@enbox/agent 0.7.6 → 0.7.8

package/dist/types/sync-engine-level.d.ts

@@ -85,6 +85,8 @@ export declare class SyncEngineLevel implements SyncEngine {
     private static readonly ECHO_SUPPRESS_MAX_ENTRIES;
     /** Validate `SyncIdentityOptions` for `registerIdentity` and `updateIdentityOptions`. */
     private static validateSyncIdentityOptions;
+    private buildSyncTargetsForEndpoint;
+    private buildSyncTargetResolutions;
     /**
      * Cached sync targets result from the last {@link getSyncTargets} call.
      * Invalidated on identity registration/unregistration/update.
@@ -101,6 +103,8 @@ export declare class SyncEngineLevel implements SyncEngine {
     private _syncTargetsCacheGeneration;
     /** TTL for the sync targets cache (30 seconds). */
     private static readonly SYNC_TARGETS_CACHE_TTL_MS;
+    /** Backoff schedule for recently published did:dht records. */
+    private static readonly DID_RESOLUTION_RETRY_BACKOFF_MS;
     /** Count of consecutive SMT sync failures (for backoff in poll mode). */
     private _consecutiveFailures;
     /** Maximum consecutive failures before entering backoff. */
@@ -204,6 +208,9 @@ export declare class SyncEngineLevel implements SyncEngine {
      * guarantee a future retry path.
      */
     private transitionToRepairing;
+    private transitionToTerminalIncomplete;
+    private setLinkOfflineStatus;
+    private clearLinkRuntimeInflight;
     /**
      * Schedule a retry for a failed repair. Uses exponential backoff.
      * No-op if the link is already in `degraded_poll` (timer loop owns retries)
@@ -226,6 +233,8 @@ export declare class SyncEngineLevel implements SyncEngine {
      * Close pull and push subscriptions for a specific link.
      */
     private closeLinkSubscriptions;
+    private closeLiveSubscription;
+    private closeLocalSubscription;
     /**
      * Transition a link to `degraded_poll` and start a per-link polling timer.
      * The timer runs SMT reconciliation at a reduced frequency (30s with jitter)
@@ -247,10 +256,18 @@ export declare class SyncEngineLevel implements SyncEngine {
     private teardownLiveSync;
     /**
      * Initialize a single replication link target: create or resume the durable
-     * link, migrate legacy cursors, open pull + push subscriptions, and
-     * transition the link to `'live'`.
+     * link, open pull + push subscriptions, and transition the link to `'live'`.
      */
     private initializeLinkTarget;
+    private getOrCreateReplicationLink;
+    private getReplicationLinkKey;
+    private openLinkSubscriptions;
+    private static supportsLiveSubscriptions;
+    private markLinkLive;
+    private markLinkPolling;
+    private handleInitializeLinkTargetError;
+    private createActiveLinkInitializationResult;
+    private cleanupFailedLinkInitialization;
     /**
      * Wrapper around {@link initializeLinkTarget} that retries on DID
      * resolution failures. Newly published `did:dht` DIDs take a few
@@ -260,6 +277,7 @@ export declare class SyncEngineLevel implements SyncEngine {
      * propagation settle before giving up.
      */
     private initializeLinkTargetWithRetry;
+    private isDidResolutionFailure;
     /** Check whether a link key belongs to a given DID. */
     private isLinkKeyForDid;
     /** Check whether this DID has any active links. */
@@ -268,11 +286,35 @@ export declare class SyncEngineLevel implements SyncEngine {
     private addIdentityToLiveSync;
     /** Hot-remove a single identity from the active live sync session. */
     private removeIdentityFromLiveSync;
+    private tryPruneSupersededDurableLinksForRegisteredIdentity;
+    private getDurableLinkIdentityKeysForRegisteredIdentity;
+    private pruneSupersededDurableLinksForIdentity;
     /**
      * Opens a MessagesSubscribe WebSocket subscription to a remote DWN.
      * Incoming events are processed locally as they arrive.
      */
     private openLivePullSubscription;
+    private getInitialPullCursor;
+    private isValidProgressToken;
+    private createLinkStalePredicate;
+    private handleLivePullMessage;
+    private handleLivePullEose;
+    private markPullLinkOnline;
+    private handleLivePullSubscriptionError;
+    private handleLivePullEvent;
+    private shouldSkipLivePullEvent;
+    private skipOutOfScopePullEvent;
+    private startPullDelivery;
+    private processLivePullEvent;
+    private getLivePullDataStream;
+    private invalidateClosureCacheForMessage;
+    private ensureClosureComplete;
+    private recordClosureFailure;
+    private trackRecentlyPulledMessage;
+    private commitPullDelivery;
+    private emitPullCheckpointAdvance;
+    private handleLivePullProcessingError;
+    private recordPullProcessingFailure;
     /**
      * Subscribes to the local DWN's EventLog so that writes by the user are
      * immediately pushed to the remote DWN instead of waiting for the next poll.
@@ -283,15 +325,78 @@ export declare class SyncEngineLevel implements SyncEngine {
      */
     private flushPendingPushes;
     private flushPendingPushesForLink;
+    private takePushFlushBatch;
+    private handlePushBatchResult;
+    private clearSucceededPushFailures;
+    private recordPermanentPushFailures;
+    private requeueFailedPushes;
+    private cleanupSuccessfulPushRuntime;
+    private finishPushFlush;
     /** Push retry backoff schedule: immediate, 250ms, 1s, 2s, then give up. */
     private static readonly PUSH_RETRY_BACKOFF_MS;
+    private static readonly ROOT_CONVERGENCE_CLEARABLE_DEAD_LETTER_CATEGORIES;
     /**
      * Re-queues a failed push batch for retry, or marks the link
      * `needsReconcile` if retries are exhausted. Bounded to prevent
      * infinite retry loops.
      */
     private requeueOrReconcile;
+    private markLinkNeedsReconcile;
     private createLinkReconciler;
+    private getReconcileProtocols;
+    private getAuthorizationGrantIds;
+    private reconcileProjectionTarget;
+    private reconcileRecordsProjectionTarget;
+    private reconcileProtocolSetProjectionTarget;
+    private collectProtocolSetDiffPlan;
+    private getProtocolRoots;
+    private applyProtocolSetDiffPlan;
+    private applyProjectedDiff;
+    private pullProjectedRemoteDiff;
+    private pushProjectedLocalDiff;
+    private pullRemoteDiffEntries;
+    private pullProjectedDependencyHints;
+    private verifyProjectedDependencies;
+    private verifyProjectedProtocolConfigDependencies;
+    private static indexEntriesWithMessage;
+    private static recordsInitialWritesFromVerifiedDependencies;
+    private collectProjectedRecordsInitialWriteDependencies;
+    private verifyRecordsInitialWriteCandidate;
+    private toAuthenticatedRecordsInitialWriteDependency;
+    private collectProjectedProtocolConfigCandidates;
+    private verifyProtocolConfigCandidate;
+    private verifyProtocolConfigCandidateMessage;
+    private toAuthenticatedProtocolConfigDependency;
+    private static projectedDependencyCidsMatch;
+    private static recordsWriteProtocol;
+    private static recordsDeleteRecordId;
+    private static protocolConfigRootRecordsWrite;
+    private static protocolsConfigureProtocol;
+    private static protocolsConfigureProtocolFromGenericMessage;
+    private static protocolsConfigureIsNotNewerThanRecordsWrite;
+    private static protocolsConfigureUses;
+    private static hasMessage;
+    private static isRecordsWriteProtocolMessage;
+    private static isRecordsWriteMessage;
+    private static isRecordsDeleteMessage;
+    private static isProtocolsConfigureDefinitionMessage;
+    private static hasProtocolsConfigureDefinition;
+    private static isProtocolsConfigureDefinition;
+    private static filterProtocolConfigClosure;
+    private static groupGoverningProtocolConfigCandidatesByProtocol;
+    private static isProtocolConfigCandidateAtLeastAsNew;
+    private static takeNextUnvisitedProtocol;
+    private static acceptProtocolConfigCandidates;
+    private static queueUnvisitedProtocols;
+    private static protocolSetScopeForProjectedDependencies;
+    private static projectedDependencyProtocols;
+    private static hasDependencyPayloadBytes;
+    private static dedupeDependencyEntries;
+    private pushLocalDiffEntries;
+    private verifyProtocolSetConvergence;
+    private static dedupeRemoteEntries;
+    private static dedupeStrings;
+    private clearRootConvergenceDeadLettersForScope;
     /** Active reconcile timers, keyed by link key. */
     private readonly _reconcileTimers;
     /** Active reconcile operations, keyed by link key (dedup). */
@@ -318,25 +423,10 @@ export declare class SyncEngineLevel implements SyncEngine {
      * Live-mode subscription methods (`openLivePullSubscription`,
      * `openLocalPushSubscription`) receive `linkKey` directly and never
      * call this. The remaining callers are poll-mode `sync()` and the
-     * live-mode startup/error paths that already have `link.scopeId`.
-     *
-     * The `undefined` fallback (which produces a legacy cursor key) exists
-     * only for the no-protocol full-tenant targets in poll mode.
+     * live-mode startup/error paths that already have a projection ID and
+     * authorization epoch.
      */
     private buildLinkKey;
-    /**
-     * @deprecated Used by poll-mode sync and one-time migration only. Live mode
-     * uses ReplicationLedger checkpoints. Handles migration from old string cursors:
-     * if the stored value is a bare string (pre-ProgressToken format), it is treated
-     * as absent — the sync engine will do a full SMT reconciliation on first startup
-     * after upgrade, which is correct and safe.
-     */
-    private getCursor;
-    /**
-     * Delete a legacy cursor from the old syncCursors sublevel.
-     * Called as part of one-time migration to ReplicationLedger.
-     */
-    private deleteLegacyCursor;
     /**
      * Extracts a ReadableStream from a MessageEvent if it contains a
      * RecordsWrite with data — either as an inline `encodedData` field
@@ -379,6 +469,8 @@ export declare class SyncEngineLevel implements SyncEngine {
      * Returns a hex-encoded root hash string.
      */
     private getRemoteRoot;
+    private getLocalProjectedRoot;
+    private getRemoteProjectedRoot;
     /**
      * Compute the diff between local and remote in a single HTTP round-trip.
      *
@@ -393,6 +485,8 @@ export declare class SyncEngineLevel implements SyncEngine {
      * This replaces `walkTreeDiff()` which required one HTTP call per tree node.
      */
     private diffWithRemote;
+    private diffProjectedWithRemote;
+    private diffRemoteMessages;
     /**
      * Walk the local SMT to a given depth and collect non-empty subtree hashes.
      * Returns a `{ prefix: hexHash }` map. Empty subtrees (matching the default
@@ -402,6 +496,7 @@ export declare class SyncEngineLevel implements SyncEngine {
      * to `getLocalSubtreeHash` which routes through RPC.
      */
     private collectLocalSubtreeHashes;
+    private collectLocalProjectedSubtreeHashes;
     /**
      * Get the subtree hash at a given bit prefix from the local DWN.
      *
@@ -409,6 +504,7 @@ export declare class SyncEngineLevel implements SyncEngine {
      * In remote mode: constructs a signed MessagesSync message and routes through RPC.
      */
     private getLocalSubtreeHash;
+    private getLocalProjectedSubtreeHash;
     /**
      * Get all leaf messageCids under a given prefix from the local DWN.
      *
@@ -416,6 +512,7 @@ export declare class SyncEngineLevel implements SyncEngine {
      * In remote mode: constructs a signed MessagesSync message and routes through RPC.
      */
     private getLocalLeaves;
+    private getLocalProjectedLeaves;
     /**
      * Fetches missing messages from the remote DWN and processes them locally
      * in dependency order (topological sort).
@@ -425,6 +522,10 @@ export declare class SyncEngineLevel implements SyncEngine {
      * Only `messageCids` that were NOT prefetched are fetched individually.
      */
     private pullMessages;
+    private acceptPulledSyncEntry;
+    private resolvePulledDeleteInitialWrite;
+    private static findInitialWriteByRecordId;
+    private findInitialWriteInPullBatch;
     /**
      * Evicts expired entries from the echo-loop suppression cache.
      * Also enforces the size cap by evicting oldest entries first.
@@ -456,6 +557,7 @@ export declare class SyncEngineLevel implements SyncEngine {
      * also have no protocol.
      */
     private clearDeadLettersForLink;
+    private clearRootConvergenceDeadLetters;
     /**
      * Build a compound dead letter key. Different remotes can fail the same CID
      * for different reasons, so the key includes the remote endpoint.
@@ -474,17 +576,17 @@ export declare class SyncEngineLevel implements SyncEngine {
     clearFailedMessage(messageCid: string, remoteEndpoint?: string): Promise<boolean>;
     clearAllFailedMessages(tenantDid?: string): Promise<void>;
     getSyncHealth(): Promise<SyncHealthSummary>;
+    private getCurrentDurableLinkIdentityKeys;
+    private getDurableLinkIdentityKey;
+    private static durableLinkIdentityKey;
+    private static isUnhealthyLinkStatus;
     /**
-     * Returns the list of sync targets: (did, dwnUrl, delegateDid?, protocol?) tuples.
+     * Returns the list of sync targets: one canonical projection target per
+     * registered DID and resolved DWN endpoint.
      * Results are cached for up to 30 seconds to avoid redundant DID resolution
      * on every sync tick. The cache is invalidated when identities are registered,
      * unregistered, or updated.
      */
     private getSyncTargets;
-    /**
-     * Gets the permission grant ID for MessagesSync if a delegateDid is provided.
-     * Returns undefined if no delegate is in use (owner access).
-     */
-    private getSyncPermissionGrantId;
 }
 //# sourceMappingURL=sync-engine-level.d.ts.map

package/dist/types/sync-engine-level.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-engine-level.d.ts","sourceRoot":"","sources":["../../src/sync-engine-level.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,KAAK,EAAE,cAAc,EAAkI,MAAM,mBAAmB,CAAC;AASxL,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAoC,eAAe,EAAE,qBAAqB,EAAE,UAAU,EAAa,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,EAAuB,MAAM,iBAAiB,CAAC;AAe5P,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC,CAAC;CAClD,CAAC;AAmIF,qBAAa,eAAgB,YAAW,UAAU;IAChD;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,CAAqB;IAEpC;;OAEG;IACH,OAAO,CAAC,eAAe,CAAiB;IAExC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8C;IAClE,OAAO,CAAC,eAAe,CAAC,CAAiC;IACzD,OAAO,CAAC,SAAS,CAAS;IAE1B;;;;OAIG;IACH,OAAO,CAAC,OAAO,CAAC,CAAoB;IAEpC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgD;IAE7E;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAE1E;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAAC,CAAsB;IAM9C,yFAAyF;IACzF,OAAO,CAAC,SAAS,CAAgC;IAEjD;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB,CAAK;IAE9B,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,CAA0B;IAEpD,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,CAA2B;IAEtD,2DAA2D;IAC3D,OAAO,CAAC,kBAAkB,CAAoC;IAE9D,oDAAoD;IACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqC;IAErE,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAE1E;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAkC;IAEtE,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAU;IAEtD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoD;IAErF,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAU;IAE3D,yFAAyF;IACzF,OAAO,CAAC,MAAM,CAAC,2BAA2B;IAY1C;;;;OAIG;IACH,OAAO,CAAC,iBAAiB,CAAC,CAGxB;IAEF;;;;;;OAMG;IACH,OAAO,CAAC,2BAA2B,CAAK;IAExC,mDAAmD;IACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAU;IAE3D,yEAAyE;IACzE,OAAO,CAAC,oBAAoB,CAAK;IAEjC,4DAA4D;IAC5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAK;IAErD,wFAAwF;IACxF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAK;IAEnD;;;OAGG;IACH,OAAO,CAAC,SAAS,CAAC,CAAa;IAC/B,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,mBAAmB,CAAC,CAAa;gBAE7B,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,qBAAqB;IAM1D,gDAAgD;IAChD,OAAO,KAAK,MAAM,GAKjB;IAED,uEAAuE;IACvE,OAAO,KAAK,YAAY,GAEvB;IAED;;;;;OAKG;IACH,IAAI,KAAK,IAAI,kBAAkB,CAM9B;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,kBAAkB,EAQlC;IAED,IAAI,sBAAsB,IAAI,OAAO,CAGpC;IAED,IAAI,iBAAiB,IAAI,qBAAqB,CAkB7C;IAEM,EAAE,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAKlD,qDAAqD;IACrD,OAAO,CAAC,SAAS;IAUJ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtB,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBhG,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB9C,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAkBzE,qBAAqB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCrG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwEhD,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB9D;;;;;;;;OAQG;IACU,QAAQ,CAAC,OAAO,GAAE,MAAa,GAAG,OAAO,CAAC,IAAI,CAAC;YAmC9C,aAAa;IAgD3B;;;;;;OAMG;YACW,aAAa;IAiC3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA2B1B,gFAAgF;IAChF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAK;IAEhD,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA0D;IAE9F,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAElE,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IAExE,mEAAmE;IACnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyD;IAE5F,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAEnE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2D;IAE1F;;;;;;;;OAQG;YACW,qBAAqB;IAiCnC;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAqC3B;;;OAGG;IACH,OAAO,CAAC,UAAU;IAoBlB;;;;;OAKG;YACW,YAAY;IAoI1B;;OAEG;YACW,sBAAsB;IAmBpC;;;;OAIG;YACW,iBAAiB;IAwE/B;;OAEG;IAKH;;;;;OAKG;IACH,OAAO,CAAC,iCAAiC;IAwEzC,sEAAsE;IACtE,OAAO,CAAC,gCAAgC;YAmB1B,gBAAgB;IAsE9B;;;;OAIG;YACW,oBAAoB;IA0ElC;;;;;;;OAOG;YACW,6BAA6B;IA6B3C,uDAAuD;IACvD,OAAO,CAAC,eAAe;IAIvB,mDAAmD;IACnD,OAAO,CAAC,oBAAoB;IAO5B,iEAAiE;YACnD,qBAAqB;IAmBnC,sEAAsE;YACxD,0BAA0B;IAiDxC;;;OAGG;YACW,wBAAwB;IA0YtC;;;OAGG;YACW,yBAAyB;IAuGvC;;OAEG;YACW,kBAAkB;YAMlB,yBAAyB;IAyGvC,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAwB;IAErE;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAgD1B,OAAO,CAAC,oBAAoB;IAe5B,kDAAkD;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyD;IAE1F,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAE5E;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;;OAGG;YACW,aAAa;IAW3B;;;OAGG;YACW,eAAe;IAkD7B,OAAO,CAAC,sBAAsB;IAuB9B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,YAAY;IAIpB;;;;;;OAMG;YACW,SAAS;IA8BvB;;;OAGG;YACW,kBAAkB;IAehC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAgCzB;;;OAGG;YACW,iBAAiB;IAa/B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;IAQ7B;;;;;;;;;OASG;IACH,OAAO,KAAK,UAAU,GAKrB;IAED;;;;;;;OAOG;YACW,YAAY;IA0B1B;;;OAGG;YACW,aAAa;IA8B3B;;;;;;;;;;;;OAYG;YACW,cAAc;IAoD5B;;;;;;;OAOG;YACW,yBAAyB;IA6CvC;;;;;OAKG;YACW,mBAAmB;IA6BjC;;;;;OAKG;YACW,cAAc;IAgC5B;;;;;;;OAOG;YACW,YAAY;IA+B1B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;OAGG;YACW,YAAY;IAkB1B;;;OAGG;WACW,eAAe,CAAC,CAAC,SAAS;QAAE,OAAO,EAAE,cAAc,CAAA;KAAE,EACjE,QAAQ,EAAE,CAAC,EAAE,GACZ,CAAC,EAAE;IAQN;;;;;;OAMG;YACW,uBAAuB;IAoBrC;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAIf,gBAAgB,CAAC,MAAM,EAAE;QACpC,UAAU,EAAG,MAAM,CAAC;QACpB,SAAS,EAAG,MAAM,CAAC;QACnB,cAAc,CAAC,EAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAG,MAAM,CAAC;QACnB,QAAQ,EAAG,kBAAkB,CAAC;QAC9B,SAAS,CAAC,EAAG,MAAM,CAAC;QACpB,WAAW,EAAG,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBJ,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAajE,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+BjF,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBzD,aAAa,IAAI,OAAO,CAAC,iBAAiB,CAAC;IA4BxD;;;;;OAKG;YACW,cAAc;IAiE5B;;;OAGG;YACW,wBAAwB;CAcvC"}
+{"version":3,"file":"sync-engine-level.d.ts","sourceRoot":"","sources":["../../src/sync-engine-level.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,KAAK,EAAE,cAAc,EAAuO,MAAM,mBAAmB,CAAC;AAS7R,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAyD,eAAe,EAAqB,qBAAqB,EAAE,UAAU,EAAa,iBAAiB,EAAkB,iBAAiB,EAAE,mBAAmB,EAAuB,MAAM,iBAAiB,CAAC;AAkBpT,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC,CAAC;CAClD,CAAC;AA8NF,qBAAa,eAAgB,YAAW,UAAU;IAChD;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,CAAqB;IAEpC;;OAEG;IACH,OAAO,CAAC,eAAe,CAAiB;IAExC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8C;IAClE,OAAO,CAAC,eAAe,CAAC,CAAiC;IACzD,OAAO,CAAC,SAAS,CAAS;IAE1B;;;;OAIG;IACH,OAAO,CAAC,OAAO,CAAC,CAAoB;IAEpC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgD;IAE7E;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAE1E;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAAC,CAAsB;IAM9C,yFAAyF;IACzF,OAAO,CAAC,SAAS,CAAgC;IAEjD;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB,CAAK;IAE9B,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,CAA0B;IAEpD,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,CAA2B;IAEtD,2DAA2D;IAC3D,OAAO,CAAC,kBAAkB,CAAoC;IAE9D,oDAAoD;IACpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqC;IAErE,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAE1E;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAkC;IAEtE,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAU;IAEtD;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoD;IAErF,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAU;IAE3D,yFAAyF;IACzF,OAAO,CAAC,MAAM,CAAC,2BAA2B;YAY5B,2BAA2B;YAW3B,0BAA0B;IA2CxC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB,CAAC,CAGxB;IAEF;;;;;;OAMG;IACH,OAAO,CAAC,2BAA2B,CAAK;IAExC,mDAAmD;IACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAU;IAE3D,+DAA+D;IAC/D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAsB;IAE7E,yEAAyE;IACzE,OAAO,CAAC,oBAAoB,CAAK;IAEjC,4DAA4D;IAC5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAK;IAErD,wFAAwF;IACxF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAK;IAEnD;;;OAGG;IACH,OAAO,CAAC,SAAS,CAAC,CAAa;IAC/B,OAAO,CAAC,UAAU,CAAC,CAAa;IAChC,OAAO,CAAC,mBAAmB,CAAC,CAAa;gBAE7B,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,qBAAqB;IAM1D,gDAAgD;IAChD,OAAO,KAAK,MAAM,GAKjB;IAED,uEAAuE;IACvE,OAAO,KAAK,YAAY,GAEvB;IAED;;;;;OAKG;IACH,IAAI,KAAK,IAAI,kBAAkB,CAM9B;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,kBAAkB,EAQlC;IAED,IAAI,sBAAsB,IAAI,OAAO,CAGpC;IAED,IAAI,iBAAiB,IAAI,qBAAqB,CAkB7C;IAEM,EAAE,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI;IAKlD,qDAAqD;IACrD,OAAO,CAAC,SAAS;IAUJ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtB,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBhG,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAkBzE,qBAAqB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BrG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqEhD,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB9D;;;;;;;;OAQG;IACU,QAAQ,CAAC,OAAO,GAAE,MAAa,GAAG,OAAO,CAAC,IAAI,CAAC;YAmC9C,aAAa;IAgD3B;;;;;;OAMG;YACW,aAAa;IAiC3B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAS1B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA2B1B,gFAAgF;IAChF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAK;IAEhD,8CAA8C;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA0D;IAE9F,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAElE,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IAExE,mEAAmE;IACnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyD;IAE5F,0DAA0D;IAC1D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IAEnE;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2D;IAE1F;;;;;;;;OAQG;YACW,qBAAqB;YAyBrB,8BAA8B;YAuC9B,oBAAoB;IAalC,OAAO,CAAC,wBAAwB;IAUhC;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAqC3B;;;OAGG;IACH,OAAO,CAAC,UAAU;IAoBlB;;;;;OAKG;YACW,YAAY;IAiJ1B;;OAEG;YACW,sBAAsB;YAQtB,qBAAqB;YAQrB,sBAAsB;IAQpC;;;;OAIG;YACW,iBAAiB;IAyE/B;;OAEG;IAKH;;;;;OAKG;IACH,OAAO,CAAC,iCAAiC;IAwEzC,sEAAsE;IACtE,OAAO,CAAC,gCAAgC;YAmB1B,gBAAgB;IAsE9B;;;OAGG;YACW,oBAAoB;YAsBpB,0BAA0B;IAWxC,OAAO,CAAC,qBAAqB;YAIf,qBAAqB;IAqBnC,OAAO,CAAC,MAAM,CAAC,yBAAyB;YAM1B,YAAY;YAgBZ,eAAe;YAYf,+BAA+B;IA+B7C,OAAO,CAAC,oCAAoC;IAO5C,OAAO,CAAC,+BAA+B;IASvC;;;;;;;OAOG;YACW,6BAA6B;IAoB3C,OAAO,CAAC,sBAAsB;IAS9B,uDAAuD;IACvD,OAAO,CAAC,eAAe;IAIvB,mDAAmD;IACnD,OAAO,CAAC,oBAAoB;IAO5B,iEAAiE;YACnD,qBAAqB;IAmBnC,sEAAsE;YACxD,0BAA0B;YA6C1B,mDAAmD;YASnD,+CAA+C;YAW/C,sCAAsC;IAcpD;;;OAGG;YACW,wBAAwB;YAwHxB,oBAAoB;IAwBlC,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,wBAAwB;YAWlB,qBAAqB;YAoBrB,kBAAkB;IAyBhC,OAAO,CAAC,kBAAkB;YAsBZ,+BAA+B;YAW/B,mBAAmB;YAsBnB,uBAAuB;YAmCvB,uBAAuB;IAgBrC,OAAO,CAAC,iBAAiB;YAWX,oBAAoB;YAgBpB,qBAAqB;IAuBnC,OAAO,CAAC,gCAAgC;YAS1B,qBAAqB;YAuBrB,oBAAoB;IAgClC,OAAO,CAAC,0BAA0B;YAKpB,kBAAkB;IA2BhC,OAAO,CAAC,yBAAyB;YAgBnB,6BAA6B;YAiB7B,2BAA2B;IAyBzC;;;OAGG;YACW,yBAAyB;IAoGvC;;OAEG;YACW,kBAAkB;YAMlB,yBAAyB;IAmCvC,OAAO,CAAC,kBAAkB;YAuCZ,qBAAqB;IAkBnC,OAAO,CAAC,0BAA0B;YAMpB,2BAA2B;IAiBzC,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,4BAA4B;IASpC,OAAO,CAAC,eAAe;IAevB,2EAA2E;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAwB;IACrE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iDAAiD,CACiB;IAE1F;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IA6C1B,OAAO,CAAC,sBAAsB;IAqB9B,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,wBAAwB;YAIlB,yBAAyB;YAoCzB,gCAAgC;YAwChC,oCAAoC;YAgCpC,0BAA0B;YAiC1B,gBAAgB;YAehB,wBAAwB;YA2BxB,kBAAkB;YAelB,uBAAuB;YAevB,sBAAsB;YActB,qBAAqB;YA2CrB,4BAA4B;YA2B5B,2BAA2B;YA0B3B,yCAAyC;IAuCvD,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAYtC,OAAO,CAAC,MAAM,CAAC,4CAA4C;YAY7C,+CAA+C;YAiB/C,kCAAkC;YAiClC,4CAA4C;YAkB5C,wCAAwC;YAqBxC,6BAA6B;YA4B7B,oCAAoC;YAoCpC,uCAAuC;mBAoBhC,4BAA4B;IAejD,OAAO,CAAC,MAAM,CAAC,oBAAoB;IASnC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IASpC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAW7C,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAIzC,OAAO,CAAC,MAAM,CAAC,4CAA4C;IAQ3D,OAAO,CAAC,MAAM,CAAC,4CAA4C;IAO3D,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAOrC,OAAO,CAAC,MAAM,CAAC,UAAU;IAMzB,OAAO,CAAC,MAAM,CAAC,6BAA6B;IAK5C,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAQpC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAKrC,OAAO,CAAC,MAAM,CAAC,qCAAqC;IAOpD,OAAO,CAAC,MAAM,CAAC,+BAA+B;IAM9C,OAAO,CAAC,MAAM,CAAC,8BAA8B;IAS7C,OAAO,CAAC,MAAM,CAAC,2BAA2B;IA8B1C,OAAO,CAAC,MAAM,CAAC,gDAAgD;IAgB/D,OAAO,CAAC,MAAM,CAAC,qCAAqC;IAYpD,OAAO,CAAC,MAAM,CAAC,yBAAyB;IAexC,OAAO,CAAC,MAAM,CAAC,8BAA8B;IA0B7C,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAYtC,OAAO,CAAC,MAAM,CAAC,wCAAwC;IAqBvD,OAAO,CAAC,MAAM,CAAC,4BAA4B;IAW3C,OAAO,CAAC,MAAM,CAAC,yBAAyB;IASxC,OAAO,CAAC,MAAM,CAAC,uBAAuB;YAUxB,oBAAoB;YAgBpB,4BAA4B;IAkB1C,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAalC,OAAO,CAAC,MAAM,CAAC,aAAa;YAId,uCAAuC;IAqBrD,kDAAkD;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyD;IAE1F,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAE5E;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAqBzB;;;OAGG;YACW,aAAa;IAW3B;;;OAGG;YACW,eAAe;IA2D7B,OAAO,CAAC,sBAAsB;IAwB9B;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;IAQpB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAgCzB;;;OAGG;YACW,iBAAiB;IAa/B;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;IAQ7B;;;;;;;;;OASG;IACH,OAAO,KAAK,UAAU,GAKrB;IAED;;;;;;;OAOG;YACW,YAAY;IA8B1B;;;OAGG;YACW,aAAa;YA6Bb,qBAAqB;YAgCrB,sBAAsB;IAmCpC;;;;;;;;;;;;OAYG;YACW,cAAc;YA6Bd,uBAAuB;YAgCvB,kBAAkB;IAsChC;;;;;;;OAOG;YACW,yBAAyB;YA8CzB,kCAAkC;IA8ChD;;;;;OAKG;YACW,mBAAmB;YA6BnB,4BAA4B;IAwB1C;;;;;OAKG;YACW,cAAc;YA4Bd,uBAAuB;IAqCrC;;;;;;;OAOG;YACW,YAAY;YA8DZ,qBAAqB;YA2BrB,+BAA+B;IAwC7C,OAAO,CAAC,MAAM,CAAC,0BAA0B;YAO3B,2BAA2B;IAuBzC;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAsB/B;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;OAGG;YACW,YAAY;IAiB1B;;;OAGG;WACW,eAAe,CAAC,CAAC,SAAS;QAAE,OAAO,EAAE,cAAc,CAAA;KAAE,EACjE,QAAQ,EAAE,CAAC,EAAE,GACZ,CAAC,EAAE;IAQN;;;;;;OAMG;YACW,uBAAuB;YA0BvB,+BAA+B;IAc7C;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,aAAa;IAIf,gBAAgB,CAAC,MAAM,EAAE;QACpC,UAAU,EAAG,MAAM,CAAC;QACpB,SAAS,EAAG,MAAM,CAAC;QACnB,cAAc,CAAC,EAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAG,MAAM,CAAC;QACnB,QAAQ,EAAG,kBAAkB,CAAC;QAC9B,SAAS,CAAC,EAAG,MAAM,CAAC;QACpB,WAAW,EAAG,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBJ,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAajE,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA+BjF,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBzD,aAAa,IAAI,OAAO,CAAC,iBAAiB,CAAC;YAiC1C,iCAAiC;IA0B/C,OAAO,CAAC,yBAAyB;IAIjC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAIrC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAQpC;;;;;;OAMG;YACW,cAAc;CAmD7B"}

package/dist/types/sync-link-id.d.ts

@@ -1,17 +1,11 @@
-/** Separator used in compound runtime/legacy cursor keys. */
+/** Separator used in compound replication link identifiers. */
 export declare const LINK_ID_SEPARATOR = "^";
 /** Opaque runtime identifier for a replication link. */
 export type LinkId = string;
 /**
  * Build the runtime identifier for a replication link.
  *
- * Runtime identity is `(tenantDid, remoteEndpoint, scopeId)`.
+ * Runtime identity is `(tenantDid, remoteEndpoint, projectionId, authorizationEpoch)`.
  */
-export declare function buildLinkId(tenantDid: string, remoteEndpoint: string, scopeId: string): LinkId;
-/**
- * Build the legacy cursor key used by the deprecated `syncCursors` sublevel.
- *
- * This remains only for one-time migration of pre-Phase-1f data.
- */
-export declare function buildLegacyCursorKey(tenantDid: string, remoteEndpoint: string, protocol?: string): string;
+export declare function buildLinkId(tenantDid: string, remoteEndpoint: string, projectionId: string, authorizationEpoch: string): LinkId;
 //# sourceMappingURL=sync-link-id.d.ts.map

package/dist/types/sync-link-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-link-id.d.ts","sourceRoot":"","sources":["../../src/sync-link-id.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAGzG"}
+{"version":3,"file":"sync-link-id.d.ts","sourceRoot":"","sources":["../../src/sync-link-id.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAErC,wDAAwD;AACxD,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,GACzB,MAAM,CAER"}

package/dist/types/sync-link-reconciler.d.ts

@@ -6,6 +6,7 @@ export type ReconcileTarget = {
     dwnUrl: string;
     delegateDid?: string;
     protocol?: string;
+    permissionGrantIds?: string[];
 };
 export type ReconcileOutcome = {
     aborted?: boolean;
@@ -20,8 +21,8 @@ export type ReconcileOutcome = {
     pushResult?: PushResult;
 };
 type ReconcileDeps = {
-    getLocalRoot: (did: string, delegateDid?: string, protocol?: string) => Promise<string>;
-    getRemoteRoot: (did: string, dwnUrl: string, delegateDid?: string, protocol?: string) => Promise<string>;
+    getLocalRoot: (did: string, delegateDid?: string, protocol?: string, permissionGrantIds?: string[]) => Promise<string>;
+    getRemoteRoot: (did: string, dwnUrl: string, delegateDid?: string, protocol?: string, permissionGrantIds?: string[]) => Promise<string>;
     diffWithRemote: (target: ReconcileTarget) => Promise<{
         onlyRemote: MessagesSyncDiffEntry[];
         onlyLocal: string[];
@@ -31,20 +32,29 @@ type ReconcileDeps = {
         dwnUrl: string;
         delegateDid?: string;
         protocol?: string;
+        permissionGrantIds?: string[];
         messageCids: string[];
         prefetched: (MessagesSyncDiffEntry & {
             message: GenericMessage;
         })[];
+        shouldContinue?: () => boolean;
     }) => Promise<void>;
     pushMessages: (params: {
         did: string;
         dwnUrl: string;
         delegateDid?: string;
         protocol?: string;
+        permissionGrantIds?: string[];
         messageCids: string[];
     }) => Promise<PushResult>;
     shouldContinue?: () => boolean;
 };
+export declare function partitionRemoteEntries(entries: MessagesSyncDiffEntry[]): {
+    prefetched: (MessagesSyncDiffEntry & {
+        message: GenericMessage;
+    })[];
+    needsFetchCids: string[];
+};
 export declare class SyncLinkReconciler {
     private readonly _deps;
     constructor(deps: ReconcileDeps);

package/dist/types/sync-link-reconciler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-link-reconciler.d.ts","sourceRoot":"","sources":["../../src/sync-link-reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEjD,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACxF,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzG,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC;QAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACnH,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,UAAU,EAAE,CAAC,qBAAqB,GAAG;YAAE,OAAO,EAAE,cAAc,CAAA;SAAE,CAAC,EAAE,CAAC;KACrE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,EAAE,CAAC;KACvB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;CAChC,CAAC;AA2BF,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;gBAE1B,IAAI,EAAE,aAAa;IAIlB,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE;QACxD,SAAS,CAAC,EAAE,kBAAkB,CAAC;QAC/B,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAuE9B"}
+{"version":3,"file":"sync-link-reconciler.d.ts","sourceRoot":"","sources":["../../src/sync-link-reconciler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEjD,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,YAAY,EAAE,CACZ,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,MAAM,EACjB,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAC1B,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,aAAa,EAAE,CACb,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,MAAM,EACjB,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAC1B,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,cAAc,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC;QAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACnH,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,UAAU,EAAE,CAAC,qBAAqB,GAAG;YAAE,OAAO,EAAE,cAAc,CAAA;SAAE,CAAC,EAAE,CAAC;QACpE,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;KAChC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,YAAY,EAAE,CAAC,MAAM,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;KACvB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;CAChC,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,qBAAqB,EAAE,GAAG;IACxE,UAAU,EAAE,CAAC,qBAAqB,GAAG;QAAE,OAAO,EAAE,cAAc,CAAA;KAAE,CAAC,EAAE,CAAC;IACpE,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAoBA;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;gBAE1B,IAAI,EAAE,aAAa;IAIlB,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE;QACxD,SAAS,CAAC,EAAE,kBAAkB,CAAC;QAC/B,iBAAiB,CAAC,EAAE,OAAO,CAAC;KAC7B,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAuF9B"}

package/dist/types/sync-messages.d.ts

@@ -1,6 +1,5 @@
 import type { GenericMessage, MessagesSyncDiffEntry, UnionMessageReply } from '@enbox/dwn-sdk-js';
 import type { EnboxPlatformAgent } from './types/agent.js';
-import type { PermissionsApi } from './types/permissions.js';
 import type { PushResult } from './types/sync.js';
 /** Entry type for fetched messages with optional data stream and retry buffer. */
 export type SyncMessageEntry = {
@@ -9,6 +8,12 @@ export type SyncMessageEntry = {
     /** Buffered data bytes for retry — avoids re-fetching from remote when stream is consumed. */
     bufferedData?: Uint8Array;
 };
+/** Optional pre-apply gate for inbound sync entries. */
+export type PullMessageAcceptance = (entry: SyncMessageEntry, entries: SyncMessageEntry[]) => Promise<boolean>;
+/** Raised when an in-flight pull is cancelled before local apply can continue. */
+export declare class SyncPullAbortedError extends Error {
+    constructor();
+}
 /**
  * 202: message was successfully written to the remote DWN
  * 204: an initial write message was written without any data
@@ -42,28 +47,28 @@ export declare function getMessageCid(message: GenericMessage): Promise<string>;
  * Large payloads are re-fetched on retry since buffering them would consume
  * too much memory.
  */
-export declare function pullMessages({ did, dwnUrl, delegateDid, protocol, messageCids, prefetched, agent, permissionsApi }: {
+export declare function pullMessages({ did, dwnUrl, delegateDid, permissionGrantIds, messageCids, prefetched, acceptEntry, shouldContinue, agent }: {
     did: string;
     dwnUrl: string;
     delegateDid?: string;
-    protocol?: string;
+    permissionGrantIds?: string[];
     messageCids: string[];
     /** Pre-fetched message entries from the batched diff response (already have message + data). */
     prefetched?: MessagesSyncDiffEntry[];
+    acceptEntry?: PullMessageAcceptance;
+    shouldContinue?: () => boolean;
     agent: EnboxPlatformAgent;
-    permissionsApi: PermissionsApi;
 }): Promise<string[]>;
 /**
  * Fetches messages from a remote DWN by their CIDs using MessagesRead.
  */
-export declare function fetchRemoteMessages({ did, dwnUrl, delegateDid, protocol, messageCids, agent, permissionsApi }: {
+export declare function fetchRemoteMessages({ did, dwnUrl, delegateDid, permissionGrantIds, messageCids, agent }: {
     did: string;
     dwnUrl: string;
     delegateDid?: string;
-    protocol?: string;
+    permissionGrantIds?: string[];
     messageCids: string[];
     agent: EnboxPlatformAgent;
-    permissionsApi: PermissionsApi;
 }): Promise<SyncMessageEntry[]>;
 /**
  * Reads missing messages from the local DWN and pushes them to the remote DWN.
@@ -75,24 +80,22 @@ export declare function fetchRemoteMessages({ did, dwnUrl, delegateDid, protocol
  * on the first failure. Callers use this to advance the push checkpoint
  * incrementally — only up to the highest contiguous success.
  */
-export declare function pushMessages({ did, dwnUrl, delegateDid, protocol, messageCids, agent, permissionsApi }: {
+export declare function pushMessages({ did, dwnUrl, delegateDid, permissionGrantIds, messageCids, agent }: {
     did: string;
     dwnUrl: string;
     delegateDid?: string;
-    protocol?: string;
+    permissionGrantIds?: string[];
     messageCids: string[];
     agent: EnboxPlatformAgent;
-    permissionsApi: PermissionsApi;
 }): Promise<PushResult>;
 /**
  * Reads a message from the local DWN by its CID using MessagesRead.
  */
-export declare function getLocalMessage({ author, delegateDid, protocol, messageCid, agent, permissionsApi }: {
+export declare function getLocalMessage({ author, delegateDid, permissionGrantIds, messageCid, agent }: {
     author: string;
     delegateDid?: string;
-    protocol?: string;
+    permissionGrantIds?: string[];
     messageCid: string;
     agent: EnboxPlatformAgent;
-    permissionsApi: PermissionsApi;
 }): Promise<SyncMessageEntry | undefined>;
 //# sourceMappingURL=sync-messages.d.ts.map

package/dist/types/sync-messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-messages.d.ts","sourceRoot":"","sources":["../../src/sync-messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAqB,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAErH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAwB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAWxE,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACxC,8FAA8F;IAC9F,YAAY,CAAC,EAAE,UAAU,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,EAAE,cAAc,GAAG,OAAO,CAoB9G;AAYD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAUxE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM5E;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACzH,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gGAAgG;IAChG,UAAU,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACrC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA4FpB;AA4DD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACpH,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAoE9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC7G,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,OAAO,CAAC,UAAU,CAAC,CAuEtB;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC1G,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAmCxC"}
+{"version":3,"file":"sync-messages.d.ts","sourceRoot":"","sources":["../../src/sync-messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAqB,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAErH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAwB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAYxE,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACxC,8FAA8F;IAC9F,YAAY,CAAC,EAAE,UAAU,CAAC;CAC3B,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,qBAAqB,GAAG,CAClC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,gBAAgB,EAAE,KACxB,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,kFAAkF;AAClF,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAQD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,CAAC,EAAE,cAAc,GAAG,OAAO,CAoB9G;AAYD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAUxE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAM5E;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;IAChJ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,gGAAgG;IAChG,UAAU,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACrC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IAC/B,KAAK,EAAE,kBAAkB,CAAC;CAC3B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAqCpB;AAoLD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;IAC9G,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,kBAAkB,CAAC;CAC3B,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAwD9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;IACvG,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,kBAAkB,CAAC;CAC3B,GAAG,OAAO,CAAC,UAAU,CAAC,CAgCtB;AAsFD;;GAEG;AACH,wBAAsB,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;IACpG,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,kBAAkB,CAAC;CAC3B,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAuBxC"}

package/dist/types/sync-permission-grants.d.ts

@@ -0,0 +1,52 @@
+import type { DwnInterface } from './types/dwn.js';
+import type { GenericMessage } from '@enbox/dwn-sdk-js';
+import type { NonEmptyStringArray, SyncAuthorizationGrant, SyncScope } from './types/sync.js';
+import type { PermissionGrantEntry, PermissionsApi } from './types/permissions.js';
+export type MessagesSyncScopeResolution = {
+    scope: SyncScope;
+    permissionGrants: PermissionGrantEntry[];
+};
+/** Returns a sorted, duplicate-free grant ID set, or `undefined` for owner requests. */
+export declare function toMessagesPermissionGrantIds(permissionGrantIds: string[] | undefined): NonEmptyStringArray | undefined;
+/**
+ * Gets the active permission grant IDs that authorize a Messages operation.
+ *
+ * Owner-authored sync does not invoke grants. Delegate full sync requires at
+ * least one active unscoped Messages.Read grant. Delegate protocol-set sync
+ * requires each requested protocol to be covered by an active Messages.Read
+ * grant, then invokes every active grant that participates in the projection.
+ * This keeps the authorization epoch tied to grant churn without widening the
+ * CID projection being compared.
+ */
+export declare function getMessagesPermissionGrantsForScope({ did, delegateDid, protocols, messageType, permissionsApi, }: {
+    did: string;
+    delegateDid?: string;
+    protocols?: NonEmptyStringArray;
+    messageType: DwnInterface;
+    permissionsApi: PermissionsApi;
+}): Promise<PermissionGrantEntry[]>;
+/**
+ * Resolves active Messages.Read grants into one or more sync targets.
+ *
+ * Broad protocol coverage remains on StateIndex full/protocol roots. Exact
+ * protocolPath and contextId grants are grouped into a Records-primary
+ * projection target so a narrow grant never authorizes a broad protocol root.
+ */
+export declare function resolveMessagesSyncScopes({ did, delegateDid, requestedScope, messageType, permissionsApi, }: {
+    did: string;
+    delegateDid?: string;
+    requestedScope: SyncScope;
+    messageType: DwnInterface;
+    permissionsApi: PermissionsApi;
+}): Promise<MessagesSyncScopeResolution[]>;
+/** Converts permission grant entries into authorization epoch inputs. */
+export declare function toSyncAuthorizationGrants(permissionGrants: PermissionGrantEntry[]): [SyncAuthorizationGrant, ...SyncAuthorizationGrant[]];
+/** Returns sorted grant IDs from permission grant entries. */
+export declare function permissionGrantIdsFromEntries(permissionGrants: PermissionGrantEntry[]): NonEmptyStringArray | undefined;
+/**
+ * Returns the permission grant IDs invoked by a message.
+ *
+ * Real DWN messages use the author signature payload as the source of truth.
+ */
+export declare function getInvokedPermissionGrantIds(message: GenericMessage): string[];
+//# sourceMappingURL=sync-permission-grants.d.ts.map

package/dist/types/sync-permission-grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-permission-grants.d.ts","sourceRoot":"","sources":["../../src/sync-permission-grants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAA4E,MAAM,mBAAmB,CAAC;AAClI,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMnF,MAAM,MAAM,2BAA2B,GAAG;IACxC,KAAK,EAAE,SAAS,CAAC;IACjB,gBAAgB,EAAE,oBAAoB,EAAE,CAAC;CAC1C,CAAC;AAEF,wFAAwF;AACxF,wBAAgB,4BAA4B,CAAC,kBAAkB,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAKtH;AAED;;;;;;;;;GASG;AACH,wBAAsB,mCAAmC,CAAC,EACxD,GAAG,EACH,WAAW,EACX,SAAS,EACT,WAAW,EACX,cAAc,GACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,WAAW,EAAE,YAAY,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAclC;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,GAAG,EACH,WAAW,EACX,cAAc,EACd,WAAW,EACX,cAAc,GACf,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,SAAS,CAAC;IAC1B,WAAW,EAAE,YAAY,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAsBzC;AAqID,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,GAAG,CAAC,sBAAsB,EAAE,GAAG,sBAAsB,EAAE,CAAC,CAWzI;AA6BD,8DAA8D;AAC9D,wBAAgB,6BAA6B,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,GAAG,mBAAmB,GAAG,SAAS,CAEvH;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,EAAE,CAW9E"}

package/dist/types/sync-replication-ledger.d.ts

@@ -1,12 +1,12 @@
 import type { AbstractLevel } from 'abstract-level';
 import type { ProgressToken } from '@enbox/dwn-sdk-js';
-import type { DirectionCheckpoint, LinkStatus, ReplicationLinkState, SyncScope } from './types/sync.js';
+import type { DirectionCheckpoint, LinkStatus, ReplicationLinkState, SyncAuthorization, SyncScope } from './types/sync.js';
 /**
  * Durable replication ledger — persists {@link ReplicationLinkState} for each
  * sync link in a LevelDB sublevel. Provides CRUD operations and replication
  * checkpoint helpers.
  *
- * Key format: `{tenantDid}^{remoteEndpoint}^{scopeId}`
+ * Key format: `{tenantDid}^{remoteEndpoint}^{projectionId}^{authorizationEpoch}`
  *
  * Each link tracks independent pull and push {@link DirectionCheckpoint}s.
  * The ledger does not own subscriptions or timers — it is a passive state
@@ -26,26 +26,18 @@ export declare class ReplicationLedger {
         tenantDid: string;
         remoteEndpoint: string;
         scope: SyncScope;
+        authorizationEpoch: string;
+        authorization: SyncAuthorization;
         delegateDid?: string;
-        protocol?: string;
     }): Promise<ReplicationLinkState>;
     /** Persist the current state of a link. */
     saveLink(link: ReplicationLinkState): Promise<void>;
     /** Delete a link. */
-    deleteLink(tenantDid: string, remoteEndpoint: string, scopeId: string): Promise<void>;
+    deleteLink(tenantDid: string, remoteEndpoint: string, projectionId: string, authorizationEpoch: string): Promise<void>;
     /** List all links for a tenant. */
     getLinksForTenant(tenantDid: string): Promise<ReplicationLinkState[]>;
     /** List all links. */
     getAllLinks(): Promise<ReplicationLinkState[]>;
-    /**
-     * Update the `delegateDid` on all persisted links for a tenant and persist.
-     * This ensures that repair and reconcile paths — which read `delegateDid`
-     * from the durable {@link ReplicationLinkState} — use the current delegate
-     * after a hot-swap via `updateIdentityOptions()`.
-     *
-     * @returns the links that were updated.
-     */
-    updateDelegateDid(tenantDid: string, delegateDid: string | undefined): Promise<ReplicationLinkState[]>;
     /** Transition a link to a new status and persist. */
     setStatus(link: ReplicationLinkState, status: LinkStatus): Promise<void>;
     /**

package/dist/types/sync-replication-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-replication-ledger.d.ts","sourceRoot":"","sources":["../../src/sync-replication-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAOxG;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA8C;IACjE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAEd,EAAE,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAS3D,yCAAyC;IACzC,OAAO,CAAC,MAAM,CAAC,QAAQ;IAYvB;;;OAGG;IACU,eAAe,CAAC,MAAM,EAAE;QACnC,SAAS,EAAG,MAAM,CAAC;QACnB,cAAc,EAAG,MAAM,CAAC;QACxB,KAAK,EAAG,SAAS,CAAC;QAClB,WAAW,CAAC,EAAG,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAG,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqCjC,2CAA2C;IAC9B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMhE,qBAAqB;IACR,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlG,mCAAmC;IACtB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAWlF,sBAAsB;IACT,WAAW,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAY3D;;;;;;;OAOG;IACU,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAiBnH,qDAAqD;IACxC,SAAS,CAAC,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASrF;;;;OAIG;WACW,eAAe,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,GAAG,MAAM;IAOzE;;;;OAIG;WACW,mBAAmB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO;IAMjG;;;;OAIG;WACW,gBAAgB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAS3F;;;;OAIG;WACW,qBAAqB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAIhG;;;OAGG;WACW,eAAe,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAS3F;;;OAGG;IACU,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5F;;OAEG;IACU,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAM5E"}
+{"version":3,"file":"sync-replication-ledger.d.ts","sourceRoot":"","sources":["../../src/sync-replication-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAO3H;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA8C;IACjE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAEd,EAAE,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAS3D,yCAAyC;IACzC,OAAO,CAAC,MAAM,CAAC,QAAQ;IAkBvB;;;OAGG;IACU,eAAe,CAAC,MAAM,EAAE;QACnC,SAAS,EAAG,MAAM,CAAC;QACnB,cAAc,EAAG,MAAM,CAAC;QACxB,KAAK,EAAG,SAAS,CAAC;QAClB,kBAAkB,EAAG,MAAM,CAAC;QAC5B,aAAa,EAAG,iBAAiB,CAAC;QAClC,WAAW,CAAC,EAAG,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2CjC,2CAA2C;IAC9B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWhE,qBAAqB;IACR,UAAU,CACrB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;IAKhB,mCAAmC;IACtB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAWlF,sBAAsB;IACT,WAAW,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAY3D,qDAAqD;IACxC,SAAS,CAAC,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASrF;;;;OAIG;WACW,eAAe,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,GAAG,MAAM;IAOzE;;;;OAIG;WACW,mBAAmB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO;IAMjG;;;;OAIG;WACW,gBAAgB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAS3F;;;;OAIG;WACW,qBAAqB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAYhG;;;OAGG;WACW,eAAe,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAS3F;;;OAGG;IACU,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5F;;OAEG;IACU,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAM5E"}