@enbox/agent 0.7.7 → 0.7.9

package/dist/types/sync-replication-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-replication-ledger.d.ts","sourceRoot":"","sources":["../../src/sync-replication-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAOxG;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA8C;IACjE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAEd,EAAE,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAS3D,yCAAyC;IACzC,OAAO,CAAC,MAAM,CAAC,QAAQ;IAYvB;;;OAGG;IACU,eAAe,CAAC,MAAM,EAAE;QACnC,SAAS,EAAG,MAAM,CAAC;QACnB,cAAc,EAAG,MAAM,CAAC;QACxB,KAAK,EAAG,SAAS,CAAC;QAClB,WAAW,CAAC,EAAG,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAG,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqCjC,2CAA2C;IAC9B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMhE,qBAAqB;IACR,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlG,mCAAmC;IACtB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAWlF,sBAAsB;IACT,WAAW,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAY3D;;;;;;;OAOG;IACU,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAiBnH,qDAAqD;IACxC,SAAS,CAAC,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASrF;;;;OAIG;WACW,eAAe,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,GAAG,MAAM;IAOzE;;;;OAIG;WACW,mBAAmB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO;IAMjG;;;;OAIG;WACW,gBAAgB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAS3F;;;;OAIG;WACW,qBAAqB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAIhG;;;OAGG;WACW,eAAe,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAS3F;;;OAGG;IACU,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5F;;OAEG;IACU,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAM5E"}
+{"version":3,"file":"sync-replication-ledger.d.ts","sourceRoot":"","sources":["../../src/sync-replication-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAO3H;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA8C;IACjE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAEd,EAAE,EAAE,aAAa,CAAC,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAS3D,yCAAyC;IACzC,OAAO,CAAC,MAAM,CAAC,QAAQ;IAkBvB;;;OAGG;IACU,eAAe,CAAC,MAAM,EAAE;QACnC,SAAS,EAAG,MAAM,CAAC;QACnB,cAAc,EAAG,MAAM,CAAC;QACxB,KAAK,EAAG,SAAS,CAAC;QAClB,kBAAkB,EAAG,MAAM,CAAC;QAC5B,aAAa,EAAG,iBAAiB,CAAC;QAClC,WAAW,CAAC,EAAG,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2CjC,2CAA2C;IAC9B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWhE,qBAAqB;IACR,UAAU,CACrB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;IAKhB,mCAAmC;IACtB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAWlF,sBAAsB;IACT,WAAW,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAY3D,qDAAqD;IACxC,SAAS,CAAC,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASrF;;;;OAIG;WACW,eAAe,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,GAAG,MAAM;IAOzE;;;;OAIG;WACW,mBAAmB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO;IAMjG;;;;OAIG;WACW,gBAAgB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAS3F;;;;OAIG;WACW,qBAAqB,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAYhG;;;OAGG;WACW,eAAe,CAAC,UAAU,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI;IAS3F;;;OAGG;IACU,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5F;;OAEG;IACU,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAM5E"}

package/dist/types/sync-scope-acceptance.d.ts

@@ -0,0 +1,28 @@
+import type { GenericMessage, MessageEvent, RecordsWriteMessage } from '@enbox/dwn-sdk-js';
+import type { SyncScope } from './types/sync.js';
+/** Result of testing whether an inbound sync message belongs to a link scope. */
+export type SyncScopeClassification = 'in-scope' | 'out-of-scope' | 'unknown';
+type SyncMessageScopeClassificationParams = {
+    message: GenericMessage;
+    initialWrite?: RecordsWriteMessage;
+    scope: SyncScope;
+};
+/**
+ * Classifies whether a live event belongs to the link's current sync scope.
+ *
+ * Full links accept every message. Protocol-set links accept records for a
+ * covered protocol, ProtocolsConfigure messages that install a covered
+ * protocol, and permission records tagged for a covered protocol. RecordsDelete
+ * messages carry no protocol in their descriptor, so they must be classified
+ * from the event's initial write metadata.
+ */
+export declare function classifySyncEventScope(event: MessageEvent, scope: SyncScope): SyncScopeClassification;
+/**
+ * Classifies whether a DWN message belongs to a sync scope before local apply.
+ *
+ * If a RecordsDelete cannot be tied to its initial write, the result is
+ * `unknown` so callers fail closed instead of applying an unclassified delete.
+ */
+export declare function classifySyncMessageScope({ message, initialWrite, scope, }: SyncMessageScopeClassificationParams): SyncScopeClassification;
+export {};
+//# sourceMappingURL=sync-scope-acceptance.d.ts.map

package/dist/types/sync-scope-acceptance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-scope-acceptance.d.ts","sourceRoot":"","sources":["../../src/sync-scope-acceptance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAiB,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAI1G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,iFAAiF;AACjF,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;AAE9E,KAAK,oCAAoC,GAAG;IAC1C,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,KAAK,EAAE,SAAS,CAAC;CAClB,CAAC;AAKF;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,GAAG,uBAAuB,CAMrG;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,YAAY,EACZ,KAAK,GACN,EAAE,oCAAoC,GAAG,uBAAuB,CAOhE"}

package/dist/types/sync-topological-sort.d.ts

@@ -5,9 +5,10 @@ import type { GenericMessage } from '@enbox/dwn-sdk-js';
  *
  * Dependencies:
  * - ProtocolsConfigure must come before any RecordsWrite using that protocol
+ * - Composed ProtocolsConfigure must come after ProtocolsConfigure messages for protocols in `uses`
  * - Parent record must come before child record (via parentId)
  * - Initial write must come before update writes (same recordId, not initial)
- * - Permission grant must come before records using that permissionGrantId
+ * - Permission grants must come before messages that invoke them
  */
 export declare function topologicalSort<T extends {
     message: GenericMessage;

package/dist/types/sync-topological-sort.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-topological-sort.d.ts","sourceRoot":"","sources":["../../src/sync-topological-sort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAiBxD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS;IAAE,OAAO,EAAE,cAAc,CAAA;CAAE,EACnE,QAAQ,EAAE,CAAC,EAAE,GACZ,CAAC,EAAE,CAyIL"}
+{"version":3,"file":"sync-topological-sort.d.ts","sourceRoot":"","sources":["../../src/sync-topological-sort.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AA0E5E;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS;IAAE,OAAO,EAAE,cAAc,CAAA;CAAE,EACnE,QAAQ,EAAE,CAAC,EAAE,GACZ,CAAC,EAAE,CAmJL"}

package/dist/types/types/permissions.d.ts

@@ -69,6 +69,8 @@ export type GetPermissionParams = {
     delegateDid: string;
     messageType: DwnInterface;
     protocol?: string;
+    protocolPath?: string;
+    contextId?: string;
     cached?: boolean;
     delegate?: boolean;
 };

package/dist/types/types/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/types/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9I,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gEAAgE;IAChE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACnC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,kBAAkB,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,uBAAuB,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAExF;;OAEG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAEjF;;OAEG;IACH,aAAa,EAAE,CAAC,MAAM,EAAE,4BAA4B,KAAK,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAE3F;;MAEE;IACF,cAAc,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpE;;OAEG;IACH,WAAW,EAAC,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEzE;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE5E;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAErF;;OAEG;IACH,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/types/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9I,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gEAAgE;IAChE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,OAAO,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,OAAO,EAAE,iCAAiC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACnC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,kBAAkB,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,uBAAuB,EAAE,CAAC,MAAM,EAAE,mBAAmB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAExF;;OAEG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAEjF;;OAEG;IACH,aAAa,EAAE,CAAC,MAAM,EAAE,4BAA4B,KAAK,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAE3F;;MAEE;IACF,cAAc,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpE;;OAEG;IACH,WAAW,EAAC,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEzE;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE5E;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAErF;;OAEG;IACH,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B"}

package/dist/types/types/sync.d.ts

@@ -1,5 +1,7 @@
-import type { ProgressToken } from '@enbox/dwn-sdk-js';
+import type { NormalizedRecordsProjectionScope, ProgressToken, RecordsProjectionScope } from '@enbox/dwn-sdk-js';
 import type { EnboxPlatformAgent } from './agent.js';
+/** Deterministic bytewise string comparator for hash inputs and canonical IDs. */
+export declare function lexicographicalCompare(a: string, b: string): number;
 /**
  * The SyncEngine is responsible for syncing messages between the agent and the platform.
  */
@@ -12,6 +14,10 @@ export type SyncIdentityOptions = {
      * The protocols that should be synced for this identity.
      * - `'all'` — sync all protocols (full replica).
      * - `string[]` — sync only the listed protocol URIs.
+     *
+     * Composed protocols are not expanded automatically. If a protocol definition
+     * declares `uses`, include every referenced protocol that the local DWN must
+     * install or use while applying that projection.
      */
     protocols: 'all' | [string, ...string[]];
 };
@@ -25,34 +31,102 @@ export type SyncConnectivityState = 'online' | 'offline' | 'unknown';
  */
 export type SyncMode = 'poll' | 'live';
 /**
- * Describes what a replication link syncs. Currently whole-tenant only
- * (`kind: 'full'`). Scoped subset sync (`kind: 'protocol'` with
- * `protocolPathPrefixes` / `contextIdPrefixes`) is deferred to Phase 3.
+ * Projection-root algorithm used by StateIndex full/protocol sync scopes.
+ *
+ * Sync compares either the existing full-tenant StateIndex root or existing
+ * per-protocol StateIndex roots. Records-primary projection scopes use the
+ * DWN SDK's `RECORDS_PROJECTION_ROOT_VERSION` instead.
+ */
+export declare const SYNC_PROJECTION_ROOT_VERSION = "state-index-full-protocol-root-v1";
+/**
+ * Authorization-epoch algorithm used by delegated Messages.Read sync links.
+ *
+ * The authorization epoch is separate from the projection ID: re-granting the
+ * same scope or changing delegate grants must invalidate in-flight work without
+ * changing the primary CID set being compared.
+ */
+export declare const SYNC_AUTHORIZATION_EPOCH_VERSION = "messages-read-grants-v1";
+/** A non-empty, sorted, duplicate-free string list. */
+export type NonEmptyStringArray = [string, ...string[]];
+/** A non-empty, sorted, duplicate-free, subsumption-reduced Records projection scope union. */
+export type NonEmptyRecordsProjectionScopes = [NormalizedRecordsProjectionScope, ...NormalizedRecordsProjectionScope[]];
+/**
+ * Describes the primary CID set a replication link syncs.
+ *
+ * Full and protocol-set sync use the existing StateIndex roots. Records
+ * projections use the `records-primary-scope-root-v1` root over latest Records
+ * primary messages selected by protocol, exact protocolPath, or context
+ * subtree. For composed protocols, the scope must include the composed protocol
+ * and any `uses` targets required for local protocol installation and closure
+ * evaluation.
  */
 export type SyncScope = {
-    /** Scope kind. Only `'full'` is implemented in Phase 1. */
+    /** Full-tenant projection. Valid only for owner sync or unscoped delegated grants. */
     kind: 'full';
 } | {
-    /**
-     * Protocol-scoped sync. Deferred to Phase 3 — included here for type
-     * forward-compatibility only.
-     */
-    kind: 'protocol';
-    protocol: string;
-    protocolPathPrefixes?: string[];
-    contextIdPrefixes?: string[];
+    /** Protocol-set projection over one or more protocol roots. */
+    kind: 'protocolSet';
+    protocols: NonEmptyStringArray;
+} | {
+    /** Records-primary projected root over protocol/path/context scope entries. */
+    kind: 'recordsProjection';
+    scopes: NonEmptyRecordsProjectionScopes;
 };
 /**
- * Computes a deterministic, collision-resistant identifier for a {@link SyncScope}.
+ * Authorization context for a link. Owner links do not invoke grants. Delegate
+ * links carry the active Messages.Read grants that authorize the scope union.
+ */
+export type SyncAuthorization = {
+    kind: 'owner';
+} | {
+    kind: 'delegate';
+    delegateDid: string;
+    permissionGrantIds: NonEmptyStringArray;
+};
+/** Grant metadata that participates in delegated authorization-epoch hashing. */
+export type SyncAuthorizationGrant = {
+    id: string;
+    dateExpires: string;
+    dateGranted?: string;
+};
+/**
+ * Normalizes a protocol list into canonical scope-union order.
+ */
+export declare function normalizeSyncProtocols(protocols: [string, ...string[]] | string[]): NonEmptyStringArray;
+/** Converts persisted identity options into the canonical sync scope. */
+export declare function syncScopeFromProtocols(protocols: SyncIdentityOptions['protocols']): SyncScope;
+/** Converts Records projection scopes into the canonical sync scope shape. */
+export declare function syncScopeFromRecordsProjectionScopes(scopes: readonly [RecordsProjectionScope, ...RecordsProjectionScope[]]): Extract<SyncScope, {
+    kind: 'recordsProjection';
+}>;
+/** Returns the protocol list covered by a scope, or `undefined` for full scope. */
+export declare function protocolsForSyncScope(scope: SyncScope): NonEmptyStringArray | undefined;
+/** Returns the single protocol root covered by a protocol-set scope, if any. */
+export declare function singleProtocolForSyncScope(scope: SyncScope): string | undefined;
+/** Returns a canonical JSON-ready representation of a sync scope. */
+export declare function canonicalizeSyncScope(scope: SyncScope): SyncScope;
+/**
+ * Computes a deterministic, collision-resistant projection ID.
  *
- * The ID is `base64url(SHA-256(canonicalJSON))` where `canonicalJSON` is the
- * scope object with keys sorted alphabetically and array values sorted
- * lexicographically.
+ * The projection ID is derived from tenant DID, normalized scope, and the
+ * projection-root algorithm version. It intentionally excludes endpoint,
+ * grant IDs, authorization epoch, and remote diff contents.
+ */
+export declare function computeProjectionId(tenantDid: string, scope: SyncScope): Promise<string>;
+/**
+ * Computes the authorization epoch for a link.
  *
- * Used as part of the LevelDB key for the replication ledger:
- * `{tenantDid}^{remoteEndpoint}^{scopeId}`.
+ * Owner epochs are stable for the owner projection. Delegate epochs are derived
+ * from the delegate DID plus the active grant IDs and expiry metadata. A changed
+ * grant set creates a new link key even when the projection ID is unchanged.
  */
-export declare function computeScopeId(scope: SyncScope): Promise<string>;
+export declare function computeAuthorizationEpoch(input: {
+    kind: 'owner';
+} | {
+    kind: 'delegate';
+    delegateDid: string;
+    grants: [SyncAuthorizationGrant, ...SyncAuthorizationGrant[]];
+}): Promise<string>;
 /**
  * Maximum number of in-flight deliveries (runtime ordinals) a link may
  * accumulate before transitioning to `repairing`. This is the overflow
@@ -91,25 +165,31 @@ export type DirectionCheckpoint = {
  *
  * - `initializing` — link created, no subscriptions open yet.
  * - `live` — actively receiving events via subscription.
+ * - `polling` — current link is reconciled by periodic SMT sync; live subscription is not supported for its scope.
  * - `repairing` — gap detected or pending overflow; running SMT reconciliation.
  * - `degraded_poll` — subscription failed; polling at reduced frequency.
+ * - `terminal_incomplete` — closure failed with a terminal dependency error; requires a new scope/authorization epoch.
  * - `paused` — explicitly paused by the application.
  */
-export type LinkStatus = 'initializing' | 'live' | 'repairing' | 'degraded_poll' | 'paused';
+export type LinkStatus = 'initializing' | 'live' | 'polling' | 'repairing' | 'degraded_poll' | 'terminal_incomplete' | 'paused';
 /**
  * Durable state of a single replication link. Persisted to LevelDB and
  * loaded on startup. Each link is identified by the tuple
- * `(tenantDid, remoteEndpoint, scopeId)`.
+ * `(tenantDid, remoteEndpoint, projectionId, authorizationEpoch)`.
  */
 export type ReplicationLinkState = {
     /** The tenant DID this link syncs for. */
     tenantDid: string;
     /** The remote DWN endpoint URL. */
     remoteEndpoint: string;
-    /** Deterministic hash of the {@link SyncScope}. See {@link computeScopeId}. */
-    scopeId: string;
+    /** Deterministic hash of tenant DID, normalized scope, and root algorithm version. */
+    projectionId: string;
+    /** Deterministic hash of owner/delegate grant context for this link. */
+    authorizationEpoch: string;
     /** The scope definition this link covers. */
     scope: SyncScope;
+    /** Owner/delegate authorization context used to sign sync messages. */
+    authorization: SyncAuthorization;
     /** Current link status. */
     status: LinkStatus;
     /** Pull-direction replication checkpoint (remote → local). */
@@ -125,14 +205,6 @@ export type ReplicationLinkState = {
     connectivity: SyncConnectivityState;
     /** Delegate DID used to sign sync messages, if any. */
     delegateDid?: string;
-    /**
-     * Protocol filter for this link, if any. Duplicates the protocol in `scope`
-     * for operational convenience — used by permission lookups and cursor key
-     * building. The scope is the source of truth for what to sync; this field
-     * is the source of truth for how to authenticate. To be consolidated in
-     * Phase 3 when scope resolution is more complex.
-     */
-    protocol?: string;
     /** ISO-8601 timestamp of last successful sync activity. */
     lastActivityAt?: string;
 };
@@ -166,7 +238,7 @@ export type StartSyncParams = {
      *   push. Falls back to SMT reconciliation on cold start or long disconnect.
      *   An infrequent SMT integrity check still runs at `interval`.
      *
-     * - `'poll'`: Legacy mode. Performs a full SMT set-reconciliation sync on a
+     * - `'poll'`: Performs a full SMT set-reconciliation sync on a
      *   fixed interval. No WebSocket subscriptions are used.
      */
     mode?: SyncMode;
@@ -181,76 +253,57 @@ export type StartSyncParams = {
      */
     interval?: string;
 };
+/** Sync scope metadata attached to observability events. */
+export type SyncEventScope = {
+    /** Present only when the event belongs to a single-protocol link. */
+    protocol?: string;
+    /** Present when the event belongs to a protocol-set link. */
+    protocols?: NonEmptyStringArray;
+};
+type SyncEventBase = {
+    tenantDid: string;
+    remoteEndpoint: string;
+} & SyncEventScope;
 /**
  * Events emitted by the sync engine at key state transitions.
  * Consumers subscribe via `SyncEngine.on('event', handler)` and can
  * hook these into metrics, logging, or UI state.
  */
-export type SyncEvent = {
+export type SyncEvent = SyncEventBase & {
     type: 'link:status-change';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
     from: LinkStatus;
     to: LinkStatus;
-} | {
+} | SyncEventBase & {
     type: 'link:connectivity-change';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
     from: SyncConnectivityState;
     to: SyncConnectivityState;
-} | {
+} | SyncEventBase & {
     type: 'checkpoint:pull-advance';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
     position: string;
     messageCid: string;
-} | {
+} | SyncEventBase & {
     type: 'reconcile:needed';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
     reason: string;
-} | {
+} | SyncEventBase & {
     type: 'reconcile:completed';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
-} | {
+} | SyncEventBase & {
     type: 'repair:started';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
     attempt: number;
-} | {
+} | SyncEventBase & {
     type: 'repair:completed';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
-} | {
+} | SyncEventBase & {
     type: 'repair:failed';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
     attempt: number;
     error: string;
-} | {
+} | SyncEventBase & {
     type: 'degraded-poll:entered';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
-} | {
+} | SyncEventBase & {
     type: 'gap:detected';
-    tenantDid: string;
-    remoteEndpoint: string;
-    protocol?: string;
     reason: string;
 };
 export type SyncEventListener = (event: SyncEvent) => void;
 /** Category of sync failure for dead letter entries. */
-export type DeadLetterCategory = 'push-permanent' | 'push-exhausted' | 'pull-processing' | 'closure';
+export type DeadLetterCategory = 'push-permanent' | 'push-exhausted' | 'pull-processing' | 'pull-scope-rejected' | 'closure';
 /** A message that permanently failed to sync. */
 export type DeadLetterEntry = {
     /** The message CID that failed. */
@@ -285,8 +338,16 @@ export type SyncHealthSummary = {
      * the engine self-heals — entries are auto-cleared on later success.
      */
     failedMessageCount: number;
-    /** Number of links currently in 'repairing' or 'degraded_poll' status. */
+    /**
+     * Number of current closure failures. A link can have matching sync roots
+     * while still being unusable because required dependencies are missing; this
+     * count keeps that state visible to callers.
+     */
+    closureFailureCount: number;
+    /** Number of current sync links in 'repairing', 'degraded_poll', or terminal-incomplete status. */
     degradedLinkCount: number;
+    /** True only when there are no failed messages and no degraded links. */
+    syncHealthy: boolean;
 };
 export interface SyncEngine {
     /**
@@ -401,4 +462,5 @@ export interface SyncEngine {
      */
     getSyncHealth(): Promise<SyncHealthSummary>;
 }
+export {};
 //# sourceMappingURL=sync.d.ts.map

package/dist/types/types/sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../src/types/sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,SAAS,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;CAC1C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAErE;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAMvC;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;CACd,GAAG;IACF;;;OAGG;IACH,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BtE;AAMD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,aAAa,CAAC;CACxC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,QAAQ,CAAC;AAE5F;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAElB,mCAAmC;IACnC,cAAc,EAAE,MAAM,CAAC;IAEvB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAEhB,6CAA6C;IAC7C,KAAK,EAAE,SAAS,CAAC;IAEjB,2BAA2B;IAC3B,MAAM,EAAE,UAAU,CAAC;IAEnB,8DAA8D;IAC9D,IAAI,EAAE,mBAAmB,CAAC;IAE1B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,qFAAqF;IACrF,YAAY,EAAE,qBAAqB,CAAC;IAEpC,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAMF;;;GAGG;AACH,4DAA4D;AAC5D,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAG,MAAM,CAAC;IACb,UAAU,EAAG,MAAM,CAAC;IACpB,MAAM,EAAG,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sFAAsF;IACtF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,yFAAyF;IACzF,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;CAC3C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAEhB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAMF;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,GAC9H;IAAE,IAAI,EAAE,0BAA0B,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,EAAE,EAAE,qBAAqB,CAAA;CAAE,GAC1J;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACvI;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1G;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzG;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvH;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3G,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAM3D,wDAAwD;AACxD,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAErG,iDAAiD;AACjD,MAAM,MAAM,eAAe,GAAG;IAC5B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,kCAAkC;IAClC,YAAY,EAAE,qBAAqB,CAAC;IACpC;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,KAAK,EAAE,kBAAkB,CAAC;IAE1B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;IAElD;;;;;;;;OAQG;IACH,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IAEzC;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF;;;;;OAKG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;OAEG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC1E;;OAEG;IACH,qBAAqB,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F;;;;;OAKG;IACH,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1C;;;;OAIG;IACH,EAAE,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAC;IAE5C;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAMvB;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAElE;;;;;OAKG;IACH,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAElF;;OAEG;IACH,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D;;;OAGG;IACH,aAAa,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC7C"}
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../src/types/sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gCAAgC,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEjH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIrD,kFAAkF;AAClF,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAInE;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,SAAS,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;CAC1C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAErE;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAMvC;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,sCAAsC,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,4BAA4B,CAAC;AAE1E,uDAAuD;AACvD,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAExD,+FAA+F;AAC/F,MAAM,MAAM,+BAA+B,GAAG,CAAC,gCAAgC,EAAE,GAAG,gCAAgC,EAAE,CAAC,CAAC;AAExH;;;;;;;;;GASG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC;CACd,GAAG;IACF,+DAA+D;IAC/D,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,mBAAmB,CAAC;CAChC,GAAG;IACF,+EAA+E;IAC/E,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,+BAA+B,CAAC;CACzC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IACA,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,mBAAmB,CAAC;CACzC,CAAC;AAEJ,iFAAiF;AACjF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,mBAAmB,CAMvG;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,mBAAmB,CAAC,WAAW,CAAC,GAAG,SAAS,CAI7F;AAED,8EAA8E;AAC9E,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,SAAS,CAAC,sBAAsB,EAAE,GAAG,sBAAsB,EAAE,CAAC,GACrE,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAKnD;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAUvF;AAED,gFAAgF;AAChF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAE/E;AAmBD,qEAAqE;AACrE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAajE;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAW9F;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,EACjD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,sBAAsB,EAAE,GAAG,sBAAsB,EAAE,CAAC,CAAA;CAAE,GACzG,OAAO,CAAC,MAAM,CAAC,CAsBjB;AAMD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,aAAa,CAAC;CACxC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,eAAe,GAAG,qBAAqB,GAAG,QAAQ,CAAC;AAEhI;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAElB,mCAAmC;IACnC,cAAc,EAAE,MAAM,CAAC;IAEvB,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC;IAErB,wEAAwE;IACxE,kBAAkB,EAAE,MAAM,CAAC;IAE3B,6CAA6C;IAC7C,KAAK,EAAE,SAAS,CAAC;IAEjB,uEAAuE;IACvE,aAAa,EAAE,iBAAiB,CAAC;IAEjC,2BAA2B;IAC3B,MAAM,EAAE,UAAU,CAAC;IAEnB,8DAA8D;IAC9D,IAAI,EAAE,mBAAmB,CAAC;IAE1B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,qFAAqF;IACrF,YAAY,EAAE,qBAAqB,CAAC;IAEpC,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAMF;;;GAGG;AACH,4DAA4D;AAC5D,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAG,MAAM,CAAC;IACb,UAAU,EAAG,MAAM,CAAC;IACpB,MAAM,EAAG,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,yEAAyE;IACzE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,sFAAsF;IACtF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,yFAAyF;IACzF,iBAAiB,EAAE,oBAAoB,EAAE,CAAC;CAC3C,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;;;;;;OAUG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAEhB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAMF,4DAA4D;AAC5D,MAAM,MAAM,cAAc,GAAG;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,cAAc,CAAC;AAEnB;;;;GAIG;AACH,MAAM,MAAM,SAAS,GACjB,aAAa,GAAG;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,GAChF,aAAa,GAAG;IAAE,IAAI,EAAE,0BAA0B,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,EAAE,EAAE,qBAAqB,CAAA;CAAE,GAC5G,aAAa,GAAG;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACzF,aAAa,GAAG;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5D,aAAa,GAAG;IAAE,IAAI,EAAE,qBAAqB,CAAA;CAAE,GAC/C,aAAa,GAAG;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3D,aAAa,GAAG;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAC5C,aAAa,GAAG;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzE,aAAa,GAAG;IAAE,IAAI,EAAE,uBAAuB,CAAA;CAAE,GACjD,aAAa,GAAG;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;AAM3D,wDAAwD;AACxD,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,SAAS,CAAC;AAE7H,iDAAiD;AACjD,MAAM,MAAM,eAAe,GAAG;IAC5B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,kCAAkC;IAClC,YAAY,EAAE,qBAAqB,CAAC;IACpC;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mGAAmG;IACnG,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,KAAK,EAAE,kBAAkB,CAAC;IAE1B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;IAElD;;;;;;;;OAQG;IACH,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IAEzC;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF;;;;;OAKG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;OAEG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IAC1E;;OAEG;IACH,qBAAqB,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,mBAAmB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F;;;;;OAKG;IACH,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1C;;;;OAIG;IACH,EAAE,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAAC;IAE5C;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAMvB;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAElE;;;;;OAKG;IACH,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAElF;;OAEG;IACH,sBAAsB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D;;;OAGG;IACH,aAAa,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC7C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enbox/agent",
-  "version": "0.7.7",
+  "version": "0.7.9",
   "type": "module",
   "main": "./dist/esm/index.js",
   "module": "./dist/esm/index.js",
@@ -72,8 +72,8 @@
   },
   "dependencies": {
     "@scure/bip39": "1.2.2",
-    "@enbox/dwn-clients": "0.4.2",
-    "@enbox/dwn-sdk-js": "0.3.7",
+    "@enbox/dwn-clients": "0.4.3",
+    "@enbox/dwn-sdk-js": "0.3.8",
     "@enbox/common": "0.1.1",
     "@enbox/crypto": "0.1.1",
     "@enbox/dids": "0.1.1",

package/src/dwn-api.ts

@@ -1242,8 +1242,8 @@ export class AgentDwnApi {
         throw new Error('AgentDwnApi: messageParams must be provided when rawMessage is not given.');
       }
 
-      // If we need to sign as an author delegate or with permissions we need to get the grantee's signer
-      // The messageParams should include either a permissionGrantId, or a delegatedGrant message
+      // If we need to sign as an author delegate or with permissions we need to get the grantee's signer.
+      // The messageParams should include either a permission grant invocation or a delegatedGrant message.
       const signer = request.granteeDid ?
         await this.getSigner(request.granteeDid) :
         await this.getSigner(request.author);
@@ -1311,6 +1311,7 @@ export class AgentDwnApi {
   private hasGrantParams<T extends DwnInterface>(params?: DwnMessageParams[T]): boolean {
     return params !== undefined &&
       (('permissionGrantId' in params && params.permissionGrantId !== undefined) ||
+      ('permissionGrantIds' in params && params.permissionGrantIds !== undefined) ||
       ('delegatedGrant' in params && params.delegatedGrant !== undefined));
   }
 

package/src/enbox-connect-protocol.ts

@@ -1482,7 +1482,7 @@ async function submitConnectResponse(
     // below, but we must NOT iterate over them (they are meta-grants, not session grants).
     sessionGrantCount = delegateGrants.length;
 
-    // Phase 1: create all revocation grants locally with bounded concurrency.
+    // Create all revocation grants locally with bounded concurrency.
     // createGrant is local-only (storage + signing) so it's cheap, but we still
     // cap parallelism to avoid head-of-line blocking when sessionGrantCount is
     // large (e.g. dapp requesting many scopes at once).
@@ -1508,10 +1508,10 @@ async function submitConnectResponse(
       ),
     );
 
-    // Phase 2: fan out every revocation grant to every owner DWN endpoint with
-    // a single global concurrency cap so that (grants × endpoints) cannot blow
-    // up. This is best-effort (sync delivers eventually) so individual failures
-    // are tolerated by `mapConcurrentSettled`.
+    // Fan out every revocation grant to every owner DWN endpoint with a single
+    // global concurrency cap so that (grants × endpoints) cannot blow up. This
+    // is best-effort (sync delivers eventually) so individual failures are
+    // tolerated by `mapConcurrentSettled`.
     const revSendTasks = revGrantResults.flatMap(({ grantMessage, revGrant }) => {
       sessionRevocations.push({
         grantId           : grantMessage.recordId,

package/src/index.ts

@@ -5,7 +5,16 @@ export type * from './types/identity-vault.js';
 export type * from './types/key-manager.js';
 export type * from './types/permissions.js';
 export type * from './types/sync.js';
-export { computeScopeId, MAX_PENDING_TOKENS } from './types/sync.js';
+export {
+  computeAuthorizationEpoch,
+  computeProjectionId,
+  MAX_PENDING_TOKENS,
+  normalizeSyncProtocols,
+  protocolsForSyncScope,
+  singleProtocolForSyncScope,
+  syncScopeFromRecordsProjectionScopes,
+  syncScopeFromProtocols,
+} from './types/sync.js';
 export { ReplicationLedger } from './sync-replication-ledger.js';
 export { ClosureFailureCode, createClosureContext } from './sync-closure-types.js';
 export type { ClosureDependencyEdge, ClosureEvaluationContext, ClosureResult } from './sync-closure-types.js';

package/src/permissions-api.ts

@@ -1,12 +1,12 @@
 import type { EnboxAgent } from './types/agent.js';
 import type { CreateGrantParams, CreateRequestParams, CreateRevocationParams, FetchPermissionRequestParams, FetchPermissionsParams, GetPermissionParams, IsGrantRevokedParams, PermissionGrantEntry, PermissionRequestEntry, PermissionRevocationEntry, PermissionsApi } from './types/permissions.js';
-import type { DwnDataEncodedRecordsWriteMessage, DwnMessageParams, DwnPermissionScope, DwnRecordsPermissionScope, ProcessDwnRequest } from './types/dwn.js';
+import type { DwnDataEncodedRecordsWriteMessage, DwnMessageParams, DwnRecordsPermissionScope, ProcessDwnRequest } from './types/dwn.js';
 import type { PermissionGrant, PermissionGrantData, PermissionRequestData, PermissionRevocationData } from '@enbox/dwn-sdk-js';
 
 import { isRecordsType } from './dwn-api.js';
-import { PermissionsProtocol } from '@enbox/dwn-sdk-js';
 import { Convert, TtlCache } from '@enbox/common';
 import { DwnInterface, DwnPermissionGrant, DwnPermissionRequest } from './types/dwn.js';
+import { PermissionScopeMatcher, PermissionsProtocol } from '@enbox/dwn-sdk-js';
 
 export class AgentPermissionsApi implements PermissionsApi {
 
@@ -36,11 +36,11 @@ export class AgentPermissionsApi implements PermissionsApi {
     delegate,
     messageType,
     protocol,
+    protocolPath,
+    contextId,
     cached = false
   }: GetPermissionParams): Promise<PermissionGrantEntry> {
-    // Currently we only support finding grants based on protocols
-    // A different approach may be necessary when we introduce `protocolPath` and `contextId` specific impersonation
-    const cacheKey = [ connectedDid, delegateDid, messageType, protocol ].join('~');
+    const cacheKey = JSON.stringify([ connectedDid, delegateDid, messageType, protocol, protocolPath, contextId ]);
     const cachedGrant = cached ? this._cachedPermissions.get(cacheKey) : undefined;
     if (cachedGrant) {
       return cachedGrant;
@@ -57,13 +57,13 @@ export class AgentPermissionsApi implements PermissionsApi {
     const grant = await AgentPermissionsApi.matchGrantFromArray(
       connectedDid,
       delegateDid,
-      { messageType, protocol },
+      { messageType, protocol, protocolPath, contextId },
       permissionGrants,
       delegate
     );
 
     if (!grant) {
-      throw new Error(`CachedPermissions: No permissions found for ${messageType}: ${protocol}`);
+      throw new Error(`CachedPermissions: No permissions found for ${messageType}: ${[protocol, protocolPath, contextId].filter(Boolean).join('/') || undefined}`);
     }
 
     this._cachedPermissions.set(cacheKey, grant);
@@ -437,7 +437,7 @@ export class AgentPermissionsApi implements PermissionsApi {
     protocolPath?: string,
     contextId?: string
   ): boolean {
-  // Check if the grant matches the provided parameters
+    // Check if the grant matches the provided parameters
     if (grant.grantee !== grantee || grant.grantor !== grantor) {
       return false;
     }
@@ -458,44 +458,13 @@ export class AgentPermissionsApi implements PermissionsApi {
     if (isMessagesScopeMatch) {
       if (isRecordsType(messageType)) {
         const recordScope = scope as DwnRecordsPermissionScope;
-        if (recordScope.protocol !== protocol) {
-          return false;
-        }
-
-        // If the grant scope is not restricted to a specific context or protocol path, it is unrestricted and can be used
-        if (this.isUnrestrictedProtocolScope(recordScope)) {
-          return true;
-        }
-
-        // protocolPath and contextId are mutually exclusive
-        // If the permission is scoped to a protocolPath and the permissionParams matches that path, this grant can be used
-        if (recordScope.protocolPath !== undefined && recordScope.protocolPath === protocolPath) {
-          return true;
-        }
-
-        // If the permission is scoped to a contextId and the permissionParams starts with that contextId, this grant can be used
-        if (recordScope.contextId !== undefined && contextId?.startsWith(recordScope.contextId)) {
-          return true;
-        }
+        return PermissionScopeMatcher.matches(recordScope, { protocol, protocolPath, contextId });
       } else {
         const messagesScope = scope;
-        // Checks for unrestricted protocol scope, if no protocol is defined in the scope it is unrestricted
-        if (messagesScope.protocol === undefined) {
-          return true;
-        }
-
-        if (messagesScope.protocol !== protocol) {
-          return false;
-        }
-
-        return this.isUnrestrictedProtocolScope(messagesScope);
+        return PermissionScopeMatcher.matches(messagesScope, { protocol, protocolPath, contextId });
       }
     }
 
     return false;
   }
-
-  private static isUnrestrictedProtocolScope(scope: DwnPermissionScope & { contextId?: string, protocolPath?: string }): boolean {
-    return scope.contextId === undefined && scope.protocolPath === undefined;
-  }
-}
+}