@enbox/agent 0.1.8 → 0.1.9

package/dist/esm/anonymous-dwn-api.js

@@ -85,7 +85,7 @@ export class AnonymousDwnApi {
      *
      * @param target - The DID whose DWN to subscribe to.
      * @param params - Subscribe parameters (filter).
-     * @param handler - Callback for incoming record events.
+     * @param handler - Callback for incoming subscription messages (events and EOSE).
      * @returns The raw `RecordsSubscribeReply` from the remote DWN.
      */
     recordsSubscribe(target, params, handler) {

package/dist/esm/anonymous-dwn-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"anonymous-dwn-api.js","sourceRoot":"","sources":["../../src/anonymous-dwn-api.ts"],"names":[],"mappings":";;;;;;;;;AAiBA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE9G,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAyDvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,eAAe;IAI1B,YAAY,EAAE,WAAW,EAAE,SAAS,EAAyB;QAC3D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED;;;;;;;;OAQG;IACU,YAAY,CAAC,MAAc,EAAE,MAAmC;;YAC3E,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAC7C,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,QAAQ,EAAW,MAAM,CAAC,QAAQ;gBAClC,UAAU,EAAS,MAAM,CAAC,UAAU;gBACpC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAoB,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QACjF,CAAC;KAAA;IAED;;;;;;;;;OASG;IACU,WAAW,CAAC,MAAc,EAAE,MAAkC;;YACzE,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;gBAC3C,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAmB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/E,CAAC;KAAA;IAED;;;;;;;;;OASG;IACU,gBAAgB,CAC3B,MAAc,EACd,MAAuC,EACvC,OAAkC;;YAElC,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC;gBACrD,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,QAAQ,EAAW,MAAM,CAAC,QAAQ;gBAClC,UAAU,EAAS,MAAM,CAAC,UAAU;gBACpC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAwB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7G,CAAC;KAAA;IAED;;;;;;;;OAQG;IACU,YAAY,CAAC,MAAc,EAAE,MAAmC;;YAC3E,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAC7C,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAoB,MAAM,EAAE,YAAY,CAAC,OAA8B,CAAC,CAAC;QACxG,CAAC;KAAA;IAED;;;;;;;;OAQG;IACU,cAAc,CAAC,MAAc,EAAE,MAAsC;;YAChF,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC;gBACjD,MAAM,EAAa,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM;gBACjC,gBAAgB,EAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,gBAAgB;gBAC3C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAsB,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QACrF,CAAC;KAAA;IAED;;;;;OAKG;IACW,WAAW,CACvB,MAAc,EACd,OAAgB,EAChB,IAAW,EACX,mBAA+C;;YAE/C,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACnF,MAAM,aAAa,GAAuC,EAAE,CAAC;YAE7D,KAAK,IAAI,MAAM,IAAI,eAAe,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,kEAAkE;oBAClE,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;wBACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;wBAC/D,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;4BACjC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAC;4BAChG,SAAS;wBACX,CAAC;wBAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;wBAClC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;wBACrE,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAChC,CAAC;oBAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;wBACjD,MAAM;wBACN,SAAS,EAAa,MAAM;wBAC5B,OAAO;wBACP,IAAI;wBACJ,mBAAmB,EAAG,mBAAmB;qBACzB,CAAC,CAAC;oBAEpB,OAAO,KAAe,CAAC;gBACzB,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,aAAa,CAAC,IAAI,CAAC;wBACjB,GAAG,EAAO,MAAM;wBAChB,OAAO,EAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;qBACrE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC;KAAA;CACF"}
+{"version":3,"file":"anonymous-dwn-api.js","sourceRoot":"","sources":["../../src/anonymous-dwn-api.ts"],"names":[],"mappings":";;;;;;;;;AAiBA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE9G,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAyDvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,eAAe;IAI1B,YAAY,EAAE,WAAW,EAAE,SAAS,EAAyB;QAC3D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED;;;;;;;;OAQG;IACU,YAAY,CAAC,MAAc,EAAE,MAAmC;;YAC3E,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAC7C,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,QAAQ,EAAW,MAAM,CAAC,QAAQ;gBAClC,UAAU,EAAS,MAAM,CAAC,UAAU;gBACpC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAoB,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QACjF,CAAC;KAAA;IAED;;;;;;;;;OASG;IACU,WAAW,CAAC,MAAc,EAAE,MAAkC;;YACzE,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC;gBAC3C,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAmB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QAC/E,CAAC;KAAA;IAED;;;;;;;;;OASG;IACU,gBAAgB,CAC3B,MAAc,EACd,MAAuC,EACvC,OAA6B;;YAE7B,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC;gBACrD,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,QAAQ,EAAW,MAAM,CAAC,QAAQ;gBAClC,UAAU,EAAS,MAAM,CAAC,UAAU;gBACpC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAwB,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7G,CAAC;KAAA;IAED;;;;;;;;OAQG;IACU,YAAY,CAAC,MAAc,EAAE,MAAmC;;YAC3E,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBAC7C,MAAM,EAAa,MAAM,CAAC,MAAM;gBAChC,gBAAgB,EAAG,MAAM,CAAC,gBAAgB;gBAC1C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAoB,MAAM,EAAE,YAAY,CAAC,OAA8B,CAAC,CAAC;QACxG,CAAC;KAAA;IAED;;;;;;;;OAQG;IACU,cAAc,CAAC,MAAc,EAAE,MAAsC;;YAChF,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC;gBACjD,MAAM,EAAa,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM;gBACjC,gBAAgB,EAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,gBAAgB;gBAC3C,2CAA2C;aAC5C,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAsB,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;QACrF,CAAC;KAAA;IAED;;;;;OAKG;IACW,WAAW,CACvB,MAAc,EACd,OAAgB,EAChB,IAAW,EACX,mBAA0C;;YAE1C,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACnF,MAAM,aAAa,GAAuC,EAAE,CAAC;YAE7D,KAAK,IAAI,MAAM,IAAI,eAAe,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,kEAAkE;oBAClE,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;wBACtC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;wBAC/D,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC;4BACjC,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAC;4BAChG,SAAS;wBACX,CAAC;wBAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;wBAClC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;wBACrE,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAChC,CAAC;oBAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;wBACjD,MAAM;wBACN,SAAS,EAAa,MAAM;wBAC5B,OAAO;wBACP,IAAI;wBACJ,mBAAmB,EAAG,mBAAmB;qBACzB,CAAC,CAAC;oBAEpB,OAAO,KAAe,CAAC;gBACzB,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,aAAa,CAAC,IAAI,CAAC;wBACjB,GAAG,EAAO,MAAM;wBAChB,OAAO,EAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;qBACrE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC;KAAA;CACF"}

package/dist/esm/connect.js

@@ -120,19 +120,12 @@ function createPermissionRequestForProtocol({ definition, permissions }) {
         interface: DwnInterfaceName.Protocols,
         method: DwnMethodName.Query,
     });
-    // In order to enable sync, we must request permissions for `MessagesSync`, `MessagesRead` and `MessagesSubscribe`
+    // A Messages.Read grant is a unified scope that covers MessagesRead, MessagesSync, and MessagesSubscribe.
+    // This single grant enables sync and real-time subscriptions for the protocol.
     requests.push({
         protocol: definition.protocol,
         interface: DwnInterfaceName.Messages,
         method: DwnMethodName.Read,
-    }, {
-        protocol: definition.protocol,
-        interface: DwnInterfaceName.Messages,
-        method: DwnMethodName.Sync,
-    }, {
-        protocol: definition.protocol,
-        interface: DwnInterfaceName.Messages,
-        method: DwnMethodName.Subscribe,
     });
     // We also request any additional permissions the user has requested for this protocol
     for (const permission of permissions) {

package/dist/esm/connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/connect.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEpE;;;GAGG;AACH,SAAe,UAAU;yDAAC,EACxB,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,GACU;QAKrB,uDAAuD;QACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAExC,kGAAkG;QAClG,+CAA+C;QAC/C,uDAAuD;QACvD,yDAAyD;QACzD,wCAAwC;QACxC,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAElD,mDAAmD;QACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC;YACzC,OAAO,EAAI,gBAAgB;YAC3B,QAAQ,EAAG,UAAU;SACtB,CAAC,CAAC;QAEH,wBAAwB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC;YAC3C,SAAS,EAAY,SAAS,CAAC,GAAG;YAClC,KAAK,EAAgB,gBAAgB;YACrC,YAAY,EAAS,gBAAgB;YACrC,qBAAqB;YACrB,kDAAkD;YAClD,kCAAkC;YAClC,kBAAkB,EAAG,kBAAkB;YACvC,WAAW;SACZ,CAAC,CAAC;QAEH,8DAA8D;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACpC,GAAG,EAAI,SAAS;YAChB,IAAI,EAAG,OAAO;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,2DAA2D;QAC3D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC;YACrD,GAAG,EAAE,UAAU;YACf,aAAa;SACd,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,kBAAkB,GAAG,IAAI,eAAe,CAAC;YAC7C,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;QAEH,MAAM,kCAAkC,GAAG,IAAI,CAAC,YAAY,CAAC;YAC3D,OAAO,EAAI,gBAAgB;YAC3B,QAAQ,EAAG,4BAA4B;SACxC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAClE,IAAI,EAAM,kBAAkB;YAC5B,MAAM,EAAI,MAAM;YAChB,OAAO,EAAG;gBACR,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,OAAO,GAAuB,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QAE7D,0FAA0F;QAC1F,+FAA+F;QAC/F,MAAM,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;QACvC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACxE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CACjC,gBAAgB,EAChB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAChD,CAAC;QAEF,8EAA8E;QAC9E,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;YACjC,OAAO,EAAM,gBAAgB;YAC7B,QAAQ,EAAK,OAAO;YACpB,UAAU,EAAG,OAAO,CAAC,KAAK;SAC3B,CAAC,CAAC;QAEH,4HAA4H;QAC5H,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE9D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,EAAE,CAAA,CAAC;YAEvC,yDAAyD;YACzD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,oBAAoB,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC;gBACjD,GAAG;aACJ,CAAC,CAA4B,CAAC;YAE/B,OAAO;gBACL,cAAc,EAAQ,oBAAoB,CAAC,cAAc;gBACzD,mBAAmB,EAAG,oBAAoB,CAAC,mBAAmB;gBAC9D,YAAY,EAAU,oBAAoB,CAAC,GAAG;aAC/C,CAAC;QACJ,CAAC;IACH,CAAC;CAAA;AA8ED;;;;;GAKG;AACH,SAAS,kCAAkC,CAAC,EAAE,UAAU,EAAE,WAAW,EAA6B;IAChG,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,qDAAqD;IACrD,QAAQ,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,SAAS;QACtC,MAAM,EAAM,aAAa,CAAC,KAAK;KAChC,CAAC,CAAC;IAEH,kHAAkH;IAClH,QAAQ,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,QAAQ;QACrC,MAAM,EAAM,aAAa,CAAC,IAAI;KAC/B,EAAE;QACD,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,QAAQ;QACrC,MAAM,EAAM,aAAa,CAAC,IAAI;KAC/B,EAAE;QACD,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,QAAQ;QACrC,MAAM,EAAM,aAAa,CAAC,SAAS;KACpC,CAAC,CAAC;IAEH,sFAAsF;IACtF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,OAAO;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;iBAChC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,MAAM;gBACT,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,IAAI;iBAC/B,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,QAAQ;gBACX,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,MAAM;iBACjC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;iBAChC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,SAAS;iBACpC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,SAAS;oBACtC,MAAM,EAAM,aAAa,CAAC,SAAS;iBACpC,CAAC,CAAC;gBACH,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO;QACL,kBAAkB,EAAG,UAAU;QAC/B,gBAAgB,EAAK,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,kCAAkC,EAAE,CAAC"}
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/connect.ts"],"names":[],"mappings":";;;;;;;;;AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEpE;;;GAGG;AACH,SAAe,UAAU;yDAAC,EACxB,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,GACU;QAKrB,uDAAuD;QACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAExC,kGAAkG;QAClG,+CAA+C;QAC/C,uDAAuD;QACvD,yDAAyD;QACzD,wCAAwC;QACxC,MAAM,aAAa,GAAG,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAElD,mDAAmD;QACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC;YACzC,OAAO,EAAI,gBAAgB;YAC3B,QAAQ,EAAG,UAAU;SACtB,CAAC,CAAC;QAEH,wBAAwB;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC;YAC3C,SAAS,EAAY,SAAS,CAAC,GAAG;YAClC,KAAK,EAAgB,gBAAgB;YACrC,YAAY,EAAS,gBAAgB;YACrC,qBAAqB;YACrB,kDAAkD;YAClD,kCAAkC;YAClC,kBAAkB,EAAG,kBAAkB;YACvC,WAAW;SACZ,CAAC,CAAC;QAEH,8DAA8D;QAC9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACpC,GAAG,EAAI,SAAS;YAChB,IAAI,EAAG,OAAO;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,2DAA2D;QAC3D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC;YACrD,GAAG,EAAE,UAAU;YACf,aAAa;SACd,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,kBAAkB,GAAG,IAAI,eAAe,CAAC;YAC7C,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;QAEH,MAAM,kCAAkC,GAAG,IAAI,CAAC,YAAY,CAAC;YAC3D,OAAO,EAAI,gBAAgB;YAC3B,QAAQ,EAAG,4BAA4B;SACxC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAClE,IAAI,EAAM,kBAAkB;YAC5B,MAAM,EAAI,MAAM;YAChB,OAAO,EAAG;gBACR,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,OAAO,GAAuB,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;QAE7D,0FAA0F;QAC1F,+FAA+F;QAC/F,MAAM,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;QACvC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACxE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CACjC,gBAAgB,EAChB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAChD,CAAC;QAEF,8EAA8E;QAC9E,gBAAgB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;YACjC,OAAO,EAAM,gBAAgB;YAC7B,QAAQ,EAAK,OAAO;YACpB,UAAU,EAAG,OAAO,CAAC,KAAK;SAC3B,CAAC,CAAC;QAEH,4HAA4H;QAC5H,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE9D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,CAAA,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,EAAE,CAAA,CAAC;YAEvC,yDAAyD;YACzD,MAAM,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,oBAAoB,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC;gBACjD,GAAG;aACJ,CAAC,CAA4B,CAAC;YAE/B,OAAO;gBACL,cAAc,EAAQ,oBAAoB,CAAC,cAAc;gBACzD,mBAAmB,EAAG,oBAAoB,CAAC,mBAAmB;gBAC9D,YAAY,EAAU,oBAAoB,CAAC,GAAG;aAC/C,CAAC;QACJ,CAAC;IACH,CAAC;CAAA;AA8ED;;;;;GAKG;AACH,SAAS,kCAAkC,CAAC,EAAE,UAAU,EAAE,WAAW,EAA6B;IAChG,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,qDAAqD;IACrD,QAAQ,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,SAAS;QACtC,MAAM,EAAM,aAAa,CAAC,KAAK;KAChC,CAAC,CAAC;IAEH,0GAA0G;IAC1G,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC;QACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;QAC/B,SAAS,EAAG,gBAAgB,CAAC,QAAQ;QACrC,MAAM,EAAM,aAAa,CAAC,IAAI;KAC/B,CAAC,CAAC;IAEH,sFAAsF;IACtF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,QAAQ,UAAU,EAAE,CAAC;YACnB,KAAK,OAAO;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;iBAChC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,MAAM;gBACT,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,IAAI;iBAC/B,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,QAAQ;gBACX,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,MAAM;iBACjC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,OAAO;gBACV,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,KAAK;iBAChC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,OAAO;oBACpC,MAAM,EAAM,aAAa,CAAC,SAAS;iBACpC,CAAC,CAAC;gBACH,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAI,UAAU,CAAC,QAAQ;oBAC/B,SAAS,EAAG,gBAAgB,CAAC,SAAS;oBACtC,MAAM,EAAM,aAAa,CAAC,SAAS;iBACpC,CAAC,CAAC;gBACH,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO;QACL,kBAAkB,EAAG,UAAU;QAC/B,gBAAgB,EAAK,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,kCAAkC,EAAE,CAAC"}

package/dist/esm/dwn-api.js

@@ -8,7 +8,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 import { TtlCache } from '@enbox/common';
-import { Cid, ContentEncryptionAlgorithm, DataStoreLevel, DataStream, Dwn, DwnMethodName, EventEmitterStream, Jws, KeyDerivationScheme, Message, MessageStoreLevel, Protocols, Records, ResumableTaskStoreLevel, StateIndexLevel, } from '@enbox/dwn-sdk-js';
+import { Cid, ContentEncryptionAlgorithm, DataStoreLevel, DataStream, Dwn, DwnMethodName, EventEmitterEventLog, Jws, KeyDerivationScheme, Message, MessageStoreLevel, Protocols, Records, ResumableTaskStoreLevel, StateIndexLevel, } from '@enbox/dwn-sdk-js';
 import { CryptoUtils, X25519 } from '@enbox/crypto';
 import { DidDht, DidJwk, DidResolverCacheLevel, UniversalResolver } from '@enbox/dids';
 import { KeyDeliveryProtocolDefinition } from './store-data-protocols.js';
@@ -21,11 +21,13 @@ import { isDwnRequest } from './dwn-type-guards.js';
 // Import extracted encryption functions
 import { buildEncryptionInput as buildEncryptionInputFn, deriveContextEncryptionInput as deriveContextEncryptionInputFn, encryptAndComputeCid as encryptAndComputeCidFn, getEncryptionKeyDeriver as getEncryptionKeyDeriverFn, getEncryptionKeyInfo as getEncryptionKeyInfoFn, getKeyDecrypter as getKeyDecrypterFn, ivLength as ivLengthFn, maybeDecryptReply as maybeDecryptReplyFn, } from './dwn-encryption.js';
 // Import extracted protocol utilities
-import { detectNewParticipants as detectNewParticipantsFn, hasRelationalReadAccess as hasRelationalReadAccessFn, isMultiPartyContext as isMultiPartyContextFn, } from './protocol-utils.js';
+import { detectNewParticipants as detectNewParticipantsFn, isMultiPartyContext as isMultiPartyContextFn, } from './protocol-utils.js';
 // Import extracted key delivery functions
 import { eagerSendContextKeyRecord as eagerSendContextKeyRecordFn, ensureKeyDeliveryProtocol as ensureKeyDeliveryProtocolFn, fetchContextKeyRecord as fetchContextKeyRecordFn, writeContextKeyRecord as writeContextKeyRecordFn, } from './dwn-key-delivery.js';
 // Import extracted record upgrade function
 import { upgradeExternalRootRecord as upgradeExternalRootRecordFn } from './dwn-record-upgrade.js';
+// Import extracted protocol definition fetching functions
+import { extractDerivedPublicKey as extractDerivedPublicKeyFn, fetchRemoteProtocolDefinition as fetchRemoteProtocolDefinitionFn, getProtocolDefinition as getProtocolDefinitionFn, } from './dwn-protocol-cache.js';
 export class AgentDwnApi {
     constructor({ agent, dwn }) {
         /**
@@ -94,7 +96,7 @@ export class AgentDwnApi {
         return this._dwn;
     }
     static createDwn(_a) {
-        return __awaiter(this, arguments, void 0, function* ({ dataPath, dataStore, didResolver, stateIndex, eventStream, messageStore, tenantGate, resumableTaskStore }) {
+        return __awaiter(this, arguments, void 0, function* ({ dataPath, dataStore, didResolver, stateIndex, eventLog, messageStore, tenantGate, resumableTaskStore }) {
             dataStore !== null && dataStore !== void 0 ? dataStore : (dataStore = new DataStoreLevel({ blockstoreLocation: `${dataPath}/DWN_DATASTORE` }));
             didResolver !== null && didResolver !== void 0 ? didResolver : (didResolver = new UniversalResolver({
                 didResolvers: [DidDht, DidJwk],
@@ -106,13 +108,12 @@ export class AgentDwnApi {
                 indexLocation: `${dataPath}/DWN_MESSAGEINDEX`
             })));
             resumableTaskStore !== null && resumableTaskStore !== void 0 ? resumableTaskStore : (resumableTaskStore = new ResumableTaskStoreLevel({ location: `${dataPath}/DWN_RESUMABLETASKSTORE` }));
-            eventStream !== null && eventStream !== void 0 ? eventStream : (eventStream = new EventEmitterStream());
-            return yield Dwn.create({ dataStore, didResolver, stateIndex, eventStream, messageStore, tenantGate, resumableTaskStore });
+            eventLog !== null && eventLog !== void 0 ? eventLog : (eventLog = new EventEmitterEventLog());
+            return yield Dwn.create({ dataStore, didResolver, stateIndex, eventLog, messageStore, tenantGate, resumableTaskStore });
         });
     }
     processRequest(request) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
             // Constructs a DWN message. and if there is a data payload, prepares the data as a
             // Web ReadableStream.
             const { message, dataStream } = yield this.constructDwnMessage({ request });
@@ -127,99 +128,7 @@ export class AgentDwnApi {
                 ? yield this._dwn.processMessage(request.target, message, { dataStream: dataStream, subscriptionHandler })
                 : { status: { code: 202, detail: 'Accepted' } };
             // Post-write key delivery: detect new participants and write contextKey records.
-            // This replaces the old roleRecordAutoPush mechanism with the unified key delivery protocol.
-            if (isDwnRequest(request, DwnInterface.RecordsWrite) &&
-                request.encryption &&
-                reply.status.code === 202) {
-                const writeParams = request.messageParams;
-                // Skip key-delivery protocol writes to avoid infinite recursion (contextKey records are themselves encrypted)
-                if (writeParams.protocol !== KeyDeliveryProtocolDefinition.protocol) {
-                    try {
-                        const protocolDefinition = yield this.getProtocolDefinition(request.target, writeParams.protocol);
-                        if (protocolDefinition) {
-                            const recordsWriteMessage = message;
-                            // Reactive root-record upgrade (PR E): if this is an externally-authored
-                            // root record with only ProtocolPath encryption, the owner upgrades it by
-                            // appending a ProtocolContext recipient entry so that context key
-                            // holders (including the external author) can also decrypt.
-                            const authorDid = Jws.getSignerDid(recordsWriteMessage.authorization.signature.signatures[0]);
-                            const isExternallyAuthored = authorDid !== request.target;
-                            const isRootRecord = !writeParams.parentContextId;
-                            const rootPathSegment = writeParams.protocolPath.split('/')[0];
-                            const isMultiParty = isMultiPartyContextFn(protocolDefinition, rootPathSegment);
-                            if (isExternallyAuthored && isRootRecord && isMultiParty) {
-                                try {
-                                    yield upgradeExternalRootRecordFn(this.agent, request.target, recordsWriteMessage, this._dwn, this.getSigner.bind(this), this._contextKeyCache);
-                                }
-                                catch (upgradeError) {
-                                    console.warn(`AgentDwnApi: Reactive root-record upgrade failed for ` +
-                                        `'${recordsWriteMessage.recordId}': ${upgradeError.message}`);
-                                }
-                            }
-                            const newParticipants = detectNewParticipantsFn({
-                                protocolDefinition,
-                                protocolPath: writeParams.protocolPath,
-                                recipient: writeParams.recipient,
-                                tenantDid: request.target,
-                                authorDid: isExternallyAuthored ? authorDid : undefined,
-                            });
-                            if (newParticipants.size > 0) {
-                                // Derive the context key to deliver to participants
-                                const rootContextId = ((_a = recordsWriteMessage.contextId) === null || _a === void 0 ? void 0 : _a.split('/')[0])
-                                    || recordsWriteMessage.contextId
-                                    || recordsWriteMessage.recordId;
-                                const { keyId, keyUri } = yield getEncryptionKeyInfoFn(this.agent, request.target);
-                                const contextDerivationPath = [
-                                    KeyDerivationScheme.ProtocolContext,
-                                    rootContextId,
-                                ];
-                                const contextDerivedPrivateKeyBytes = yield this.agent.keyManager.derivePrivateKeyBytes({
-                                    keyUri,
-                                    derivationPath: contextDerivationPath,
-                                });
-                                const contextDerivedPrivateJwk = yield X25519.bytesToPrivateKey({ privateKeyBytes: contextDerivedPrivateKeyBytes });
-                                const contextKeyPayload = {
-                                    rootKeyId: keyId,
-                                    derivationScheme: KeyDerivationScheme.ProtocolContext,
-                                    derivationPath: contextDerivationPath,
-                                    derivedPrivateKey: contextDerivedPrivateJwk,
-                                };
-                                // Extract the author's key delivery public key from the record
-                                // so we can encrypt the contextKey directly to the external author.
-                                const authorKeyDeliveryPubKey = (_b = recordsWriteMessage.authorization) === null || _b === void 0 ? void 0 : _b.authorKeyDeliveryPublicKey;
-                                for (const participantDid of newParticipants) {
-                                    try {
-                                        // Use the author's key delivery public key when delivering
-                                        // to the external author; for other participants (e.g.
-                                        // recipient, role holders) fall back to owner-key encryption.
-                                        const recipientKey = (participantDid === authorDid && authorKeyDeliveryPubKey)
-                                            ? authorKeyDeliveryPubKey
-                                            : undefined;
-                                        yield this.writeContextKeyRecord({
-                                            tenantDid: request.target,
-                                            recipientDid: participantDid,
-                                            contextKeyData: contextKeyPayload,
-                                            sourceProtocol: writeParams.protocol,
-                                            sourceContextId: rootContextId,
-                                            recipientKeyDeliveryPublicKey: recipientKey,
-                                        });
-                                    }
-                                    catch (keyDeliveryError) {
-                                        console.warn(`AgentDwnApi: Key delivery to '${participantDid}' for context ` +
-                                            `'${rootContextId}' failed: ${keyDeliveryError.message}. ` +
-                                            `The participant may not be able to decrypt records in this context.`);
-                                    }
-                                }
-                            }
-                        }
-                    }
-                    catch (detectionError) {
-                        // Participant detection failure is non-fatal — the record is still stored.
-                        console.warn(`AgentDwnApi: Post-write participant detection failed: ` +
-                            `${detectionError.message}`);
-                    }
-                }
-            }
+            yield this.postWriteKeyDelivery(request, message, reply);
             // Auto-decrypt reply data if encryption is enabled (Component 7)
             yield this.maybeDecryptReply(request, reply);
             // Returns an object containing the reply from processing the message, the original message,
@@ -260,13 +169,28 @@ export class AgentDwnApi {
                 data = request.dataStream;
                 subscriptionHandler = request.subscriptionHandler;
             }
+            // Build a resubscribe factory for subscribe requests. This closure
+            // captures the original request so it can reconstruct and re-sign a new
+            // subscribe message with a cursor on reconnection.
+            let resubscribeFactory;
+            if (subscriptionHandler !== undefined && !('messageCid' in request)) {
+                resubscribeFactory = (cursor) => __awaiter(this, void 0, void 0, function* () {
+                    const resumeParams = cursor !== undefined
+                        ? Object.assign(Object.assign({}, request.messageParams), { cursor })
+                        : request.messageParams;
+                    const resumeRequest = Object.assign(Object.assign({}, request), { messageParams: resumeParams });
+                    const { message: resumeMessage } = yield this.constructDwnMessage({ request: resumeRequest });
+                    return resumeMessage;
+                });
+            }
             // Send the RPC request to the target DID's DWN service endpoint using the Agent's RPC client.
             const reply = yield this.sendDwnRpcRequest({
                 targetDid: request.target,
                 dwnEndpointUrls,
                 message,
                 data,
-                subscriptionHandler
+                subscriptionHandler,
+                resubscribeFactory,
             });
             // Auto-decrypt reply data if encryption is enabled (Component 7)
             yield this.maybeDecryptReply(request, reply);
@@ -277,8 +201,116 @@ export class AgentDwnApi {
             return { reply, message, messageCid };
         });
     }
+    /**
+     * Post-write key delivery: after a successful encrypted `RecordsWrite`,
+     * detect new participants and write `contextKey` records so they can
+     * decrypt records in the context.
+     *
+     * This is a non-fatal operation — if participant detection or key delivery
+     * fails, the record is still stored and a warning is logged.
+     */
+    postWriteKeyDelivery(request, message, reply) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            if (!isDwnRequest(request, DwnInterface.RecordsWrite) ||
+                !request.encryption ||
+                reply.status.code !== 202) {
+                return;
+            }
+            const writeParams = request.messageParams;
+            // Skip key-delivery protocol writes to avoid infinite recursion (contextKey records are themselves encrypted)
+            if (writeParams.protocol === KeyDeliveryProtocolDefinition.protocol) {
+                return;
+            }
+            try {
+                const protocolDefinition = yield this.getProtocolDefinition(request.target, writeParams.protocol);
+                if (!protocolDefinition) {
+                    return;
+                }
+                const recordsWriteMessage = message;
+                // Reactive root-record upgrade (PR E): if this is an externally-authored
+                // root record with only ProtocolPath encryption, the owner upgrades it by
+                // appending a ProtocolContext recipient entry so that context key
+                // holders (including the external author) can also decrypt.
+                const authorDid = Jws.getSignerDid(recordsWriteMessage.authorization.signature.signatures[0]);
+                const isExternallyAuthored = authorDid !== request.target;
+                const isRootRecord = !writeParams.parentContextId;
+                const rootPathSegment = writeParams.protocolPath.split('/')[0];
+                const isMultiParty = isMultiPartyContextFn(protocolDefinition, rootPathSegment);
+                if (isExternallyAuthored && isRootRecord && isMultiParty) {
+                    try {
+                        yield upgradeExternalRootRecordFn(this.agent, request.target, recordsWriteMessage, this._dwn, this.getSigner.bind(this), this._contextKeyCache);
+                    }
+                    catch (upgradeError) {
+                        console.warn(`AgentDwnApi: Reactive root-record upgrade failed for ` +
+                            `'${recordsWriteMessage.recordId}': ${upgradeError.message}`);
+                    }
+                }
+                const newParticipants = detectNewParticipantsFn({
+                    protocolDefinition,
+                    protocolPath: writeParams.protocolPath,
+                    recipient: writeParams.recipient,
+                    tenantDid: request.target,
+                    authorDid: isExternallyAuthored ? authorDid : undefined,
+                });
+                if (newParticipants.size > 0) {
+                    // Derive the context key to deliver to participants
+                    const rootContextId = ((_a = recordsWriteMessage.contextId) === null || _a === void 0 ? void 0 : _a.split('/')[0])
+                        || recordsWriteMessage.contextId
+                        || recordsWriteMessage.recordId;
+                    const { keyId, keyUri } = yield getEncryptionKeyInfoFn(this.agent, request.target);
+                    const contextDerivationPath = [
+                        KeyDerivationScheme.ProtocolContext,
+                        rootContextId,
+                    ];
+                    const contextDerivedPrivateKeyBytes = yield this.agent.keyManager.derivePrivateKeyBytes({
+                        keyUri,
+                        derivationPath: contextDerivationPath,
+                    });
+                    const contextDerivedPrivateJwk = yield X25519.bytesToPrivateKey({ privateKeyBytes: contextDerivedPrivateKeyBytes });
+                    const contextKeyPayload = {
+                        rootKeyId: keyId,
+                        derivationScheme: KeyDerivationScheme.ProtocolContext,
+                        derivationPath: contextDerivationPath,
+                        derivedPrivateKey: contextDerivedPrivateJwk,
+                    };
+                    // Extract the author's key delivery public key from the record
+                    // so we can encrypt the contextKey directly to the external author.
+                    const authorKeyDeliveryPubKey = (_b = recordsWriteMessage.authorization) === null || _b === void 0 ? void 0 : _b.authorKeyDeliveryPublicKey;
+                    for (const participantDid of newParticipants) {
+                        try {
+                            // Use the author's key delivery public key when delivering
+                            // to the external author; for other participants (e.g.
+                            // recipient, role holders) fall back to owner-key encryption.
+                            const recipientKey = (participantDid === authorDid && authorKeyDeliveryPubKey)
+                                ? authorKeyDeliveryPubKey
+                                : undefined;
+                            yield this.writeContextKeyRecord({
+                                tenantDid: request.target,
+                                recipientDid: participantDid,
+                                contextKeyData: contextKeyPayload,
+                                sourceProtocol: writeParams.protocol,
+                                sourceContextId: rootContextId,
+                                recipientKeyDeliveryPublicKey: recipientKey,
+                            });
+                        }
+                        catch (keyDeliveryError) {
+                            console.warn(`AgentDwnApi: Key delivery to '${participantDid}' for context ` +
+                                `'${rootContextId}' failed: ${keyDeliveryError.message}. ` +
+                                `The participant may not be able to decrypt records in this context.`);
+                        }
+                    }
+                }
+            }
+            catch (detectionError) {
+                // Participant detection failure is non-fatal — the record is still stored.
+                console.warn(`AgentDwnApi: Post-write participant detection failed: ` +
+                    `${detectionError.message}`);
+            }
+        });
+    }
     sendDwnRpcRequest(_a) {
-        return __awaiter(this, arguments, void 0, function* ({ targetDid, dwnEndpointUrls, message, data, subscriptionHandler }) {
+        return __awaiter(this, arguments, void 0, function* ({ targetDid, dwnEndpointUrls, message, data, subscriptionHandler, resubscribeFactory }) {
             const errorMessages = [];
             if (message.descriptor.method === DwnMethodName.Subscribe && subscriptionHandler === undefined) {
                 throw new Error('AgentDwnApi: Subscription handler is required for subscription requests.');
@@ -308,7 +340,10 @@ export class AgentDwnApi {
                         targetDid,
                         message,
                         data,
-                        subscriptionHandler
+                        subscription: subscriptionHandler ? {
+                            handler: subscriptionHandler,
+                            resubscribeFactory,
+                        } : undefined,
                     });
                     return dwnReply;
                 }
@@ -552,6 +587,9 @@ export class AgentDwnApi {
             const dwnMessageConstructor = dwnMessageConstructors[request.messageType];
             // if there is no raw message provided, we need to create the dwn message
             if (!rawMessage) {
+                if (request.messageParams === undefined) {
+                    throw new Error('AgentDwnApi: messageParams must be provided when rawMessage is not given.');
+                }
                 // If we need to sign as an author delegate or with permissions we need to get the grantee's signer
                 // The messageParams should include either a permissionGrantId, or a delegatedGrant message
                 const signer = request.granteeDid ?
@@ -671,26 +709,6 @@ export class AgentDwnApi {
             return getKeyDecrypterFn(this.agent, didUri);
         });
     }
-    /**
-     * Checks if a protocol path represents a multi-party context.
-     *
-     * @param protocolDefinition - The full protocol definition
-     * @param rootProtocolPath - The root protocol path to check
-     */
-    isMultiPartyContext(protocolDefinition, rootProtocolPath) {
-        return isMultiPartyContextFn(protocolDefinition, rootProtocolPath);
-    }
-    /**
-     * Checks if any `$actions` rule in the protocol grants read access
-     * via `who: '<actorType>'` and `of: '<path>'`.
-     *
-     * @param actorType - The actor type to check ('author', 'recipient', or undefined for any)
-     * @param ofPath - The protocol path to check
-     * @param protocolDefinition - The protocol definition
-     */
-    hasRelationalReadAccess(actorType, ofPath, protocolDefinition) {
-        return hasRelationalReadAccessFn(actorType, ofPath, protocolDefinition);
-    }
     /**
      * Analyses a record write to determine which DIDs need context key delivery.
      *
@@ -701,7 +719,7 @@ export class AgentDwnApi {
         return detectNewParticipantsFn(params);
     }
     /**
-      * Fetches a protocol definition from the local DWN, with caching.
+     * Fetches a protocol definition from the local DWN, with caching.
      * Returns undefined if the protocol is not installed.
      *
      * @param tenantDid - The tenant DID to query
@@ -710,24 +728,7 @@ export class AgentDwnApi {
      */
     getProtocolDefinition(tenantDid, protocolUri) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const cacheKey = `${tenantDid}~${protocolUri}`;
-            const cached = this._protocolDefinitionCache.get(cacheKey);
-            if (cached) {
-                return cached;
-            }
-            const signer = yield this.getSigner(tenantDid);
-            const protocolsQuery = yield dwnMessageConstructors[DwnInterface.ProtocolsQuery].create({
-                filter: { protocol: protocolUri },
-                signer,
-            });
-            const reply = yield this._dwn.processMessage(tenantDid, protocolsQuery.message);
-            if (reply.status.code !== 200 || !((_a = reply.entries) === null || _a === void 0 ? void 0 : _a.length)) {
-                return undefined;
-            }
-            const definition = reply.entries[0].descriptor.definition;
-            this._protocolDefinitionCache.set(cacheKey, definition);
-            return definition;
+            return getProtocolDefinitionFn(tenantDid, protocolUri, this._dwn, this.getSigner.bind(this), this._protocolDefinitionCache);
         });
     }
     /**
@@ -736,27 +737,7 @@ export class AgentDwnApi {
      */
     fetchRemoteProtocolDefinition(targetDid, protocolUri) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            const cacheKey = `remote~${targetDid}~${protocolUri}`;
-            const cached = this._protocolDefinitionCache.get(cacheKey);
-            if (cached) {
-                return cached;
-            }
-            const protocolsQuery = yield dwnMessageConstructors[DwnInterface.ProtocolsQuery].create({
-                filter: { protocol: protocolUri },
-            });
-            const reply = yield this.sendDwnRpcRequest({
-                targetDid,
-                dwnEndpointUrls: yield getDwnServiceEndpointUrls(targetDid, this.agent.did),
-                message: protocolsQuery.message,
-            });
-            if (reply.status.code !== 200 || !((_a = reply.entries) === null || _a === void 0 ? void 0 : _a.length)) {
-                throw new Error(`AgentDwnApi: Failed to fetch protocol '${protocolUri}' from ` +
-                    `'${targetDid}'. The recipient may not have the protocol installed.`);
-            }
-            const definition = reply.entries[0].descriptor.definition;
-            this._protocolDefinitionCache.set(cacheKey, definition);
-            return definition;
+            return fetchRemoteProtocolDefinitionFn(targetDid, protocolUri, this.agent.did, this.sendDwnRpcRequest.bind(this), this._protocolDefinitionCache);
         });
     }
     /**
@@ -773,39 +754,7 @@ export class AgentDwnApi {
      */
     extractDerivedPublicKey(targetDid, protocolUri, rootContextId, requesterDid) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            const signer = yield this.getSigner(requesterDid);
-            // Query the target's DWN for any record in this context
-            const recordsQuery = yield dwnMessageConstructors[DwnInterface.RecordsQuery].create({
-                signer,
-                filter: {
-                    protocol: protocolUri,
-                    contextId: rootContextId,
-                },
-            });
-            const dwnEndpointUrls = yield getDwnServiceEndpointUrls(targetDid, this.agent.did);
-            const queryReply = yield this.sendDwnRpcRequest({
-                targetDid,
-                dwnEndpointUrls,
-                message: recordsQuery.message,
-            });
-            if (queryReply.status.code !== 200 || !((_a = queryReply.entries) === null || _a === void 0 ? void 0 : _a.length)) {
-                return undefined;
-            }
-            // Search entries for one with a ProtocolContext recipient entry
-            // that includes derivedPublicKey
-            for (const entry of queryReply.entries) {
-                if ((_b = entry.encryption) === null || _b === void 0 ? void 0 : _b.recipients) {
-                    const contextEntry = entry.encryption.recipients.find((r) => r.header.derivationScheme === KeyDerivationScheme.ProtocolContext && r.header.derivedPublicKey);
-                    if (contextEntry === null || contextEntry === void 0 ? void 0 : contextEntry.header.derivedPublicKey) {
-                        return {
-                            rootKeyId: contextEntry.header.kid,
-                            derivedPublicKey: contextEntry.header.derivedPublicKey,
-                        };
-                    }
-                }
-            }
-            return undefined;
+            return extractDerivedPublicKeyFn(targetDid, protocolUri, rootContextId, requesterDid, this.agent.did, this.getSigner.bind(this), this.sendDwnRpcRequest.bind(this));
         });
     }
     /**