@enbox/agent 0.3.1 → 0.4.0

package/dist/types/connect.d.ts

@@ -1,26 +1,26 @@
-import type { DwnPermissionScope, DwnProtocolDefinition, EnboxConnectAuthResponse } from './index.js';
+import type { EnboxConnectResponse } from './enbox-connect-protocol.js';
+import type { DwnPermissionScope, DwnProtocolDefinition } from './index.js';
 /**
  * Initiates the wallet connect process. Used when a client wants to obtain
  * a did from a provider.
  */
 declare function initClient({ displayName, connectServerUrl, walletUri, permissionRequests, onWalletUriReady, validatePin, }: WalletConnectOptions): Promise<{
-    delegateGrants: EnboxConnectAuthResponse['delegateGrants'];
-    delegatePortableDid: EnboxConnectAuthResponse['delegatePortableDid'];
+    delegateGrants: EnboxConnectResponse['delegateGrants'];
+    delegatePortableDid: EnboxConnectResponse['delegatePortableDid'];
     connectedDid: string;
 } | undefined>;
 /**
- * Initiates the wallet connect process. Used when a client wants to obtain
- * a did from a provider.
+ * Options for initiating a wallet connect flow (remote, relay-mediated).
  */
 export type WalletConnectOptions = {
-    /** The user friendly name of the client/app to be displayed when prompting end-user with permission requests. */
+    /** The user-friendly name of the app, displayed in the wallet consent UI. */
     displayName: string;
-    /** The URL of the intermediary server which relays messages between the client and provider. */
+    /** The URL of the connect server which relays messages between the app and wallet. */
     connectServerUrl: string;
     /**
-     * The URI of the Provider (wallet).The `onWalletUriReady` will take this wallet
-     * uri and add a payload to it which will be used to obtain and decrypt from the `request_uri`.
-     * @example `web5://` or `http://localhost:3000/`.
+     * The URI of the wallet app. Query params (`request_uri`, `encryption_key`)
+     * are appended and passed to `onWalletUriReady`.
+     * @example `enbox://connect` or `http://localhost:3000/`
      */
     walletUri: string;
     /**
@@ -30,19 +30,15 @@ export type WalletConnectOptions = {
      */
     permissionRequests: ConnectPermissionRequest[];
     /**
-     * The Connect API provides a URI to the wallet based on the `walletUri` plus a query params payload valid for 5 minutes.
-     * The link can either be used as a deep link on the same device or a QR code for cross device or both.
-     * The query params are `{ request_uri: string; encryption_key: string; }`
-     * The wallet will use the `request_uri to contact the intermediary server's `authorize` endpoint
-     * and pull down the {@link EnboxConnectAuthRequest} and use the `encryption_key` to decrypt it.
+     * Called with the wallet URI including query params (`request_uri`, `encryption_key`).
+     * The app should render this as a QR code or use it as a deep link.
      *
-     * @param uri - The URI returned by the Connect API to be passed to a provider.
+     * @param uri - The wallet URI with connect payload.
      */
     onWalletUriReady: (uri: string) => void;
     /**
-     * Function that must be provided to submit the pin entered by the user on the client.
-     * The pin is used to decrypt the {@link EnboxConnectAuthResponse} that was retrieved from the
-     * token endpoint by the client inside of Connect.
+     * Called to collect the PIN from the user. The PIN is used as AAD
+     * when decrypting the connect response from the relay.
      *
      * @returns A promise that resolves to the PIN as a string.
      */

package/dist/types/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/connect.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAStG;;;GAGG;AACH,iBAAe,UAAU,CAAC,EACxB,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,GACZ,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAChC,cAAc,EAAE,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,mBAAmB,EAAE,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IACrE,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,SAAS,CAAC,CAsGb;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,iHAAiH;IACjH,WAAW,EAAE,MAAM,CAAC;IAEpB,gGAAgG;IAChG,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C;;;;;;;;OAQG;IACH,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAExC;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;OAGG;IACH,kBAAkB,EAAE,qBAAqB,CAAC;IAE1C,0EAA0E;IAC1E,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;CACxC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3F;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,+DAA+D;IAC/D,UAAU,EAAE,qBAAqB,CAAC;IAElC,uDAAuD;IACvD,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B,CAAC;AAEF;;;;;GAKG;AACH,iBAAS,kCAAkC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,yBAAyB,GAAG,wBAAwB,CAsE5H;AAED,eAAO,MAAM,aAAa;;;CAAqD,CAAC"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/connect.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAyB,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAS5E;;;GAGG;AACH,iBAAe,UAAU,CAAC,EACxB,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,GACZ,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAChC,cAAc,EAAE,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IACvD,mBAAmB,EAAE,oBAAoB,CAAC,qBAAqB,CAAC,CAAC;IACjE,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,SAAS,CAAC,CAkGb;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,6EAA6E;IAC7E,WAAW,EAAE,MAAM,CAAC;IAEpB,sFAAsF;IACtF,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAExC;;;;;OAKG;IACH,WAAW,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;OAGG;IACH,kBAAkB,EAAE,qBAAqB,CAAC;IAE1C,0EAA0E;IAC1E,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;CACxC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3F;;GAEG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,+DAA+D;IAC/D,UAAU,EAAE,qBAAqB,CAAC;IAElC,uDAAuD;IACvD,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B,CAAC;AAEF;;;;;GAKG;AACH,iBAAS,kCAAkC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,yBAAyB,GAAG,wBAAwB,CAsE5H;AAED,eAAO,MAAM,aAAa;;;CAAqD,CAAC"}

package/dist/types/dwn-api.d.ts

@@ -1,4 +1,4 @@
-import type { DerivedPrivateJwk, DwnConfig, EncryptionKeyDeriver, ProtocolDefinition } from '@enbox/dwn-sdk-js';
+import type { DerivedPrivateJwk, DwnConfig, EncryptionKeyDeriver, GenericMessage, ProtocolDefinition } from '@enbox/dwn-sdk-js';
 import type { PublicKeyJwk } from '@enbox/crypto';
 import { Dwn } from '@enbox/dwn-sdk-js';
 import type { EnboxPlatformAgent } from './types/agent.js';
@@ -8,9 +8,14 @@ import { DwnInterface } from './types/dwn.js';
 export { isDwnMessage, isDwnRequest, isMessagesPermissionScope, isRecordPermissionScope, isRecordsType } from './dwn-type-guards.js';
 type DwnApiParams = {
     agent?: EnboxPlatformAgent;
-    dwn: Dwn;
     localDwnStrategy?: LocalDwnStrategy;
-};
+} & ({
+    dwn: Dwn;
+    localDwnEndpoint?: never;
+} | {
+    dwn?: never;
+    localDwnEndpoint: string;
+});
 interface DwnApiCreateDwnParams extends Partial<DwnConfig> {
     dataPath?: string;
 }
@@ -24,8 +29,16 @@ export declare class AgentDwnApi {
     private _agent?;
     /**
      * The DWN instance to use for this API.
+     * `undefined` in remote mode — all operations route through RPC to
+     * the local DWN server endpoint.
+     */
+    private _dwn?;
+    /**
+     * The local DWN server endpoint for remote mode.
+     * When set, `_dwn` is `undefined` and `processRequest()` routes
+     * through `sendDwnRpcRequest()`.
      */
-    private _dwn;
+    private _localDwnEndpoint?;
     /**
      * Protocol definition cache — TTL 30 minutes. Protocols rarely change.
      * Keyed by `${tenantDid}~${protocolUri}`.
@@ -51,7 +64,12 @@ export declare class AgentDwnApi {
     private _localDwnStrategy;
     /** Lazy-initialized local DWN discovery instance. */
     private _localDwnDiscovery?;
-    constructor({ agent, dwn, localDwnStrategy }: DwnApiParams);
+    constructor(params: DwnApiParams);
+    /**
+     * Whether the API is operating in remote mode (no in-process DWN).
+     * In remote mode, all DWN operations are routed through RPC.
+     */
+    get isRemoteMode(): boolean;
     /**
      * Retrieves the `EnboxPlatformAgent` execution context.
      *
@@ -63,7 +81,7 @@ export declare class AgentDwnApi {
     get localDwnStrategy(): LocalDwnStrategy;
     setLocalDwnStrategy(strategy: LocalDwnStrategy): void;
     /**
-     * Inject a cached local DWN endpoint (e.g. from a `dwn://register`
+     * Inject a cached local DWN endpoint (e.g. from a `dwn://connect`
      * browser redirect or from persisted storage). The endpoint is validated
      * via `GET /info` before being accepted.
      *
@@ -110,6 +128,28 @@ export declare class AgentDwnApi {
     get node(): Dwn;
     static createDwn({ dataPath, dataStore, didResolver, stateIndex, eventLog, messageStore, tenantGate, resumableTaskStore }: DwnApiCreateDwnParams): Promise<Dwn>;
     processRequest<T extends DwnInterface>(request: ProcessDwnRequest<T>): Promise<DwnResponse<T>>;
+    /**
+     * Process a pre-constructed DWN message against the local DWN (in-process
+     * or remote server). Used by the sync engine to store messages that were
+     * already fetched from a remote DWN.
+     *
+     * Unlike {@link processRequest}, this method does NOT construct a new
+     * message — it takes an already-signed `GenericMessage` and routes it
+     * to the appropriate backend.
+     *
+     * @param tenant - The DID of the DWN tenant (target).
+     * @param message - The pre-constructed DWN message.
+     * @param options - Optional data stream and subscription handler.
+     * @returns The reply from processing the message.
+     */
+    processRawMessage(tenant: string, message: GenericMessage, options?: {
+        dataStream?: ReadableStream<Uint8Array>;
+    }): Promise<{
+        status: {
+            code: number;
+            detail: string;
+        };
+    }>;
     sendRequest<T extends DwnInterface>(request: SendDwnRequest<T>): Promise<DwnResponse<T>>;
     /**
      * Post-write key delivery: after a successful encrypted `RecordsWrite`,

package/dist/types/dwn-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dwn-api.d.ts","sourceRoot":"","sources":["../../src/dwn-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,SAAS,EAET,oBAAoB,EAGpB,kBAAkB,EAGnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAgC,YAAY,EAAE,MAAM,eAAe,CAAC;AAGhF,OAAO,EAKL,GAAG,EAWJ,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAMV,WAAW,EAGX,iBAAiB,EACjB,cAAc,EACf,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,YAAY,EAA0B,MAAM,gBAAgB,CAAC;AAItE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA8CrI,KAAK,YAAY,GAAG;IAClB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,GAAG,EAAE,GAAG,CAAC;IACT,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC,CAAC;AAEF,UAAU,qBAAsB,SAAQ,OAAO,CAAC,SAAS,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,WAAW;IACtB;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,CAAqB;IAEpC;;OAEG;IACH,OAAO,CAAC,IAAI,CAAM;IAElB;;;OAGG;IACH,OAAO,CAAC,wBAAwB,CAE7B;IAEH;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAII;IAE5B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB,CAE5B;IAEH;;;OAGG;IACH,OAAO,CAAC,qBAAqB,CAE1B;IAEH,yEAAyE;IACzE,OAAO,CAAC,iBAAiB,CAAmB;IAE5C,qDAAqD;IACrD,OAAO,CAAC,kBAAkB,CAAC,CAAoB;gBAEnC,EAAE,KAAK,EAAE,GAAG,EAAE,gBAA2B,EAAE,EAAE,YAAY;IAoBrE;;;;;OAKG;IACH,IAAI,KAAK,IAAI,kBAAkB,CAM9B;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,kBAAkB,EASlC;IAED,IAAI,gBAAgB,IAAI,gBAAgB,CAEvC;IAEM,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAI5D;;;;;;;;OAQG;IACU,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS1E;;;;;;;;OAQG;IACU,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAwC9E,oEAAoE;YACtD,mBAAmB;IASjC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAStC;;;;OAIG;YACW,0BAA0B;IAqCxC;;;;;;;;;;OAUG;IACH,IAAI,IAAI,IAAI,GAAG,CAEd;WAEmB,SAAS,CAAC,EAC5B,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EACrG,EAAE,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC;IAsB1B,cAAc,CAAC,CAAC,SAAS,YAAY,EAChD,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAkCb,WAAW,CAAC,CAAC,SAAS,YAAY,EAC7C,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAoE1B;;;;;;;OAOG;YACW,oBAAoB;YAgIpB,iBAAiB;YA8DjB,mBAAmB;IA+VjC,OAAO,CAAC,cAAc;YAMR,SAAS;IA4CvB;;;;;;OAMG;IACU,uBAAuB,CAClC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;;;OAKG;YACW,oBAAoB;IAMlC;;;;OAIG;YACW,eAAe;IAM7B;;;;;OAKG;IACI,qBAAqB,CAAC,MAAM,EAAE;QACnC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,GAAG,CAAC,MAAM,CAAC;IAIf;;;;;;;OAOG;YACW,qBAAqB;IAUnC;;;OAGG;YACW,6BAA6B;IAU3C;;;;;;;;;;;OAWG;YACW,uBAAuB;IAarC;;;OAGG;YACW,iBAAiB;YAWjB,aAAa;IAqC3B;;;OAGG;IACH,OAAO,CAAC,kCAAkC,CAGvC;IAEH;;;;;OAKG;IACU,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxE;;;;;;OAMG;IACU,qBAAqB,CAAC,MAAM,EAAE;QACzC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,iBAAiB,CAAC;QAClC,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,6BAA6B,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,YAAY,CAAA;SAAE,CAAC;KACnF,GAAG,OAAO,CAAC,MAAM,CAAC;IASnB;;;OAGG;YACW,yBAAyB;IAYvC;;;;;;OAMG;IACU,qBAAqB,CAAC,MAAM,EAAE;QACzC,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;CAS3C"}
+{"version":3,"file":"dwn-api.d.ts","sourceRoot":"","sources":["../../src/dwn-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,SAAS,EAET,oBAAoB,EACpB,cAAc,EAEd,kBAAkB,EAGnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAgC,YAAY,EAAE,MAAM,eAAe,CAAC;AAGhF,OAAO,EAKL,GAAG,EAWJ,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAMV,WAAW,EAGX,iBAAiB,EACjB,cAAc,EACf,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,YAAY,EAA0B,MAAM,gBAAgB,CAAC;AAItE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA+CrI,KAAK,YAAY,GAAG;IAClB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC,GAAG,CACA;IAAE,GAAG,EAAE,GAAG,CAAC;IAAC,gBAAgB,CAAC,EAAE,KAAK,CAAA;CAAE,GACtC;IAAE,GAAG,CAAC,EAAE,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAC5C,CAAC;AAEF,UAAU,qBAAsB,SAAQ,OAAO,CAAC,SAAS,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,WAAW;IACtB;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,CAAqB;IAEpC;;;;OAIG;IACH,OAAO,CAAC,IAAI,CAAC,CAAM;IAEnB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB,CAAC,CAAS;IAEnC;;;OAGG;IACH,OAAO,CAAC,wBAAwB,CAE7B;IAEH;;;OAGG;IACH,OAAO,CAAC,gBAAgB,CAII;IAE5B;;;;OAIG;IACH,OAAO,CAAC,uBAAuB,CAE5B;IAEH;;;OAGG;IACH,OAAO,CAAC,qBAAqB,CAE1B;IAEH,yEAAyE;IACzE,OAAO,CAAC,iBAAiB,CAAmB;IAE5C,qDAAqD;IACrD,OAAO,CAAC,kBAAkB,CAAC,CAAoB;gBAEnC,MAAM,EAAE,YAAY;IAyBhC;;;OAGG;IACH,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;;;OAKG;IACH,IAAI,KAAK,IAAI,kBAAkB,CAM9B;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,kBAAkB,EASlC;IAED,IAAI,gBAAgB,IAAI,gBAAgB,CAEvC;IAEM,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;IAI5D;;;;;;;;OAQG;IACU,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS1E;;;;;;;;OAQG;IACU,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAwC9E,oEAAoE;YACtD,mBAAmB;IAcjC;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAStC;;;;OAIG;YACW,0BAA0B;IAqCxC;;;;;;;;;;OAUG;IACH,IAAI,IAAI,IAAI,GAAG,CAUd;WAEmB,SAAS,CAAC,EAC5B,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EACrG,EAAE,qBAAqB,GAAG,OAAO,CAAC,GAAG,CAAC;IAsB1B,cAAc,CAAC,CAAC,SAAS,YAAY,EAChD,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IA2D1B;;;;;;;;;;;;;OAaG;IACU,iBAAiB,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;KAAE,GACpD,OAAO,CAAC;QAAE,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAsB3C,WAAW,CAAC,CAAC,SAAS,YAAY,EAC7C,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAoE1B;;;;;;;OAOG;YACW,oBAAoB;YA8IpB,iBAAiB;YA8DjB,mBAAmB;IA+VjC,OAAO,CAAC,cAAc;YAMR,SAAS;IA4CvB;;;;;;OAMG;IACU,uBAAuB,CAClC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC;IAIhC;;;;;OAKG;YACW,oBAAoB;IAMlC;;;;OAIG;YACW,eAAe;IAM7B;;;;;OAKG;IACI,qBAAqB,CAAC,MAAM,EAAE;QACnC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,GAAG,CAAC,MAAM,CAAC;IAIf;;;;;;;OAOG;YACW,qBAAqB;IAqBnC;;;OAGG;YACW,6BAA6B;IAU3C;;;;;;;;;;;OAWG;YACW,uBAAuB;IAarC;;;OAGG;YACW,iBAAiB;YAWjB,aAAa;IAuD3B;;;OAGG;IACH,OAAO,CAAC,kCAAkC,CAGvC;IAEH;;;;;OAKG;IACU,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxE;;;;;;OAMG;IACU,qBAAqB,CAAC,MAAM,EAAE;QACzC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,iBAAiB,CAAC;QAClC,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;QACxB,6BAA6B,CAAC,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,YAAY,CAAA;SAAE,CAAC;KACnF,GAAG,OAAO,CAAC,MAAM,CAAC;IASnB;;;OAGG;YACW,yBAAyB;IAYvC;;;;;;OAMG;IACU,qBAAqB,CAAC,MAAM,EAAE;QACzC,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;CAS3C"}

package/dist/types/dwn-discovery-file.d.ts

@@ -64,7 +64,7 @@ export declare const DISCOVERY_FILENAME = "dwn.json";
  * Reads, writes, and validates the `~/.enbox/dwn.json` discovery file.
  *
  * This is the **file-based discovery channel** for CLI and native apps.
- * It is complementary to the `dwn://register` browser redirect flow.
+ * It is complementary to the `dwn://connect` browser redirect flow.
  *
  * @example Reading the discovery file
  * ```ts

package/dist/types/dwn-discovery-payload.d.ts

@@ -1,8 +1,8 @@
 /**
- * Shared types and utilities for the `dwn://register` discovery protocol.
+ * Shared types and utilities for the `dwn://connect` discovery protocol.
  *
  * The payload is the JSON data exchanged between the local DWN server
- * (electrobun-dwn) and the requesting app during the `dwn://register`
+ * (electrobun-dwn) and the requesting app during the `dwn://connect`
  * redirect flow. It is encoded as base64url and placed in the URL
  * fragment (`#`) of the callback URL.
  *
@@ -10,11 +10,10 @@
  * consumed from any environment (Bun, browser, Electrobun) without
  * triggering transitive dependency resolution issues.
  *
- * @see https://github.com/enboxorg/enbox/issues/586
  * @module
  */
 /**
- * The JSON payload delivered via the URL fragment in a `dwn://register`
+ * The JSON payload delivered via the URL fragment in a `dwn://connect`
  * callback redirect.
  *
  * Intentionally minimal — everything beyond the endpoint (version,
@@ -25,22 +24,22 @@ export type DwnDiscoveryPayload = {
     endpoint: string;
 };
 /**
- * Parsed result from a `dwn://register` URL.
+ * Parsed result from a `dwn://connect` URL.
  */
-export type DwnRegisterUrlParams = {
+export type DwnConnectUrlParams = {
     /** The callback URL to redirect to with the discovery payload. */
     callback: string;
 };
 /** The URL scheme for DWN discovery protocol handlers. */
 export declare const DWN_PROTOCOL_SCHEME = "dwn";
-/** The `dwn://register` path that triggers the discovery handshake. */
-export declare const DWN_REGISTER_PATH = "register";
+/** The `dwn://connect` path that triggers the discovery handshake. */
+export declare const DWN_CONNECT_PATH = "connect";
 /**
- * Build a `dwn://register?callback=<url>` URL that, when opened by the OS,
+ * Build a `dwn://connect?callback=<url>` URL that, when opened by the OS,
  * triggers electrobun-dwn (or another `dwn://` scheme handler) to redirect
  * back to `callbackUrl` with the local DWN endpoint in the URL fragment.
  *
- * This is the **trigger** side of the `dwn://register` browser flow.
+ * This is the **trigger** side of the `dwn://connect` browser flow.
  * The web app opens this URL (e.g. via `window.open()` or `location.href`),
  * the OS routes it to the registered handler, and the handler redirects
  * back with the discovery payload.
@@ -48,16 +47,16 @@ export declare const DWN_REGISTER_PATH = "register";
  * @param callbackUrl - The URL to redirect back to after discovery.
  *   This should be the current page (or a dedicated callback page) that
  *   will read the payload from `window.location.hash`.
- * @returns The `dwn://register?callback=<encoded-url>` URL string.
+ * @returns The `dwn://connect?callback=<encoded-url>` URL string.
  *
  * @example
  * ```ts
- * const registerUrl = buildDwnRegisterUrl('https://myapp.com/callback');
- * // => 'dwn://register?callback=https%3A%2F%2Fmyapp.com%2Fcallback'
+ * const registerUrl = buildDwnConnectUrl('https://myapp.com/callback');
+ * // => 'dwn://connect?callback=https%3A%2F%2Fmyapp.com%2Fcallback'
  * window.open(registerUrl);
  * ```
  */
-export declare function buildDwnRegisterUrl(callbackUrl: string): string;
+export declare function buildDwnConnectUrl(callbackUrl: string): string;
 /**
  * Encode a {@link DwnDiscoveryPayload} as a base64url string suitable
  * for use in a URL fragment.
@@ -74,18 +73,18 @@ export declare function encodeDwnDiscoveryPayload(payload: DwnDiscoveryPayload):
  */
 export declare function decodeDwnDiscoveryPayload(encoded: string): DwnDiscoveryPayload | undefined;
 /**
- * Parse a `dwn://register?callback=<url>` URL into its components.
+ * Parse a `dwn://connect?callback=<url>` URL into its components.
  *
- * @param url - The full `dwn://register?callback=...` URL.
+ * @param url - The full `dwn://connect?callback=...` URL.
  * @returns The parsed parameters, or `undefined` if the URL is not a
- *   valid `dwn://register` URL or is missing the `callback` parameter.
+ *   valid `dwn://connect` URL or is missing the `callback` parameter.
  */
-export declare function parseDwnRegisterUrl(url: string): DwnRegisterUrlParams | undefined;
+export declare function parseDwnConnectUrl(url: string): DwnConnectUrlParams | undefined;
 /**
  * Build the full callback redirect URL with the discovery payload
  * encoded in the URL fragment.
  *
- * @param callbackUrl - The callback URL from the `dwn://register` request.
+ * @param callbackUrl - The callback URL from the `dwn://connect` request.
  * @param payload - The discovery payload to encode in the fragment.
  * @returns The full redirect URL (e.g. `https://notes.sh/dwn#eyJ...`).
  */

package/dist/types/dwn-discovery-payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dwn-discovery-payload.d.ts","sourceRoot":"","sources":["../../src/dwn-discovery-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAI5C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAID;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAG9E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAa1F;AAID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAkCjF;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,MAAM,CAKR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAa3F"}
+{"version":3,"file":"dwn-discovery-payload.d.ts","sourceRoot":"","sources":["../../src/dwn-discovery-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAI1C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAID;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAG9E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAa1F;AAID;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAkC/E;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,mBAAmB,GAC3B,MAAM,CAKR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAa3F"}

package/dist/types/enbox-connect-protocol.d.ts

@@ -0,0 +1,220 @@
+/**
+ * Enbox Connect Protocol
+ *
+ * A capability delegation protocol for DWN access. Enables apps to request
+ * scoped permission grants from a wallet (provider), receiving a delegate DID
+ * with the granted permissions.
+ *
+ * Two transport modes:
+ * - Local (`dwn://connect`): same-device, direct HTTP against the local DWN
+ * - Remote (`enbox://connect`): cross-device, relay-mediated with QR/deep link
+ *
+ * The protocol uses JWTs for signing, JWE (XChaCha20-Poly1305) for encryption,
+ * and ECDH (Ed25519 → X25519 + HKDF) for key agreement.
+ */
+import type { ConnectPermissionRequest } from './connect.js';
+import type { EnboxAgent } from './types/agent.js';
+import type { RequireOnly } from '@enbox/common';
+import type { DidDocument, PortableDid } from '@enbox/dids';
+import type { DwnDataEncodedRecordsWriteMessage, DwnPermissionScope } from './types/dwn.js';
+import { type BearerDid } from '@enbox/dids';
+/**
+ * Pushed to the connect server so the wallet can retrieve it later.
+ * The request is encrypted (JWE) before being pushed.
+ *
+ * Inspired by RFC 9126 (Pushed Authorization Requests).
+ */
+export type ConnectPushedRequest = {
+    /** The encrypted JWE containing the signed {@link EnboxConnectRequest} JWT. */
+    request: string;
+};
+/**
+ * Returned by the connect server after a {@link ConnectPushedRequest}.
+ * Contains a URI the wallet uses to fetch the encrypted request,
+ * and the TTL before it expires.
+ */
+export type ConnectPushedResponse = {
+    /** URI where the wallet can fetch the encrypted auth request. */
+    request_uri: string;
+    /** Seconds until the request expires. */
+    expires_in: number;
+};
+/**
+ * A connect request from an app to a wallet, asking for DWN permissions.
+ *
+ * The app creates this, signs it as a JWT, encrypts it as a JWE, and pushes
+ * it to the connect server. The wallet retrieves, decrypts, verifies, and
+ * displays it in a consent UI.
+ */
+export type EnboxConnectRequest = {
+    /** Ephemeral DID (did:jwk) used for ECDH key agreement and request signing. */
+    clientDid: string;
+    /** Human-readable name of the requesting application, shown in the consent UI. */
+    appName: string;
+    /** DWN protocols and permission scopes being requested. */
+    permissionRequests: ConnectPermissionRequest[];
+    /** Anti-replay nonce (random base64url). */
+    nonce: string;
+    /** State correlator for matching request to response (random base64url). */
+    state: string;
+    /** URL where the wallet should POST the encrypted response. */
+    callbackUrl: string;
+    /** Response mode — always `direct_post` (wallet POSTs response to callbackUrl). */
+    responseMode: 'direct_post';
+    /** Supported DID methods for the connected identity. */
+    supportedDidMethods: string[];
+};
+/**
+ * A connect response from a wallet, granting DWN permissions.
+ *
+ * The wallet creates this after user consent, signs it as a JWT with the
+ * delegate DID, encrypts it via ECDH, and POSTs it to the connect server.
+ * The app retrieves, decrypts (using ECDH + optional PIN), and verifies it.
+ */
+export type EnboxConnectResponse = {
+    /** The wallet owner's real DID that authorised the delegation. */
+    providerDid: string;
+    /** The newly created delegate DID identifier. */
+    delegateDid: string;
+    /** Audience — must match the `clientDid` from the request. */
+    aud: string;
+    /** Issued-at timestamp (Unix seconds). */
+    iat: number;
+    /** Expiration timestamp (Unix seconds). */
+    exp: number;
+    /** Echo of the request nonce. */
+    nonce?: string;
+    /** DWN permission grant messages (serialised RecordsWrite with encoded data). */
+    delegateGrants: DwnDataEncodedRecordsWriteMessage[];
+    /** The delegate DID's full portable form, including private keys. */
+    delegatePortableDid: PortableDid;
+};
+/** The connect server endpoint types. */
+export type ConnectEndpoint = 'pushedAuthorizationRequest' | 'authorize' | 'callback' | 'token';
+/** @deprecated Use {@link EnboxConnectRequest} instead. */
+export type EnboxConnectAuthRequest = EnboxConnectRequest;
+/** @deprecated Use {@link EnboxConnectResponse} instead. */
+export type EnboxConnectAuthResponse = EnboxConnectResponse;
+/** @deprecated Use {@link ConnectPushedRequest} instead. */
+export type PushedAuthRequest = ConnectPushedRequest;
+/** @deprecated Use {@link ConnectPushedResponse} instead. */
+export type PushedAuthResponse = ConnectPushedResponse;
+/**
+ * Builds the URL for a connect server endpoint.
+ *
+ * @param options.baseURL - The connect server base URL (e.g. `http://localhost:3000/connect/`)
+ * @param options.endpoint - The endpoint type
+ * @param options.authParam - Required for `authorize` endpoint (the request ID)
+ * @param options.tokenParam - Required for `token` endpoint (the state value)
+ */
+declare function buildConnectUrl({ baseURL, endpoint, authParam, tokenParam, }: {
+    baseURL: string;
+    endpoint: ConnectEndpoint;
+    authParam?: string;
+    tokenParam?: string;
+}): string;
+/** Signs an object as a JWT using an Ed25519 DID key. */
+declare function signJwt({ did, data, }: {
+    did: BearerDid;
+    data: Record<string, unknown>;
+}): Promise<string>;
+/** Verifies a JWT signature using the DID in the `kid` header. Returns the parsed payload. */
+declare function verifyJwt({ jwt }: {
+    jwt: string;
+}): Promise<Record<string, unknown>>;
+/** Encrypts the connect request JWT with a symmetric key (shared via QR code or deep link). */
+declare function encryptRequest({ jwt, encryptionKey, }: {
+    jwt: string;
+    encryptionKey: Uint8Array;
+}): Promise<string>;
+/** Decrypts an encrypted connect request JWE using the symmetric key from the QR/deep link. */
+declare function decryptRequest({ jwe, encryptionKey, }: {
+    jwe: string;
+    encryptionKey: string;
+}): Promise<string>;
+/** Derives a shared ECDH key for encrypting/decrypting the connect response. */
+declare function deriveSharedKey(privateKeyDid: BearerDid, publicKeyDid: DidDocument): Promise<Uint8Array>;
+/**
+ * Encrypts the connect response JWT.
+ *
+ * For remote (relay-mediated) flows, `pin` is required — it is added to the
+ * AAD to prevent MITM attacks via the untrusted relay.
+ *
+ * For local (same-device) flows, `pin` may be omitted — the ECDH encryption
+ * alone is sufficient when there is no untrusted intermediary.
+ */
+declare function encryptResponse({ jwt, encryptionKey, delegateDidKeyId, pin, }: {
+    jwt: string;
+    encryptionKey: Uint8Array;
+    delegateDidKeyId: string;
+    pin?: string;
+}): Promise<string>;
+/**
+ * Decrypts the connect response JWE using ECDH + optional PIN.
+ *
+ * @param clientDid - The ephemeral DID used at connect initiation (for ECDH).
+ * @param jwe - The encrypted response JWE.
+ * @param pin - The PIN entered by the user (required for remote flows, omit for local).
+ */
+declare function decryptResponse(clientDid: BearerDid, jwe: string, pin?: string): Promise<string>;
+/** Creates an {@link EnboxConnectRequest}. */
+declare function createConnectRequest(options: RequireOnly<EnboxConnectRequest, 'clientDid' | 'callbackUrl' | 'permissionRequests' | 'appName'>): Promise<EnboxConnectRequest>;
+/**
+ * Fetches an encrypted connect request from the authorize endpoint
+ * and decrypts it using the encryption key from the QR/deep link.
+ */
+declare function getConnectRequest(requestUri: string, encryptionKey: string): Promise<EnboxConnectRequest>;
+/** Creates an {@link EnboxConnectResponse} with timestamps. */
+declare function createConnectResponse(options: RequireOnly<EnboxConnectResponse, 'providerDid' | 'delegateDid' | 'aud' | 'delegateGrants' | 'delegatePortableDid'>): Promise<EnboxConnectResponse>;
+/**
+ * Creates permission grants that assign the requested scopes to a delegate DID.
+ */
+declare function createPermissionGrants(selectedDid: string, delegateBearerDid: BearerDid, agent: EnboxAgent, scopes: DwnPermissionScope[]): Promise<DwnDataEncodedRecordsWriteMessage[]>;
+/**
+ * Executes the full wallet-side (provider) flow:
+ * 1. Creates a delegate DID
+ * 2. Installs requested protocols
+ * 3. Creates permission grants
+ * 4. Builds, signs, and encrypts the response
+ * 5. POSTs the encrypted response to the callback URL
+ *
+ * @param selectedDid - The provider's DID that is granting access.
+ * @param connectRequest - The decoded connect request from the app.
+ * @param pin - The PIN for response encryption AAD (required for remote flows).
+ * @param agent - The agent instance for DWN operations.
+ */
+declare function submitConnectResponse(selectedDid: string, connectRequest: EnboxConnectRequest, pin: string | undefined, agent: EnboxAgent): Promise<void>;
+export declare const EnboxConnectProtocol: {
+    buildConnectUrl: typeof buildConnectUrl;
+    signJwt: typeof signJwt;
+    verifyJwt: typeof verifyJwt;
+    encryptRequest: typeof encryptRequest;
+    decryptRequest: typeof decryptRequest;
+    encryptResponse: typeof encryptResponse;
+    decryptResponse: typeof decryptResponse;
+    deriveSharedKey: typeof deriveSharedKey;
+    createConnectRequest: typeof createConnectRequest;
+    getConnectRequest: typeof getConnectRequest;
+    createConnectResponse: typeof createConnectResponse;
+    createPermissionGrants: typeof createPermissionGrants;
+    submitConnectResponse: typeof submitConnectResponse;
+};
+/** @deprecated Use {@link EnboxConnectProtocol} instead. */
+export declare const Oidc: {
+    createAuthRequest: typeof createConnectRequest;
+    encryptAuthRequest: typeof encryptRequest;
+    getAuthRequest: typeof getConnectRequest;
+    decryptAuthRequest: typeof decryptRequest;
+    createPermissionGrants: typeof createPermissionGrants;
+    createResponseObject: typeof createConnectResponse;
+    encryptAuthResponse: typeof encryptResponse;
+    decryptAuthResponse: typeof decryptResponse;
+    deriveSharedKey: typeof deriveSharedKey;
+    signJwt: typeof signJwt;
+    verifyJwt: typeof verifyJwt;
+    buildOidcUrl: typeof buildConnectUrl;
+    generateCodeChallenge: never;
+    submitAuthResponse: typeof submitConnectResponse;
+};
+export {};
+//# sourceMappingURL=enbox-connect-protocol.d.ts.map

package/dist/types/enbox-connect-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enbox-connect-protocol.d.ts","sourceRoot":"","sources":["../../src/enbox-connect-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,iCAAiC,EAAE,kBAAkB,EAAyB,MAAM,gBAAgB,CAAC;AAKnH,OAAO,EAAE,KAAK,SAAS,EAAU,MAAM,aAAa,CAAC;AAqBrD;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAElB,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAEhB,2DAA2D;IAC3D,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IAEd,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IAEd,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IAEpB,mFAAmF;IACnF,YAAY,EAAE,aAAa,CAAC;IAE5B,wDAAwD;IACxD,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAC;IAEpB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IAEpB,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IAEZ,0CAA0C;IAC1C,GAAG,EAAE,MAAM,CAAC;IAEZ,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IAEZ,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,iFAAiF;IACjF,cAAc,EAAE,iCAAiC,EAAE,CAAC;IAEpD,qEAAqE;IACrE,mBAAmB,EAAE,WAAW,CAAC;CAClC,CAAC;AAEF,yCAAyC;AACzC,MAAM,MAAM,eAAe,GACvB,4BAA4B,GAC5B,WAAW,GACX,UAAU,GACV,OAAO,CAAC;AAMZ,2DAA2D;AAC3D,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE1D,4DAA4D;AAC5D,MAAM,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAE5D,4DAA4D;AAC5D,MAAM,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAErD,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAMvD;;;;;;;GAOG;AACH,iBAAS,eAAe,CAAC,EACvB,OAAO,EACP,QAAQ,EACR,SAAS,EACT,UAAU,GACX,EAAE;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAmBT;AAMD,yDAAyD;AACzD,iBAAe,OAAO,CAAC,EACrB,GAAG,EACH,IAAI,GACL,EAAE;IACD,GAAG,EAAE,SAAS,CAAC;IACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBlB;AAED,8FAA8F;AAC9F,iBAAe,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoCnF;AAMD,+FAA+F;AAC/F,iBAAe,cAAc,CAAC,EAC5B,GAAG,EACH,aAAa,GACd,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,UAAU,CAAC;CAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBlB;AAED,+FAA+F;AAC/F,iBAAe,cAAc,CAAC,EAC5B,GAAG,EACH,aAAa,GACd,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBlB;AAMD,gFAAgF;AAChF,iBAAe,eAAe,CAC5B,aAAa,EAAE,SAAS,EACxB,YAAY,EAAE,WAAW,GACxB,OAAO,CAAC,UAAU,CAAC,CAsBrB;AAED;;;;;;;;GAQG;AACH,iBAAe,eAAe,CAAC,EAC7B,GAAG,EACH,aAAa,EACb,gBAAgB,EAChB,GAAG,GACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,UAAU,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BlB;AAED;;;;;;GAMG;AACH,iBAAe,eAAe,CAC5B,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAkCjB;AAMD,8CAA8C;AAC9C,iBAAe,oBAAoB,CACjC,OAAO,EAAE,WAAW,CAClB,mBAAmB,EACnB,WAAW,GAAG,aAAa,GAAG,oBAAoB,GAAG,SAAS,CAC/D,GACA,OAAO,CAAC,mBAAmB,CAAC,CAW9B;AAED;;;GAGG;AACH,iBAAe,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAKxG;AAMD,+DAA+D;AAC/D,iBAAe,qBAAqB,CAClC,OAAO,EAAE,WAAW,CAClB,oBAAoB,EACpB,aAAa,GAAG,aAAa,GAAG,KAAK,GAAG,gBAAgB,GAAG,qBAAqB,CACjF,GACA,OAAO,CAAC,oBAAoB,CAAC,CAQ/B;AAeD;;GAEG;AACH,iBAAe,sBAAsB,CACnC,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,SAAS,EAC5B,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,kBAAkB,EAAE,GAC3B,OAAO,CAAC,iCAAiC,EAAE,CAAC,CA4C9C;AAiED;;;;;;;;;;;;GAYG;AACH,iBAAe,qBAAqB,CAClC,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,mBAAmB,EACnC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,IAAI,CAAC,CAyEf;AAMD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;CAchC,CAAC;AAMF,4DAA4D;AAC5D,eAAO,MAAM,IAAI;;;;;;;;;;;;;2BAasB,KAAK;;CAE3C,CAAC"}

package/dist/types/enbox-user-agent.d.ts

@@ -75,6 +75,15 @@ export type AgentParams<TKeyManager extends AgentKeyManager = LocalKeyManager> =
 };
 export type CreateUserAgentParams = Partial<AgentParams> & {
     localDwnStrategy?: LocalDwnStrategy;
+    /**
+     * When set, the agent operates in "remote mode": no in-process DWN is
+     * created. All `processRequest()` calls are routed through RPC to
+     * this endpoint instead.
+     *
+     * Typically set by `AuthManager.create()` after standalone discovery
+     * determines that a local DWN server is running.
+     */
+    localDwnEndpoint?: string;
 };
 export declare class EnboxUserAgent<TKeyManager extends AgentKeyManager = LocalKeyManager> implements EnboxPlatformAgent<TKeyManager> {
     crypto: AgentCryptoApi;
@@ -93,7 +102,7 @@ export declare class EnboxUserAgent<TKeyManager extends AgentKeyManager = LocalK
     /**
      * If any of the required agent components are not provided, instantiate default implementations.
      */
-    static create({ dataPath, localDwnStrategy, agentDid, agentVault, cryptoApi, didApi, dwnApi, identityApi, keyManager, permissionsApi, rpcClient, syncApi }?: CreateUserAgentParams): Promise<EnboxUserAgent>;
+    static create({ dataPath, localDwnStrategy, localDwnEndpoint, agentDid, agentVault, cryptoApi, didApi, dwnApi, identityApi, keyManager, permissionsApi, rpcClient, syncApi }?: CreateUserAgentParams): Promise<EnboxUserAgent>;
     firstLaunch(): Promise<boolean>;
     /**
      * Initializes the User Agent with a password, and optionally a recovery phrase.

package/dist/types/enbox-user-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enbox-user-agent.d.ts","sourceRoot":"","sources":["../../src/enbox-user-agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnG,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAK7C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAIzD;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;;QAII;IACH,QAAQ,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACF,cAAc,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;;;OAOG;IACF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CACjB,CAAC;AAEH,MAAM,MAAM,WAAW,CAAC,WAAW,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,uFAAuF;IACvF,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,6EAA6E;IAC7E,UAAU,EAAE,eAAe,CAAC;IAC5B,+FAA+F;IAC/F,SAAS,EAAE,cAAc,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IACjC,4EAA4E;IAC5E,MAAM,EAAE,WAAW,CAAC;IACpB,0FAA0F;IAC1F,WAAW,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,6EAA6E;IAC7E,UAAU,EAAE,WAAW,CAAC;IACxB,2GAA2G;IAC3G,cAAc,EAAE,mBAAmB,CAAC;IACpC,wFAAwF;IACxF,SAAS,EAAE,QAAQ,CAAC;IACpB,qEAAqE;IACrE,OAAO,EAAE,YAAY,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG;IACzD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC,CAAC;AAEF,qBAAa,cAAc,CAAC,WAAW,SAAS,eAAe,GAAG,eAAe,CAAE,YAAW,kBAAkB,CAAC,WAAW,CAAC;IACpH,MAAM,EAAE,cAAc,CAAC;IACvB,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IAC9B,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACxC,UAAU,EAAE,WAAW,CAAC;IACxB,WAAW,EAAE,mBAAmB,CAAC;IACjC,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;IAE9B,OAAO,CAAC,SAAS,CAAC,CAAY;gBAElB,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC;IAqB5C,IAAI,QAAQ,IAAI,SAAS,CAQxB;IAED,IAAI,QAAQ,CAAC,GAAG,EAAE,SAAS,EAE1B;IAED;;OAEG;WACiB,MAAM,CAAC,EACzB,QAAuB,EACvB,gBAAgB,EAChB,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAC7G,GAAE,qBAA0B,GAC1B,OAAO,CAAC,cAAc,CAAC;IAgDb,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAK5C;;;;;;;;;;OAUG;IACU,UAAU,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC;IAOrG,iBAAiB,CAAC,CAAC,SAAS,YAAY,EAC5C,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,iBAAiB,CAAC,CAAC,SAAS,YAAY,EACnD,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAIjE,cAAc,CAAC,CAAC,SAAS,YAAY,EAChD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,cAAc,CAAC,CAAC,SAAS,YAAY,EAChD,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,aAAa,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;IAI3D,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CASvE;AAMD,2FAA2F;AAC3F,eAAO,MAAM,aAAa,uBAAiB,CAAC;AAE5C,2FAA2F;AAC3F,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC"}
+{"version":3,"file":"enbox-user-agent.d.ts","sourceRoot":"","sources":["../../src/enbox-user-agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnG,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAK7C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAIzD;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;;QAII;IACH,QAAQ,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACF,cAAc,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;;;;OAOG;IACF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CACjB,CAAC;AAEH,MAAM,MAAM,WAAW,CAAC,WAAW,SAAS,eAAe,GAAG,eAAe,IAAI;IAC/E,uFAAuF;IACvF,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,6EAA6E;IAC7E,UAAU,EAAE,eAAe,CAAC;IAC5B,+FAA+F;IAC/F,SAAS,EAAE,cAAc,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IACjC,4EAA4E;IAC5E,MAAM,EAAE,WAAW,CAAC;IACpB,0FAA0F;IAC1F,WAAW,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,6EAA6E;IAC7E,UAAU,EAAE,WAAW,CAAC;IACxB,2GAA2G;IAC3G,cAAc,EAAE,mBAAmB,CAAC;IACpC,wFAAwF;IACxF,SAAS,EAAE,QAAQ,CAAC;IACpB,qEAAqE;IACrE,OAAO,EAAE,YAAY,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG;IACzD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,qBAAa,cAAc,CAAC,WAAW,SAAS,eAAe,GAAG,eAAe,CAAE,YAAW,kBAAkB,CAAC,WAAW,CAAC;IACpH,MAAM,EAAE,cAAc,CAAC;IACvB,GAAG,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IAC9B,GAAG,EAAE,WAAW,CAAC;IACjB,QAAQ,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACxC,UAAU,EAAE,WAAW,CAAC;IACxB,WAAW,EAAE,mBAAmB,CAAC;IACjC,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;IAE9B,OAAO,CAAC,SAAS,CAAC,CAAY;gBAElB,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC;IAqB5C,IAAI,QAAQ,IAAI,SAAS,CAQxB;IAED,IAAI,QAAQ,CAAC,GAAG,EAAE,SAAS,EAE1B;IAED;;OAEG;WACiB,MAAM,CAAC,EACzB,QAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAC7G,GAAE,qBAA0B,GAC1B,OAAO,CAAC,cAAc,CAAC;IA4Db,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAK5C;;;;;;;;;;OAUG;IACU,UAAU,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC;IAOrG,iBAAiB,CAAC,CAAC,SAAS,YAAY,EAC5C,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,iBAAiB,CAAC,CAAC,SAAS,YAAY,EACnD,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAC5B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAIjE,cAAc,CAAC,CAAC,SAAS,YAAY,EAChD,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,cAAc,CAAC,CAAC,SAAS,YAAY,EAChD,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAIb,aAAa,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC;IAI3D,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CASvE;AAMD,2FAA2F;AAC3F,eAAO,MAAM,aAAa,uBAAiB,CAAC;AAE5C,2FAA2F;AAC3F,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC"}

package/dist/types/index.d.ts

@@ -16,7 +16,6 @@ export * from './dwn-discovery-file.js';
 export * from './dwn-discovery-payload.js';
 export * from './dwn-encryption.js';
 export * from './dwn-key-delivery.js';
-export * from './dwn-record-upgrade.js';
 export * from './dwn-type-guards.js';
 export * from './protocol-utils.js';
 export * from './hd-identity-vault.js';
@@ -33,6 +32,6 @@ export * from './sync-engine-level.js';
 export * from './test-harness.js';
 export * from './utils.js';
 export * from './connect.js';
-export * from './oidc.js';
+export * from './enbox-connect-protocol.js';
 export * from './enbox-user-agent.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,kBAAkB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,mBAAmB,qBAAqB,CAAC;AACzC,mBAAmB,2BAA2B,CAAC;AAC/C,mBAAmB,wBAAwB,CAAC;AAC5C,mBAAmB,wBAAwB,CAAC;AAC5C,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,eAAe,CAAC;AAEnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,kBAAkB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,mBAAmB,qBAAqB,CAAC;AACzC,mBAAmB,2BAA2B,CAAC;AAC/C,mBAAmB,wBAAwB,CAAC;AAC5C,mBAAmB,wBAAwB,CAAC;AAC5C,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,eAAe,CAAC;AAEnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AAItC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}