@learncard/sss-key-manager 0.2.0 → 0.2.2

package/dist/sss-key-manager.esm.js

@@ -6,7 +6,11 @@ var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
@@ -73,6 +77,12 @@ var require_types_cjs_development = __commonJS({
       AppEventResponseValidator: /* @__PURE__ */ __name(() => AppEventResponseValidator, "AppEventResponseValidator"),
       AppEventValidator: /* @__PURE__ */ __name(() => AppEventValidator, "AppEventValidator"),
       AppListingStatusValidator: /* @__PURE__ */ __name(() => AppListingStatusValidator, "AppListingStatusValidator"),
+      AppManifestDiffValidator: /* @__PURE__ */ __name(() => AppManifestDiffValidator, "AppManifestDiffValidator"),
+      AppManifestTemplateChangeValidator: /* @__PURE__ */ __name(() => AppManifestTemplateChangeValidator, "AppManifestTemplateChangeValidator"),
+      AppManifestTemplateRefValidator: /* @__PURE__ */ __name(() => AppManifestTemplateRefValidator, "AppManifestTemplateRefValidator"),
+      AppManifestValidator: /* @__PURE__ */ __name(() => AppManifestValidator, "AppManifestValidator"),
+      AppManifestVersionStatusValidator: /* @__PURE__ */ __name(() => AppManifestVersionStatusValidator, "AppManifestVersionStatusValidator"),
+      AppManifestVersionValidator: /* @__PURE__ */ __name(() => AppManifestVersionValidator, "AppManifestVersionValidator"),
       AppStoreListingCreateValidator: /* @__PURE__ */ __name(() => AppStoreListingCreateValidator, "AppStoreListingCreateValidator"),
       AppStoreListingSubmitterValidator: /* @__PURE__ */ __name(() => AppStoreListingSubmitterValidator, "AppStoreListingSubmitterValidator"),
       AppStoreListingUpdateValidator: /* @__PURE__ */ __name(() => AppStoreListingUpdateValidator, "AppStoreListingUpdateValidator"),
@@ -94,6 +104,8 @@ var require_types_cjs_development = __commonJS({
       BoostRecipientValidator: /* @__PURE__ */ __name(() => BoostRecipientValidator, "BoostRecipientValidator"),
       BoostRecipientWithChildrenValidator: /* @__PURE__ */ __name(() => BoostRecipientWithChildrenValidator, "BoostRecipientWithChildrenValidator"),
       BoostValidator: /* @__PURE__ */ __name(() => BoostValidator, "BoostValidator"),
+      CapturedConsentRecordValidator: /* @__PURE__ */ __name(() => CapturedConsentRecordValidator, "CapturedConsentRecordValidator"),
+      CapturedTemplateRecordValidator: /* @__PURE__ */ __name(() => CapturedTemplateRecordValidator, "CapturedTemplateRecordValidator"),
       CheckCredentialEventValidator: /* @__PURE__ */ __name(() => CheckCredentialEventValidator, "CheckCredentialEventValidator"),
       CheckIssuanceStatusEventValidator: /* @__PURE__ */ __name(() => CheckIssuanceStatusEventValidator, "CheckIssuanceStatusEventValidator"),
       ClaimHookQueryValidator: /* @__PURE__ */ __name(() => ClaimHookQueryValidator, "ClaimHookQueryValidator"),
@@ -115,6 +127,7 @@ var require_types_cjs_development = __commonJS({
       ConsentFlowDataForDidQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowDataForDidQueryValidator, "ConsentFlowDataForDidQueryValidator"),
       ConsentFlowDataQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowDataQueryValidator, "ConsentFlowDataQueryValidator"),
       ConsentFlowGuardianApprovalValidator: /* @__PURE__ */ __name(() => ConsentFlowGuardianApprovalValidator, "ConsentFlowGuardianApprovalValidator"),
+      ConsentFlowReferralValidator: /* @__PURE__ */ __name(() => ConsentFlowReferralValidator, "ConsentFlowReferralValidator"),
       ConsentFlowTermValidator: /* @__PURE__ */ __name(() => ConsentFlowTermValidator, "ConsentFlowTermValidator"),
       ConsentFlowTermsQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowTermsQueryValidator, "ConsentFlowTermsQueryValidator"),
       ConsentFlowTermsStatusValidator: /* @__PURE__ */ __name(() => ConsentFlowTermsStatusValidator, "ConsentFlowTermsStatusValidator"),
@@ -122,6 +135,10 @@ var require_types_cjs_development = __commonJS({
       ConsentFlowTransactionActionValidator: /* @__PURE__ */ __name(() => ConsentFlowTransactionActionValidator, "ConsentFlowTransactionActionValidator"),
       ConsentFlowTransactionValidator: /* @__PURE__ */ __name(() => ConsentFlowTransactionValidator, "ConsentFlowTransactionValidator"),
       ConsentFlowTransactionsQueryValidator: /* @__PURE__ */ __name(() => ConsentFlowTransactionsQueryValidator, "ConsentFlowTransactionsQueryValidator"),
+      ConsentFlowWebhookMetadataValidator: /* @__PURE__ */ __name(() => ConsentFlowWebhookMetadataValidator, "ConsentFlowWebhookMetadataValidator"),
+      ConsentRequestPersonalFieldValidator: /* @__PURE__ */ __name(() => ConsentRequestPersonalFieldValidator, "ConsentRequestPersonalFieldValidator"),
+      ConsentRequestValidator: /* @__PURE__ */ __name(() => ConsentRequestValidator, "ConsentRequestValidator"),
+      ConsentRequestWalletCategoryValidator: /* @__PURE__ */ __name(() => ConsentRequestWalletCategoryValidator, "ConsentRequestWalletCategoryValidator"),
       ContactMethodCreateValidator: /* @__PURE__ */ __name(() => ContactMethodCreateValidator, "ContactMethodCreateValidator"),
       ContactMethodQueryValidator: /* @__PURE__ */ __name(() => ContactMethodQueryValidator, "ContactMethodQueryValidator"),
       ContactMethodValidator: /* @__PURE__ */ __name(() => ContactMethodValidator, "ContactMethodValidator"),
@@ -129,6 +146,7 @@ var require_types_cjs_development = __commonJS({
       ContactMethodVerificationValidator: /* @__PURE__ */ __name(() => ContactMethodVerificationValidator, "ContactMethodVerificationValidator"),
       ContextValidator: /* @__PURE__ */ __name(() => ContextValidator, "ContextValidator"),
       ContractCredentialValidator: /* @__PURE__ */ __name(() => ContractCredentialValidator, "ContractCredentialValidator"),
+      ContractRequestFieldsValidator: /* @__PURE__ */ __name(() => ContractRequestFieldsValidator, "ContractRequestFieldsValidator"),
       CountSkillsInputValidator: /* @__PURE__ */ __name(() => CountSkillsInputValidator, "CountSkillsInputValidator"),
       CountSkillsResultValidator: /* @__PURE__ */ __name(() => CountSkillsResultValidator, "CountSkillsResultValidator"),
       CreateContactMethodSessionResponseValidator: /* @__PURE__ */ __name(() => CreateContactMethodSessionResponseValidator, "CreateContactMethodSessionResponseValidator"),
@@ -164,6 +182,8 @@ var require_types_cjs_development = __commonJS({
       CriteriaValidator: /* @__PURE__ */ __name(() => CriteriaValidator, "CriteriaValidator"),
       DEFAULT_BITSTRING_STATUS_LIST_SIZE: /* @__PURE__ */ __name(() => DEFAULT_BITSTRING_STATUS_LIST_SIZE, "DEFAULT_BITSTRING_STATUS_LIST_SIZE"),
       DeleteFrameworkInputValidator: /* @__PURE__ */ __name(() => DeleteFrameworkInputValidator, "DeleteFrameworkInputValidator"),
+      DeleteShareLinkAttachmentChunksInputValidator: /* @__PURE__ */ __name(() => DeleteShareLinkAttachmentChunksInputValidator, "DeleteShareLinkAttachmentChunksInputValidator"),
+      DeleteShareLinkAttachmentChunksOutputValidator: /* @__PURE__ */ __name(() => DeleteShareLinkAttachmentChunksOutputValidator, "DeleteShareLinkAttachmentChunksOutputValidator"),
       DeleteSkillInputValidator: /* @__PURE__ */ __name(() => DeleteSkillInputValidator, "DeleteSkillInputValidator"),
       DidDocumentValidator: /* @__PURE__ */ __name(() => DidDocumentValidator, "DidDocumentValidator"),
       EMPTY_IN_APP_MESSAGES_FLAG: /* @__PURE__ */ __name(() => EMPTY_IN_APP_MESSAGES_FLAG, "EMPTY_IN_APP_MESSAGES_FLAG"),
@@ -186,6 +206,7 @@ var require_types_cjs_development = __commonJS({
       GetCredentialRefreshHistoryResultValidator: /* @__PURE__ */ __name(() => GetCredentialRefreshHistoryResultValidator, "GetCredentialRefreshHistoryResultValidator"),
       GetFullSkillTreeInputValidator: /* @__PURE__ */ __name(() => GetFullSkillTreeInputValidator, "GetFullSkillTreeInputValidator"),
       GetFullSkillTreeResultValidator: /* @__PURE__ */ __name(() => GetFullSkillTreeResultValidator, "GetFullSkillTreeResultValidator"),
+      GetShareLinkAttachmentChunkInputValidator: /* @__PURE__ */ __name(() => GetShareLinkAttachmentChunkInputValidator, "GetShareLinkAttachmentChunkInputValidator"),
       GetSkillPathInputValidator: /* @__PURE__ */ __name(() => GetSkillPathInputValidator, "GetSkillPathInputValidator"),
       GetSkillPathResultValidator: /* @__PURE__ */ __name(() => GetSkillPathResultValidator, "GetSkillPathResultValidator"),
       GetTemplateRecipientsEventValidator: /* @__PURE__ */ __name(() => GetTemplateRecipientsEventValidator, "GetTemplateRecipientsEventValidator"),
@@ -203,6 +224,12 @@ var require_types_cjs_development = __commonJS({
       InboxCredentialRefreshReceiptValidator: /* @__PURE__ */ __name(() => InboxCredentialRefreshReceiptValidator, "InboxCredentialRefreshReceiptValidator"),
       InboxCredentialValidator: /* @__PURE__ */ __name(() => InboxCredentialValidator, "InboxCredentialValidator"),
       IncrementCounterEventValidator: /* @__PURE__ */ __name(() => IncrementCounterEventValidator, "IncrementCounterEventValidator"),
+      InlineAlignmentValidator: /* @__PURE__ */ __name(() => InlineAlignmentValidator, "InlineAlignmentValidator"),
+      InlineCredentialTemplateValidator: /* @__PURE__ */ __name(() => InlineCredentialTemplateValidator, "InlineCredentialTemplateValidator"),
+      InlineEvidenceValidator: /* @__PURE__ */ __name(() => InlineEvidenceValidator, "InlineEvidenceValidator"),
+      InlineSendCredentialEventValidator: /* @__PURE__ */ __name(() => InlineSendCredentialEventValidator, "InlineSendCredentialEventValidator"),
+      InlineWalletCategoryValidator: /* @__PURE__ */ __name(() => InlineWalletCategoryValidator, "InlineWalletCategoryValidator"),
+      InlineWalletSkillTagValidator: /* @__PURE__ */ __name(() => InlineWalletSkillTagValidator, "InlineWalletSkillTagValidator"),
       InstalledAppValidator: /* @__PURE__ */ __name(() => InstalledAppValidator, "InstalledAppValidator"),
       IssueInboxCredentialBatchItemResultValidator: /* @__PURE__ */ __name(() => IssueInboxCredentialBatchItemResultValidator, "IssueInboxCredentialBatchItemResultValidator"),
       IssueInboxCredentialBatchItemValidator: /* @__PURE__ */ __name(() => IssueInboxCredentialBatchItemValidator, "IssueInboxCredentialBatchItemValidator"),
@@ -255,6 +282,7 @@ var require_types_cjs_development = __commonJS({
       LCNVisibleProfileValidator: /* @__PURE__ */ __name(() => LCNVisibleProfileValidator, "LCNVisibleProfileValidator"),
       LaunchTypeValidator: /* @__PURE__ */ __name(() => LaunchTypeValidator, "LaunchTypeValidator"),
       LearnCardRefreshAuthorizationValidator: /* @__PURE__ */ __name(() => LearnCardRefreshAuthorizationValidator, "LearnCardRefreshAuthorizationValidator"),
+      LegacySendCredentialEventValidator: /* @__PURE__ */ __name(() => LegacySendCredentialEventValidator, "LegacySendCredentialEventValidator"),
       LinkProviderFrameworkInputValidator: /* @__PURE__ */ __name(() => LinkProviderFrameworkInputValidator, "LinkProviderFrameworkInputValidator"),
       ListShareLinksInputValidator: /* @__PURE__ */ __name(() => ListShareLinksInputValidator, "ListShareLinksInputValidator"),
       MAX_ENDORSEMENTS: /* @__PURE__ */ __name(() => MAX_ENDORSEMENTS, "MAX_ENDORSEMENTS"),
@@ -266,6 +294,7 @@ var require_types_cjs_development = __commonJS({
       MAX_VP_MEMBERS: /* @__PURE__ */ __name(() => MAX_VP_MEMBERS, "MAX_VP_MEMBERS"),
       ManagedCredentialRefreshReceiptValidator: /* @__PURE__ */ __name(() => ManagedCredentialRefreshReceiptValidator, "ManagedCredentialRefreshReceiptValidator"),
       ManagedCredentialRefreshServiceValidator: /* @__PURE__ */ __name(() => ManagedCredentialRefreshServiceValidator, "ManagedCredentialRefreshServiceValidator"),
+      NormalizedConsentScopesValidator: /* @__PURE__ */ __name(() => NormalizedConsentScopesValidator, "NormalizedConsentScopesValidator"),
       PaginatedAppStoreListingsValidator: /* @__PURE__ */ __name(() => PaginatedAppStoreListingsValidator, "PaginatedAppStoreListingsValidator"),
       PaginatedBoostRecipientsValidator: /* @__PURE__ */ __name(() => PaginatedBoostRecipientsValidator, "PaginatedBoostRecipientsValidator"),
       PaginatedBoostRecipientsWithChildrenValidator: /* @__PURE__ */ __name(() => PaginatedBoostRecipientsWithChildrenValidator, "PaginatedBoostRecipientsWithChildrenValidator"),
@@ -292,6 +321,8 @@ var require_types_cjs_development = __commonJS({
       PaginatedVisibleLCNProfilesValidator: /* @__PURE__ */ __name(() => PaginatedVisibleLCNProfilesValidator, "PaginatedVisibleLCNProfilesValidator"),
       PaginationOptionsValidator: /* @__PURE__ */ __name(() => PaginationOptionsValidator, "PaginationOptionsValidator"),
       PaginationResponseValidator: /* @__PURE__ */ __name(() => PaginationResponseValidator, "PaginationResponseValidator"),
+      PendingListingUpdateStatusValidator: /* @__PURE__ */ __name(() => PendingListingUpdateStatusValidator, "PendingListingUpdateStatusValidator"),
+      PendingListingUpdateValidator: /* @__PURE__ */ __name(() => PendingListingUpdateValidator, "PendingListingUpdateValidator"),
       PrepareRefreshableSendInputValidator: /* @__PURE__ */ __name(() => PrepareRefreshableSendInputValidator, "PrepareRefreshableSendInputValidator"),
       PrepareRefreshableSendResultValidator: /* @__PURE__ */ __name(() => PrepareRefreshableSendResultValidator, "PrepareRefreshableSendResultValidator"),
       ProfileValidator: /* @__PURE__ */ __name(() => ProfileValidator, "ProfileValidator"),
@@ -304,6 +335,9 @@ var require_types_cjs_development = __commonJS({
       PublishCredentialRefreshResultValidator: /* @__PURE__ */ __name(() => PublishCredentialRefreshResultValidator, "PublishCredentialRefreshResultValidator"),
       PublishIssuerSignedRefreshValidator: /* @__PURE__ */ __name(() => PublishIssuerSignedRefreshValidator, "PublishIssuerSignedRefreshValidator"),
       PublishSigningAuthorityRefreshValidator: /* @__PURE__ */ __name(() => PublishSigningAuthorityRefreshValidator, "PublishSigningAuthorityRefreshValidator"),
+      PutShareLinkAttachmentChunkInputValidator: /* @__PURE__ */ __name(() => PutShareLinkAttachmentChunkInputValidator, "PutShareLinkAttachmentChunkInputValidator"),
+      PutShareLinkAttachmentChunkOutputValidator: /* @__PURE__ */ __name(() => PutShareLinkAttachmentChunkOutputValidator, "PutShareLinkAttachmentChunkOutputValidator"),
+      RawInlineCredentialTemplateValidator: /* @__PURE__ */ __name(() => RawInlineCredentialTemplateValidator, "RawInlineCredentialTemplateValidator"),
       RefreshServiceValidator: /* @__PURE__ */ __name(() => RefreshServiceValidator, "RefreshServiceValidator"),
       RegExpValidator: /* @__PURE__ */ __name(() => RegExpValidator, "RegExpValidator"),
       RelatedValidator: /* @__PURE__ */ __name(() => RelatedValidator, "RelatedValidator"),
@@ -330,6 +364,7 @@ var require_types_cjs_development = __commonJS({
       SendBoostResponseValidator: /* @__PURE__ */ __name(() => SendBoostResponseValidator, "SendBoostResponseValidator"),
       SendBoostTemplateValidator: /* @__PURE__ */ __name(() => SendBoostTemplateValidator, "SendBoostTemplateValidator"),
       SendBrandingOptionsValidator: /* @__PURE__ */ __name(() => SendBrandingOptionsValidator, "SendBrandingOptionsValidator"),
+      SendContractRequestValidator: /* @__PURE__ */ __name(() => SendContractRequestValidator, "SendContractRequestValidator"),
       SendCredentialEventValidator: /* @__PURE__ */ __name(() => SendCredentialEventValidator, "SendCredentialEventValidator"),
       SendInboxResponseValidator: /* @__PURE__ */ __name(() => SendInboxResponseValidator, "SendInboxResponseValidator"),
       SendInputValidator: /* @__PURE__ */ __name(() => SendInputValidator, "SendInputValidator"),
@@ -345,6 +380,9 @@ var require_types_cjs_development = __commonJS({
       ShareEndorsementEntryValidator: /* @__PURE__ */ __name(() => ShareEndorsementEntryValidator, "ShareEndorsementEntryValidator"),
       ShareEnvelopeValidator: /* @__PURE__ */ __name(() => ShareEnvelopeValidator, "ShareEnvelopeValidator"),
       ShareIvValidator: /* @__PURE__ */ __name(() => ShareIvValidator, "ShareIvValidator"),
+      ShareLinkAttachmentChunkEnvelopeValidator: /* @__PURE__ */ __name(() => ShareLinkAttachmentChunkEnvelopeValidator, "ShareLinkAttachmentChunkEnvelopeValidator"),
+      ShareLinkAttachmentChunkOutputValidator: /* @__PURE__ */ __name(() => ShareLinkAttachmentChunkOutputValidator, "ShareLinkAttachmentChunkOutputValidator"),
+      ShareLinkAttachmentValidator: /* @__PURE__ */ __name(() => ShareLinkAttachmentValidator, "ShareLinkAttachmentValidator"),
       ShareLinkIdInputValidator: /* @__PURE__ */ __name(() => ShareLinkIdInputValidator, "ShareLinkIdInputValidator"),
       ShareLinkIdValidator: /* @__PURE__ */ __name(() => ShareLinkIdValidator, "ShareLinkIdValidator"),
       ShareLinkOperationKeyInputValidator: /* @__PURE__ */ __name(() => ShareLinkOperationKeyInputValidator, "ShareLinkOperationKeyInputValidator"),
@@ -365,6 +403,7 @@ var require_types_cjs_development = __commonJS({
       ShareRecoverySelectionValidator: /* @__PURE__ */ __name(() => ShareRecoverySelectionValidator, "ShareRecoverySelectionValidator"),
       ShareSelectionEntryValidator: /* @__PURE__ */ __name(() => ShareSelectionEntryValidator, "ShareSelectionEntryValidator"),
       ShareSharerValidator: /* @__PURE__ */ __name(() => ShareSharerValidator, "ShareSharerValidator"),
+      SimpleInlineCredentialTemplateValidator: /* @__PURE__ */ __name(() => SimpleInlineCredentialTemplateValidator, "SimpleInlineCredentialTemplateValidator"),
       SkillDeletionStrategyValidator: /* @__PURE__ */ __name(() => SkillDeletionStrategyValidator, "SkillDeletionStrategyValidator"),
       SkillFrameworkAdminInputValidator: /* @__PURE__ */ __name(() => SkillFrameworkAdminInputValidator, "SkillFrameworkAdminInputValidator"),
       SkillFrameworkAdminsValidator: /* @__PURE__ */ __name(() => SkillFrameworkAdminsValidator, "SkillFrameworkAdminsValidator"),
@@ -395,9 +434,12 @@ var require_types_cjs_development = __commonJS({
       UnsignedClrCredentialValidator: /* @__PURE__ */ __name(() => UnsignedClrCredentialValidator, "UnsignedClrCredentialValidator"),
       UnsignedVCValidator: /* @__PURE__ */ __name(() => UnsignedVCValidator, "UnsignedVCValidator"),
       UnsignedVPValidator: /* @__PURE__ */ __name(() => UnsignedVPValidator, "UnsignedVPValidator"),
+      UnsupportedSignInOperationError: /* @__PURE__ */ __name(() => UnsupportedSignInOperationError, "UnsupportedSignInOperationError"),
       UpdateFrameworkInputValidator: /* @__PURE__ */ __name(() => UpdateFrameworkInputValidator, "UpdateFrameworkInputValidator"),
       UpdateShareLinkInputValidator: /* @__PURE__ */ __name(() => UpdateShareLinkInputValidator, "UpdateShareLinkInputValidator"),
       UpdateSkillInputValidator: /* @__PURE__ */ __name(() => UpdateSkillInputValidator, "UpdateSkillInputValidator"),
+      UpsertConsentContractEventValidator: /* @__PURE__ */ __name(() => UpsertConsentContractEventValidator, "UpsertConsentContractEventValidator"),
+      UpsertConsentContractResponseValidator: /* @__PURE__ */ __name(() => UpsertConsentContractResponseValidator, "UpsertConsentContractResponseValidator"),
       VC2EvidenceValidator: /* @__PURE__ */ __name(() => VC2EvidenceValidator, "VC2EvidenceValidator"),
       VCValidator: /* @__PURE__ */ __name(() => VCValidator, "VCValidator"),
       VPValidator: /* @__PURE__ */ __name(() => VPValidator, "VPValidator"),
@@ -526,7 +568,7 @@ var require_types_cjs_development = __commonJS({
       _function: /* @__PURE__ */ __name(() => _function, "_function"),
       any: /* @__PURE__ */ __name(() => any, "any"),
       array: /* @__PURE__ */ __name(() => array, "array"),
-      base64: /* @__PURE__ */ __name(() => base642, "base64"),
+      base64: /* @__PURE__ */ __name(() => base6422, "base64"),
       base64url: /* @__PURE__ */ __name(() => base64url2, "base64url"),
       bigint: /* @__PURE__ */ __name(() => bigint2, "bigint"),
       boolean: /* @__PURE__ */ __name(() => boolean2, "boolean"),
@@ -543,14 +585,14 @@ var require_types_cjs_development = __commonJS({
       cuid2: /* @__PURE__ */ __name(() => cuid22, "cuid2"),
       custom: /* @__PURE__ */ __name(() => custom, "custom"),
       date: /* @__PURE__ */ __name(() => date3, "date"),
-      decode: /* @__PURE__ */ __name(() => decode2, "decode"),
+      decode: /* @__PURE__ */ __name(() => decode22, "decode"),
       decodeAsync: /* @__PURE__ */ __name(() => decodeAsync2, "decodeAsync"),
       describe: /* @__PURE__ */ __name(() => describe2, "describe"),
       discriminatedUnion: /* @__PURE__ */ __name(() => discriminatedUnion, "discriminatedUnion"),
       e164: /* @__PURE__ */ __name(() => e1642, "e164"),
       email: /* @__PURE__ */ __name(() => email2, "email"),
       emoji: /* @__PURE__ */ __name(() => emoji2, "emoji"),
-      encode: /* @__PURE__ */ __name(() => encode2, "encode"),
+      encode: /* @__PURE__ */ __name(() => encode22, "encode"),
       encodeAsync: /* @__PURE__ */ __name(() => encodeAsync2, "encodeAsync"),
       endsWith: /* @__PURE__ */ __name(() => _endsWith, "endsWith"),
       enum: /* @__PURE__ */ __name(() => _enum2, "enum"),
@@ -567,8 +609,8 @@ var require_types_cjs_development = __commonJS({
       gt: /* @__PURE__ */ __name(() => _gt, "gt"),
       gte: /* @__PURE__ */ __name(() => _gte, "gte"),
       guid: /* @__PURE__ */ __name(() => guid2, "guid"),
-      hash: /* @__PURE__ */ __name(() => hash, "hash"),
-      hex: /* @__PURE__ */ __name(() => hex2, "hex"),
+      hash: /* @__PURE__ */ __name(() => hash2, "hash"),
+      hex: /* @__PURE__ */ __name(() => hex22, "hex"),
       hostname: /* @__PURE__ */ __name(() => hostname2, "hostname"),
       httpUrl: /* @__PURE__ */ __name(() => httpUrl, "httpUrl"),
       includes: /* @__PURE__ */ __name(() => _includes, "includes"),
@@ -595,7 +637,7 @@ var require_types_cjs_development = __commonJS({
       lt: /* @__PURE__ */ __name(() => _lt, "lt"),
       lte: /* @__PURE__ */ __name(() => _lte, "lte"),
       mac: /* @__PURE__ */ __name(() => mac2, "mac"),
-      map: /* @__PURE__ */ __name(() => map, "map"),
+      map: /* @__PURE__ */ __name(() => map2, "map"),
       maxLength: /* @__PURE__ */ __name(() => _maxLength, "maxLength"),
       maxSize: /* @__PURE__ */ __name(() => _maxSize, "maxSize"),
       meta: /* @__PURE__ */ __name(() => meta2, "meta"),
@@ -616,7 +658,7 @@ var require_types_cjs_development = __commonJS({
       nullable: /* @__PURE__ */ __name(() => nullable, "nullable"),
       nullish: /* @__PURE__ */ __name(() => nullish2, "nullish"),
       number: /* @__PURE__ */ __name(() => number2, "number"),
-      object: /* @__PURE__ */ __name(() => object, "object"),
+      object: /* @__PURE__ */ __name(() => object2, "object"),
       optional: /* @__PURE__ */ __name(() => optional, "optional"),
       overwrite: /* @__PURE__ */ __name(() => _overwrite, "overwrite"),
       parse: /* @__PURE__ */ __name(() => parse2, "parse"),
@@ -920,10 +962,10 @@ var require_types_cjs_development = __commonJS({
       config: /* @__PURE__ */ __name(() => config, "config"),
       createStandardJSONSchemaMethod: /* @__PURE__ */ __name(() => createStandardJSONSchemaMethod, "createStandardJSONSchemaMethod"),
       createToJSONSchemaMethod: /* @__PURE__ */ __name(() => createToJSONSchemaMethod, "createToJSONSchemaMethod"),
-      decode: /* @__PURE__ */ __name(() => decode, "decode"),
+      decode: /* @__PURE__ */ __name(() => decode2, "decode"),
       decodeAsync: /* @__PURE__ */ __name(() => decodeAsync, "decodeAsync"),
       describe: /* @__PURE__ */ __name(() => describe, "describe"),
-      encode: /* @__PURE__ */ __name(() => encode, "encode"),
+      encode: /* @__PURE__ */ __name(() => encode2, "encode"),
       encodeAsync: /* @__PURE__ */ __name(() => encodeAsync, "encodeAsync"),
       extractDefs: /* @__PURE__ */ __name(() => extractDefs, "extractDefs"),
       finalize: /* @__PURE__ */ __name(() => finalize, "finalize"),
@@ -978,9 +1020,9 @@ var require_types_cjs_development = __commonJS({
         inst._zod.traits.add(name);
         initializer3(inst, def);
         const proto = _.prototype;
-        const keys = Object.keys(proto);
-        for (let i = 0; i < keys.length; i++) {
-          const k = keys[i];
+        const keys2 = Object.keys(proto);
+        for (let i = 0; i < keys2.length; i++) {
+          const k = keys2[i];
           if (!(k in inst)) {
             inst[k] = proto[k].bind(inst);
           }
@@ -1202,9 +1244,9 @@ var require_types_cjs_development = __commonJS({
     __name(floatSafeRemainder, "floatSafeRemainder");
     __name2(floatSafeRemainder, "floatSafeRemainder");
     var EVALUATING = /* @__PURE__ */ Symbol("evaluating");
-    function defineLazy(object2, key, getter) {
+    function defineLazy(object22, key, getter) {
       let value = void 0;
-      Object.defineProperty(object2, key, {
+      Object.defineProperty(object22, key, {
         get() {
           if (value === EVALUATING) {
             return void 0;
@@ -1216,7 +1258,7 @@ var require_types_cjs_development = __commonJS({
           return value;
         },
         set(v) {
-          Object.defineProperty(object2, key, {
+          Object.defineProperty(object22, key, {
             value: v
             // configurable: true,
           });
@@ -1264,12 +1306,12 @@ var require_types_cjs_development = __commonJS({
     __name(getElementAtPath, "getElementAtPath");
     __name2(getElementAtPath, "getElementAtPath");
     function promiseAllObject(promisesObj) {
-      const keys = Object.keys(promisesObj);
-      const promises = keys.map((key) => promisesObj[key]);
+      const keys2 = Object.keys(promisesObj);
+      const promises = keys2.map((key) => promisesObj[key]);
       return Promise.all(promises).then((results) => {
         const resolvedObj = {};
-        for (let i = 0; i < keys.length; i++) {
-          resolvedObj[keys[i]] = results[i];
+        for (let i = 0; i < keys2.length; i++) {
+          resolvedObj[keys2[i]] = results[i];
         }
         return resolvedObj;
       });
@@ -1809,18 +1851,18 @@ var require_types_cjs_development = __commonJS({
     __name2(cleanEnum, "cleanEnum");
     function base64ToUint8Array(base643) {
       const binaryString = atob(base643);
-      const bytes = new Uint8Array(binaryString.length);
+      const bytes3 = new Uint8Array(binaryString.length);
       for (let i = 0; i < binaryString.length; i++) {
-        bytes[i] = binaryString.charCodeAt(i);
+        bytes3[i] = binaryString.charCodeAt(i);
       }
-      return bytes;
+      return bytes3;
     }
     __name(base64ToUint8Array, "base64ToUint8Array");
     __name2(base64ToUint8Array, "base64ToUint8Array");
-    function uint8ArrayToBase64(bytes) {
+    function uint8ArrayToBase64(bytes3) {
       let binaryString = "";
-      for (let i = 0; i < bytes.length; i++) {
-        binaryString += String.fromCharCode(bytes[i]);
+      for (let i = 0; i < bytes3.length; i++) {
+        binaryString += String.fromCharCode(bytes3[i]);
       }
       return btoa(binaryString);
     }
@@ -1833,8 +1875,8 @@ var require_types_cjs_development = __commonJS({
     }
     __name(base64urlToUint8Array, "base64urlToUint8Array");
     __name2(base64urlToUint8Array, "base64urlToUint8Array");
-    function uint8ArrayToBase64url(bytes) {
-      return uint8ArrayToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+    function uint8ArrayToBase64url(bytes3) {
+      return uint8ArrayToBase64(bytes3).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
     }
     __name(uint8ArrayToBase64url, "uint8ArrayToBase64url");
     __name2(uint8ArrayToBase64url, "uint8ArrayToBase64url");
@@ -1843,16 +1885,16 @@ var require_types_cjs_development = __commonJS({
       if (cleanHex.length % 2 !== 0) {
         throw new Error("Invalid hex string length");
       }
-      const bytes = new Uint8Array(cleanHex.length / 2);
+      const bytes3 = new Uint8Array(cleanHex.length / 2);
       for (let i = 0; i < cleanHex.length; i += 2) {
-        bytes[i / 2] = Number.parseInt(cleanHex.slice(i, i + 2), 16);
+        bytes3[i / 2] = Number.parseInt(cleanHex.slice(i, i + 2), 16);
       }
-      return bytes;
+      return bytes3;
     }
     __name(hexToUint8Array, "hexToUint8Array");
     __name2(hexToUint8Array, "hexToUint8Array");
-    function uint8ArrayToHex(bytes) {
-      return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+    function uint8ArrayToHex(bytes3) {
+      return Array.from(bytes3).map((b) => b.toString(16).padStart(2, "0")).join("");
     }
     __name(uint8ArrayToHex, "uint8ArrayToHex");
     __name2(uint8ArrayToHex, "uint8ArrayToHex");
@@ -2067,11 +2109,11 @@ var require_types_cjs_development = __commonJS({
       const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
       return _parse(_Err)(schema, value, ctx);
     }, "_encode");
-    var encode = /* @__PURE__ */ _encode($ZodRealError);
+    var encode2 = /* @__PURE__ */ _encode($ZodRealError);
     var _decode = /* @__PURE__ */ __name2((_Err) => (schema, value, _ctx) => {
       return _parse(_Err)(schema, value, _ctx);
     }, "_decode");
-    var decode = /* @__PURE__ */ _decode($ZodRealError);
+    var decode2 = /* @__PURE__ */ _decode($ZodRealError);
     var _encodeAsync = /* @__PURE__ */ __name2((_Err) => async (schema, value, _ctx) => {
       const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
       return _parseAsync(_Err)(schema, value, ctx);
@@ -2101,7 +2143,7 @@ var require_types_cjs_development = __commonJS({
     var safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync($ZodRealError);
     var regexes_exports = {};
     __export(regexes_exports, {
-      base64: /* @__PURE__ */ __name(() => base64, "base64"),
+      base64: /* @__PURE__ */ __name(() => base642, "base64"),
       base64url: /* @__PURE__ */ __name(() => base64url, "base64url"),
       bigint: /* @__PURE__ */ __name(() => bigint, "bigint"),
       boolean: /* @__PURE__ */ __name(() => boolean, "boolean"),
@@ -2119,12 +2161,12 @@ var require_types_cjs_development = __commonJS({
       emoji: /* @__PURE__ */ __name(() => emoji, "emoji"),
       extendedDuration: /* @__PURE__ */ __name(() => extendedDuration, "extendedDuration"),
       guid: /* @__PURE__ */ __name(() => guid, "guid"),
-      hex: /* @__PURE__ */ __name(() => hex, "hex"),
+      hex: /* @__PURE__ */ __name(() => hex2, "hex"),
       hostname: /* @__PURE__ */ __name(() => hostname, "hostname"),
       html5Email: /* @__PURE__ */ __name(() => html5Email, "html5Email"),
       httpProtocol: /* @__PURE__ */ __name(() => httpProtocol, "httpProtocol"),
       idnEmail: /* @__PURE__ */ __name(() => idnEmail, "idnEmail"),
-      integer: /* @__PURE__ */ __name(() => integer, "integer"),
+      integer: /* @__PURE__ */ __name(() => integer3, "integer"),
       ipv4: /* @__PURE__ */ __name(() => ipv4, "ipv4"),
       ipv6: /* @__PURE__ */ __name(() => ipv6, "ipv6"),
       ksuid: /* @__PURE__ */ __name(() => ksuid, "ksuid"),
@@ -2198,7 +2240,7 @@ var require_types_cjs_development = __commonJS({
     }, "mac");
     var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
     var cidrv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/;
-    var base64 = /^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$/;
+    var base642 = /^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$/;
     var base64url = /^[A-Za-z0-9_-]*$/;
     var hostname = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
     var domain = /^([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/;
@@ -2235,14 +2277,14 @@ var require_types_cjs_development = __commonJS({
       return new RegExp(`^${regex}$`);
     }, "string");
     var bigint = /^-?\d+n?$/;
-    var integer = /^-?\d+$/;
+    var integer3 = /^-?\d+$/;
     var number = /^-?\d+(?:\.\d+)?$/;
     var boolean = /^(?:true|false)$/i;
     var _null = /^null$/i;
     var _undefined = /^undefined$/i;
     var lowercase = /^[^A-Z]*$/;
     var uppercase = /^[^a-z]*$/;
-    var hex = /^[0-9a-fA-F]*$/;
+    var hex2 = /^[0-9a-fA-F]*$/;
     function fixedBase64(bodyLength, padding) {
       return new RegExp(`^[A-Za-z0-9+/]{${bodyLength}}${padding}$`);
     }
@@ -2369,7 +2411,7 @@ var require_types_cjs_development = __commonJS({
         bag.minimum = minimum;
         bag.maximum = maximum;
         if (isInt)
-          bag.pattern = integer;
+          bag.pattern = integer3;
       });
       inst._zod.check = (payload) => {
         const input = payload.value;
@@ -3209,7 +3251,7 @@ var require_types_cjs_development = __commonJS({
     __name(isValidBase64, "isValidBase64");
     __name2(isValidBase64, "isValidBase64");
     var $ZodBase64 = /* @__PURE__ */ $constructor("$ZodBase64", (inst, def) => {
-      def.pattern ?? (def.pattern = base64);
+      def.pattern ?? (def.pattern = base642);
       $ZodStringFormat.init(inst, def);
       inst._zod.bag.contentEncoding = "base64";
       inst._zod.check = (payload) => {
@@ -3555,8 +3597,8 @@ var require_types_cjs_development = __commonJS({
     __name(handlePropertyResult, "handlePropertyResult");
     __name2(handlePropertyResult, "handlePropertyResult");
     function normalizeDef(def) {
-      const keys = Object.keys(def.shape);
-      for (const k of keys) {
+      const keys2 = Object.keys(def.shape);
+      for (const k of keys2) {
         if (!def.shape?.[k]?._zod?.traits?.has("$ZodType")) {
           throw new Error(`Invalid element at key "${k}": expected a Zod schema`);
         }
@@ -3564,9 +3606,9 @@ var require_types_cjs_development = __commonJS({
       const okeys = optionalKeys(def.shape);
       return {
         ...def,
-        keys,
-        keySet: new Set(keys),
-        numKeys: keys.length,
+        keys: keys2,
+        keySet: new Set(keys2),
+        numKeys: keys2.length,
         optionalKeys: new Set(okeys)
       };
     }
@@ -3946,19 +3988,19 @@ var require_types_cjs_development = __commonJS({
       });
       const disc = cached(() => {
         const opts = def.options;
-        const map2 = /* @__PURE__ */ new Map();
+        const map22 = /* @__PURE__ */ new Map();
         for (const o of opts) {
           const values = o._zod.propValues?.[def.discriminator];
           if (!values || values.size === 0)
             throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(o)}"`);
           for (const v of values) {
-            if (map2.has(v)) {
+            if (map22.has(v)) {
               throw new Error(`Duplicate discriminator value "${String(v)}"`);
             }
-            map2.set(v, o);
+            map22.set(v, o);
           }
         }
-        return map2;
+        return map22;
       });
       inst._zod.parse = (payload, ctx) => {
         const input = payload.value;
@@ -8328,8 +8370,8 @@ var require_types_cjs_development = __commonJS({
     }
     __name(ko_default, "ko_default");
     __name2(ko_default, "default");
-    var capitalizeFirstCharacter = /* @__PURE__ */ __name2((text) => {
-      return text.charAt(0).toUpperCase() + text.slice(1);
+    var capitalizeFirstCharacter = /* @__PURE__ */ __name2((text2) => {
+      return text2.charAt(0).toUpperCase() + text2.slice(1);
     }, "capitalizeFirstCharacter");
     function getUnitTypeFromNumber(number4) {
       const abs = Math.abs(number4);
@@ -13449,7 +13491,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       _function: /* @__PURE__ */ __name(() => _function, "_function"),
       any: /* @__PURE__ */ __name(() => any, "any"),
       array: /* @__PURE__ */ __name(() => array, "array"),
-      base64: /* @__PURE__ */ __name(() => base642, "base64"),
+      base64: /* @__PURE__ */ __name(() => base6422, "base64"),
       base64url: /* @__PURE__ */ __name(() => base64url2, "base64url"),
       bigint: /* @__PURE__ */ __name(() => bigint2, "bigint"),
       boolean: /* @__PURE__ */ __name(() => boolean2, "boolean"),
@@ -13474,8 +13516,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       float64: /* @__PURE__ */ __name(() => float64, "float64"),
       function: /* @__PURE__ */ __name(() => _function, "function"),
       guid: /* @__PURE__ */ __name(() => guid2, "guid"),
-      hash: /* @__PURE__ */ __name(() => hash, "hash"),
-      hex: /* @__PURE__ */ __name(() => hex2, "hex"),
+      hash: /* @__PURE__ */ __name(() => hash2, "hash"),
+      hex: /* @__PURE__ */ __name(() => hex22, "hex"),
       hostname: /* @__PURE__ */ __name(() => hostname2, "hostname"),
       httpUrl: /* @__PURE__ */ __name(() => httpUrl, "httpUrl"),
       instanceof: /* @__PURE__ */ __name(() => _instanceof, "instanceof"),
@@ -13495,7 +13537,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       looseObject: /* @__PURE__ */ __name(() => looseObject, "looseObject"),
       looseRecord: /* @__PURE__ */ __name(() => looseRecord, "looseRecord"),
       mac: /* @__PURE__ */ __name(() => mac2, "mac"),
-      map: /* @__PURE__ */ __name(() => map, "map"),
+      map: /* @__PURE__ */ __name(() => map2, "map"),
       meta: /* @__PURE__ */ __name(() => meta2, "meta"),
       nan: /* @__PURE__ */ __name(() => nan, "nan"),
       nanoid: /* @__PURE__ */ __name(() => nanoid2, "nanoid"),
@@ -13506,7 +13548,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       nullable: /* @__PURE__ */ __name(() => nullable, "nullable"),
       nullish: /* @__PURE__ */ __name(() => nullish2, "nullish"),
       number: /* @__PURE__ */ __name(() => number2, "number"),
-      object: /* @__PURE__ */ __name(() => object, "object"),
+      object: /* @__PURE__ */ __name(() => object2, "object"),
       optional: /* @__PURE__ */ __name(() => optional, "optional"),
       partialRecord: /* @__PURE__ */ __name(() => partialRecord, "partialRecord"),
       pipe: /* @__PURE__ */ __name(() => pipe, "pipe"),
@@ -13663,8 +13705,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
     var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
     var safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
-    var encode2 = /* @__PURE__ */ _encode(ZodRealError);
-    var decode2 = /* @__PURE__ */ _decode(ZodRealError);
+    var encode22 = /* @__PURE__ */ _encode(ZodRealError);
+    var decode22 = /* @__PURE__ */ _decode(ZodRealError);
     var encodeAsync2 = /* @__PURE__ */ _encodeAsync(ZodRealError);
     var decodeAsync2 = /* @__PURE__ */ _decodeAsync(ZodRealError);
     var safeEncode2 = /* @__PURE__ */ _safeEncode(ZodRealError);
@@ -13727,8 +13769,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       inst.parseAsync = async (data, params) => parseAsync2(inst, data, params, { callee: inst.parseAsync });
       inst.safeParseAsync = async (data, params) => safeParseAsync2(inst, data, params);
       inst.spa = inst.safeParseAsync;
-      inst.encode = (data, params) => encode2(inst, data, params);
-      inst.decode = (data, params) => decode2(inst, data, params);
+      inst.encode = (data, params) => encode22(inst, data, params);
+      inst.decode = (data, params) => decode22(inst, data, params);
       inst.encodeAsync = async (data, params) => encodeAsync2(inst, data, params);
       inst.decodeAsync = async (data, params) => decodeAsync2(inst, data, params);
       inst.safeEncode = (data, params) => safeEncode2(inst, data, params);
@@ -14107,11 +14149,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       $ZodBase64.init(inst, def);
       ZodStringFormat.init(inst, def);
     });
-    function base642(params) {
+    function base6422(params) {
       return /* @__PURE__ */ _base64(ZodBase64, params);
     }
-    __name(base642, "base642");
-    __name2(base642, "base64");
+    __name(base6422, "base642");
+    __name2(base6422, "base64");
     var ZodBase64URL = /* @__PURE__ */ $constructor("ZodBase64URL", (inst, def) => {
       $ZodBase64URL.init(inst, def);
       ZodStringFormat.init(inst, def);
@@ -14153,12 +14195,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     }
     __name(hostname2, "hostname2");
     __name2(hostname2, "hostname");
-    function hex2(_params) {
+    function hex22(_params) {
       return /* @__PURE__ */ _stringFormat(ZodCustomStringFormat, "hex", regexes_exports.hex, _params);
     }
-    __name(hex2, "hex2");
-    __name2(hex2, "hex");
-    function hash(alg, params) {
+    __name(hex22, "hex2");
+    __name2(hex22, "hex");
+    function hash2(alg, params) {
       const enc = params?.enc ?? "hex";
       const format = `${alg}_${enc}`;
       const regex = regexes_exports[format];
@@ -14166,8 +14208,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         throw new Error(`Unrecognized hash format: ${format}`);
       return /* @__PURE__ */ _stringFormat(ZodCustomStringFormat, format, regex, params);
     }
-    __name(hash, "hash");
-    __name2(hash, "hash");
+    __name(hash2, "hash");
+    __name2(hash2, "hash");
     var ZodNumber = /* @__PURE__ */ $constructor("ZodNumber", (inst, def) => {
       $ZodNumber.init(inst, def);
       ZodType.init(inst, def);
@@ -14479,7 +14521,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         }
       });
     });
-    function object(shape, params) {
+    function object2(shape, params) {
       const def = {
         type: "object",
         shape: shape ?? {},
@@ -14487,8 +14529,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       };
       return new ZodObject(def);
     }
-    __name(object, "object");
-    __name2(object, "object");
+    __name(object2, "object");
+    __name2(object2, "object");
     function strictObject(shape, params) {
       return new ZodObject({
         type: "object",
@@ -14649,7 +14691,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       inst.max = (...args) => inst.check(/* @__PURE__ */ _maxSize(...args));
       inst.size = (...args) => inst.check(/* @__PURE__ */ _size(...args));
     });
-    function map(keyType, valueType, params) {
+    function map2(keyType, valueType, params) {
       return new ZodMap({
         type: "map",
         keyType,
@@ -14657,8 +14699,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         ...util_exports.normalizeParams(params)
       });
     }
-    __name(map, "map");
-    __name2(map, "map");
+    __name(map2, "map");
+    __name2(map2, "map");
     var ZodSet = /* @__PURE__ */ $constructor("ZodSet", (inst, def) => {
       $ZodSet.init(inst, def);
       ZodType.init(inst, def);
@@ -14683,11 +14725,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       inst._zod.processJSONSchema = (ctx, json2, params) => enumProcessor(inst, ctx, json2, params);
       inst.enum = def.entries;
       inst.options = Object.values(def.entries);
-      const keys = new Set(Object.keys(def.entries));
+      const keys2 = new Set(Object.keys(def.entries));
       inst.extract = (values, params) => {
         const newEntries = {};
         for (const value of values) {
-          if (keys.has(value)) {
+          if (keys2.has(value)) {
             newEntries[value] = def.entries[value];
           } else
             throw new Error(`Key ${value} not found in enum`);
@@ -14702,7 +14744,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       inst.exclude = (values, params) => {
         const newEntries = { ...def.entries };
         for (const value of values) {
-          if (keys.has(value)) {
+          if (keys2.has(value)) {
             delete newEntries[value];
           } else
             throw new Error(`Key ${value} not found in enum`);
@@ -15158,9 +15200,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       invalid_value: "invalid_value",
       custom: "custom"
     };
-    function setErrorMap(map2) {
+    function setErrorMap(map22) {
       config({
-        customError: map2
+        customError: map22
       });
     }
     __name(setErrorMap, "setErrorMap");
@@ -15838,7 +15880,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       verificationMethod: external_exports.string(),
       jws: external_exports.string().optional()
     }).catchall(external_exports.any()).superRefine((proof, ctx) => {
-      if (proof.created === void 0 && (proof.type !== "DataIntegrityProof" || proof.cryptosuite !== "ecdsa-rdfc-2019")) {
+      if (proof.created === void 0 && // These standardized Data Integrity suites make created optional.
+      // Keep the prior requirement for legacy and unknown proof suites.
+      // https://www.w3.org/TR/vc-di-eddsa/#proof-configuration-eddsa-jcs-2022
+      // https://www.w3.org/TR/vc-di-bbs/#proof-configuration
+      (proof.type !== "DataIntegrityProof" || ![
+        "ecdsa-rdfc-2019",
+        "ecdsa-jcs-2019",
+        "ecdsa-sd-2023",
+        "eddsa-rdfc-2022",
+        "eddsa-jcs-2022",
+        "bbs-2023"
+      ].includes(proof.cryptosuite))) {
         ctx.addIssue({
           code: "custom",
           path: ["created"],
@@ -16118,7 +16171,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       "replacedBy"
     ]).or(external_exports.string());
     var AssociationValidator = external_exports.object({
-      type: external_exports.string().array().nonempty(),
+      // Accept compacted scalars while retaining the existing permissive array contract.
+      type: external_exports.string().min(1).or(external_exports.string().array().nonempty()),
       associationType: AssociationTypeValidator,
       sourceId: external_exports.string().optional(),
       targetId: external_exports.string()
@@ -16941,11 +16995,48 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       updatedAt: external_exports.string(),
       expiresAt: external_exports.string().optional(),
       autoBoosts: external_exports.string().array().optional(),
-      writers: external_exports.array(LCNProfileValidator).optional()
+      writers: external_exports.array(LCNProfileValidator).optional(),
+      recipients: external_exports.array(LCNPublicProfileValidator.extend({ did: external_exports.string() })).optional(),
+      audienceVersion: external_exports.number().int().nonnegative().optional()
     });
-    var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied"]).nullable();
+    var ConsentFlowContractRequestStatusValidator = external_exports.enum(["pending", "accepted", "denied", "cancelled"]).nullable();
     var ConsentFlowContractRequestReadStatusValidator = external_exports.enum(["unseen", "seen"]).nullable();
-    var ConsentFlowContractRequestForProfileValidator = external_exports.object({
+    var ConsentFlowReferralValidator = external_exports.object({
+      requestId: external_exports.string(),
+      requestedBy: external_exports.string(),
+      externalReferenceId: external_exports.string().max(256).optional()
+    });
+    var ContractRequestFieldsValidator = ConsentFlowReferralValidator.partial().extend({
+      requestedAt: external_exports.string().optional(),
+      message: external_exports.string().max(500).optional()
+    });
+    var SendContractRequestValidator = external_exports.object({
+      contractUri: external_exports.string(),
+      targetProfileId: external_exports.string(),
+      externalReferenceId: external_exports.string().trim().min(1).max(256).optional(),
+      message: external_exports.string().trim().max(500).optional()
+    });
+    var ConsentFlowWebhookMetadataValidator = external_exports.object({
+      eventId: external_exports.string(),
+      deliveryKey: external_exports.string(),
+      event: external_exports.enum([
+        "request_sent",
+        "request_accepted",
+        "request_denied",
+        "request_cancelled",
+        "consent_created",
+        "consent_updated",
+        "consent_withdrawn",
+        "credentials_synced"
+      ]),
+      contractUri: external_exports.string(),
+      termsUri: external_exports.string().optional(),
+      requestId: external_exports.string().optional(),
+      requestedBy: external_exports.string().optional(),
+      externalReferenceId: external_exports.string().optional(),
+      recipientRole: external_exports.enum(["owner", "recipient", "requester", "target"])
+    });
+    var ConsentFlowContractRequestForProfileValidator = ContractRequestFieldsValidator.extend({
       profile: LCNProfileValidator,
       status: ConsentFlowContractRequestStatusValidator,
       readStatus: ConsentFlowContractRequestReadStatusValidator.optional()
@@ -16991,6 +17082,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         expiresAt: external_exports.string().optional(),
         oneTime: external_exports.boolean().optional(),
         terms: ConsentFlowTermsValidator,
+        referral: ConsentFlowReferralValidator.optional(),
         contract: ConsentFlowContractDetailsValidator,
         uri: external_exports.string(),
         consenter: LCNProfileValidator,
@@ -17086,6 +17178,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       oneTime: external_exports.boolean().optional(),
       terms: ConsentFlowTermsValidator.optional(),
       guardianApproval: ConsentFlowGuardianApprovalValidator.optional(),
+      referral: ConsentFlowReferralValidator.optional(),
       id: external_exports.string(),
       action: ConsentFlowTransactionActionValidator,
       date: external_exports.string(),
@@ -17096,6 +17189,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       status: ConsentFlowTermsStatusValidator,
       contract: ConsentFlowContractDetailsValidator,
       terms: ConsentFlowTermsValidator,
+      referral: ConsentFlowReferralValidator.optional(),
       transactions: ConsentFlowTransactionValidator.array()
     });
     var HolderExportMetadataValidator = external_exports.object({
@@ -17832,7 +17926,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       displayName: external_exports.string(),
       email: external_exports.string().optional()
     });
-    var AppStoreListingValidator = external_exports.object({
+    var AppStoreListingFieldsValidator = external_exports.object({
       listing_id: external_exports.string(),
       slug: external_exports.string().optional(),
       display_name: external_exports.string(),
@@ -17858,15 +17952,33 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       submitter: AppStoreListingSubmitterValidator.optional(),
       contact_email: external_exports.string().email().optional()
     });
+    var PendingListingUpdateStatusValidator = external_exports.enum(["DRAFT", "PENDING_REVIEW"]);
+    var PendingListingUpdateValidator = external_exports.object({
+      status: PendingListingUpdateStatusValidator,
+      submitted_at: external_exports.string().optional(),
+      changes: AppStoreListingFieldsValidator.omit({
+        listing_id: true,
+        app_listing_status: true,
+        promotion_level: true,
+        submitted_at: true,
+        submitter: true
+      }).partial(),
+      manifest_version: external_exports.number().int().min(1).optional()
+    });
+    var AppStoreListingValidator = AppStoreListingFieldsValidator.extend({
+      pending_update: PendingListingUpdateValidator.optional()
+    });
     var AppStoreListingCreateValidator = AppStoreListingValidator.omit({
       listing_id: true,
       app_listing_status: true,
-      promotion_level: true
+      promotion_level: true,
+      pending_update: true
     });
     var AppStoreListingUpdateValidator = AppStoreListingValidator.partial().omit({
       listing_id: true,
       app_listing_status: true,
-      promotion_level: true
+      promotion_level: true,
+      pending_update: true
     });
     var InstalledAppValidator = AppStoreListingValidator.extend({
       installed_at: external_exports.string()
@@ -17881,12 +17993,87 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       templateAlias: external_exports.string().min(1).max(50).regex(/^[a-z0-9-]+$/),
       boostUri: external_exports.string()
     });
-    var SendCredentialEventValidator = external_exports.object({
+    var InlineWalletCategoryValidator = external_exports.enum([
+      "Achievement",
+      "Skill",
+      "ID",
+      "Learning History",
+      "Work History",
+      "Social Badges",
+      "Membership",
+      "Accomplishment",
+      "Experiences",
+      "Accommodation",
+      "Family"
+    ]);
+    var InlineAlignmentValidator = external_exports.object({
+      name: external_exports.string(),
+      url: external_exports.string(),
+      framework: external_exports.string().optional(),
+      code: external_exports.string().optional()
+    }).passthrough();
+    var InlineEvidenceValidator = external_exports.object({
+      id: external_exports.string().optional(),
+      name: external_exports.string().optional(),
+      narrative: external_exports.string().optional()
+    }).passthrough();
+    var InlineWalletSkillTagValidator = external_exports.object({
+      frameworkId: external_exports.string(),
+      id: external_exports.string(),
+      proficiencyLevel: external_exports.string().optional()
+    }).passthrough();
+    var SimpleInlineCredentialTemplateValidator = external_exports.object({
+      rawCredential: external_exports.undefined().optional(),
+      name: external_exports.string(),
+      description: external_exports.string().optional(),
+      image: external_exports.string().optional(),
+      issuerName: external_exports.string().optional(),
+      achievementType: external_exports.string().optional(),
+      category: InlineWalletCategoryValidator.optional(),
+      criteria: external_exports.object({
+        narrative: external_exports.string().optional(),
+        url: external_exports.string().optional()
+      }).passthrough().optional(),
+      alignments: external_exports.array(InlineAlignmentValidator).optional(),
+      tags: external_exports.array(external_exports.string()).optional(),
+      activity: external_exports.object({
+        startDate: external_exports.string().optional(),
+        endDate: external_exports.string().optional()
+      }).passthrough().optional(),
+      credits: external_exports.object({
+        earned: external_exports.union([external_exports.number(), external_exports.string()]).optional(),
+        available: external_exports.union([external_exports.number(), external_exports.string()]).optional()
+      }).passthrough().optional(),
+      validUntil: external_exports.string().optional(),
+      evidence: external_exports.array(InlineEvidenceValidator).optional(),
+      walletSkills: external_exports.array(InlineWalletSkillTagValidator).optional()
+    }).passthrough();
+    var RawInlineCredentialTemplateValidator = external_exports.object({
+      rawCredential: external_exports.record(external_exports.string(), external_exports.unknown()),
+      category: InlineWalletCategoryValidator.optional(),
+      walletSkills: external_exports.array(InlineWalletSkillTagValidator).optional()
+    }).passthrough();
+    var InlineCredentialTemplateValidator = external_exports.union([
+      RawInlineCredentialTemplateValidator,
+      SimpleInlineCredentialTemplateValidator
+    ]);
+    var LegacySendCredentialEventValidator = external_exports.object({
       type: external_exports.literal("send-credential"),
       templateAlias: external_exports.string(),
       templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
       preventDuplicateClaim: external_exports.boolean().optional()
     });
+    var InlineSendCredentialEventValidator = external_exports.object({
+      type: external_exports.literal("send-credential"),
+      alias: external_exports.string(),
+      template: InlineCredentialTemplateValidator,
+      templateData: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+      preventDuplicateClaim: external_exports.boolean().optional()
+    });
+    var SendCredentialEventValidator = external_exports.union([
+      LegacySendCredentialEventValidator,
+      InlineSendCredentialEventValidator
+    ]);
     var CheckCredentialEventValidator = external_exports.object({
       type: external_exports.literal("check-credential"),
       templateAlias: external_exports.string().optional(),
@@ -17981,7 +18168,119 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       type: external_exports.literal("get-counters"),
       keys: external_exports.array(counterKeyValidator).min(1).max(50).optional()
     });
-    var AppEventValidator = external_exports.discriminatedUnion("type", [
+    var ConsentRequestWalletCategoryValidator = external_exports.enum([
+      "Achievement",
+      "Skill",
+      "ID",
+      "Learning History",
+      "Work History",
+      "Social Badges",
+      "Membership",
+      "Accomplishment",
+      "Experiences",
+      "Accommodation",
+      "Family"
+    ]);
+    var ConsentRequestPersonalFieldValidator = external_exports.enum([
+      "name",
+      "email",
+      "phone",
+      "birthDate",
+      "country",
+      "avatar"
+    ]);
+    var ConsentRequestValidator = external_exports.object({
+      read: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).optional(),
+        personalFields: external_exports.array(ConsentRequestPersonalFieldValidator).optional()
+      }).optional(),
+      write: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).optional()
+      }).optional(),
+      reason: external_exports.string().optional()
+    });
+    var NormalizedConsentScopesValidator = external_exports.object({
+      read: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).default([]),
+        personalFields: external_exports.array(ConsentRequestPersonalFieldValidator).default([])
+      }),
+      write: external_exports.object({
+        credentialCategories: external_exports.array(ConsentRequestWalletCategoryValidator).default([])
+      })
+    });
+    var CapturedTemplateRecordValidator = external_exports.object({
+      alias: external_exports.string(),
+      template: InlineCredentialTemplateValidator,
+      version: external_exports.number().int().min(1),
+      lastUsedAt: external_exports.string()
+    }).passthrough();
+    var CapturedConsentRecordValidator = external_exports.object({
+      scopes: NormalizedConsentScopesValidator,
+      reason: external_exports.string().optional(),
+      lastUsedAt: external_exports.string()
+    }).passthrough();
+    var AppManifestValidator = external_exports.object({
+      manifestVersion: external_exports.literal(1),
+      appUrl: external_exports.string(),
+      appKey: external_exports.string().max(200).optional(),
+      suggestedName: external_exports.string().optional(),
+      suggestedIconUrl: external_exports.string().optional(),
+      permissions: external_exports.array(external_exports.string()).default([]),
+      templates: external_exports.array(CapturedTemplateRecordValidator).default([]),
+      consentRequests: external_exports.array(CapturedConsentRecordValidator).default([]),
+      usedConsentContract: external_exports.boolean().optional(),
+      featuresLaunched: external_exports.array(external_exports.string()).default([]),
+      counterKeys: external_exports.array(external_exports.string()).default([]),
+      usedLearnerContext: external_exports.boolean(),
+      usedNotifications: external_exports.boolean(),
+      firstCapturedAt: external_exports.string(),
+      lastUpdatedAt: external_exports.string()
+    }).passthrough();
+    var AppManifestVersionStatusValidator = external_exports.enum(["draft", "active", "superseded"]);
+    var AppManifestVersionValidator = external_exports.object({
+      id: external_exports.string(),
+      version: external_exports.number().int().min(1),
+      manifestHash: external_exports.string(),
+      manifest: AppManifestValidator,
+      status: AppManifestVersionStatusValidator,
+      createdAt: external_exports.string(),
+      activatedAt: external_exports.string().optional()
+    });
+    var AppManifestStringDiffValidator = external_exports.object({
+      added: external_exports.array(external_exports.string()),
+      removed: external_exports.array(external_exports.string()),
+      changed: external_exports.array(external_exports.string())
+    });
+    var AppManifestTemplateRefValidator = external_exports.object({
+      alias: external_exports.string(),
+      version: external_exports.number().int().min(1)
+    });
+    var AppManifestTemplateChangeValidator = external_exports.object({
+      alias: external_exports.string(),
+      fromVersion: external_exports.number().int().min(1),
+      toVersion: external_exports.number().int().min(1)
+    });
+    var AppManifestDiffValidator = external_exports.object({
+      permissions: AppManifestStringDiffValidator,
+      templates: external_exports.object({
+        added: external_exports.array(AppManifestTemplateRefValidator),
+        removed: external_exports.array(AppManifestTemplateRefValidator),
+        changed: external_exports.array(AppManifestTemplateChangeValidator)
+      }),
+      consentScopes: AppManifestStringDiffValidator,
+      featurePaths: AppManifestStringDiffValidator,
+      counterKeys: AppManifestStringDiffValidator,
+      requiresReview: external_exports.boolean()
+    });
+    var UpsertConsentContractEventValidator = external_exports.object({
+      type: external_exports.literal("upsert-consent-contract"),
+      scopes: ConsentRequestValidator
+    });
+    var UpsertConsentContractResponseValidator = external_exports.object({
+      contractUri: external_exports.string(),
+      created: external_exports.boolean()
+    });
+    var AppEventValidator = external_exports.union([
       SendCredentialEventValidator,
       CheckCredentialEventValidator,
       CheckIssuanceStatusEventValidator,
@@ -17991,7 +18290,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       SendNotificationEventValidator,
       IncrementCounterEventValidator,
       GetCounterEventValidator,
-      GetCountersEventValidator
+      GetCountersEventValidator,
+      UpsertConsentContractEventValidator
     ]);
     var AppEventInputValidator = external_exports.object({
       listingId: external_exports.string(),
@@ -18070,6 +18370,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
         __name2(this, "AuthSessionError");
       }
     };
+    var UnsupportedSignInOperationError = class extends Error {
+      static {
+        __name(this, "UnsupportedSignInOperationError");
+      }
+      constructor(operation, providerType) {
+        super(`${operation} is not supported by ${providerType}`);
+        this.operation = operation;
+        this.providerType = providerType;
+        this.name = "UnsupportedSignInOperationError";
+      }
+      static {
+        __name2(this, "UnsupportedSignInOperationError");
+      }
+    };
     var ESCROW_PIN_LOCKED_MESSAGE2 = "Too many incorrect PIN attempts. You can still recover by waiting.";
     var ESCROW_PIN_UNAVAILABLE_MESSAGE2 = "PIN recovery is not available for this account.";
     var ESCROW_PIN_MISMATCH_PATTERN2 = /^Incorrect PIN\. (\d+) attempts left\.$/;
@@ -18216,12 +18530,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       }
       return table;
     })();
-    var encodeBase64Url = /* @__PURE__ */ __name2((bytes) => {
+    var encodeBase64Url = /* @__PURE__ */ __name2((bytes3) => {
       let output = "";
-      for (let index = 0; index < bytes.length; index += 3) {
-        const first = bytes[index];
-        const second = bytes[index + 1];
-        const third = bytes[index + 2];
+      for (let index = 0; index < bytes3.length; index += 3) {
+        const first = bytes3[index];
+        const second = bytes3[index + 1];
+        const third = bytes3[index + 2];
         output += BASE64URL_ALPHABET[first >> 2];
         output += BASE64URL_ALPHABET[(first & 3) << 4 | (second ?? 0) >> 4];
         if (second === void 0) break;
@@ -18262,8 +18576,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
     }, "isCanonicalBase64Url");
     var decodedBase64UrlByteLength = /* @__PURE__ */ __name2((value) => decodeBase64Url(value)?.length ?? null, "decodedBase64UrlByteLength");
     var utf8ByteLength = /* @__PURE__ */ __name2((value) => new TextEncoder().encode(value).length, "utf8ByteLength");
-    var canonicalBase64Url = /* @__PURE__ */ __name2((bytes) => external_exports.string().refine((value) => isCanonicalBase64Url(value, bytes), {
-      message: `must be canonical base64url for exactly ${bytes} bytes`
+    var canonicalBase64Url = /* @__PURE__ */ __name2((bytes3) => external_exports.string().refine((value) => isCanonicalBase64Url(value, bytes3), {
+      message: `must be canonical base64url for exactly ${bytes3} bytes`
     }), "canonicalBase64Url");
     var ShareLinkIdValidator = canonicalBase64Url(SHARE_LINK_ID_BYTES);
     var ShareContentKeyValidator = canonicalBase64Url(SHARE_CONTENT_KEY_BYTES);
@@ -18499,6 +18813,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       version: safeVersion,
       contentVersion: safeVersion,
       status: ShareLinkStatusValidator,
+      attachmentId: external_exports.string().uuid().nullable().optional(),
+      attachmentChunkCount: external_exports.number().int().min(1).max(16).nullable().optional(),
       contentState: ShareContentStateValidator,
       createdAt: external_exports.iso.datetime(),
       updatedAt: external_exports.iso.datetime(),
@@ -18522,6 +18838,43 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       contentUrl: external_exports.string().optional()
     });
     var clientRequestId = external_exports.string().uuid();
+    var ShareLinkAttachmentValidator = external_exports.object({
+      id: external_exports.string().uuid(),
+      chunkCount: external_exports.number().int().min(1).max(16)
+    }).strict();
+    var attachmentChunkKey = {
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      attachmentId: external_exports.string().uuid(),
+      chunkIndex: external_exports.number().int().min(0).max(15)
+    };
+    var ShareLinkAttachmentChunkEnvelopeValidator = ShareEnvelopeValidator.refine(
+      (value) => (decodedBase64UrlByteLength(value.ct) ?? Infinity) <= 256 * 1024 + SHARE_TAG_BYTES
+    );
+    var PutShareLinkAttachmentChunkInputValidator = external_exports.object({
+      ...attachmentChunkKey,
+      chunkCount: external_exports.number().int().min(1).max(16),
+      envelope: ShareLinkAttachmentChunkEnvelopeValidator,
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator
+    }).strict().refine((value) => value.chunkIndex < value.chunkCount);
+    var GetShareLinkAttachmentChunkInputValidator = external_exports.object({
+      ...attachmentChunkKey,
+      passcode: external_exports.string().min(4).max(64).optional(),
+      accessToken: external_exports.string().min(1).max(2048).optional()
+    }).strict();
+    var ShareLinkAttachmentChunkOutputValidator = external_exports.object({
+      ...attachmentChunkKey,
+      envelope: ShareLinkAttachmentChunkEnvelopeValidator,
+      accessToken: external_exports.string().min(1).max(2048).optional()
+    }).strict();
+    var DeleteShareLinkAttachmentChunksInputValidator = external_exports.object({
+      id: ShareLinkIdValidator,
+      contentVersion: safeVersion,
+      attachmentId: external_exports.string().uuid(),
+      chunkCount: external_exports.number().int().min(1).max(16)
+    }).strict();
+    var PutShareLinkAttachmentChunkOutputValidator = external_exports.object({ ok: external_exports.literal(true) }).strict();
+    var DeleteShareLinkAttachmentChunksOutputValidator = external_exports.object({ ok: external_exports.boolean() }).strict();
     var CreateShareLinkInputValidator = external_exports.object({
       id: ShareLinkIdValidator,
       clientRequestId,
@@ -18533,7 +18886,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS),
       contentVersion: external_exports.literal(1),
       envelope: ShareEnvelopeValidator,
-      ownerEncryptedRecovery: ShareOwnerRecoveryValidator
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator,
+      attachment: ShareLinkAttachmentValidator.optional()
     }).strict();
     var UpdateShareLinkInputValidator = external_exports.object({
       id: ShareLinkIdValidator,
@@ -18548,7 +18902,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
       contentVersion: safeVersion.optional(),
       selectedCount: external_exports.number().int().min(1).max(MAX_SELECTED_CREDENTIALS).optional(),
       envelope: ShareEnvelopeValidator.optional(),
-      ownerEncryptedRecovery: ShareOwnerRecoveryValidator.optional()
+      ownerEncryptedRecovery: ShareOwnerRecoveryValidator.optional(),
+      attachment: ShareLinkAttachmentValidator.optional()
     }).strict().superRefine((value, ctx) => {
       const provided = [
         value.contentVersion,
@@ -18562,6 +18917,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
           message: "content replacement requires contentVersion, selectedCount, envelope and ownerEncryptedRecovery together"
         });
       }
+      if (value.attachment !== void 0 && provided !== 4) {
+        ctx.addIssue({ code: "custom", message: "attachment requires a content replacement" });
+      }
     });
     var ShareLinkIdInputValidator = external_exports.object({ id: ShareLinkIdValidator }).strict();
     var ShareLinkOperationKeyInputValidator = external_exports.object({ id: ShareLinkIdValidator, operationId: external_exports.string().uuid() }).strict();
@@ -18818,37 +19176,37 @@ var DEFAULT_KDF_PARAMS = {
   parallelism: ARGON2_PARALLELISM
 };
 function bufferToBase64(buf) {
-  const bytes = new Uint8Array(buf);
+  const bytes3 = new Uint8Array(buf);
   let binary = "";
-  for (let i = 0; i < bytes.byteLength; i++) {
-    binary += String.fromCharCode(bytes[i]);
+  for (let i = 0; i < bytes3.byteLength; i++) {
+    binary += String.fromCharCode(bytes3[i]);
   }
   return btoa(binary);
 }
 __name(bufferToBase64, "bufferToBase64");
 function base64ToBuffer(b64) {
   const binary = atob(b64);
-  const bytes = new Uint8Array(binary.length);
+  const bytes3 = new Uint8Array(binary.length);
   for (let i = 0; i < binary.length; i++) {
-    bytes[i] = binary.charCodeAt(i);
+    bytes3[i] = binary.charCodeAt(i);
   }
-  return bytes;
+  return bytes3;
 }
 __name(base64ToBuffer, "base64ToBuffer");
-function hexToBytes(hex) {
-  const bytes = new Uint8Array(hex.length / 2);
-  for (let i = 0; i < hex.length; i += 2) {
-    bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+function hexToBytes(hex2) {
+  const bytes3 = new Uint8Array(hex2.length / 2);
+  for (let i = 0; i < hex2.length; i += 2) {
+    bytes3[i / 2] = parseInt(hex2.slice(i, i + 2), 16);
   }
-  return bytes;
+  return bytes3;
 }
 __name(hexToBytes, "hexToBytes");
-function bytesToHex(bytes) {
-  return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+function bytesToHex(bytes3) {
+  return Array.from(bytes3).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 __name(bytesToHex, "bytesToHex");
 async function deriveKeyFromPassword(password, salt, params = DEFAULT_KDF_PARAMS) {
-  const hash = await argon2id({
+  const hash2 = await argon2id({
     password,
     salt,
     iterations: params.timeCost,
@@ -18857,7 +19215,7 @@ async function deriveKeyFromPassword(password, salt, params = DEFAULT_KDF_PARAMS
     hashLength: ARGON2_HASH_LENGTH,
     outputType: "binary"
   });
-  return Uint8Array.from(hash);
+  return Uint8Array.from(hash2);
 }
 __name(deriveKeyFromPassword, "deriveKeyFromPassword");
 async function encryptWithPassword(plaintext, password) {
@@ -19011,21 +19369,21 @@ async function getOrCreateMasterKey() {
 }
 __name(getOrCreateMasterKey, "getOrCreateMasterKey");
 function bufferToBase642(buf) {
-  const bytes = new Uint8Array(buf);
+  const bytes3 = new Uint8Array(buf);
   let binary = "";
-  for (let i = 0; i < bytes.byteLength; i++) {
-    binary += String.fromCharCode(bytes[i]);
+  for (let i = 0; i < bytes3.byteLength; i++) {
+    binary += String.fromCharCode(bytes3[i]);
   }
   return btoa(binary);
 }
 __name(bufferToBase642, "bufferToBase64");
 function base64ToBuffer2(b64) {
   const binary = atob(b64);
-  const bytes = new Uint8Array(binary.length);
+  const bytes3 = new Uint8Array(binary.length);
   for (let i = 0; i < binary.length; i++) {
-    bytes[i] = binary.charCodeAt(i);
+    bytes3[i] = binary.charCodeAt(i);
   }
-  return bytes.buffer;
+  return bytes3.buffer;
 }
 __name(base64ToBuffer2, "base64ToBuffer");
 async function encryptShare(share, id) {
@@ -19433,21 +19791,21 @@ async function getWordlist() {
   return wordlistPromise;
 }
 __name(getWordlist, "getWordlist");
-function bytesToBits(bytes) {
-  return Array.from(bytes).map((b) => b.toString(2).padStart(8, "0")).join("");
+function bytesToBits(bytes3) {
+  return Array.from(bytes3).map((b) => b.toString(2).padStart(8, "0")).join("");
 }
 __name(bytesToBits, "bytesToBits");
 function bitsToBytes(bits) {
-  const bytes = new Uint8Array(Math.ceil(bits.length / 8));
-  for (let i = 0; i < bytes.length; i++) {
-    bytes[i] = parseInt(bits.slice(i * 8, (i + 1) * 8).padEnd(8, "0"), 2);
+  const bytes3 = new Uint8Array(Math.ceil(bits.length / 8));
+  for (let i = 0; i < bytes3.length; i++) {
+    bytes3[i] = parseInt(bits.slice(i * 8, (i + 1) * 8).padEnd(8, "0"), 2);
   }
-  return bytes;
+  return bytes3;
 }
 __name(bitsToBytes, "bitsToBytes");
 async function computeChecksum(data) {
-  const hash = await crypto.subtle.digest("SHA-256", data);
-  const hashBits = bytesToBits(new Uint8Array(hash));
+  const hash2 = await crypto.subtle.digest("SHA-256", data);
+  const hashBits = bytesToBits(new Uint8Array(hash2));
   const checksumLength = Math.floor(data.length / 4);
   return hashBits.slice(0, checksumLength);
 }
@@ -19480,12 +19838,12 @@ async function recoveryPhraseToShare(phrase) {
     bits += index.toString(2).padStart(11, "0");
   }
   let dataByteCount = 0;
-  for (let bytes = 1; bytes <= 64; bytes++) {
-    const checksumBits2 = Math.floor(bytes / 4);
-    const totalBits = bytes * 8 + checksumBits2;
+  for (let bytes3 = 1; bytes3 <= 64; bytes3++) {
+    const checksumBits2 = Math.floor(bytes3 / 4);
+    const totalBits = bytes3 * 8 + checksumBits2;
     const wordsNeeded = Math.ceil(totalBits / 11);
     if (wordsNeeded === words.length) {
-      dataByteCount = bytes;
+      dataByteCount = bytes3;
     } else if (wordsNeeded > words.length) {
       break;
     }
@@ -19779,9 +20137,9 @@ __name(createSSSKeyManager, "createSSSKeyManager");
 var EMAIL_RELAY_ENVELOPE_VERSION = 1;
 var EMAIL_RELAY_ALGORITHM = "P-256-HKDF-SHA256-AES-256-GCM";
 var encodeUtf8 = /* @__PURE__ */ __name((value) => {
-  const bytes = new TextEncoder().encode(value);
-  const copy = new Uint8Array(new ArrayBuffer(bytes.byteLength));
-  copy.set(bytes);
+  const bytes3 = new TextEncoder().encode(value);
+  const copy = new Uint8Array(new ArrayBuffer(bytes3.byteLength));
+  copy.set(bytes3);
   return copy;
 }, "encodeUtf8");
 var EMAIL_RELAY_INFO = encodeUtf8("learncard-email-relay-v1");
@@ -19800,7 +20158,7 @@ var parseBranding = /* @__PURE__ */ __name((value) => {
   if (value === void 0) return void 0;
   if (!isRecord(value)) throw new Error("Invalid email relay branding");
   const branding = {};
-  const keys = [
+  const keys2 = [
     "brandName",
     "logoUrl",
     "logoAlt",
@@ -19812,7 +20170,7 @@ var parseBranding = /* @__PURE__ */ __name((value) => {
     "fromDomain",
     "copyrightHolder"
   ];
-  for (const key of keys) {
+  for (const key of keys2) {
     const field = value[key];
     if (field === void 0) continue;
     if (typeof field !== "string" || field.length > 2048) {
@@ -19865,7 +20223,7 @@ var parseEmailRelayPlaintext = /* @__PURE__ */ __name((value) => {
     branding: parseBranding(value.branding)
   };
 }, "parseEmailRelayPlaintext");
-var getAad = /* @__PURE__ */ __name((envelope) => encodeUtf8(`${envelope.version}|${envelope.algorithm}|${envelope.keyId}`), "getAad");
+var getAad = /* @__PURE__ */ __name((envelope2) => encodeUtf8(`${envelope2.version}|${envelope2.algorithm}|${envelope2.keyId}`), "getAad");
 var deriveAesKey = /* @__PURE__ */ __name(async (sharedSecret, salt, usage) => {
   const keyMaterial = await crypto.subtle.importKey("raw", sharedSecret, "HKDF", false, [
     "deriveKey"
@@ -19937,7 +20295,7 @@ var encryptEmailRelayPayload = /* @__PURE__ */ __name(async (input, publicKeyBas
   };
 }, "encryptEmailRelayPayload");
 var decryptEmailRelayPayload = /* @__PURE__ */ __name(async (value, privateKeyBase64) => {
-  const envelope = parseEmailRelayEnvelope(value);
+  const envelope2 = parseEmailRelayEnvelope(value);
   const privateKey = await crypto.subtle.importKey(
     "pkcs8",
     base64ToBuffer(privateKeyBase64.trim()).buffer,
@@ -19947,7 +20305,7 @@ var decryptEmailRelayPayload = /* @__PURE__ */ __name(async (value, privateKeyBa
   );
   const ephemeralPublicKey = await crypto.subtle.importKey(
     "raw",
-    base64ToBuffer(envelope.ephemeralPublicKey).buffer,
+    base64ToBuffer(envelope2.ephemeralPublicKey).buffer,
     { name: "ECDH", namedCurve: "P-256" },
     false,
     []
@@ -19957,13 +20315,13 @@ var decryptEmailRelayPayload = /* @__PURE__ */ __name(async (value, privateKeyBa
     privateKey,
     256
   );
-  const salt = base64ToBuffer(envelope.salt);
-  const iv = base64ToBuffer(envelope.iv);
+  const salt = base64ToBuffer(envelope2.salt);
+  const iv = base64ToBuffer(envelope2.iv);
   const aesKey = await deriveAesKey(sharedSecret, salt, "decrypt");
   const decrypted = await crypto.subtle.decrypt(
-    { name: "AES-GCM", iv, additionalData: getAad(envelope) },
+    { name: "AES-GCM", iv, additionalData: getAad(envelope2) },
     aesKey,
-    base64ToBuffer(envelope.ciphertext)
+    base64ToBuffer(envelope2.ciphertext)
   );
   const parsed = JSON.parse(new TextDecoder().decode(decrypted));
   return parseEmailRelayPlaintext(parsed);
@@ -19975,10 +20333,11 @@ var ESCROW_ALGORITHM = "P-256-HKDF-SHA256-AES-256-GCM";
 var ESCROW_BLOB_INFO = "learncard-escrow-blob-v1";
 var ESCROW_RELEASE_INFO = "learncard-escrow-release-v1";
 var ESCROW_CLIENT_KEY_ID = "client";
+var RECOVERY_LANGUAGES = ["en", "es", "fr", "ar"];
 var encodeUtf82 = /* @__PURE__ */ __name((value) => {
-  const bytes = new TextEncoder().encode(value);
-  const copy = new Uint8Array(new ArrayBuffer(bytes.byteLength));
-  copy.set(bytes);
+  const bytes3 = new TextEncoder().encode(value);
+  const copy = new Uint8Array(new ArrayBuffer(bytes3.byteLength));
+  copy.set(bytes3);
   return copy;
 }, "encodeUtf8");
 var isRecord2 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
@@ -20014,6 +20373,22 @@ var parseEscrowBlobPlaintext = /* @__PURE__ */ __name((value) => {
   if (typeof value.shareVersion !== "number" || !Number.isInteger(value.shareVersion) || value.shareVersion <= 0) {
     throw new Error("Invalid escrow shareVersion");
   }
+  if (value.recoveryEmail !== void 0 !== (value.recoveryLanguage !== void 0)) {
+    throw new Error("Invalid escrow recoveryEmail");
+  }
+  let recoveryContact = {};
+  if (value.recoveryEmail !== void 0) {
+    const email = requireString2(value, "recoveryEmail", { min: 3, max: 254 }).trim().toLowerCase();
+    const at = email.split("@");
+    if (!/^[\x21-\x7e]+$/.test(email) || at.length !== 2 || at[0].length === 0 || at[1].length === 0 || !at[1].includes(".") || at[1].startsWith(".") || at[1].endsWith(".")) {
+      throw new Error("Invalid escrow recoveryEmail");
+    }
+    const language = requireString2(value, "recoveryLanguage", { min: 2, max: 2 });
+    if (!RECOVERY_LANGUAGES.includes(language)) {
+      throw new Error("Invalid escrow recoveryLanguage");
+    }
+    recoveryContact = { recoveryEmail: email, recoveryLanguage: language };
+  }
   return {
     version: ESCROW_ENVELOPE_VERSION,
     recoveryShare: requireString2(value, "recoveryShare", {
@@ -20029,7 +20404,8 @@ var parseEscrowBlobPlaintext = /* @__PURE__ */ __name((value) => {
         max: 64,
         pattern: /^[0-9a-f]{64}$/i
       }).toLowerCase()
-    } : {}
+    } : {},
+    ...recoveryContact
   };
 }, "parseEscrowBlobPlaintext");
 var parseEscrowReleasePlaintext = /* @__PURE__ */ __name((value) => {
@@ -20040,7 +20416,7 @@ var parseEscrowReleasePlaintext = /* @__PURE__ */ __name((value) => {
     holdId: requireString2(value, "holdId", { max: 128, pattern: /^[A-Za-z0-9._-]+$/ })
   };
 }, "parseEscrowReleasePlaintext");
-var getAad2 = /* @__PURE__ */ __name((envelope) => encodeUtf82(`${envelope.version}|${envelope.algorithm}|${envelope.keyId}`), "getAad");
+var getAad2 = /* @__PURE__ */ __name((envelope2) => encodeUtf82(`${envelope2.version}|${envelope2.algorithm}|${envelope2.keyId}`), "getAad");
 var deriveAesKey2 = /* @__PURE__ */ __name(async (sharedSecret, salt, usage, info) => {
   const keyMaterial = await crypto.subtle.importKey("raw", sharedSecret, "HKDF", false, [
     "deriveKey"
@@ -20111,7 +20487,7 @@ var encryptToRecipient = /* @__PURE__ */ __name(async (plaintextJson, spki, keyI
   };
 }, "encryptToRecipient");
 var decryptFromEnvelope = /* @__PURE__ */ __name(async (value, pkcs8, info) => {
-  const envelope = parseEscrowEnvelope(value);
+  const envelope2 = parseEscrowEnvelope(value);
   const privateKey = await crypto.subtle.importKey(
     "pkcs8",
     base64ToBuffer(pkcs8.trim()),
@@ -20121,7 +20497,7 @@ var decryptFromEnvelope = /* @__PURE__ */ __name(async (value, pkcs8, info) => {
   );
   const ephemeralPublicKey = await crypto.subtle.importKey(
     "raw",
-    base64ToBuffer(envelope.ephemeralPublicKey),
+    base64ToBuffer(envelope2.ephemeralPublicKey),
     { name: "ECDH", namedCurve: "P-256" },
     false,
     []
@@ -20131,13 +20507,13 @@ var decryptFromEnvelope = /* @__PURE__ */ __name(async (value, pkcs8, info) => {
     privateKey,
     256
   );
-  const salt = base64ToBuffer(envelope.salt);
-  const iv = base64ToBuffer(envelope.iv);
+  const salt = base64ToBuffer(envelope2.salt);
+  const iv = base64ToBuffer(envelope2.iv);
   const aesKey = await deriveAesKey2(sharedSecret, salt, "decrypt", info);
   const decrypted = await crypto.subtle.decrypt(
-    { name: "AES-GCM", iv, additionalData: getAad2(envelope) },
+    { name: "AES-GCM", iv, additionalData: getAad2(envelope2) },
     aesKey,
-    base64ToBuffer(envelope.ciphertext)
+    base64ToBuffer(envelope2.ciphertext)
   );
   const parsed = JSON.parse(new TextDecoder().decode(decrypted));
   return parsed;
@@ -20151,8 +20527,8 @@ var encryptEscrowBlob = /* @__PURE__ */ __name(async (input, enclavePublicKeySpk
     ESCROW_BLOB_INFO
   );
 }, "encryptEscrowBlob");
-var decryptEscrowBlob = /* @__PURE__ */ __name(async (envelope, enclavePrivateKeyPkcs8B64) => parseEscrowBlobPlaintext(
-  await decryptFromEnvelope(envelope, enclavePrivateKeyPkcs8B64, ESCROW_BLOB_INFO)
+var decryptEscrowBlob = /* @__PURE__ */ __name(async (envelope2, enclavePrivateKeyPkcs8B64) => parseEscrowBlobPlaintext(
+  await decryptFromEnvelope(envelope2, enclavePrivateKeyPkcs8B64, ESCROW_BLOB_INFO)
 ), "decryptEscrowBlob");
 var sealEscrowRelease = /* @__PURE__ */ __name(async (input, clientEphemeralPublicKeySpkiB64) => {
   const plaintext = parseEscrowReleasePlaintext({ ...input, version: ESCROW_ENVELOPE_VERSION });
@@ -20163,10 +20539,408 @@ var sealEscrowRelease = /* @__PURE__ */ __name(async (input, clientEphemeralPubl
     ESCROW_RELEASE_INFO
   );
 }, "sealEscrowRelease");
-var openEscrowRelease = /* @__PURE__ */ __name(async (envelope, clientEphemeralPrivateKeyPkcs8B64) => parseEscrowReleasePlaintext(
-  await decryptFromEnvelope(envelope, clientEphemeralPrivateKeyPkcs8B64, ESCROW_RELEASE_INFO)
+var openEscrowRelease = /* @__PURE__ */ __name(async (envelope2, clientEphemeralPrivateKeyPkcs8B64) => parseEscrowReleasePlaintext(
+  await decryptFromEnvelope(envelope2, clientEphemeralPrivateKeyPkcs8B64, ESCROW_RELEASE_INFO)
 ), "openEscrowRelease");
 
+// src/escrow-enrollment-intent.ts
+import { ExtendedPoint, getPublicKeyAsync, signAsync } from "@noble/ed25519";
+var ESCROW_ENROLLMENT_INTENT_DOMAIN = "learncard-escrow-enrollment-intent-v2\0";
+var BASE58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+var FIELDS = [
+  "version",
+  "tenant",
+  "did",
+  "authorityGeneration",
+  "expectedEnrollmentVersion",
+  "action",
+  "sourceBlobIdentity",
+  "targetBlobIdentity",
+  "pinAction",
+  "shareVersion",
+  "enrollmentEpoch",
+  "requestId",
+  "allowRewrap",
+  "recoveryEmail",
+  "recoveryLanguage"
+];
+var ACTIONS = ["enroll", "replace", "disable", "carry"];
+var PIN_ACTIONS = ["set", "change", "clear", "keep"];
+var RECOVERY_LANGUAGES2 = ["en", "es", "fr", "ar"];
+var requireIntent = /* @__PURE__ */ __name((condition) => {
+  if (!condition) throw new Error("Invalid escrow enrollment intent");
+}, "requireIntent");
+var matches = /* @__PURE__ */ __name((value, pattern) => typeof value === "string" && pattern.exec(value)?.[0] === value, "matches");
+var utf8 = /* @__PURE__ */ __name((value) => new TextEncoder().encode(value), "utf8");
+var integer = /* @__PURE__ */ __name((value, width) => {
+  requireIntent(
+    Number.isSafeInteger(value) && value >= 0 && (width === 8 || value <= 4294967295)
+  );
+  const bytes3 = new Uint8Array(width);
+  const view = new DataView(bytes3.buffer);
+  if (width === 4) view.setUint32(0, value, false);
+  else view.setBigUint64(0, BigInt(value), false);
+  return bytes3;
+}, "integer");
+var join = /* @__PURE__ */ __name((fields) => {
+  const result = new Uint8Array(fields.reduce((length, field) => length + field.length, 0));
+  let offset = 0;
+  for (const field of fields) {
+    result.set(field, offset);
+    offset += field.length;
+  }
+  return result;
+}, "join");
+var hashBytes = /* @__PURE__ */ __name((value) => {
+  if (value === null) return new Uint8Array();
+  requireIntent(matches(value, /^[0-9a-f]{64}$/));
+  return new Uint8Array(hexToBytes(value));
+}, "hashBytes");
+var didPublicKey = /* @__PURE__ */ __name((did) => {
+  requireIntent(typeof did === "string" && did.startsWith("did:key:z") && did.length === 56);
+  let value = 0n;
+  for (const char of did.slice(9)) {
+    const digit = BASE58.indexOf(char);
+    requireIntent(digit >= 0);
+    value = value * 58n + BigInt(digit);
+  }
+  const bytes3 = new Uint8Array(34);
+  for (let i = 33; i >= 0; i--) {
+    bytes3[i] = Number(value & 255n);
+    value >>= 8n;
+  }
+  requireIntent(value === 0n && bytes3[0] === 237 && bytes3[1] === 1);
+  const key = bytes3.slice(2);
+  try {
+    requireIntent(!ExtendedPoint.fromHex(key, false).isSmallOrder());
+  } catch {
+    throw new Error("Invalid escrow enrollment intent");
+  }
+  return key;
+}, "didPublicKey");
+var encodeEscrowEnrollmentIntent = /* @__PURE__ */ __name((intent) => {
+  requireIntent(typeof intent === "object" && intent !== null && !Array.isArray(intent));
+  requireIntent(
+    Object.keys(intent).length === FIELDS.length && FIELDS.every((field) => Object.prototype.hasOwnProperty.call(intent, field))
+  );
+  requireIntent(intent.version === 2 && typeof intent.allowRewrap === "boolean");
+  requireIntent(matches(intent.tenant, /^[A-Za-z0-9_-]{1,128}$/));
+  requireIntent(matches(intent.authorityGeneration, /^[A-Za-z0-9_-]{1,128}$/));
+  requireIntent(matches(intent.requestId, /^[A-Za-z0-9._-]{1,112}$/));
+  didPublicKey(intent.did);
+  const action = ACTIONS.indexOf(intent.action);
+  const pin = PIN_ACTIONS.indexOf(intent.pinAction);
+  requireIntent(action >= 0 && pin >= 0 && intent.shareVersion > 0 && intent.enrollmentEpoch > 0);
+  const source = hashBytes(intent.sourceBlobIdentity);
+  const target = hashBytes(intent.targetBlobIdentity);
+  if (intent.action === "enroll") requireIntent(source.length === 0 && target.length === 32);
+  else if (intent.action === "disable")
+    requireIntent(
+      source.length === 32 && target.length === 0 && intent.pinAction === "keep" && !intent.allowRewrap
+    );
+  else
+    requireIntent(
+      source.length === 32 && target.length === 32 && intent.sourceBlobIdentity !== intent.targetBlobIdentity
+    );
+  if (intent.action === "carry") requireIntent(intent.pinAction === "keep");
+  if (intent.recoveryEmail === null) {
+    requireIntent(
+      intent.recoveryLanguage === null && (intent.action === "disable" || intent.action === "carry")
+    );
+  } else {
+    requireIntent(intent.action === "enroll" || intent.action === "replace");
+    requireIntent(
+      matches(intent.recoveryEmail, /^[\x21-\x7e]{3,254}$/) && intent.recoveryEmail === intent.recoveryEmail.trim().toLowerCase()
+    );
+    const at = intent.recoveryEmail.split("@");
+    requireIntent(
+      at.length === 2 && at[0].length > 0 && at[1].length > 0 && at[1].includes(".") && !at[1].startsWith(".") && !at[1].endsWith(".")
+    );
+    requireIntent(
+      intent.recoveryLanguage !== null && RECOVERY_LANGUAGES2.includes(intent.recoveryLanguage)
+    );
+  }
+  const fields = [
+    integer(intent.version, 4),
+    utf8(intent.tenant),
+    utf8(intent.did),
+    utf8(intent.authorityGeneration),
+    integer(intent.expectedEnrollmentVersion, 8),
+    Uint8Array.of(action),
+    source,
+    target,
+    Uint8Array.of(pin),
+    integer(intent.shareVersion, 4),
+    integer(intent.enrollmentEpoch, 8),
+    utf8(intent.requestId),
+    Uint8Array.of(Number(intent.allowRewrap)),
+    intent.recoveryEmail === null ? new Uint8Array() : utf8(intent.recoveryEmail),
+    intent.recoveryLanguage === null ? new Uint8Array() : utf8(intent.recoveryLanguage)
+  ];
+  return join([
+    utf8(ESCROW_ENROLLMENT_INTENT_DOMAIN),
+    ...fields.flatMap((field) => [integer(field.length, 4), field])
+  ]);
+}, "encodeEscrowEnrollmentIntent");
+var signEscrowEnrollmentIntent = /* @__PURE__ */ __name(async (intent, privateKey) => {
+  encodeEscrowEnrollmentIntent(intent);
+  const snapshot = { ...intent };
+  const message = encodeEscrowEnrollmentIntent(snapshot);
+  requireIntent(matches(privateKey, /^[0-9a-f]{64}$/i));
+  const seed = hexToBytes(privateKey);
+  try {
+    const publicKey = await getPublicKeyAsync(seed);
+    const expected = didPublicKey(snapshot.did);
+    requireIntent(publicKey.every((byte, index) => byte === expected[index]));
+    const signature = await signAsync(message, seed);
+    return { intent: snapshot, signature: bufferToBase64(new Uint8Array(signature).buffer) };
+  } finally {
+    seed.fill(0);
+  }
+}, "signEscrowEnrollmentIntent");
+var getEscrowBlobIdentity = /* @__PURE__ */ __name(async (input) => {
+  const envelope2 = parseEscrowEnvelope(input);
+  const decode2 = /* @__PURE__ */ __name((value) => {
+    const bytes3 = new Uint8Array(base64ToBuffer(value));
+    requireIntent(bufferToBase64(bytes3.buffer) === value);
+    return bytes3;
+  }, "decode");
+  const point = decode2(envelope2.ephemeralPublicKey);
+  const salt = decode2(envelope2.salt);
+  const iv = decode2(envelope2.iv);
+  const ciphertext = decode2(envelope2.ciphertext);
+  requireIntent(
+    point.length === 65 && point[0] === 4 && salt.length === 32 && iv.length === 12 && ciphertext.length >= 16
+  );
+  await crypto.subtle.importKey("raw", point, { name: "ECDH", namedCurve: "P-256" }, false, []);
+  const fields = [
+    Uint8Array.of(1),
+    utf8(envelope2.algorithm),
+    utf8(envelope2.keyId),
+    point.slice(1, 33),
+    salt,
+    iv,
+    ciphertext
+  ];
+  const message = join([
+    utf8("learncard-escrow-blob-id-v1\0"),
+    ...fields.flatMap((field) => [integer(field.length, 8), field])
+  ]);
+  return bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", message)));
+}, "getEscrowBlobIdentity");
+
+// src/escrow-nitro-attestation.ts
+import "reflect-metadata";
+import { decode, encode } from "cborg";
+import {
+  BasicConstraintsExtension,
+  KeyUsagesExtension,
+  KeyUsageFlags,
+  X509Certificate
+} from "@peculiar/x509";
+var NitroAttestationError = class extends Error {
+  constructor(reason) {
+    super(`Nitro attestation rejected: ${reason}`);
+    this.reason = reason;
+    this.name = "NitroAttestationError";
+  }
+  static {
+    __name(this, "NitroAttestationError");
+  }
+};
+var AWS_ROOT_SHA256 = "641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b";
+var fail = /* @__PURE__ */ __name((reason) => {
+  throw new NitroAttestationError(reason);
+}, "fail");
+var hex = /* @__PURE__ */ __name((bytes3) => Array.from(bytes3, (byte) => byte.toString(16).padStart(2, "0")).join(""), "hex");
+var bytes = /* @__PURE__ */ __name((value, reason) => value instanceof Uint8Array && value.length > 0 ? value : fail(reason), "bytes");
+var map = /* @__PURE__ */ __name((value, reason) => value instanceof Map ? value : fail(reason), "map");
+var decodeCbor = /* @__PURE__ */ __name((value, { allowIndefinite = false } = {}) => {
+  try {
+    return decode(value, {
+      useMaps: true,
+      rejectDuplicateMapKeys: true,
+      allowIndefinite,
+      allowUndefined: false,
+      allowNaN: false,
+      allowInfinity: false,
+      allowBigInt: false
+    });
+  } catch {
+    return fail("cbor");
+  }
+}, "decodeCbor");
+var decodeUserData = /* @__PURE__ */ __name((userData) => {
+  let decoded;
+  try {
+    decoded = decode(userData, {
+      useMaps: true,
+      rejectDuplicateMapKeys: true,
+      allowIndefinite: false,
+      allowUndefined: false,
+      allowNaN: false,
+      allowInfinity: false,
+      allowBigInt: false
+    });
+  } catch {
+    return void 0;
+  }
+  if (!(decoded instanceof Map) || decoded.size !== 3) return void 0;
+  const spki = decoded.get(0);
+  const keyId = decoded.get(1);
+  const previousKeyIds = decoded.get(2);
+  const isKeyId = /* @__PURE__ */ __name((value) => typeof value === "string" && /^[A-Za-z0-9._-]{1,128}$/.test(value), "isKeyId");
+  if (!(spki instanceof Uint8Array) || spki.length === 0 || !isKeyId(keyId) || !Array.isArray(previousKeyIds) || previousKeyIds.length > 3 || !previousKeyIds.every(isKeyId)) {
+    return void 0;
+  }
+  return { spki, keyId, previousKeyIds };
+}, "decodeUserData");
+var verifyNitroAttestationDocument = /* @__PURE__ */ __name(async (documentB64, {
+  expectedNonce,
+  policy,
+  now = Date.now()
+}) => {
+  let document;
+  try {
+    if (!documentB64 || documentB64.length > 65536 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(documentB64))
+      fail("cbor");
+    document = base64ToBuffer(documentB64);
+  } catch {
+    return fail("cbor");
+  }
+  const cose = decodeCbor(document[0] === 210 ? document.subarray(1) : document);
+  if (!Array.isArray(cose) || cose.length !== 4) fail("cose");
+  const [protectedValue, unprotectedValue, payloadValue, signatureValue] = cose;
+  const protectedBytes = bytes(protectedValue, "cose");
+  const protectedHeader = map(decodeCbor(protectedBytes), "alg");
+  if (protectedHeader.size !== 1 || protectedHeader.get(1) !== -35) fail("alg");
+  if (map(unprotectedValue, "cose").size !== 0) fail("cose");
+  const payloadBytes = bytes(payloadValue, "cose");
+  const signature = bytes(signatureValue, "signature");
+  if (signature.length !== 96) fail("signature");
+  const payload = map(decodeCbor(payloadBytes, { allowIndefinite: true }), "cbor");
+  const moduleId = payload.get("module_id");
+  const timestamp = payload.get("timestamp");
+  if (typeof moduleId !== "string" || !moduleId || payload.get("digest") !== "SHA384")
+    fail("cbor");
+  if (typeof timestamp !== "number" || !Number.isSafeInteger(timestamp) || timestamp < 0)
+    fail("freshness");
+  const leafDer = bytes(payload.get("certificate"), "chain");
+  const bundle = payload.get("cabundle");
+  if (!Array.isArray(bundle) || !bundle.length || bundle.length > 16) fail("chain");
+  const ders = bundle.map((value) => bytes(value, "chain"));
+  const rootHash = hex(
+    new Uint8Array(await crypto.subtle.digest("SHA-256", new Uint8Array(ders[0])))
+  );
+  if (rootHash !== (policy.rootCertificateSha256 ?? AWS_ROOT_SHA256).toLowerCase()) fail("root");
+  let leaf;
+  try {
+    const chain = [...ders, leafDer].map((der) => new X509Certificate(new Uint8Array(der)));
+    for (let i = 0; i < chain.length; i++) {
+      const cert = chain[i];
+      const issuer = chain[Math.max(0, i - 1)];
+      if (!Number.isFinite(now) || now < cert.notBefore.getTime() || now > cert.notAfter.getTime() || cert.issuer !== issuer.subject || !await cert.verify({ publicKey: issuer.publicKey, date: new Date(now) }, crypto))
+        fail("chain");
+      if (i < chain.length - 1) {
+        const constraints = cert.getExtension(BasicConstraintsExtension);
+        const usage = cert.getExtension(KeyUsagesExtension);
+        if (!constraints?.ca || constraints.pathLength !== void 0 && chain.length - i - 2 > constraints.pathLength || usage && !(usage.usages & KeyUsageFlags.keyCertSign))
+          fail("chain");
+      }
+    }
+    leaf = chain[chain.length - 1];
+  } catch {
+    return fail("chain");
+  }
+  try {
+    const key = await crypto.subtle.importKey(
+      "spki",
+      leaf.publicKey.rawData,
+      { name: "ECDSA", namedCurve: "P-384" },
+      false,
+      ["verify"]
+    );
+    const structure = encode(["Signature1", protectedBytes, new Uint8Array(), payloadBytes]);
+    if (!await crypto.subtle.verify(
+      { name: "ECDSA", hash: "SHA-384" },
+      key,
+      new Uint8Array(signature),
+      new Uint8Array(structure)
+    ))
+      fail("signature");
+  } catch {
+    return fail("signature");
+  }
+  const rawPcrs = map(payload.get("pcrs"), "pcr");
+  const pcrs = {};
+  for (const [index, value] of rawPcrs) {
+    if (typeof index !== "number" || !Number.isInteger(index) || index < 0 || index > 31)
+      fail("pcr");
+    const pcr = bytes(value, "pcr");
+    if (pcr.length !== 48) fail("pcr");
+    pcrs[index] = hex(pcr);
+  }
+  if (pcrs[0] === "00".repeat(48)) fail("debug");
+  if (!policy.pinnedMeasurements.some(
+    (pin) => typeof pin.pcr0 === "string" && typeof pin.pcr1 === "string" && typeof pin.pcr2 === "string" && pin.pcr0.toLowerCase() === pcrs[0] && pin.pcr1.toLowerCase() === pcrs[1] && pin.pcr2.toLowerCase() === pcrs[2]
+  ))
+    fail("pcr");
+  const nonce = bytes(payload.get("nonce"), "nonce");
+  if (!(expectedNonce instanceof Uint8Array) || expectedNonce.length !== 32 || nonce.length !== expectedNonce.length)
+    fail("nonce");
+  let difference = 0;
+  for (let i = 0; i < nonce.length; i++) difference |= nonce[i] ^ expectedNonce[i];
+  if (difference !== 0) fail("nonce");
+  const maxAge = policy.maxAgeMs ?? 3e5;
+  if (!Number.isFinite(maxAge) || maxAge < 0 || now - timestamp > maxAge || timestamp > now + 6e4)
+    fail("freshness");
+  const userData = bytes(payload.get("user_data"), "user-data");
+  const newFormat = decodeUserData(new Uint8Array(userData));
+  const spki = newFormat ? newFormat.spki : userData;
+  try {
+    await crypto.subtle.importKey(
+      "spki",
+      new Uint8Array(spki),
+      { name: "ECDH", namedCurve: "P-256" },
+      false,
+      []
+    );
+  } catch {
+    return fail("user-data");
+  }
+  const rawLedgerKey = payload.get("public_key");
+  let ledgerPublicKey;
+  let measurementHash;
+  if (rawLedgerKey !== void 0 && rawLedgerKey !== null) {
+    const ledger = new Uint8Array(bytes(rawLedgerKey, "user-data"));
+    if (ledger.length !== 65 || ledger[0] !== 4) fail("user-data");
+    try {
+      await crypto.subtle.importKey(
+        "raw",
+        ledger,
+        { name: "ECDSA", namedCurve: "P-256" },
+        false,
+        ["verify"]
+      );
+    } catch {
+      return fail("user-data");
+    }
+    const tuple = new Uint8Array(144);
+    for (let i = 0; i < 3; i++) tuple.set(bytes(rawPcrs.get(i), "pcr"), i * 48);
+    measurementHash = hex(new Uint8Array(await crypto.subtle.digest("SHA-256", tuple)));
+    ledgerPublicKey = bufferToBase64(ledger.buffer);
+  }
+  return {
+    escrowPublicKeySpkiB64: bufferToBase64(new Uint8Array(spki).buffer),
+    keyId: newFormat?.keyId,
+    previousKeyIds: newFormat?.previousKeyIds ?? [],
+    pcrs,
+    timestamp,
+    moduleId,
+    ...ledgerPublicKey ? { ledgerPublicKey, measurementHash } : {}
+  };
+}, "verifyNitroAttestationDocument");
+
 // src/escrow-attestation.ts
 var isRecord3 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
 var normalizePublicKey = /* @__PURE__ */ __name((value) => {
@@ -20176,13 +20950,56 @@ var normalizePublicKey = /* @__PURE__ */ __name((value) => {
   }
   return bufferToBase64(base64ToBuffer(trimmed).buffer);
 }, "normalizePublicKey");
-var verifyEnclaveAttestation = /* @__PURE__ */ __name(async (attestation, policy) => {
-  const fields = ["mode", "keyId", "publicKey", "measurements", "document", "issuedAt"];
-  if (!isRecord3(attestation) || Object.keys(attestation).some((key) => !fields.includes(key)) || attestation.mode !== "software" && attestation.mode !== "nitro" || typeof attestation.keyId !== "string" || !/^[A-Za-z0-9._-]{1,128}$/.test(attestation.keyId) || typeof attestation.publicKey !== "string" || !isRecord3(attestation.measurements) || Object.entries(attestation.measurements).some(
+var verifyEnclaveAttestation = /* @__PURE__ */ __name(async (attestation, policy, nonce) => {
+  const isKeyId = /* @__PURE__ */ __name((value) => typeof value === "string" && /^[A-Za-z0-9._-]{1,128}$/.test(value), "isKeyId");
+  const fields = [
+    "mode",
+    "keyId",
+    "previousKeyIds",
+    "publicKey",
+    "measurements",
+    "document",
+    "issuedAt"
+  ];
+  if (!isRecord3(attestation) || Object.keys(attestation).some((key) => !fields.includes(key)) || attestation.mode !== "software" && attestation.mode !== "nitro" || !isKeyId(attestation.keyId) || attestation.previousKeyIds !== void 0 && (!Array.isArray(attestation.previousKeyIds) || attestation.previousKeyIds.length > 3 || !attestation.previousKeyIds.every(isKeyId)) || typeof attestation.publicKey !== "string" || !isRecord3(attestation.measurements) || Object.entries(attestation.measurements).some(
     ([key, value]) => !["imageSha384", "pcr0", "pcr1", "pcr2"].includes(key) || typeof value !== "string" || !value || value.length > 1024
   ) || typeof attestation.document !== "string" || !attestation.document || attestation.document.length > 65536 || typeof attestation.issuedAt !== "string" || !Number.isFinite(Date.parse(attestation.issuedAt))) {
     throw new Error("Invalid escrow attestation");
   }
+  const plaintextPreviousKeyIds = attestation.previousKeyIds ?? [];
+  if (attestation.mode !== policy.mode) throw new Error("Escrow attestation mode mismatch");
+  if (policy.mode === "nitro") {
+    if (!nonce) throw new NitroAttestationError("nonce");
+    const verified = await verifyNitroAttestationDocument(attestation.document, {
+      expectedNonce: nonce,
+      policy
+    });
+    try {
+      if (normalizePublicKey(attestation.publicKey) !== verified.escrowPublicKeySpkiB64) {
+        throw new NitroAttestationError("user-data");
+      }
+    } catch {
+      throw new NitroAttestationError("user-data");
+    }
+    if (verified.keyId !== void 0 && verified.keyId !== attestation.keyId) {
+      throw new NitroAttestationError("user-data");
+    }
+    if (plaintextPreviousKeyIds.length !== verified.previousKeyIds.length || !plaintextPreviousKeyIds.every((id, index) => id === verified.previousKeyIds[index])) {
+      throw new NitroAttestationError("user-data");
+    }
+    return {
+      publicKey: verified.escrowPublicKeySpkiB64,
+      keyId: attestation.keyId,
+      previousKeyIds: verified.previousKeyIds,
+      mode: "nitro",
+      ...verified.keyId && verified.ledgerPublicKey && verified.measurementHash ? {
+        authority: {
+          ledgerPublicKey: verified.ledgerPublicKey,
+          measurement: verified.measurementHash
+        }
+      } : {}
+    };
+  }
   const publicKey = normalizePublicKey(attestation.publicKey);
   await crypto.subtle.importKey(
     "spki",
@@ -20191,16 +21008,404 @@ var verifyEnclaveAttestation = /* @__PURE__ */ __name(async (attestation, policy
     false,
     []
   );
-  if (policy.mode === "nitro") {
-    throw new Error("Nitro attestation verification is not implemented yet");
-  }
-  if (attestation.mode !== policy.mode) throw new Error("Escrow attestation mode mismatch");
   if (!policy.pinnedPublicKeys.some((pin) => normalizePublicKey(pin) === publicKey)) {
     throw new Error("Escrow attestation public key is not trusted");
   }
-  return { publicKey, keyId: attestation.keyId, mode: attestation.mode };
+  return {
+    publicKey,
+    keyId: attestation.keyId,
+    previousKeyIds: plaintextPreviousKeyIds,
+    mode: attestation.mode
+  };
 }, "verifyEnclaveAttestation");
 
+// src/escrow-authority.types.ts
+var EscrowEvidenceError = class extends Error {
+  static {
+    __name(this, "EscrowEvidenceError");
+  }
+  constructor() {
+    super("Automatic recovery evidence could not be verified.");
+    this.name = "EscrowEvidenceError";
+  }
+};
+
+// src/escrow-authority.ts
+var fail2 = /* @__PURE__ */ __name(() => {
+  throw new EscrowEvidenceError();
+}, "fail");
+var requireEvidence = /* @__PURE__ */ __name((condition) => {
+  if (!condition) fail2();
+}, "requireEvidence");
+var object = /* @__PURE__ */ __name((value) => {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return fail2();
+  return value;
+}, "object");
+var keys = /* @__PURE__ */ __name((value, names) => {
+  requireEvidence(
+    Object.keys(value).length === names.length && names.every((name) => Object.prototype.hasOwnProperty.call(value, name))
+  );
+}, "keys");
+var integer2 = /* @__PURE__ */ __name((value, minimum = 0, maximum = Number.MAX_SAFE_INTEGER) => {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < minimum || value > maximum)
+    return fail2();
+  return value;
+}, "integer");
+var text = /* @__PURE__ */ __name((value, maximum) => {
+  if (typeof value !== "string" || !value.length || value.length > maximum) return fail2();
+  return value;
+}, "text");
+var bytes2 = /* @__PURE__ */ __name((value, length) => {
+  if (!Array.isArray(value) || value.length !== length || !value.every(
+    (byte) => typeof byte === "number" && Number.isInteger(byte) && byte >= 0 && byte <= 255
+  ))
+    return fail2();
+  return Uint8Array.from(value);
+}, "bytes");
+var base64 = /* @__PURE__ */ __name((value, maximum) => {
+  const encoded = text(value, maximum);
+  try {
+    const decoded = new Uint8Array(base64ToBuffer(encoded));
+    requireEvidence(bufferToBase64(decoded.buffer) === encoded);
+    return decoded;
+  } catch {
+    return fail2();
+  }
+}, "base64");
+var frame = /* @__PURE__ */ __name((value) => {
+  const result = new Uint8Array(4 + value.length);
+  new DataView(result.buffer).setUint32(0, value.length, false);
+  result.set(value, 4);
+  return result;
+}, "frame");
+var join2 = /* @__PURE__ */ __name((...values) => {
+  const result = new Uint8Array(values.reduce((n, v) => n + v.length, 0));
+  let offset = 0;
+  for (const value of values) {
+    result.set(value, offset);
+    offset += value.length;
+  }
+  return result;
+}, "join");
+var hash = /* @__PURE__ */ __name(async (value) => bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", new Uint8Array(value)))), "hash");
+var utf82 = /* @__PURE__ */ __name((value) => new TextEncoder().encode(value), "utf8");
+var escrowAuthorityMeasurements = /* @__PURE__ */ __name(async (policy) => {
+  if (policy.mode !== "nitro") return [];
+  const hashes = [];
+  for (const pin of policy.pinnedMeasurements) {
+    const tuple = [pin.pcr0, pin.pcr1, pin.pcr2];
+    if (!tuple.every((pcr) => typeof pcr === "string" && /^[0-9a-f]{96}$/i.test(pcr))) continue;
+    if (pin.pcr0 === "00".repeat(48)) continue;
+    const encoded = tuple.join("");
+    const decoded = Uint8Array.from(
+      { length: 144 },
+      (_, i) => parseInt(encoded.slice(i * 2, i * 2 + 2), 16)
+    );
+    hashes.push(await hash(decoded));
+  }
+  return hashes;
+}, "escrowAuthorityMeasurements");
+var P256_ORDER = BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551");
+var verifyRecord = /* @__PURE__ */ __name(async (input, kind, identity, historical) => {
+  requireEvidence(identity.mode === "nitro" && !!identity.authority);
+  const raw = object(input);
+  keys(raw, ["version", "kind", "keyId", "measurement", "payload", "signature"]);
+  requireEvidence(raw.version === 1 && raw.kind === kind);
+  const keyId = text(raw.keyId, 128);
+  requireEvidence(
+    historical ? [identity.keyId, ...identity.previousKeyIds].includes(keyId) : keyId === identity.keyId
+  );
+  const measurement = bytes2(raw.measurement, 32);
+  requireEvidence(
+    historical ? historical.allowedMeasurements.includes(bytesToHex(measurement)) : bytesToHex(measurement) === identity.authority?.measurement
+  );
+  const payloadB64 = text(raw.payload, kind === "snapshot" ? 49152 : 8192);
+  const signatureB64 = text(raw.signature, 88);
+  const payload = base64(payloadB64, kind === "snapshot" ? 49152 : 8192);
+  const signature = base64(signatureB64, 88);
+  const ledgerKey = base64(identity.authority?.ledgerPublicKey, 88);
+  requireEvidence(ledgerKey.length === 65 && ledgerKey[0] === 4);
+  requireEvidence(signature.length === 64);
+  const s = BigInt(`0x${bytesToHex(signature.slice(32))}`);
+  requireEvidence(s > 0n && s <= P256_ORDER / 2n);
+  const message = join2(
+    utf82("learncard-authority-signed-record-v1\0"),
+    Uint8Array.of(kind === "snapshot" ? 2 : 1),
+    frame(utf82(keyId)),
+    measurement,
+    frame(payload)
+  );
+  try {
+    const key = await crypto.subtle.importKey(
+      "raw",
+      ledgerKey,
+      { name: "ECDSA", namedCurve: "P-256" },
+      false,
+      ["verify"]
+    );
+    requireEvidence(
+      await crypto.subtle.verify({ name: "ECDSA", hash: "SHA-256" }, key, signature, message)
+    );
+    const decoded = JSON.parse(
+      new TextDecoder("utf-8", { fatal: true }).decode(payload)
+    );
+    const record = {
+      version: 1,
+      kind,
+      keyId,
+      measurement: Array.from(measurement),
+      payload: payloadB64,
+      signature: signatureB64
+    };
+    return { record, payload: decoded };
+  } catch {
+    return fail2();
+  }
+}, "verifyRecord");
+var envelope = /* @__PURE__ */ __name((value) => {
+  try {
+    const e = parseEscrowEnvelope(value);
+    return {
+      version: e.version,
+      algorithm: e.algorithm,
+      keyId: e.keyId,
+      ephemeralPublicKey: e.ephemeralPublicKey,
+      salt: e.salt,
+      iv: e.iv,
+      ciphertext: e.ciphertext
+    };
+  } catch {
+    return fail2();
+  }
+}, "envelope");
+var state = /* @__PURE__ */ __name((value) => {
+  const raw = object(value);
+  keys(raw, [
+    "tenant",
+    "authorityGeneration",
+    "did",
+    "enrollmentVersion",
+    "enrollmentEpoch",
+    "status",
+    "envelope",
+    "shareVersion",
+    "hasPin",
+    "pinGeneration",
+    "attemptsUsed"
+  ]);
+  if (raw.status !== "empty" && raw.status !== "active" && raw.status !== "disabled")
+    return fail2();
+  if (typeof raw.hasPin !== "boolean") return fail2();
+  const result = {
+    tenant: text(raw.tenant, 128),
+    authorityGeneration: text(raw.authorityGeneration, 128),
+    did: text(raw.did, 8192),
+    enrollmentVersion: integer2(raw.enrollmentVersion),
+    enrollmentEpoch: integer2(raw.enrollmentEpoch),
+    status: raw.status,
+    envelope: raw.envelope === null ? null : envelope(raw.envelope),
+    shareVersion: raw.shareVersion === null ? null : integer2(raw.shareVersion, 1, 4294967295),
+    hasPin: raw.hasPin,
+    pinGeneration: integer2(raw.pinGeneration),
+    attemptsUsed: integer2(raw.attemptsUsed, 0, 10)
+  };
+  requireEvidence(
+    result.pinGeneration <= result.enrollmentVersion && result.enrollmentEpoch <= result.enrollmentVersion && (!result.hasPin || result.pinGeneration > 0) && (result.hasPin || result.attemptsUsed === 0)
+  );
+  if (result.status === "empty")
+    requireEvidence(
+      result.enrollmentVersion === 0 && result.enrollmentEpoch === 0 && !result.envelope && result.shareVersion === null && !result.hasPin
+    );
+  else requireEvidence(result.enrollmentVersion > 0 && result.enrollmentEpoch > 0);
+  if (result.status === "active")
+    requireEvidence(!!result.envelope && result.shareVersion !== null);
+  else requireEvidence(result.envelope === null && result.shareVersion === null);
+  return result;
+}, "state");
+var verifyEscrowAuthorityState = /* @__PURE__ */ __name(async (response, nonce, tenant, did, identity) => {
+  requireEvidence(/^[0-9a-f]{64}$/.test(nonce) && nonce.length === 64);
+  const raw = object(response);
+  keys(raw, ["state", "proof"]);
+  const { payload } = await verifyRecord(raw.proof, "snapshot", identity);
+  if (!Array.isArray(payload) || payload.length !== 2 || payload[0] !== nonce) return fail2();
+  const signed = state(payload[1]);
+  requireEvidence(signed.tenant === tenant && signed.did === did);
+  requireEvidence(JSON.stringify(signed) === JSON.stringify(state(raw.state)));
+  if (signed.envelope) {
+    requireEvidence(
+      [identity.keyId, ...identity.previousKeyIds].includes(signed.envelope.keyId)
+    );
+    await getEscrowBlobIdentity(signed.envelope);
+  }
+  return signed;
+}, "verifyEscrowAuthorityState");
+var verifyEscrowEnrollmentCommit = /* @__PURE__ */ __name(async (response, intent, identity) => {
+  const raw = object(response);
+  const { record, payload } = await verifyRecord(raw.receipt, "commit", identity);
+  const data = object(payload);
+  keys(data, ["commit", "eventHash", "requestDigest", "resultBlobIdentity", "enrollmentEpoch"]);
+  const commit = object(data.commit);
+  keys(commit, ["schemaVersion", "binding", "executionId", "revisions", "transactionDigest"]);
+  const binding = object(commit.binding);
+  keys(binding, ["tenant", "generation", "didHash"]);
+  const revisions = object(commit.revisions);
+  keys(revisions, ["operation", "enrollment"]);
+  requireEvidence(
+    commit.schemaVersion === 1 && binding.tenant === intent.tenant && binding.generation === intent.authorityGeneration
+  );
+  requireEvidence(bytesToHex(bytes2(binding.didHash, 32)) === await hash(utf82(intent.did)));
+  requireEvidence(
+    integer2(revisions.enrollment, 1) === intent.expectedEnrollmentVersion + 1 && integer2(revisions.operation, 1) >= integer2(revisions.enrollment, 1)
+  );
+  bytes2(commit.executionId, 16);
+  bytes2(commit.transactionDigest, 32);
+  bytes2(data.eventHash, 32);
+  requireEvidence(integer2(data.enrollmentEpoch, 1) === intent.enrollmentEpoch);
+  requireEvidence(
+    bytesToHex(bytes2(data.requestDigest, 32)) === await hash(encodeEscrowEnrollmentIntent(intent))
+  );
+  if (intent.action === "disable") {
+    requireEvidence(
+      (raw.envelope === null || raw.envelope === void 0) && data.resultBlobIdentity === null
+    );
+    return { envelope: null, receipt: record };
+  }
+  const output = envelope(raw.envelope);
+  requireEvidence(
+    output.keyId === identity.keyId && bytesToHex(bytes2(data.resultBlobIdentity, 32)) === await getEscrowBlobIdentity(output)
+  );
+  return { envelope: output, receipt: record };
+}, "verifyEscrowEnrollmentCommit");
+var holdDigest = /* @__PURE__ */ __name(async (tenant, record) => {
+  const h = record.hold;
+  const didHash = await hash(utf82(h.did));
+  return hash(
+    utf82(
+      JSON.stringify([
+        "learncard-hold-v1",
+        tenant,
+        h.holdId,
+        didHash,
+        h.shareVersion,
+        h.blobHash,
+        h.enrollmentEpoch,
+        h.releasePolicy,
+        h.clientEphemeralPublicKey,
+        h.createdLo,
+        h.createdHi,
+        record.holdDurationMs,
+        h.policyVersion,
+        record.ledgerSeq
+      ])
+    )
+  );
+}, "holdDigest");
+var verifyEscrowHoldRecord = /* @__PURE__ */ __name(async (record, expected, identity, historical) => {
+  requireEvidence(
+    record.hold.holdId === expected.holdId && record.hold.did === expected.did && record.hold.clientEphemeralPublicKey === expected.clientEphemeralPublicKey && record.hold.blobHash === expected.blobHash
+  );
+  let signed;
+  try {
+    signed = JSON.parse(
+      new TextDecoder("utf-8", { fatal: true }).decode(base64(record.hold.signature, 8192))
+    );
+  } catch {
+    return fail2();
+  }
+  const { record: receipt, payload } = await verifyRecord(signed, "commit", identity, historical);
+  const data = object(payload);
+  keys(data, ["commit", "eventHash", "requestDigest", "resultBlobIdentity", "enrollmentEpoch"]);
+  const commit = object(data.commit);
+  keys(commit, ["schemaVersion", "binding", "executionId", "revisions", "transactionDigest"]);
+  const binding = object(commit.binding);
+  keys(binding, ["tenant", "generation", "didHash"]);
+  requireEvidence(commit.schemaVersion === 1 && binding.tenant === expected.tenant);
+  const authorityGeneration = text(binding.generation, 128);
+  if (historical) requireEvidence(authorityGeneration === historical.authorityGeneration);
+  requireEvidence(bytesToHex(bytes2(binding.didHash, 32)) === await hash(utf82(expected.did)));
+  requireEvidence(integer2(data.enrollmentEpoch, 1) === record.hold.enrollmentEpoch);
+  requireEvidence(bytesToHex(bytes2(data.resultBlobIdentity, 32)) === record.hold.blobHash);
+  const digest = await holdDigest(expected.tenant, record);
+  requireEvidence(bytesToHex(bytes2(data.requestDigest, 32)) === digest);
+  return { receipt, authorityGeneration, holdDigest: digest };
+}, "verifyEscrowHoldRecord");
+var verifyEscrowHoldConfirmation = /* @__PURE__ */ __name(async (receipt, record, expected, identity) => {
+  const raw = object(receipt);
+  const kind = raw.kind;
+  if (kind !== "commit" && kind !== "snapshot") return fail2();
+  const { record: verified, payload } = await verifyRecord(raw, kind, identity);
+  if (kind === "snapshot") {
+    if (!Array.isArray(payload) || payload.length !== 7) return fail2();
+    const [tag, holdId, digestBytes] = payload;
+    requireEvidence(
+      tag === "learncard-authority-hold-snapshot-v2" && holdId === record.hold.holdId && payload[6] === expected.authorityGeneration
+    );
+    requireEvidence(
+      bytesToHex(bytes2(digestBytes, 32)) === await holdDigest(expected.tenant, record)
+    );
+    requireEvidence(payload[3] === "pending");
+    integer2(payload[4], 1);
+    return verified;
+  }
+  const data = object(payload);
+  keys(data, ["commit", "eventHash", "requestDigest", "resultBlobIdentity", "enrollmentEpoch"]);
+  const commit = object(data.commit);
+  keys(commit, ["schemaVersion", "binding", "executionId", "revisions", "transactionDigest"]);
+  const binding = object(commit.binding);
+  keys(binding, ["tenant", "generation", "didHash"]);
+  requireEvidence(
+    commit.schemaVersion === 1 && binding.tenant === expected.tenant && binding.generation === expected.authorityGeneration
+  );
+  requireEvidence(bytesToHex(bytes2(binding.didHash, 32)) === await hash(utf82(expected.did)));
+  requireEvidence(integer2(data.enrollmentEpoch, 1) === record.hold.enrollmentEpoch);
+  requireEvidence(bytesToHex(bytes2(data.resultBlobIdentity, 32)) === record.hold.blobHash);
+  bytes2(data.requestDigest, 32);
+  return verified;
+}, "verifyEscrowHoldConfirmation");
+var resolveEscrowEnrollmentAction = /* @__PURE__ */ __name((current, input) => {
+  const disabling = input === "disable";
+  const pinAction = disabling ? "keep" : input === "set" ? current.hasPin ? "change" : "set" : input === "clear" ? current.hasPin ? "clear" : "keep" : "keep";
+  const action = disabling ? "disable" : current.status !== "active" ? "enroll" : current.hasPin && pinAction === "keep" ? "carry" : "replace";
+  return { action, pinAction, bindsRecoveryContact: action === "enroll" || action === "replace" };
+}, "resolveEscrowEnrollmentAction");
+var violatesCarryContactRule = /* @__PURE__ */ __name((action, target) => action === "carry" && !!target && (!!target.recoveryEmail || !!target.recoveryLanguage), "violatesCarryContactRule");
+var createEscrowEnrollmentIntent = /* @__PURE__ */ __name(async (input) => {
+  const current = state(input.state);
+  const target = input.target === null ? null : envelope(input.target);
+  const disabling = input.pinAction === "disable";
+  requireEvidence(
+    current.enrollmentVersion < Number.MAX_SAFE_INTEGER && (disabling || current.enrollmentEpoch < Number.MAX_SAFE_INTEGER)
+  );
+  if (disabling && current.status !== "active") return fail2();
+  if (current.status === "disabled" && current.hasPin && input.pinAction === "automatic")
+    return fail2();
+  const { action, pinAction, bindsRecoveryContact } = resolveEscrowEnrollmentAction(
+    current,
+    input.pinAction
+  );
+  requireEvidence(!disabling || input.target === null);
+  requireEvidence(disabling || input.target !== null);
+  if (action === "carry") requireEvidence(input.shareVersion > (current.shareVersion ?? 0));
+  const intent = {
+    version: 2,
+    tenant: current.tenant,
+    did: current.did,
+    authorityGeneration: current.authorityGeneration,
+    expectedEnrollmentVersion: current.enrollmentVersion,
+    action,
+    sourceBlobIdentity: current.envelope ? await getEscrowBlobIdentity(current.envelope) : null,
+    targetBlobIdentity: target ? await getEscrowBlobIdentity(target) : null,
+    pinAction,
+    shareVersion: disabling ? current.shareVersion : input.shareVersion,
+    enrollmentEpoch: current.enrollmentEpoch + (disabling ? 0 : 1),
+    requestId: crypto.randomUUID(),
+    allowRewrap: !disabling,
+    recoveryEmail: bindsRecoveryContact ? input.recoveryEmail : null,
+    recoveryLanguage: bindsRecoveryContact ? input.recoveryLanguage : null
+  };
+  return signEscrowEnrollmentIntent(intent, input.privateKey);
+}, "createEscrowEnrollmentIntent");
+
 // src/types.ts
 var import_types = __toESM(require_dist());
 var EscrowPinUnavailableError = class extends Error {
@@ -20945,6 +22150,10 @@ function createSSSStrategy(config) {
   const localWrites = /* @__PURE__ */ new Set();
   const guardedStorage = /* @__PURE__ */ __name(() => {
     const generation = storageGeneration;
+    const assertCurrent = /* @__PURE__ */ __name(() => {
+      if (generation !== storageGeneration)
+        throw new Error("This recovery request was cancelled.");
+    }, "assertCurrent");
     const write = /* @__PURE__ */ __name((operation) => {
       if (generation !== storageGeneration) {
         return Promise.reject(new Error("This recovery request was cancelled."));
@@ -20955,6 +22164,7 @@ function createSSSStrategy(config) {
     }, "write");
     const guarded = {
       ...storage,
+      assertCurrent,
       storeDeviceShare: /* @__PURE__ */ __name((share, id) => write(() => storage.storeDeviceShare(share, id)), "storeDeviceShare"),
       storeShareVersion: /* @__PURE__ */ __name((version, id) => write(() => storage.storeShareVersion(version, id)), "storeShareVersion"),
       clearAllShares: /* @__PURE__ */ __name((id) => write(() => storage.clearAllShares(id)), "clearAllShares"),
@@ -20971,6 +22181,8 @@ function createSSSStrategy(config) {
   let pendingIdentityRecovery;
   let lastServerSnapshot = null;
   let escrowEnrollmentInFlight;
+  let staleEscrowReenrollAttempted = false;
+  let verifiedEscrowEnvelope;
   let unenrolledRotation;
   const escrowRequest = /* @__PURE__ */ __name(async (path, init, pinAttempt = false) => {
     const response = await fetch(`${serverUrl}/keys/escrow${path}`, {
@@ -21018,22 +22230,100 @@ function createSSSStrategy(config) {
   }, "escrowRequest");
   const fetchVerifiedEnclaveKey = /* @__PURE__ */ __name(async () => {
     if (!config.escrow?.enabled) throw new Error("Escrow enrollment is disabled");
-    const { attestation } = await escrowRequest("/attestation", {
-      method: "GET",
-      headers: buildHeaders("", void 0, tenantId)
-    });
-    return verifyEnclaveAttestation(attestation, config.escrow.attestation);
+    const nonce = crypto.getRandomValues(new Uint8Array(32));
+    const nonceHex = Array.from(nonce, (byte) => byte.toString(16).padStart(2, "0")).join("");
+    const { attestation } = await escrowRequest(
+      `/attestation?nonce=${nonceHex}`,
+      {
+        method: "GET",
+        headers: buildHeaders("", void 0, tenantId)
+      }
+    );
+    return verifyEnclaveAttestation(attestation, config.escrow.attestation, nonce);
   }, "fetchVerifiedEnclaveKey");
-  const enrollEscrow = /* @__PURE__ */ __name(async (token, providerType, privateKey, primaryDid, shares, shareVersion, signDidAuthVp, verifiedKey, pinMaterial, clearPin = false) => {
+  const fetchEscrowHoldStatus = /* @__PURE__ */ __name(async (params) => {
+    const query = new URLSearchParams(
+      "holdId" in params ? { holdId: params.holdId } : { providerType: params.providerType }
+    );
+    const secret = "holdId" in params ? params.resumeToken : params.token;
+    const result = await escrowRequest(`/status?${query}`, {
+      method: "GET",
+      headers: {
+        ...buildHeaders("", void 0, tenantId),
+        "X-Auth-Token": secret
+      }
+    });
+    return result.hold;
+  }, "fetchEscrowHoldStatus");
+  const recoveryExpectations = /* @__PURE__ */ __name((holdId, expected) => {
+    if (!expected || expected.holdId !== holdId || expected.tenant !== (tenantId ?? "learncard") || !expected.did || !expected.clientEphemeralPublicKey || !expected.blobHash || !expected.authorityGeneration || !expected.holdDigest || !expected.ledgerPublicKey || !expected.keyId)
+      throw new EscrowEvidenceError();
+    return { ...expected };
+  }, "recoveryExpectations");
+  const verifyPendingHold = /* @__PURE__ */ __name(async (status, expected, identity) => {
+    if (!config.escrow || identity.mode !== "nitro" || !identity.authority || identity.authority.ledgerPublicKey !== expected.ledgerPublicKey || ![identity.keyId, ...identity.previousKeyIds].includes(expected.keyId) || status.holdId !== expected.holdId || !status.holdRecord)
+      throw new EscrowEvidenceError();
+    const record = status.holdRecord;
+    const verified = await verifyEscrowHoldRecord(record, expected, identity, {
+      historical: true,
+      allowedMeasurements: await escrowAuthorityMeasurements(config.escrow.attestation),
+      authorityGeneration: expected.authorityGeneration
+    });
+    if (verified.holdDigest !== expected.holdDigest || verified.receipt.keyId !== expected.keyId)
+      throw new EscrowEvidenceError();
+    return record;
+  }, "verifyPendingHold");
+  const fetchAuthorityState = /* @__PURE__ */ __name(async (token, providerType, privateKey, did, signer, identity, assertCurrent) => {
+    assertCurrent();
+    if (identity.mode !== "nitro" || !identity.authority)
+      throw new Error("The enclave does not support verified enrollment.");
+    const nonce = Array.from(
+      crypto.getRandomValues(new Uint8Array(32)),
+      (byte) => byte.toString(16).padStart(2, "0")
+    ).join("");
+    const vp = await requestFreshDidAuthVp(serverUrl, privateKey, did, signer, tenantId);
+    assertCurrent();
+    const response = await escrowRequest("/authority-state", {
+      method: "POST",
+      headers: buildHeaders(token, vp, tenantId),
+      body: JSON.stringify({ authToken: token, providerType, nonce })
+    });
+    const result = await verifyEscrowAuthorityState(
+      response,
+      nonce,
+      tenantId ?? "learncard",
+      did,
+      identity
+    );
+    assertCurrent();
+    return result;
+  }, "fetchAuthorityState");
+  const enrollEscrow = /* @__PURE__ */ __name(async (token, providerType, privateKey, primaryDid, shares, shareVersion, signDidAuthVp, verifiedKey, pinMaterial, clearPin = false, assertCurrent = guardedStorage().assertCurrent, recoveryEmail = "", recoveryLanguage = "") => {
     if (!config.escrow?.enabled) throw new Error("Escrow enrollment is disabled");
     if (!signDidAuthVp) throw new Error("DID proof signing is required for escrow enrollment");
-    const { publicKey, keyId } = verifiedKey ?? await fetchVerifiedEnclaveKey();
-    const envelope = await encryptEscrowBlob(
+    const identity = verifiedKey ?? await fetchVerifiedEnclaveKey();
+    assertCurrent();
+    const { publicKey, keyId } = identity;
+    const authority = config.escrow.attestation.mode === "nitro" ? await fetchAuthorityState(
+      token,
+      providerType,
+      privateKey,
+      primaryDid,
+      signDidAuthVp,
+      identity,
+      assertCurrent
+    ) : void 0;
+    const bindsRecoveryContact = !authority || resolveEscrowEnrollmentAction(
+      authority,
+      pinMaterial ? "set" : clearPin ? "clear" : "automatic"
+    ).bindsRecoveryContact;
+    const envelope2 = await encryptEscrowBlob(
       {
         recoveryShare: shares.recoveryShare,
         did: primaryDid,
         shareVersion,
-        ...pinMaterial ? { pinVerifier: pinMaterial.pinVerifier } : {}
+        ...pinMaterial ? { pinVerifier: pinMaterial.pinVerifier } : {},
+        ...authority && recoveryEmail && bindsRecoveryContact ? { recoveryEmail, recoveryLanguage } : {}
       },
       publicKey,
       keyId
@@ -21045,19 +22335,40 @@ function createSSSStrategy(config) {
       signDidAuthVp,
       tenantId
     );
-    await escrowRequest("", {
+    const signedIntent = authority ? await createEscrowEnrollmentIntent({
+      state: authority,
+      target: envelope2,
+      shareVersion,
+      privateKey,
+      pinAction: pinMaterial ? "set" : clearPin ? "clear" : "automatic",
+      recoveryEmail,
+      recoveryLanguage
+    }) : void 0;
+    assertCurrent();
+    verifiedEscrowEnvelope = void 0;
+    const response = await escrowRequest("", {
       method: "POST",
       headers: buildHeaders(token, vp, tenantId),
       body: JSON.stringify({
         authToken: token,
         providerType,
-        envelope,
+        envelope: envelope2,
         shareVersion,
         enclaveKeyId: keyId,
         ...pinMaterial ? { pinSalt: pinMaterial.pinSalt } : {},
-        ...clearPin ? { clearPin: true } : {}
+        ...(signedIntent ? signedIntent.intent.pinAction === "clear" : clearPin) ? { clearPin: true } : {},
+        ...signedIntent ? { signedIntent, sourceEnvelope: authority?.envelope ?? null } : {}
       })
     });
+    if (signedIntent) {
+      const committed = await verifyEscrowEnrollmentCommit(
+        response,
+        signedIntent.intent,
+        identity
+      );
+      assertCurrent();
+      verifiedEscrowEnvelope = committed.envelope ?? void 0;
+    }
   }, "enrollEscrow");
   const tryEnrollEscrow = /* @__PURE__ */ __name(async (...args) => {
     if (!config.escrow?.enabled) return;
@@ -21072,9 +22383,12 @@ function createSSSStrategy(config) {
       }
     }
   }, "tryEnrollEscrow");
-  const ensureEscrowEnrollmentUnguarded = /* @__PURE__ */ __name(async (self, params, storage2, forceRotate = false) => {
+  const ensureEscrowEnrollmentUnguarded = /* @__PURE__ */ __name(async (self, params, storage2, forceRotate = false, allowDisabledEnrollment = false) => {
+    let clearPinForEnrollment = forceRotate;
     if (!config.escrow?.enabled) return { enrolled: false, reason: "disabled" };
     const pin = params.options?.pin;
+    const recoveryEmail = params.options?.recoveryEmail ?? "";
+    const recoveryLanguage = params.options?.recoveryLanguage ?? "";
     if (pin !== void 0) {
       const validation = validatePin(pin);
       if (!validation.ok)
@@ -21083,76 +22397,125 @@ function createSSSStrategy(config) {
         );
     }
     const status = await self.fetchServerKeyStatus(params.token, params.providerType);
+    storage2.assertCurrent();
     if (status.escrowOptedOut) return { enrolled: false, reason: "opted-out" };
-    if (!forceRotate && pin === void 0 && status.shareVersion !== null && status.recoveryMethods.some(
+    let currentlyEnrolled = status.shareVersion !== null && status.recoveryMethods.some(
       (method) => method.type === "escrow" && method.shareVersion === status.shareVersion && (Boolean(method.confirmedAt) || "confirmationStatus" in method && method.confirmationStatus === "confirmed")
-    ))
+    );
+    let verifiedKey;
+    if (config.escrow.attestation.mode === "nitro") {
+      if (!status.primaryDid || !params.signDidAuthVp)
+        throw new Error("Owner proof signing is required for escrow enrollment.");
+      verifiedKey = await fetchVerifiedEnclaveKey();
+      const current = await fetchAuthorityState(
+        params.token,
+        params.providerType,
+        params.privateKey,
+        status.primaryDid,
+        params.signDidAuthVp,
+        verifiedKey,
+        storage2.assertCurrent
+      );
+      if (current.status === "disabled") {
+        verifiedEscrowEnvelope = void 0;
+        if (!allowDisabledEnrollment) return { enrolled: false, reason: "opted-out" };
+        clearPinForEnrollment ||= current.hasPin && pin === void 0;
+      }
+      currentlyEnrolled = currentlyEnrolled && current.status === "active" && current.shareVersion === status.shareVersion && current.envelope?.keyId === verifiedKey.keyId;
+      if (currentlyEnrolled) verifiedEscrowEnvelope = current.envelope ?? void 0;
+    }
+    const repairingStaleBlob = pin === void 0 && !clearPinForEnrollment && currentlyEnrolled && !!status.escrowStale && !staleEscrowReenrollAttempted;
+    if (!clearPinForEnrollment && pin === void 0 && currentlyEnrolled && !repairingStaleBlob)
       return { enrolled: true, changed: false };
+    if (repairingStaleBlob) staleEscrowReenrollAttempted = true;
     if (!status.primaryDid) throw new Error("Cannot enroll escrow without a primary DID");
     if (!params.signDidAuthVp) {
       throw new Error("DID proof signing is required for escrow enrollment");
     }
-    if (!forceRotate && pin === void 0 && unenrolledRotation && unenrolledRotation.shareVersion === status.shareVersion && unenrolledRotation.primaryDid === status.primaryDid) {
-      const retry = unenrolledRotation;
+    try {
+      if (!clearPinForEnrollment && pin === void 0 && unenrolledRotation && unenrolledRotation.shareVersion === status.shareVersion && unenrolledRotation.primaryDid === status.primaryDid) {
+        const retry = unenrolledRotation;
+        await enrollEscrow(
+          params.token,
+          params.providerType,
+          params.privateKey,
+          retry.primaryDid,
+          retry.shares,
+          retry.shareVersion,
+          params.signDidAuthVp,
+          void 0,
+          void 0,
+          retry.clearPin,
+          storage2.assertCurrent,
+          recoveryEmail,
+          recoveryLanguage
+        );
+        unenrolledRotation = void 0;
+        return { enrolled: true, changed: true, shareVersion: retry.shareVersion };
+      }
+      verifiedKey ??= await fetchVerifiedEnclaveKey();
+      storage2.assertCurrent();
+      const pinSalt = pin !== void 0 ? generatePinSalt() : void 0;
+      const pinMaterial = pin !== void 0 && pinSalt !== void 0 ? { pinSalt, pinVerifier: await derivePinProof(pin, pinSalt) } : void 0;
+      const storageId = activeStorageId;
+      const primaryDid = status.primaryDid;
+      const { shares, shareVersion } = await withShareUpdateLock(
+        storage2,
+        storageId,
+        () => persistSharesWithoutLock(
+          params.privateKey,
+          serverUrl,
+          params.token,
+          params.providerType,
+          primaryDid,
+          storage2,
+          storageId,
+          void 0,
+          params.signDidAuthVp,
+          tenantId
+        )
+      );
+      lastEmailShare = shares.emailShare;
+      lastShareVersion = shareVersion;
+      lastServerSnapshot = {
+        currentVersion: shareVersion,
+        resolvedVersion: shareVersion,
+        authShare: shares.authShare,
+        primaryDid: status.primaryDid
+      };
+      unenrolledRotation = pinMaterial ? void 0 : {
+        shares,
+        shareVersion,
+        primaryDid: status.primaryDid,
+        clearPin: clearPinForEnrollment
+      };
       await enrollEscrow(
         params.token,
         params.providerType,
         params.privateKey,
-        retry.primaryDid,
-        retry.shares,
-        retry.shareVersion,
+        status.primaryDid,
+        shares,
+        shareVersion,
         params.signDidAuthVp,
-        void 0,
-        void 0,
-        retry.clearPin
+        verifiedKey,
+        pinMaterial,
+        clearPinForEnrollment,
+        storage2.assertCurrent,
+        recoveryEmail,
+        recoveryLanguage
       );
       unenrolledRotation = void 0;
-      return { enrolled: true, changed: true, shareVersion: retry.shareVersion };
+      return { enrolled: true, changed: true, shareVersion };
+    } catch (err) {
+      if (!repairingStaleBlob || config.escrow.attestation.mode === "nitro") throw err;
+      try {
+        if (config.onEscrowError) config.onEscrowError(err);
+        else console.warn("SSS: escrow enrollment failed");
+      } catch {
+        console.warn("SSS: escrow error reporting failed");
+      }
+      return { enrolled: true, changed: false };
     }
-    const verifiedKey = await fetchVerifiedEnclaveKey();
-    const pinSalt = pin !== void 0 ? generatePinSalt() : void 0;
-    const pinMaterial = pin !== void 0 && pinSalt !== void 0 ? { pinSalt, pinVerifier: await derivePinProof(pin, pinSalt) } : void 0;
-    const storageId = activeStorageId;
-    const primaryDid = status.primaryDid;
-    const { shares, shareVersion } = await withShareUpdateLock(
-      storage2,
-      storageId,
-      () => persistSharesWithoutLock(
-        params.privateKey,
-        serverUrl,
-        params.token,
-        params.providerType,
-        primaryDid,
-        storage2,
-        storageId,
-        void 0,
-        params.signDidAuthVp,
-        tenantId
-      )
-    );
-    lastEmailShare = shares.emailShare;
-    lastShareVersion = shareVersion;
-    lastServerSnapshot = {
-      currentVersion: shareVersion,
-      resolvedVersion: shareVersion,
-      authShare: shares.authShare,
-      primaryDid: status.primaryDid
-    };
-    unenrolledRotation = pinMaterial ? void 0 : { shares, shareVersion, primaryDid: status.primaryDid, clearPin: forceRotate };
-    await enrollEscrow(
-      params.token,
-      params.providerType,
-      params.privateKey,
-      status.primaryDid,
-      shares,
-      shareVersion,
-      params.signDidAuthVp,
-      verifiedKey,
-      pinMaterial,
-      forceRotate
-    );
-    unenrolledRotation = void 0;
-    return { enrolled: true, changed: true, shareVersion };
   }, "ensureEscrowEnrollmentUnguarded");
   const recordPromotion = /* @__PURE__ */ __name((primaryDid) => (snapshot) => {
     lastEmailShare = void 0;
@@ -21185,6 +22548,7 @@ function createSSSStrategy(config) {
     },
     // --- User scoping ---
     setActiveUser(userId) {
+      verifiedEscrowEnvelope = void 0;
       if (activeStorageId !== `sss-device-share:${userId}`) storageGeneration++;
       activeStorageId = `sss-device-share:${userId}`;
       lastServerSnapshot = null;
@@ -21229,6 +22593,7 @@ function createSSSStrategy(config) {
         );
       }
       storageGeneration++;
+      verifiedEscrowEnvelope = void 0;
       await Promise.allSettled(localWrites);
       await clearPendingShareCandidates(storage, storageId);
       return storage.clearAllShares(storageId);
@@ -21469,6 +22834,7 @@ function createSSSStrategy(config) {
         maskedRecoveryEmail: data.maskedRecoveryEmail ?? null,
         escrowOptedOut: data.escrowOptedOut === true,
         escrowPin: data.escrowPin,
+        escrowStale: data.escrowStale,
         sssActivationState: data.sssActivationState ?? "active"
       };
     },
@@ -21513,14 +22879,71 @@ function createSSSStrategy(config) {
       if (!config.escrow?.enabled) return { state: "disabled" };
       const status = await this.fetchServerKeyStatus(params.token, params.providerType);
       if (status.escrowOptedOut) return { state: "opted-out", escrowPin: status.escrowPin };
-      const state = status.shareVersion !== null && status.recoveryMethods.some(
-        (method) => method.type === "escrow" && method.shareVersion === status.shareVersion && (Boolean(method.confirmedAt) || "confirmationStatus" in method && method.confirmationStatus === "confirmed")
-      ) ? "enrolled" : "not-enrolled";
-      return { state, escrowPin: status.escrowPin };
+      const confirmedEscrow = status.recoveryMethods.filter(
+        (method) => method.type === "escrow" && (Boolean(method.confirmedAt) || "confirmationStatus" in method && method.confirmationStatus === "confirmed")
+      );
+      const enrolled = status.shareVersion !== null && confirmedEscrow.some((method) => method.shareVersion === status.shareVersion);
+      if (confirmedEscrow.length > 0 && (!enrolled || status.escrowStale))
+        return {
+          state: "stale",
+          escrowPin: status.escrowPin,
+          staleReason: status.escrowStale
+        };
+      return { state: enrolled ? "enrolled" : "not-enrolled", escrowPin: status.escrowPin };
     },
     async disableEscrowRecovery(params) {
+      const assertCurrent = guardedStorage().assertCurrent;
       const status = await this.fetchServerKeyStatus(params.token, params.providerType);
       if (!status.primaryDid) throw new Error("Cannot disable escrow without a primary DID");
+      if (config.escrow?.attestation.mode === "nitro") {
+        const identity = await fetchVerifiedEnclaveKey();
+        const current = await fetchAuthorityState(
+          params.token,
+          params.providerType,
+          params.privateKey,
+          status.primaryDid,
+          params.signDidAuthVp,
+          identity,
+          assertCurrent
+        );
+        if (current.status === "disabled") {
+          verifiedEscrowEnvelope = void 0;
+          return;
+        }
+        const signedIntent = await createEscrowEnrollmentIntent({
+          state: current,
+          target: null,
+          shareVersion: current.shareVersion ?? 0,
+          privateKey: params.privateKey,
+          pinAction: "disable",
+          // Disable always nulls these server-side regardless of input.
+          recoveryEmail: "",
+          recoveryLanguage: ""
+        });
+        const vp2 = await requestFreshDidAuthVp(
+          serverUrl,
+          params.privateKey,
+          status.primaryDid,
+          params.signDidAuthVp,
+          tenantId
+        );
+        assertCurrent();
+        const response = await escrowRequest("/disable", {
+          method: "POST",
+          headers: buildHeaders(params.token, vp2, tenantId),
+          body: JSON.stringify({
+            authToken: params.token,
+            providerType: params.providerType,
+            optOut: true,
+            signedIntent,
+            sourceEnvelope: current.envelope
+          })
+        });
+        await verifyEscrowEnrollmentCommit(response, signedIntent.intent, identity);
+        assertCurrent();
+        verifiedEscrowEnvelope = void 0;
+        return;
+      }
       const vp = await requestFreshDidAuthVp(
         serverUrl,
         params.privateKey,
@@ -21561,15 +22984,31 @@ function createSSSStrategy(config) {
             providerType: params.providerType
           })
         });
-        return ensureEscrowEnrollmentUnguarded(this, params, storage2);
+        return ensureEscrowEnrollmentUnguarded(this, params, storage2, false, true);
       });
     },
     async setEscrowPin({ pin, ...params }) {
       const storage2 = guardedStorage();
       const result = await withRotationLock(
-        () => ensureEscrowEnrollmentUnguarded(this, { ...params, options: { pin } }, storage2)
+        () => (
+          // P9.1: preserve the caller's recoveryEmail/recoveryLanguage — do
+          // not replace `params.options` wholesale, or nitro enroll/replace
+          // loses its required recovery contact.
+          ensureEscrowEnrollmentUnguarded(
+            this,
+            {
+              ...params,
+              options: {
+                pin,
+                recoveryEmail: params.options?.recoveryEmail,
+                recoveryLanguage: params.options?.recoveryLanguage
+              }
+            },
+            storage2
+          )
+        )
       );
-      if (!result.enrolled) {
+      if (!result.enrolled || !result.changed) {
         throw new Error("Automatic recovery is not available for this account.");
       }
     },
@@ -21578,7 +23017,7 @@ function createSSSStrategy(config) {
       const result = await withRotationLock(
         () => ensureEscrowEnrollmentUnguarded(this, params, storage2, true)
       );
-      if (!result.enrolled) {
+      if (!result.enrolled || !result.changed) {
         throw new Error("Automatic recovery is not available for this account.");
       }
     },
@@ -21599,8 +23038,15 @@ function createSSSStrategy(config) {
         escrowEnrollmentInFlight = void 0;
       }
     },
+    getVerifiedEscrowEnvelope() {
+      return verifiedEscrowEnvelope ? { ...verifiedEscrowEnvelope } : null;
+    },
     /** Start or explicitly restart a hold with fresh client-bound resume secrets. */
     async startEscrowRecovery(params) {
+      const expectedDid = params.expectedDid;
+      const nitro = config.escrow?.attestation.mode === "nitro";
+      if (nitro && (!expectedDid || (params.tenantId ?? tenantId) !== tenantId))
+        throw new EscrowEvidenceError();
       const sessionProof = params.recoverySessionToken !== void 0;
       if (sessionProof ? params.token !== void 0 || params.providerType !== void 0 : !params.token || !params.providerType) {
         throw new Error("Provide exactly one identity proof");
@@ -21620,25 +23066,101 @@ function createSSSStrategy(config) {
         },
         params.options?.releasePolicy === "pin"
       );
-      return { ...result, clientEphemeralPrivateKey: pair.privateKey };
+      let expectations;
+      if (nitro && result.resumeToken !== null) {
+        const identity = await fetchVerifiedEnclaveKey();
+        if (identity.mode !== "nitro" || !identity.authority || !result.holdRecord || !expectedDid)
+          throw new EscrowEvidenceError();
+        const verified = await verifyEscrowHoldRecord(
+          result.holdRecord,
+          {
+            tenant: tenantId ?? "learncard",
+            did: expectedDid,
+            holdId: result.holdId,
+            clientEphemeralPublicKey: pair.publicKey,
+            blobHash: result.holdRecord.hold.blobHash
+          },
+          identity
+        );
+        expectations = {
+          tenant: tenantId ?? "learncard",
+          did: expectedDid,
+          holdId: result.holdId,
+          clientEphemeralPublicKey: pair.publicKey,
+          blobHash: result.holdRecord.hold.blobHash,
+          authorityGeneration: verified.authorityGeneration,
+          holdDigest: verified.holdDigest,
+          ledgerPublicKey: identity.authority.ledgerPublicKey,
+          keyId: verified.receipt.keyId
+        };
+      }
+      return { ...result, clientEphemeralPrivateKey: pair.privateKey, expectations };
     },
     /** Read hold status; secrets (auth or resume token) never travel in a URL. */
     async getEscrowRecoveryStatus(params) {
-      const query = new URLSearchParams(
-        "holdId" in params ? { holdId: params.holdId } : { providerType: params.providerType }
-      );
-      const secret = "holdId" in params ? params.resumeToken : params.token;
-      const result = await escrowRequest(
-        `/status?${query}`,
-        {
-          method: "GET",
-          headers: {
-            ...buildHeaders("", void 0, tenantId),
-            "X-Auth-Token": secret
-          }
+      const expected = config.escrow?.attestation.mode === "nitro" && "holdId" in params ? recoveryExpectations(params.holdId, params.expectations) : void 0;
+      const status = await fetchEscrowHoldStatus(params);
+      if (expected && status)
+        await verifyPendingHold(status, expected, await fetchVerifiedEnclaveKey());
+      return status;
+    },
+    /** Submit the confirmation code emailed by the enclave for an authority-mode hold. */
+    async confirmEscrowRecovery(params) {
+      let pending;
+      if (config.escrow?.attestation.mode === "nitro") {
+        const expected = recoveryExpectations(params.holdId, params.expectations);
+        if ((params.tenantId ?? tenantId) !== tenantId) throw new EscrowEvidenceError();
+        const identity = await fetchVerifiedEnclaveKey();
+        const status = await fetchEscrowHoldStatus({
+          holdId: params.holdId,
+          resumeToken: params.resumeToken
+        });
+        if (!status?.holdRecord) {
+          throw new EscrowEvidenceError();
         }
-      );
-      return result.hold;
+        const holdRecord = await verifyPendingHold(status, expected, identity);
+        pending = { identity, holdRecord, expected };
+      }
+      const confirm = /* @__PURE__ */ __name(() => escrowRequest("/confirm", {
+        method: "POST",
+        headers: buildHeaders("", void 0, params.tenantId ?? tenantId),
+        body: JSON.stringify({
+          holdId: params.holdId,
+          resumeToken: params.resumeToken,
+          code: params.code
+        })
+      }), "confirm");
+      const result = await confirm();
+      if (pending) {
+        if (!result.receipt) {
+          throw new EscrowEvidenceError();
+        }
+        const receipt = await verifyEscrowHoldConfirmation(
+          result.receipt,
+          pending.holdRecord,
+          pending.expected,
+          pending.identity
+        );
+        if (receipt.kind === "commit") {
+          const readback = await confirm();
+          const snapshot = await verifyEscrowHoldConfirmation(
+            readback.receipt,
+            pending.holdRecord,
+            pending.expected,
+            pending.identity
+          );
+          if (snapshot.kind !== "snapshot") throw new EscrowEvidenceError();
+        }
+      }
+      return { success: true };
+    },
+    /** Request a fresh confirmation code for a hold awaiting confirmation. */
+    async resendEscrowRecoveryCode(params) {
+      return escrowRequest("/resend", {
+        method: "POST",
+        headers: buildHeaders("", void 0, params.tenantId ?? tenantId),
+        body: JSON.stringify({ holdId: params.holdId, resumeToken: params.resumeToken })
+      });
     },
     /** Cancel a pending hold with a fresh DID-owner proof. */
     async cancelEscrowRecovery(params) {
@@ -21670,8 +23192,19 @@ function createSSSStrategy(config) {
         const start = input.method === "escrow-pin" ? await this.startEscrowRecovery({
           token,
           providerType,
+          expectedDid: input.expectedDid,
           options: { releasePolicy: "pin" }
         }) : input;
+        const expected = config.escrow?.attestation.mode === "nitro" ? recoveryExpectations(start.holdId, start.expectations) : void 0;
+        if (expected) {
+          if (!start.resumeToken) throw new EscrowEvidenceError();
+          const status = await fetchEscrowHoldStatus({
+            holdId: start.holdId,
+            resumeToken: start.resumeToken
+          });
+          if (!status) throw new EscrowEvidenceError();
+          await verifyPendingHold(status, expected, await fetchVerifiedEnclaveKey());
+        }
         let pinProof;
         if (input.method === "escrow-pin") {
           if (!("pinSalt" in start) || !start.pinSalt || !start.resumeToken)
@@ -21695,6 +23228,8 @@ function createSSSStrategy(config) {
           material.sealedShare,
           start.clientEphemeralPrivateKey
         );
+        if (expected && (plaintext.did !== expected.did || plaintext.holdId !== expected.holdId))
+          throw new EscrowEvidenceError();
         if (plaintext.holdId !== start.holdId || plaintext.did !== material.primaryDid || plaintext.shareVersion !== material.shareVersion) {
           throw new Error("Escrow recovery material does not match the request");
         }
@@ -22108,10 +23643,10 @@ function createSSSStrategy(config) {
         const pending = pendingPhraseConfirmation;
         if (!pending) throw new Error("Generate a new recovery phrase to continue");
         const phraseWords = pending.phrase.trim().toLowerCase().split(/\s+/);
-        const matches = input.challengeWords.length === pending.challengeWordIndices.length && pending.challengeWordIndices.every(
+        const matches2 = input.challengeWords.length === pending.challengeWordIndices.length && pending.challengeWordIndices.every(
           (wordIndex, answerIndex) => input.challengeWords[answerIndex]?.trim().toLowerCase() === phraseWords[wordIndex]
         );
-        if (!matches) {
+        if (!matches2) {
           throw new Error("Those words do not match. Check your phrase and try again.");
         }
       } else if (input.method === "backup") {
@@ -22497,6 +24032,7 @@ function createSSSStrategy(config) {
     },
     async cleanup() {
       storageGeneration++;
+      verifiedEscrowEnvelope = void 0;
       await Promise.allSettled(localWrites);
     }
   };
@@ -22727,9 +24263,11 @@ export {
   ESCROW_ALGORITHM,
   ESCROW_BLOB_INFO,
   ESCROW_CLIENT_KEY_ID,
+  ESCROW_ENROLLMENT_INTENT_DOMAIN,
   ESCROW_ENVELOPE_VERSION,
   ESCROW_PIN_MAX_ATTEMPTS,
   ESCROW_RELEASE_INFO,
+  EscrowEvidenceError,
   EscrowHoldRestartThrottledError,
   EscrowPinLockedError,
   EscrowPinMismatchError,
@@ -22737,6 +24275,7 @@ export {
   EscrowPinUnavailableError,
   EscrowRequestError,
   IdentityRecoverySessionConsumedError,
+  NitroAttestationError,
   PIN_MAX_LENGTH,
   PIN_MIN_LENGTH,
   SSSApiClient,
@@ -22756,6 +24295,7 @@ export {
   constantTimeEqualHex,
   countWords,
   createAdaptiveStorage,
+  createEscrowEnrollmentIntent,
   createPasskeyCredential,
   createQrLoginSession,
   createSSSKeyManager,
@@ -22769,6 +24309,7 @@ export {
   deriveKeyFromPasskey,
   deriveKeyFromPassword,
   derivePinProof,
+  encodeEscrowEnrollmentIntent,
   encryptEmailRelayPayload,
   encryptEscrowBlob,
   encryptShareForTransfer,
@@ -22781,6 +24322,7 @@ export {
   generatePinSalt,
   generateRecoveryPhrase,
   getDeviceShare,
+  getEscrowBlobIdentity,
   getQrLoginSessionInfo,
   getShareVersion,
   hasDeviceShare,
@@ -22802,9 +24344,11 @@ export {
   reconstructFromShares,
   reconstructPrivateKey,
   recoveryPhraseToShare,
+  resolveEscrowEnrollmentAction,
   sealEscrowRelease,
   setPublicComputerMode,
   shareToRecoveryPhrase,
+  signEscrowEnrollmentIntent,
   splitAndVerify,
   splitPrivateKey,
   storeDeviceShare,
@@ -22812,5 +24356,9 @@ export {
   validatePin,
   validateRecoveryPhrase,
   verifyEnclaveAttestation,
-  verifyStoredShares
+  verifyEscrowAuthorityState,
+  verifyEscrowEnrollmentCommit,
+  verifyNitroAttestationDocument,
+  verifyStoredShares,
+  violatesCarryContactRule
 };