();
+        const addCandidate = /* @__PURE__ */ __name((version, authShare) => {
+          if (version !== null && authShare && !candidates.has(version)) {
+            candidates.set(version, authShare);
+          }
+        }, "addCandidate");
+        addCandidate(
+          lastServerSnapshot?.resolvedVersion ?? null,
+          lastServerSnapshot?.authShare ?? null
+        );
+        addCandidate(currentVersion, currentAuthShare);
+        const versionsToTry = /* @__PURE__ */ new Set();
+        if (localVersion !== null) versionsToTry.add(localVersion);
+        if (currentVersion !== null) {
+          for (let version = currentVersion; version >= 1 && version >= currentVersion - MAX_RECONCILIATION_HISTORY; version--) {
+            versionsToTry.add(version);
+          }
+        }
+        for (const version of versionsToTry) {
+          if (candidates.has(version)) continue;
+          const data = await fetchAuthShareRaw(
+            serverUrl,
+            params.token,
+            params.providerType,
+            version,
+            tenantId
+          );
+          addCandidate(version, authShareToString(data?.authShare));
+        }
+        for (const [candidateVersion, authShare] of candidates) {
+          const health = await verifyStoredShares(
+            {
+              getDevice: /* @__PURE__ */ __name(async () => deviceShare, "getDevice"),
+              getAuth: /* @__PURE__ */ __name(async () => authShare, "getAuth")
+            },
+            params.expectedDid,
+            params.didFromPrivateKey
+          );
+          if (!health.healthy) continue;
+          assertActiveUser();
+          const privateKey = await reconstructFromShares([deviceShare, authShare]);
+          if (candidateVersion === currentVersion) {
+            if (localVersion !== currentVersion) {
+              await storage2.storeShareVersion(candidateVersion, storageId);
+            }
+            assertActiveUser();
+            lastServerSnapshot = {
+              currentVersion,
+              resolvedVersion: candidateVersion,
+              authShare,
+              primaryDid: params.expectedDid
+            };
+            return localVersion === currentVersion ? null : { privateKey, did: params.expectedDid };
+          }
+          const result = await persistSharesWithoutLock(
+            privateKey,
+            serverUrl,
+            params.token,
+            params.providerType,
+            params.expectedDid,
+            storage2,
+            storageId,
+            params.didFromPrivateKey,
+            params.signDidAuthVp,
+            tenantId,
+            recordPromotion(params.expectedDid),
+            assertActiveUser
+          );
+          assertActiveUser();
+          lastEmailShare = result.shares.emailShare;
+          lastShareVersion = result.shareVersion;
+          lastServerSnapshot = {
+            currentVersion: result.shareVersion,
+            resolvedVersion: result.shareVersion,
+            authShare: result.shares.authShare,
+            primaryDid: params.expectedDid
+          };
+          return { privateKey, did: params.expectedDid };
+        }
+        return null;
+      });
+    },
     // --- Server communication ---
     async fetchServerKeyStatus(token, providerType) {
-      const localVersion = await storage.getShareVersion(activeStorageId);
+      const storage2 = guardedStorage();
+      const localVersion = await storage2.getShareVersion(activeStorageId);
       const data = await fetchAuthShareRaw(
         serverUrl,
         token,
@@ -19604,7 +22026,7 @@ function createSSSStrategy(config) {
         tenantId
       );
       if (!data) {
-        hasRecoveryEmail = false;
+        lastServerSnapshot = null;
         return {
           exists: false,
           needsMigration: false,
@@ -19612,16 +22034,25 @@ function createSSSStrategy(config) {
           recoveryMethods: [],
           authShare: null,
           shareVersion: null,
-          maskedRecoveryEmail: null
+          maskedRecoveryEmail: null,
+          sssActivationState: null
         };
       }
       const rawAuthShare = data.authShare;
-      const authShareString = typeof rawAuthShare === "object" && rawAuthShare !== null ? rawAuthShare.encryptedData ?? null : typeof rawAuthShare === "string" ? rawAuthShare : null;
+      const authShareString = authShareToString(rawAuthShare);
       const serverVersion = data.shareVersion ?? null;
-      if (serverVersion != null && localVersion == null) {
-        storage.storeShareVersion(serverVersion, activeStorageId).catch((e) => console.warn("SSS: failed to backfill local shareVersion", e));
-      }
-      hasRecoveryEmail = !!data.maskedRecoveryEmail;
+      if (
+        // Version 0 means "no auth share yet" and must never be pinned locally.
+        serverVersion != null && serverVersion > 0 && localVersion == null && !(await readPendingShareCandidates(storage2, activeStorageId)).length
+      ) {
+        storage2.storeShareVersion(serverVersion, activeStorageId).catch((e) => console.warn("SSS: failed to backfill local shareVersion", e));
+      }
+      lastServerSnapshot = {
+        currentVersion: serverVersion,
+        resolvedVersion: authShareString ? localVersion ?? serverVersion : null,
+        authShare: authShareString,
+        primaryDid: data.primaryDid || null
+      };
       return {
         exists: !!rawAuthShare || !!data.keyProvider || !!data.primaryDid,
         needsMigration: data.keyProvider === "web3auth",
@@ -19629,35 +22060,266 @@ function createSSSStrategy(config) {
         recoveryMethods: data.recoveryMethods || [],
         authShare: authShareString,
         shareVersion: serverVersion,
-        maskedRecoveryEmail: data.maskedRecoveryEmail ?? null
+        maskedRecoveryEmail: data.maskedRecoveryEmail ?? null,
+        escrowOptedOut: data.escrowOptedOut === true,
+        escrowPin: data.escrowPin,
+        escrowStale: data.escrowStale,
+        sssActivationState: data.sssActivationState ?? "active"
       };
     },
     async storeAuthShare(token, providerType, authShare, primaryDid, didAuthVp) {
-      const { shareVersion } = await putAuthShare(
-        serverUrl,
-        token,
-        providerType,
-        authShare,
-        primaryDid,
-        didAuthVp,
-        tenantId
+      const storage2 = guardedStorage();
+      const { shareVersion } = await withRotationLock(
+        () => putAuthShare(
+          serverUrl,
+          token,
+          providerType,
+          authShare,
+          primaryDid,
+          didAuthVp,
+          tenantId
+        )
       );
-      await storage.storeShareVersion(shareVersion, activeStorageId);
+      await storage2.storeShareVersion(shareVersion, activeStorageId);
       lastShareVersion = shareVersion;
     },
-    async markMigrated(token, providerType, didAuthVp) {
-      const response = await fetch(`${serverUrl}/keys/migrate`, {
+    async markMigrated(token, providerType, didAuthVp) {
+      const response = await fetch(`${serverUrl}/keys/migrate`, {
+        method: "POST",
+        headers: buildHeaders(token, didAuthVp, tenantId),
+        body: JSON.stringify({ authToken: token, providerType })
+      });
+      if (!response.ok) {
+        throw new Error(`Failed to mark migrated: ${describeHttpStatus(response)}`);
+      }
+    },
+    async activate(token, providerType, didAuthVp) {
+      const response = await fetch(`${serverUrl}/keys/activate`, {
         method: "POST",
         headers: buildHeaders(token, didAuthVp, tenantId),
         body: JSON.stringify({ authToken: token, providerType })
       });
       if (!response.ok) {
-        throw new Error(`Failed to mark migrated: ${response.statusText}`);
+        throw new Error(`Failed to activate SSS key: ${describeHttpStatus(response)}`);
       }
     },
     // --- Recovery execution ---
+    async getEscrowEnrollmentState(params) {
+      if (!config.escrow?.enabled) return { state: "disabled" };
+      const status = await this.fetchServerKeyStatus(params.token, params.providerType);
+      if (status.escrowOptedOut) return { state: "opted-out", escrowPin: status.escrowPin };
+      const confirmedEscrow = status.recoveryMethods.filter(
+        (method) => method.type === "escrow" && (Boolean(method.confirmedAt) || "confirmationStatus" in method && method.confirmationStatus === "confirmed")
+      );
+      const enrolled = status.shareVersion !== null && confirmedEscrow.some((method) => method.shareVersion === status.shareVersion);
+      if (confirmedEscrow.length > 0 && (!enrolled || status.escrowStale))
+        return {
+          state: "stale",
+          escrowPin: status.escrowPin,
+          staleReason: status.escrowStale
+        };
+      return { state: enrolled ? "enrolled" : "not-enrolled", escrowPin: status.escrowPin };
+    },
+    async disableEscrowRecovery(params) {
+      const status = await this.fetchServerKeyStatus(params.token, params.providerType);
+      if (!status.primaryDid) throw new Error("Cannot disable escrow without a primary DID");
+      const vp = await requestFreshDidAuthVp(
+        serverUrl,
+        params.privateKey,
+        status.primaryDid,
+        params.signDidAuthVp,
+        tenantId
+      );
+      await escrowRequest("", {
+        method: "DELETE",
+        headers: buildHeaders(params.token, vp, tenantId),
+        body: JSON.stringify({
+          authToken: params.token,
+          providerType: params.providerType,
+          optOut: true
+        })
+      });
+    },
+    async enableEscrowRecovery(params) {
+      const storage2 = guardedStorage();
+      return withRotationLock(async () => {
+        if (!config.escrow?.enabled)
+          return { enrolled: false, reason: "disabled" };
+        const status = await this.fetchServerKeyStatus(params.token, params.providerType);
+        if (!status.primaryDid)
+          throw new Error("Cannot enable escrow without a primary DID");
+        const vp = await requestFreshDidAuthVp(
+          serverUrl,
+          params.privateKey,
+          status.primaryDid,
+          params.signDidAuthVp,
+          tenantId
+        );
+        await escrowRequest("/opt-in", {
+          method: "POST",
+          headers: buildHeaders(params.token, vp, tenantId),
+          body: JSON.stringify({
+            authToken: params.token,
+            providerType: params.providerType
+          })
+        });
+        return ensureEscrowEnrollmentUnguarded(this, params, storage2);
+      });
+    },
+    async setEscrowPin({ pin, ...params }) {
+      const storage2 = guardedStorage();
+      const result = await withRotationLock(
+        () => ensureEscrowEnrollmentUnguarded(this, { ...params, options: { pin } }, storage2)
+      );
+      if (!result.enrolled || !result.changed) {
+        throw new Error("Automatic recovery is not available for this account.");
+      }
+    },
+    async clearEscrowPin(params) {
+      const storage2 = guardedStorage();
+      const result = await withRotationLock(
+        () => ensureEscrowEnrollmentUnguarded(this, params, storage2, true)
+      );
+      if (!result.enrolled || !result.changed) {
+        throw new Error("Automatic recovery is not available for this account.");
+      }
+    },
+    /** Enroll missing/stale escrow material using the standard atomic rotation. */
+    async ensureEscrowEnrollment(params) {
+      const storage2 = guardedStorage();
+      if (params.options?.pin !== void 0)
+        return withRotationLock(
+          () => ensureEscrowEnrollmentUnguarded(this, params, storage2)
+        );
+      if (escrowEnrollmentInFlight) return escrowEnrollmentInFlight;
+      escrowEnrollmentInFlight = withRotationLock(
+        () => ensureEscrowEnrollmentUnguarded(this, params, storage2)
+      );
+      try {
+        return await escrowEnrollmentInFlight;
+      } finally {
+        escrowEnrollmentInFlight = void 0;
+      }
+    },
+    /** Start or explicitly restart a hold with fresh client-bound resume secrets. */
+    async startEscrowRecovery(params) {
+      const sessionProof = params.recoverySessionToken !== void 0;
+      if (sessionProof ? params.token !== void 0 || params.providerType !== void 0 : !params.token || !params.providerType) {
+        throw new Error("Provide exactly one identity proof");
+      }
+      const pair = await generateEscrowKeyPair();
+      const result = await escrowRequest(
+        "/recover",
+        {
+          method: "POST",
+          headers: buildHeaders("", void 0, params.tenantId ?? tenantId),
+          body: JSON.stringify({
+            clientEphemeralPublicKey: pair.publicKey,
+            ...params.options?.restart ? { restart: true } : {},
+            ...params.options?.releasePolicy ? { releasePolicy: params.options.releasePolicy } : {},
+            ...sessionProof ? { recoverySessionToken: params.recoverySessionToken } : { authToken: params.token, providerType: params.providerType }
+          })
+        },
+        params.options?.releasePolicy === "pin"
+      );
+      return { ...result, clientEphemeralPrivateKey: pair.privateKey };
+    },
+    /** Read hold status; secrets (auth or resume token) never travel in a URL. */
+    async getEscrowRecoveryStatus(params) {
+      const query = new URLSearchParams(
+        "holdId" in params ? { holdId: params.holdId } : { providerType: params.providerType }
+      );
+      const secret = "holdId" in params ? params.resumeToken : params.token;
+      const result = await escrowRequest(
+        `/status?${query}`,
+        {
+          method: "GET",
+          headers: {
+            ...buildHeaders("", void 0, tenantId),
+            "X-Auth-Token": secret
+          }
+        }
+      );
+      return result.hold;
+    },
+    /** Cancel a pending hold with a fresh DID-owner proof. */
+    async cancelEscrowRecovery(params) {
+      const status = await this.fetchServerKeyStatus(params.token, params.providerType);
+      if (!status.primaryDid) throw new Error("Cannot cancel escrow without a primary DID");
+      const vp = await requestFreshDidAuthVp(
+        serverUrl,
+        params.privateKey,
+        status.primaryDid,
+        params.signDidAuthVp,
+        tenantId
+      );
+      const result = await escrowRequest("/cancel", {
+        method: "POST",
+        headers: buildHeaders(params.token, vp, tenantId),
+        body: JSON.stringify({
+          authToken: params.token,
+          providerType: params.providerType
+        })
+      });
+      return { cancelled: result.cancelled };
+    },
     async executeRecovery(params) {
-      const { token, providerType, input, didFromPrivateKey } = params;
+      const storage2 = guardedStorage();
+      const { token, providerType, input, didFromPrivateKey, signDidAuthVp } = params;
+      if (input.method === "escrow" || input.method === "escrow-pin") {
+        if (!didFromPrivateKey)
+          throw new Error("DID verification is required for escrow recovery");
+        const start = input.method === "escrow-pin" ? await this.startEscrowRecovery({
+          token,
+          providerType,
+          options: { releasePolicy: "pin" }
+        }) : input;
+        let pinProof;
+        if (input.method === "escrow-pin") {
+          if (!("pinSalt" in start) || !start.pinSalt || !start.resumeToken)
+            throw new Error("PIN recovery response is missing required material");
+          pinProof = await derivePinProof(input.pin, start.pinSalt);
+        }
+        const material = await escrowRequest(
+          "/complete",
+          {
+            method: "POST",
+            headers: buildHeaders("", void 0, tenantId),
+            body: JSON.stringify({
+              holdId: start.holdId,
+              resumeToken: start.resumeToken,
+              ...pinProof ? { pinProof } : {}
+            })
+          },
+          input.method === "escrow-pin"
+        );
+        const plaintext = await openEscrowRelease(
+          material.sealedShare,
+          start.clientEphemeralPrivateKey
+        );
+        if (plaintext.holdId !== start.holdId || plaintext.did !== material.primaryDid || plaintext.shareVersion !== material.shareVersion) {
+          throw new Error("Escrow recovery material does not match the request");
+        }
+        const authShare = material.authShare.encryptedData;
+        const privateKey2 = await reconstructFromShares([
+          plaintext.recoveryShare,
+          authShare
+        ]);
+        if (!material.primaryDid || await didFromPrivateKey(privateKey2) !== material.primaryDid) {
+          throw new Error(
+            "Recovery produced an incorrect key. Try another recovery method."
+          );
+        }
+        pendingIdentityRecovery = {
+          privateKey: privateKey2,
+          primaryDid: material.primaryDid,
+          recoveryShare: plaintext.recoveryShare,
+          authShare,
+          rebindSessionToken: material.rebindSessionToken
+        };
+        if (!token) return { privateKey: privateKey2, did: material.primaryDid };
+        return this.completeIdentityRecovery({ token, providerType, signDidAuthVp });
+      }
       let recoveryShare;
       let recoveryShareVersion;
       switch (input.method) {
@@ -19751,14 +22413,61 @@ function createSSSStrategy(config) {
           );
         }
       }
-      await storage.storeDeviceShare(recoveryShare, activeStorageId);
-      const versionToStore = recoveryShareVersion ?? serverData.shareVersion ?? 1;
-      await storage.storeShareVersion(versionToStore, activeStorageId);
+      const { shares, shareVersion } = await persistSharesAtomically(
+        privateKey,
+        serverUrl,
+        token,
+        providerType,
+        primaryDid,
+        storage2,
+        activeStorageId,
+        didFromPrivateKey,
+        signDidAuthVp,
+        tenantId,
+        recordPromotion(primaryDid),
+        captureActiveUserGuard()
+      );
+      lastEmailShare = shares.emailShare;
+      lastShareVersion = shareVersion;
+      lastServerSnapshot = {
+        currentVersion: shareVersion,
+        resolvedVersion: shareVersion,
+        authShare: shares.authShare,
+        primaryDid
+      };
+      await tryEnrollEscrow(
+        token,
+        providerType,
+        privateKey,
+        primaryDid,
+        shares,
+        shareVersion,
+        signDidAuthVp
+      );
       return { privateKey, did: primaryDid };
     },
     // --- Recovery setup ---
     async setupRecoveryMethod(params) {
+      const storage2 = guardedStorage();
       const { token, providerType, privateKey, input, authUser, signDidAuthVp } = params;
+      if (input.method === "escrow" && input.pin !== void 0) {
+        if (!signDidAuthVp)
+          throw new Error("DID proof signing is required for escrow enrollment");
+        const result = await this.enableEscrowRecovery({
+          token,
+          providerType,
+          privateKey,
+          signDidAuthVp,
+          options: { pin: input.pin }
+        });
+        if (!result.enrolled || !result.changed)
+          throw new Error("Escrow enrollment is disabled");
+        return { method: "escrow", shareVersion: result.shareVersion };
+      }
+      if (input.method === "escrow" && !config.escrow?.enabled) {
+        throw new Error("Escrow enrollment is disabled");
+      }
+      const escrowKey = input.method === "escrow" ? await fetchVerifiedEnclaveKey() : void 0;
       let passkeyCredential;
       if (input.method === "passkey") {
         if (!isWebAuthnSupported()) {
@@ -19768,10 +22477,6 @@ function createSSSStrategy(config) {
         const userName = authUser?.email || authUser?.phone || authUser?.id || "";
         passkeyCredential = await createPasskeyCredential(userId, userName);
       }
-      const vpJwt = signDidAuthVp ? await signDidAuthVp(privateKey) : void 0;
-      const { shares } = await splitAndVerify(privateKey);
-      lastEmailShare = shares.emailShare;
-      await storage.storeDeviceShare(shares.deviceShare, activeStorageId);
       const serverData = await fetchAuthShareRaw(
         serverUrl,
         token,
@@ -19780,39 +22485,42 @@ function createSSSStrategy(config) {
         tenantId
       );
       const primaryDid = serverData?.primaryDid || "";
-      const { shareVersion } = await putAuthShare(
+      if (!primaryDid) throw new Error("Cannot set up recovery without a primary DID");
+      const { shares, shareVersion } = await persistSharesAtomically(
+        privateKey,
         serverUrl,
         token,
         providerType,
-        shares.authShare,
         primaryDid,
-        vpJwt,
-        tenantId
+        storage2,
+        activeStorageId,
+        void 0,
+        signDidAuthVp,
+        tenantId,
+        recordPromotion(primaryDid),
+        captureActiveUserGuard()
       );
-      await storage.storeShareVersion(shareVersion, activeStorageId);
-      if (enableEmailBackupShare && input.method !== "email" && lastEmailShare) {
-        const resend = hasRecoveryEmail ? sendEmailShareToRecoveryEmail(
-          serverUrl,
-          token,
-          providerType,
-          lastEmailShare,
-          shareVersion,
-          tenantId
-        ) : authUser?.email ? sendEmailBackupShare(
-          serverUrl,
-          token,
-          providerType,
-          lastEmailShare,
-          authUser.email,
-          shareVersion,
-          tenantId
-        ) : Promise.resolve();
-        resend.catch(
-          (e) => console.warn("Email backup share re-send failed (non-fatal):", e)
-        );
-        lastEmailShare = void 0;
-      }
+      lastEmailShare = shares.emailShare;
+      lastShareVersion = shareVersion;
+      lastServerSnapshot = {
+        currentVersion: shareVersion,
+        resolvedVersion: shareVersion,
+        authShare: shares.authShare,
+        primaryDid
+      };
       switch (input.method) {
+        case "escrow":
+          await enrollEscrow(
+            token,
+            providerType,
+            privateKey,
+            primaryDid,
+            shares,
+            shareVersion,
+            signDidAuthVp,
+            escrowKey
+          );
+          return { method: "escrow", shareVersion };
         case "passkey": {
           const credential = passkeyCredential;
           const encryptedShare = await encryptShareWithPasskey(
@@ -19832,9 +22540,38 @@ function createSSSStrategy(config) {
               credentialId: credential.credentialId,
               shareVersion
             },
-            vpJwt,
+            signDidAuthVp ? await requestFreshDidAuthVp(
+              serverUrl,
+              privateKey,
+              primaryDid,
+              signDidAuthVp,
+              tenantId
+            ) : void 0,
             tenantId
           );
+          await postRecoveryConfirmation(
+            serverUrl,
+            token,
+            providerType,
+            { type: "passkey", credentialId: credential.credentialId },
+            signDidAuthVp ? await requestFreshDidAuthVp(
+              serverUrl,
+              privateKey,
+              primaryDid,
+              signDidAuthVp,
+              tenantId
+            ) : void 0,
+            tenantId
+          );
+          await tryEnrollEscrow(
+            token,
+            providerType,
+            privateKey,
+            primaryDid,
+            shares,
+            shareVersion,
+            signDidAuthVp
+          );
           return { method: "passkey", credentialId: credential.credentialId };
         }
         case "phrase": {
@@ -19847,10 +22584,38 @@ function createSSSStrategy(config) {
               type: "phrase",
               shareVersion
             },
-            vpJwt,
+            signDidAuthVp ? await requestFreshDidAuthVp(
+              serverUrl,
+              privateKey,
+              primaryDid,
+              signDidAuthVp,
+              tenantId
+            ) : void 0,
             tenantId
           );
-          return { method: "phrase", phrase };
+          const challengeWordIndices = selectRecoveryPhraseChallengeIndices(
+            phrase.split(/\s+/).length
+          );
+          const challengeWordOptions = await buildRecoveryPhraseChallengeOptions(
+            phrase,
+            challengeWordIndices
+          );
+          pendingPhraseConfirmation = { phrase, challengeWordIndices };
+          await tryEnrollEscrow(
+            token,
+            providerType,
+            privateKey,
+            primaryDid,
+            shares,
+            shareVersion,
+            signDidAuthVp
+          );
+          return {
+            method: "phrase",
+            phrase,
+            challengeWordIndices,
+            challengeWordOptions
+          };
         }
         case "backup": {
           const encrypted = await encryptWithPassword(
@@ -19862,6 +22627,7 @@ function createSSSStrategy(config) {
             createdAt: (/* @__PURE__ */ new Date()).toISOString(),
             primaryDid: input.did,
             shareVersion,
+            shareChecksum: await calculateShareChecksum(shares.recoveryShare),
             encryptedShare: {
               ciphertext: encrypted.ciphertext,
               iv: encrypted.iv,
@@ -19877,36 +22643,121 @@ function createSSSStrategy(config) {
               type: "backup",
               shareVersion
             },
-            vpJwt,
+            signDidAuthVp ? await requestFreshDidAuthVp(
+              serverUrl,
+              privateKey,
+              primaryDid,
+              signDidAuthVp,
+              tenantId
+            ) : void 0,
             tenantId
           );
+          pendingBackupConfirmation = {
+            backupFile,
+            recoveryShare: shares.recoveryShare
+          };
+          await tryEnrollEscrow(
+            token,
+            providerType,
+            privateKey,
+            primaryDid,
+            shares,
+            shareVersion,
+            signDidAuthVp
+          );
           return { method: "backup", backupFile };
         }
         case "email": {
-          await sendEmailShareToRecoveryEmail(
+          const didAuthVp = signDidAuthVp ? await requestFreshDidAuthVp(
+            serverUrl,
+            privateKey,
+            primaryDid,
+            signDidAuthVp,
+            tenantId
+          ) : void 0;
+          await sendEmailBackupShare(
             serverUrl,
             token,
             providerType,
             shares.emailShare,
+            input.email,
+            escrowRelayPublicKey,
+            escrowRelayKeyId,
+            emailBranding,
             shareVersion,
+            didAuthVp,
             tenantId
           );
-          await postRecoveryMethod(
-            serverUrl,
+          await tryEnrollEscrow(
             token,
             providerType,
-            {
-              type: "email",
-              shareVersion
-            },
-            vpJwt,
-            tenantId
+            privateKey,
+            primaryDid,
+            shares,
+            shareVersion,
+            signDidAuthVp
           );
-          hasRecoveryEmail = true;
           return { method: "email" };
         }
       }
     },
+    async confirmRecoveryMethod(params) {
+      const { token, providerType, privateKey, input, signDidAuthVp } = params;
+      const primaryDid = lastServerSnapshot?.primaryDid;
+      if (!primaryDid) throw new Error("Cannot confirm recovery without a primary DID");
+      const confirmationBody = { type: input.method };
+      if (input.method === "phrase") {
+        const pending = pendingPhraseConfirmation;
+        if (!pending) throw new Error("Generate a new recovery phrase to continue");
+        const phraseWords = pending.phrase.trim().toLowerCase().split(/\s+/);
+        const matches = input.challengeWords.length === pending.challengeWordIndices.length && pending.challengeWordIndices.every(
+          (wordIndex, answerIndex) => input.challengeWords[answerIndex]?.trim().toLowerCase() === phraseWords[wordIndex]
+        );
+        if (!matches) {
+          throw new Error("Those words do not match. Check your phrase and try again.");
+        }
+      } else if (input.method === "backup") {
+        const pending = pendingBackupConfirmation;
+        if (!pending) throw new Error("Generate a new backup file to continue");
+        let suppliedBackup;
+        let decryptedShare;
+        try {
+          suppliedBackup = JSON.parse(input.fileContents);
+          decryptedShare = await decryptWithPassword(
+            suppliedBackup.encryptedShare.ciphertext,
+            suppliedBackup.encryptedShare.iv,
+            suppliedBackup.encryptedShare.salt,
+            input.password,
+            suppliedBackup.encryptedShare.kdfParams
+          );
+        } catch {
+          throw new Error("Incorrect password or corrupted data. Please try again.");
+        }
+        const checksum = await calculateShareChecksum(decryptedShare);
+        if (suppliedBackup.shareChecksum !== checksum || pending.backupFile.shareChecksum !== checksum || decryptedShare !== pending.recoveryShare) {
+          throw new Error("This backup file could not be verified. Please try again.");
+        }
+      } else {
+        confirmationBody.code = input.code;
+      }
+      const didAuthVp = signDidAuthVp ? await requestFreshDidAuthVp(
+        serverUrl,
+        privateKey,
+        primaryDid,
+        signDidAuthVp,
+        tenantId
+      ) : void 0;
+      await postRecoveryConfirmation(
+        serverUrl,
+        token,
+        providerType,
+        confirmationBody,
+        didAuthVp,
+        tenantId
+      );
+      if (input.method === "phrase") pendingPhraseConfirmation = void 0;
+      if (input.method === "backup") pendingBackupConfirmation = void 0;
+    },
     async getAvailableRecoveryMethods(token, providerType) {
       try {
         const serverData = await fetchAuthShareRaw(
@@ -19917,15 +22768,274 @@ function createSSSStrategy(config) {
           tenantId
         );
         const methods = serverData?.recoveryMethods || [];
-        if (enableEmailBackupShare && !methods.some((m) => m.type === "email")) {
-          methods.push({ type: "email", createdAt: /* @__PURE__ */ new Date() });
-        }
-        return methods;
+        const activationState = serverData?.sssActivationState ?? "active";
+        return methods.filter((method) => {
+          if (method.confirmedAt) return true;
+          if (method.confirmationStatus) return false;
+          return activationState === "active";
+        });
       } catch (e) {
         console.error("Error getting recovery methods:", e);
         return [];
       }
     },
+    async startIdentityRecovery(email) {
+      await postJson(
+        `${serverUrl}/keys/recovery-session/start`,
+        { email },
+        buildHeaders("", void 0, tenantId)
+      );
+    },
+    async verifyIdentityRecovery(email, code) {
+      const result = await postJson(
+        `${serverUrl}/keys/recovery-session/verify`,
+        { email, code },
+        buildHeaders("", void 0, tenantId)
+      );
+      return {
+        ...result,
+        recoveryMethods: result.recoveryMethods.map((method) => ({
+          ...method,
+          createdAt: new Date(method.createdAt)
+        }))
+      };
+    },
+    async prepareIdentityRecovery(params) {
+      const { input } = params;
+      if (input.method === "escrow") {
+        throw new Error("Use executeRecovery to complete an escrow hold");
+      }
+      let recoveryShare;
+      switch (input.method) {
+        case "passkey":
+          break;
+        case "phrase":
+          if (!await validateRecoveryPhrase(input.phrase)) {
+            throw new Error("Invalid recovery phrase");
+          }
+          recoveryShare = await recoveryPhraseToShare(input.phrase);
+          break;
+        case "backup": {
+          const backup = JSON.parse(input.fileContents);
+          if (backup.version !== 1) throw new Error("Unsupported backup file version");
+          recoveryShare = await decryptWithPassword(
+            backup.encryptedShare.ciphertext,
+            backup.encryptedShare.iv,
+            backup.encryptedShare.salt,
+            input.password,
+            backup.encryptedShare.kdfParams
+          );
+          break;
+        }
+        case "email":
+          recoveryShare = parseVersionedEmailShare(input.emailShare.trim()).share;
+          break;
+      }
+      try {
+        const material = await postJson(
+          `${serverUrl}/keys/recovery-session/recover`,
+          {
+            recoverySessionToken: params.recoverySessionToken,
+            type: input.method,
+            ...input.method === "passkey" ? { credentialId: input.credentialId } : {}
+          },
+          buildHeaders("", void 0, tenantId)
+        );
+        if (input.method === "passkey") {
+          if (!material.encryptedShare) {
+            throw new Error("No passkey recovery data found");
+          }
+          recoveryShare = await decryptShareWithPasskey({
+            encryptedData: material.encryptedShare.encryptedData,
+            iv: material.encryptedShare.iv,
+            credentialId: input.credentialId
+          });
+        }
+        if (!recoveryShare) throw new Error("Recovery data was empty");
+        const authShare = material.authShare.encryptedData;
+        let privateKey;
+        try {
+          privateKey = await reconstructFromShares([recoveryShare, authShare]);
+        } catch {
+          throw new Error(
+            "Recovery produced an incorrect key. Try another recovery method."
+          );
+        }
+        const derivedDid = await params.didFromPrivateKey(privateKey);
+        if (!derivedDid || derivedDid !== material.primaryDid) {
+          throw new Error(
+            "Recovery produced an incorrect key. Try another recovery method."
+          );
+        }
+        pendingIdentityRecovery = {
+          privateKey,
+          primaryDid: material.primaryDid,
+          recoveryShare,
+          authShare,
+          rebindSessionToken: material.rebindSessionToken
+        };
+        return { privateKey, did: material.primaryDid };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Identity recovery failed";
+        throw new IdentityRecoverySessionConsumedError(message);
+      }
+    },
+    hasPendingIdentityRecovery() {
+      return Boolean(pendingIdentityRecovery);
+    },
+    cancelIdentityRecovery() {
+      pendingIdentityRecovery = void 0;
+    },
+    async completeIdentityRecovery(params) {
+      const storage2 = guardedStorage();
+      const generation = storageGeneration;
+      const pending = pendingIdentityRecovery;
+      const signDidAuthVp = params.signDidAuthVp;
+      if (!pending) throw new Error("No identity recovery is waiting for a new sign-in");
+      if (!signDidAuthVp) {
+        throw new Error("DID proof signing is required to bind a new sign-in");
+      }
+      const storageId = activeStorageId;
+      const { shares, shareVersion } = await withShareUpdateLock(
+        storage2,
+        storageId,
+        () => withRotationLock(async () => {
+          const assertActive = /* @__PURE__ */ __name(() => {
+            if (activeStorageId !== storageId || pendingIdentityRecovery !== pending || storageGeneration !== generation) {
+              throw new Error("This recovery request was cancelled.");
+            }
+          }, "assertActive");
+          assertActive();
+          const candidates = await readPendingShareCandidates(storage2, storageId);
+          if (pending.rebind && pending.rebind.storageId !== storageId) {
+            throw new Error("Active account changed during identity recovery");
+          }
+          if (candidates.some(
+            (candidate) => candidate.share !== pending.rebind?.shares.deviceShare
+          )) {
+            throw new Error(
+              "Reconcile the pending share update before binding a sign-in"
+            );
+          }
+          let shareVersion2;
+          const retry = pending.rebind?.attempted ?? false;
+          if (retry && pending.rebind) {
+            const current = await fetchAuthShareRaw(
+              serverUrl,
+              params.token,
+              params.providerType,
+              void 0,
+              tenantId
+            );
+            const authShare = authShareToString(current?.authShare);
+            if (authShare && current?.shareVersion != null) {
+              const health = await verifyStoredShares(
+                {
+                  getDevice: /* @__PURE__ */ __name(async () => pending.rebind.shares.deviceShare, "getDevice"),
+                  getAuth: /* @__PURE__ */ __name(async () => authShare, "getAuth")
+                },
+                pending.primaryDid,
+                async (key) => key === pending.privateKey ? pending.primaryDid : ""
+              );
+              if (health.healthy) shareVersion2 = current.shareVersion;
+            }
+          }
+          assertActive();
+          if (shareVersion2 === void 0) {
+            const didAuthVp = await requestFreshDidAuthVp(
+              serverUrl,
+              pending.privateKey,
+              pending.primaryDid,
+              signDidAuthVp,
+              tenantId
+            );
+            assertActive();
+            pending.rebind ??= {
+              shares: (await splitAndVerify(pending.privateKey)).shares,
+              storageId,
+              attempted: false
+            };
+            const rebind = pending.rebind;
+            if (!candidates.some(
+              (candidate) => candidate.share === rebind.shares.deviceShare
+            )) {
+              await addPendingShareCandidate(
+                storage2,
+                { share: rebind.shares.deviceShare, createdAt: Date.now() },
+                storageId
+              );
+            }
+            assertActive();
+            rebind.attempted = true;
+            try {
+              const response = await postJson(
+                `${serverUrl}/keys/recovery-session/rebind`,
+                {
+                  recoverySessionToken: pending.rebindSessionToken,
+                  providerType: params.providerType,
+                  primaryDid: pending.primaryDid,
+                  authShare: {
+                    encryptedData: rebind.shares.authShare,
+                    encryptedDek: "",
+                    iv: ""
+                  }
+                },
+                {
+                  ...buildHeaders("", didAuthVp, tenantId),
+                  "X-Auth-Token": params.token
+                }
+              );
+              shareVersion2 = response.shareVersion;
+            } catch (error) {
+              if (error instanceof ShareWriteRejectedError && !retry) {
+                await removePendingShareCandidate(
+                  storage2,
+                  rebind.shares.deviceShare,
+                  storageId
+                );
+                pending.rebind = void 0;
+              }
+              throw error;
+            }
+          }
+          if (shareVersion2 === void 0 || !pending.rebind) {
+            throw new Error("Server did not confirm the new share");
+          }
+          assertActive();
+          const shares2 = pending.rebind.shares;
+          await storage2.storeDeviceShare(shares2.deviceShare, storageId);
+          await storage2.storeShareVersion(shareVersion2, storageId);
+          await clearPendingShareCandidates(storage2, storageId);
+          assertActive();
+          lastEmailShare = shares2.emailShare;
+          lastShareVersion = shareVersion2;
+          lastServerSnapshot = {
+            currentVersion: shareVersion2,
+            resolvedVersion: shareVersion2,
+            authShare: shares2.authShare,
+            primaryDid: pending.primaryDid
+          };
+          pendingIdentityRecovery = void 0;
+          return { shares: shares2, shareVersion: shareVersion2 };
+        })
+      );
+      await tryEnrollEscrow(
+        params.token,
+        params.providerType,
+        pending.privateKey,
+        pending.primaryDid,
+        shares,
+        shareVersion,
+        signDidAuthVp,
+        void 0,
+        void 0,
+        true
+      );
+      if (activeStorageId !== storageId || storageGeneration !== generation) {
+        throw new Error("This recovery request was cancelled.");
+      }
+      return { privateKey: pending.privateKey, did: pending.primaryDid };
+    },
     // --- Contact method management ---
     async upgradeContactMethod(token, providerType, previousPhone, email, code) {
       const res = await fetch(`${serverUrl}/keys/upgrade-contact-method`, {
@@ -19948,7 +23058,7 @@ function createSSSStrategy(config) {
       return { customToken: data?.customToken };
     },
     // --- Email backup ---
-    async sendEmailBackupShare(token, providerType, _privateKey, email) {
+    async sendEmailBackupShare(token, providerType, _privateKey, email, didAuthVp) {
       if (!enableEmailBackupShare) return;
       if (!lastEmailShare) {
         console.warn(
@@ -19956,29 +23066,22 @@ function createSSSStrategy(config) {
         );
         return;
       }
-      if (hasRecoveryEmail) {
-        await sendEmailShareToRecoveryEmail(
-          serverUrl,
-          token,
-          providerType,
-          lastEmailShare,
-          lastShareVersion,
-          tenantId
-        );
-      } else {
-        if (!email) {
-          console.warn("Cannot send email backup share: no email address");
-          return;
-        }
+      if (email) {
         await sendEmailBackupShare(
           serverUrl,
           token,
           providerType,
           lastEmailShare,
           email,
+          escrowRelayPublicKey,
+          escrowRelayKeyId,
+          emailBranding,
           lastShareVersion,
+          didAuthVp,
           tenantId
         );
+      } else {
+        throw new Error("Enter a recovery email before sending a recovery key");
       }
       lastEmailShare = void 0;
       lastShareVersion = void 0;
@@ -19995,6 +23098,8 @@ function createSSSStrategy(config) {
       return [SSS_DB_NAME];
     },
     async cleanup() {
+      storageGeneration++;
+      await Promise.allSettled(localWrites);
     }
   };
 }
@@ -20087,13 +23192,7 @@ var decryptShareFromTransfer = /* @__PURE__ */ __name(async (payload, recipientP
 }, "decryptShareFromTransfer");
 
 // src/qr-login.ts
-var buildHeaders2 = /* @__PURE__ */ __name((token) => {
-  const headers = { "Content-Type": "application/json" };
-  if (token) {
-    headers.Authorization = `Bearer ${token}`;
-  }
-  return headers;
-}, "buildHeaders");
+var buildHeaders2 = /* @__PURE__ */ __name(() => ({ "Content-Type": "application/json" }), "buildHeaders");
 var createQrLoginSession = /* @__PURE__ */ __name(async (config) => {
   const ephemeralKeypair = await generateEphemeralKeypair();
   const response = await fetch(`${config.serverUrl}/qr-login/session`, {
@@ -20161,10 +23260,14 @@ var pollUntilApproved = /* @__PURE__ */ __name(async (config, sessionId, ephemer
     await new Promise((resolve, reject) => {
       const timer = setTimeout(resolve, intervalMs);
       if (options?.signal) {
-        options.signal.addEventListener("abort", () => {
-          clearTimeout(timer);
-          reject(new Error("QR login polling aborted"));
-        }, { once: true });
+        options.signal.addEventListener(
+          "abort",
+          () => {
+            clearTimeout(timer);
+            reject(new Error("QR login polling aborted"));
+          },
+          { once: true }
+        );
       }
     });
   }
@@ -20216,43 +23319,69 @@ var notifyDevicesForQrSession = /* @__PURE__ */ __name(async (config, sessionId,
     return { sent: false, deviceCount: 0 };
   }
 }, "notifyDevicesForQrSession");
-
-// src/types.ts
-var import_types = __toESM(require_dist());
 var export_AuthSessionError = import_types.AuthSessionError;
 export {
   AtomicUpdateError,
   export_AuthSessionError as AuthSessionError,
   DEFAULT_KDF_PARAMS,
+  EMAIL_RELAY_ALGORITHM,
+  EMAIL_RELAY_ENVELOPE_VERSION,
+  ESCROW_ALGORITHM,
+  ESCROW_BLOB_INFO,
+  ESCROW_CLIENT_KEY_ID,
+  ESCROW_ENVELOPE_VERSION,
+  ESCROW_PIN_MAX_ATTEMPTS,
+  ESCROW_RELEASE_INFO,
+  EscrowHoldRestartThrottledError,
+  EscrowPinLockedError,
+  EscrowPinMismatchError,
+  EscrowPinThrottledError,
+  EscrowPinUnavailableError,
+  EscrowRequestError,
+  IdentityRecoverySessionConsumedError,
+  NitroAttestationError,
+  PIN_MAX_LENGTH,
+  PIN_MIN_LENGTH,
   SSSApiClient,
   SSSKeyManager,
   SSS_THRESHOLD,
   SSS_TOTAL_SHARES,
   ShareVerificationError,
+  ShareWriteRejectedError,
   approveQrLoginSession,
   atomicRecovery,
   atomicShareUpdate,
   base64ToBuffer,
   bufferToBase64,
+  buildRecoveryPhraseChallengeOptions,
   bytesToHex,
   clearAllShares,
+  constantTimeEqualHex,
   countWords,
   createAdaptiveStorage,
   createPasskeyCredential,
   createQrLoginSession,
   createSSSKeyManager,
   createSSSStrategy,
+  decryptEmailRelayPayload,
+  decryptEscrowBlob,
   decryptShareFromTransfer,
   decryptShareWithPasskey,
   decryptWithPassword,
   deleteDeviceShare,
   deriveKeyFromPasskey,
   deriveKeyFromPassword,
+  derivePinProof,
+  encryptEmailRelayPayload,
+  encryptEscrowBlob,
   encryptShareForTransfer,
   encryptShareWithPasskey,
   encryptWithPassword,
   generateEd25519PrivateKey,
+  generateEmailRelayConfirmationCode,
   generateEphemeralKeypair,
+  generateEscrowKeyPair,
+  generatePinSalt,
   generateRecoveryPhrase,
   getDeviceShare,
   getQrLoginSessionInfo,
@@ -20263,18 +23392,29 @@ export {
   isPublicComputerMode,
   isWebAuthnSupported,
   listAllDeviceShares,
+  normalizePin,
   notifyDevicesForQrSession,
+  openEscrowRelease,
+  parseEmailRelayEnvelope,
+  parseEmailRelayPlaintext,
+  parseEscrowBlobPlaintext,
+  parseEscrowEnvelope,
+  parseEscrowReleasePlaintext,
   pollQrLoginSession,
   pollUntilApproved,
   reconstructFromShares,
   reconstructPrivateKey,
   recoveryPhraseToShare,
+  sealEscrowRelease,
   setPublicComputerMode,
   shareToRecoveryPhrase,
   splitAndVerify,
   splitPrivateKey,
   storeDeviceShare,
   storeShareVersion,
+  validatePin,
   validateRecoveryPhrase,
+  verifyEnclaveAttestation,
+  verifyNitroAttestationDocument,
   verifyStoredShares
 };