@enbox/dwn-sdk-js 0.0.7 → 0.1.0

package/dist/types/generated/precompiled-validators.d.ts

@@ -165,6 +165,15 @@ export function RecordsWriteUnidentified(data: any, { instancePath, parentData,
 }): boolean;
 export namespace RecordsWriteUnidentified {
     export namespace evaluated_9 {
+        export namespace props_9 {
+            let recordId: boolean;
+            let contextId: boolean;
+            let attestation: boolean;
+            let authorization: boolean;
+            let encryption: boolean;
+            let descriptor: boolean;
+        }
+        export { props_9 as props };
         let dynamicProps_9: boolean;
         export { dynamicProps_9 as dynamicProps };
         let dynamicItems_9: boolean;
@@ -213,8 +222,8 @@ export function GeneralJws(data: any, { instancePath, parentData, parentDataProp
 }): boolean;
 export namespace GeneralJws {
     export namespace evaluated_12 {
-        let props_9: boolean;
-        export { props_9 as props };
+        let props_10: boolean;
+        export { props_10 as props };
         let dynamicProps_12: boolean;
         export { dynamicProps_12 as dynamicProps };
         let dynamicItems_12: boolean;
@@ -231,8 +240,8 @@ export function JwkVerificationMethod(data: any, { instancePath, parentData, par
 }): boolean;
 export namespace JwkVerificationMethod {
     export namespace evaluated_13 {
-        let props_10: boolean;
-        export { props_10 as props };
+        let props_11: boolean;
+        export { props_11 as props };
         let dynamicProps_13: boolean;
         export { dynamicProps_13 as dynamicProps };
         let dynamicItems_13: boolean;
@@ -249,8 +258,8 @@ export function MessagesFilter(data: any, { instancePath, parentData, parentData
 }): boolean;
 export namespace MessagesFilter {
     export namespace evaluated_14 {
-        let props_11: boolean;
-        export { props_11 as props };
+        let props_12: boolean;
+        export { props_12 as props };
         let dynamicProps_14: boolean;
         export { dynamicProps_14 as dynamicProps };
         let dynamicItems_14: boolean;
@@ -267,8 +276,8 @@ export function MessagesRead(data: any, { instancePath, parentData, parentDataPr
 }): boolean;
 export namespace MessagesRead {
     export namespace evaluated_15 {
-        let props_12: boolean;
-        export { props_12 as props };
+        let props_13: boolean;
+        export { props_13 as props };
         let dynamicProps_15: boolean;
         export { dynamicProps_15 as dynamicProps };
         let dynamicItems_15: boolean;
@@ -285,8 +294,8 @@ export function MessagesSubscribe(data: any, { instancePath, parentData, parentD
 }): boolean;
 export namespace MessagesSubscribe {
     export namespace evaluated_16 {
-        let props_13: boolean;
-        export { props_13 as props };
+        let props_14: boolean;
+        export { props_14 as props };
         let dynamicProps_16: boolean;
         export { dynamicProps_16 as dynamicProps };
         let dynamicItems_16: boolean;
@@ -303,8 +312,8 @@ export function MessagesSync(data: any, { instancePath, parentData, parentDataPr
 }): boolean;
 export namespace MessagesSync {
     export namespace evaluated_17 {
-        let props_14: boolean;
-        export { props_14 as props };
+        let props_15: boolean;
+        export { props_15 as props };
         let dynamicProps_17: boolean;
         export { dynamicProps_17 as dynamicProps };
         let dynamicItems_17: boolean;
@@ -321,8 +330,8 @@ export function NumberRangeFilter(data: any, { instancePath, parentData, parentD
 }): boolean;
 export namespace NumberRangeFilter {
     export namespace evaluated_18 {
-        let props_15: boolean;
-        export { props_15 as props };
+        let props_16: boolean;
+        export { props_16 as props };
         let dynamicProps_18: boolean;
         export { dynamicProps_18 as dynamicProps };
         let dynamicItems_18: boolean;
@@ -339,8 +348,8 @@ export function PaginationCursor(data: any, { instancePath, parentData, parentDa
 }): boolean;
 export namespace PaginationCursor {
     export namespace evaluated_19 {
-        let props_16: boolean;
-        export { props_16 as props };
+        let props_17: boolean;
+        export { props_17 as props };
         let dynamicProps_19: boolean;
         export { dynamicProps_19 as dynamicProps };
         let dynamicItems_19: boolean;
@@ -357,8 +366,8 @@ export function PermissionGrantData(data: any, { instancePath, parentData, paren
 }): boolean;
 export namespace PermissionGrantData {
     export namespace evaluated_20 {
-        let props_17: boolean;
-        export { props_17 as props };
+        let props_18: boolean;
+        export { props_18 as props };
         let dynamicProps_20: boolean;
         export { dynamicProps_20 as dynamicProps };
         let dynamicItems_20: boolean;
@@ -375,8 +384,8 @@ export function PermissionRequestData(data: any, { instancePath, parentData, par
 }): boolean;
 export namespace PermissionRequestData {
     export namespace evaluated_21 {
-        let props_18: boolean;
-        export { props_18 as props };
+        let props_19: boolean;
+        export { props_19 as props };
         let dynamicProps_21: boolean;
         export { dynamicProps_21 as dynamicProps };
         let dynamicItems_21: boolean;
@@ -393,8 +402,8 @@ export function PermissionRevocationData(data: any, { instancePath, parentData,
 }): boolean;
 export namespace PermissionRevocationData {
     export namespace evaluated_22 {
-        let props_19: boolean;
-        export { props_19 as props };
+        let props_20: boolean;
+        export { props_20 as props };
         let dynamicProps_22: boolean;
         export { dynamicProps_22 as dynamicProps };
         let dynamicItems_22: boolean;
@@ -443,8 +452,8 @@ export function ProtocolDefinition(data: any, { instancePath, parentData, parent
 }): boolean;
 export namespace ProtocolDefinition {
     export namespace evaluated_25 {
-        let props_20: boolean;
-        export { props_20 as props };
+        let props_21: boolean;
+        export { props_21 as props };
         let dynamicProps_25: boolean;
         export { dynamicProps_25 as dynamicProps };
         let dynamicItems_25: boolean;
@@ -461,8 +470,8 @@ export function ProtocolRuleSet(data: any, { instancePath, parentData, parentDat
 }): boolean;
 export namespace ProtocolRuleSet {
     export namespace evaluated_26 {
-        let props_21: boolean;
-        export { props_21 as props };
+        let props_22: boolean;
+        export { props_22 as props };
         let dynamicProps_26: boolean;
         export { dynamicProps_26 as dynamicProps };
         let dynamicItems_26: boolean;
@@ -479,8 +488,8 @@ export function ProtocolsConfigure(data: any, { instancePath, parentData, parent
 }): boolean;
 export namespace ProtocolsConfigure {
     export namespace evaluated_27 {
-        let props_22: boolean;
-        export { props_22 as props };
+        let props_23: boolean;
+        export { props_23 as props };
         let dynamicProps_27: boolean;
         export { dynamicProps_27 as dynamicProps };
         let dynamicItems_27: boolean;
@@ -497,8 +506,8 @@ export function ProtocolsQuery(data: any, { instancePath, parentData, parentData
 }): boolean;
 export namespace ProtocolsQuery {
     export namespace evaluated_28 {
-        let props_23: boolean;
-        export { props_23 as props };
+        let props_24: boolean;
+        export { props_24 as props };
         let dynamicProps_28: boolean;
         export { dynamicProps_28 as dynamicProps };
         let dynamicItems_28: boolean;
@@ -515,8 +524,8 @@ export function RecordsRead(data: any, { instancePath, parentData, parentDataPro
 }): boolean;
 export namespace RecordsRead {
     export namespace evaluated_29 {
-        let props_24: boolean;
-        export { props_24 as props };
+        let props_25: boolean;
+        export { props_25 as props };
         let dynamicProps_29: boolean;
         export { dynamicProps_29 as dynamicProps };
         let dynamicItems_29: boolean;
@@ -533,8 +542,8 @@ export function RecordsFilter(data: any, { instancePath, parentData, parentDataP
 }): boolean;
 export namespace RecordsFilter {
     export namespace evaluated_30 {
-        let props_25: boolean;
-        export { props_25 as props };
+        let props_26: boolean;
+        export { props_26 as props };
         let dynamicProps_30: boolean;
         export { dynamicProps_30 as dynamicProps };
         let dynamicItems_30: boolean;
@@ -567,8 +576,8 @@ export function GenericSignaturePayload(data: any, { instancePath, parentData, p
 }): boolean;
 export namespace GenericSignaturePayload {
     export namespace evaluated_32 {
-        let props_26: boolean;
-        export { props_26 as props };
+        let props_27: boolean;
+        export { props_27 as props };
         let dynamicProps_32: boolean;
         export { dynamicProps_32 as dynamicProps };
         let dynamicItems_32: boolean;
@@ -585,8 +594,8 @@ export function RecordsWriteSignaturePayload(data: any, { instancePath, parentDa
 }): boolean;
 export namespace RecordsWriteSignaturePayload {
     export namespace evaluated_33 {
-        let props_27: boolean;
-        export { props_27 as props };
+        let props_28: boolean;
+        export { props_28 as props };
         let dynamicProps_33: boolean;
         export { dynamicProps_33 as dynamicProps };
         let dynamicItems_33: boolean;
@@ -603,8 +612,8 @@ export function StringRangeFilter(data: any, { instancePath, parentData, parentD
 }): boolean;
 export namespace StringRangeFilter {
     export namespace evaluated_34 {
-        let props_28: boolean;
-        export { props_28 as props };
+        let props_29: boolean;
+        export { props_29 as props };
         let dynamicProps_34: boolean;
         export { dynamicProps_34 as dynamicProps };
         let dynamicItems_34: boolean;

package/dist/types/generated/precompiled-validators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"precompiled-validators.d.ts","sourceRoot":"","sources":["../../../generated/precompiled-validators.js"],"names":[],"mappings":"AAC66K;;;;;;YAA+tC;;;;;;;;AAMkrY;;;;;;YAA2wD;;;;;;;;;;;;AAN6vjB;;;;;;YAG9ykC;;;;;;;;;;;;AAGgupE;;;;;;YAA4oL;;;;;;;;;;;;AAA62B;;;;;;YAA6pM;;;;;;;;;;;;AAAiiD;;;;;;YAAkzV;;;;;;;;;;;;AAAiuC;;;;;;YAA0zV;;;;;;;;;;;;AAA8X;;;;;;YAAq/C;;;;;;;;;;;;AAA/29F;;;;;;YAA8+D;;;;;;;;;;;;AAHtod;;;;;;YAGslZ;;;;;;;;;;AAAqy/F;;;;;;YAAinB;;;;;;;;;;AAAwG;;;;;;YAAk5e;;;;;;;;;;AANlk/H;;;;;;YAAi1I;;;;;;;;;;;;AAM+43H;;;;;;YAAsnH;;;;;;;;;;;;AAAwxB;;;;;;YAAiuL;;;;;;;;;;;;AAAi2B;;;;;;YAAuqM;;;;;;;;;;;;AAA63B;;;;;;YAAikM;;;;;;;;;;;;AAAsqC;;;;;;YAA+iU;;;;;;;;;;;;AAA4H;;;;;;YAA8sK;;;;;;;;;;;;AAA2H;;;;;;YAAqvE;;;;;;;;;;;;AAA05/C;;;;;;YAAw0K;;;;;;;;;;;;AAAgv3C;;;;;;YAAyiI;;;;;;;;;;;;AAA6X;;;;;;YAAgtC;;;;;;;;;;;;AAA4nD;;;;;;YAA6nB;;;;;;;;;;AAA0jG;;;;;;YAA+nB;;;;;;;;;;AAA+n1B;;;;;;YAAm2P;;;;;;;;;;;;AAA/m8B;;;;;;YAA4rsB;;;;;;;;;;;;AAAg6R;;;;;;YAAksM;;;;;;;;;;;;AAA2/B;;;;;;YAAovQ;;;;;;;;;;;;AAAgjC;;;;;;YAA8/N;;;;;;;;;;;;AAApx1T;;;;;;YAAo2/C;;;;;;;;;;;;AANp/zD;;;;;;YAAwivB;;;;;;;;;;AAM0k8S;;;;;;YAAwwF;;;;;;;;;;;;AAAmsB;;;;;;YAA6mJ;;;;;;;;;;;;AAA4H;;;;;;YAAkiK"}
+{"version":3,"file":"precompiled-validators.d.ts","sourceRoot":"","sources":["../../../generated/precompiled-validators.js"],"names":[],"mappings":"AAC66K;;;;;;YAA+tC;;;;;;;;AAMs+Z;;;;;;YAA2wD;;;;;;;;;;;;AANinhB;;;;;;YAGt9jC;;;;;;;;;;;;AAGohrE;;;;;;YAA4oL;;;;;;;;;;;;AAA62B;;;;;;YAA6pM;;;;;;;;;;;;AAAiiD;;;;;;YAAkzV;;;;;;;;;;;;AAA4vC;;;;;;YAAqsW;;;;;;;;;;;;AAA8X;;;;;;YAAgkD;;;;;;;;;;;;AAAp4+F;;;;;;YAAkhE;;;;;;;;;;;;AAH17e;;;;;;YAG8ua;;;;;;;;;;;;;;;;;;;AAAk7gG;;;;;;YAAinB;;;;;;;;;;AAAwG;;;;;;YAAk5e;;;;;;;;;;AANv2hI;;;;;;YAAi1I;;;;;;;;;;;;AAMor6H;;;;;;YAAsnH;;;;;;;;;;;;AAAwxB;;;;;;YAAiuL;;;;;;;;;;;;AAAi2B;;;;;;YAAuqM;;;;;;;;;;;;AAAw5B;;;;;;YAA48M;;;;;;;;;;;;AAAsqC;;;;;;YAA+iU;;;;;;;;;;;;AAA4H;;;;;;YAA8sK;;;;;;;;;;;;AAA2H;;;;;;YAAqvE;;;;;;;;;;;;AAA05/C;;;;;;YAAw0K;;;;;;;;;;;;AAAgv3C;;;;;;YAAyiI;;;;;;;;;;;;AAA6X;;;;;;YAAgtC;;;;;;;;;;;;AAA4nD;;;;;;YAA6nB;;;;;;;;;;AAA0jG;;;;;;YAA+nB;;;;;;;;;;AAAis/B;;;;;;YAAm2P;;;;;;;;;;;;AAAj4kC;;;;;;YAA880B;;;;;;;;;;;;AAAg6R;;;;;;YAAksM;;;;;;;;;;;;AAA2/B;;;;;;YAAovQ;;;;;;;;;;;;AAAgjC;;;;;;YAA8/N;;;;;;;;;;;;AAA7uhU;;;;;;YAAo2/C;;;;;;;;;;;;AANho2D;;;;;;YAAwivB;;;;;;;;;;AAM+qqT;;;;;;YAAwwF;;;;;;;;;;;;AAAmsB;;;;;;YAA6mJ;;;;;;;;;;;;AAA4H;;;;;;YAAkiK"}

package/dist/types/src/core/constants.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Cross-cutting constants that are shared between modules which cannot directly
+ * import each other without creating circular dependencies.
+ */
+/**
+ * Well-known protocol path for permission grant revocation records.
+ * Defined here (rather than on `PermissionsProtocol`) to avoid circular
+ * dependencies between `grant-authorization.ts` and `protocols/permissions.ts`.
+ */
+export declare const PERMISSIONS_REVOCATION_PATH = "grant/revocation";
+//# sourceMappingURL=constants.d.ts.map

package/dist/types/src/core/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/core/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,qBAAqB,CAAC"}

package/dist/types/src/core/core-protocol.d.ts

@@ -0,0 +1,89 @@
+import type { DataStore } from '../types/data-store.js';
+import type { Filter } from '../types/query-types.js';
+import type { MessagesFilter } from '../types/messages-types.js';
+import type { MessageStore } from '../types/message-store.js';
+import type { ProtocolDefinition } from '../types/protocols-types.js';
+import type { RecordsWrite } from '../interfaces/records-write.js';
+import type { RecordsWriteMessage } from '../types/records-types.js';
+import type { StateIndex } from '../types/state-index.js';
+/**
+ * Bundled store references passed to core protocol post-processing hooks.
+ */
+export type CoreProtocolStores = {
+    messageStore: MessageStore;
+    dataStore: DataStore;
+    stateIndex: StateIndex;
+};
+/**
+ * A core protocol is a hardcoded, immutable, always-installed DWN protocol
+ * with lifecycle hooks that participate in the Records message processing pipeline.
+ *
+ * Core protocols are returned from `fetchProtocolDefinition()` without a database
+ * lookup and cannot be overridden by `ProtocolsConfigure`. They provide system-level
+ * behavior (e.g., permissions) while riding on the Records interface for CRUD and sync.
+ */
+export interface CoreProtocol {
+    /** The immutable protocol definition. */
+    readonly definition: ProtocolDefinition;
+    /** The protocol URI (shorthand for `definition.protocol`). */
+    readonly uri: string;
+    /**
+     * Validate the data payload of a record being written under this protocol.
+     * Called after protocol authorization but before storage.
+     * @throws DwnError to reject the write with the appropriate status code.
+     */
+    validateRecord?(message: RecordsWriteMessage, dataBytes: Uint8Array): void;
+    /**
+     * Pre-processing hook: runs before storing a record under this protocol.
+     * Can perform cross-record validation (e.g., revocation tag consistency checks).
+     * @throws DwnError to reject the write.
+     */
+    preProcessWrite?(tenant: string, message: RecordsWriteMessage, messageStore: MessageStore): Promise<void>;
+    /**
+     * Post-processing hook: runs after successfully storing a record under this protocol.
+     * Can perform cascading side effects (e.g., cleanup of grant-authorized messages on revocation).
+     */
+    postProcessWrite?(tenant: string, recordsWrite: RecordsWrite, stores: CoreProtocolStores): Promise<void>;
+    /**
+     * Map an error code from this protocol's validation to an HTTP status code.
+     * Return `undefined` if the error code is not owned by this protocol.
+     */
+    mapErrorToStatusCode?(errorCode: string): number | undefined;
+    /**
+     * Construct an additional filter to include this protocol's records in
+     * protocol-scoped `MessagesFilter` conversions (e.g., sync, subscribe, read).
+     *
+     * This is used when permission records (or similar system records) are tagged
+     * with a target protocol and must appear alongside that protocol's records in
+     * message-level queries.
+     *
+     * Return `undefined` if no additional filter is needed for the given input.
+     */
+    constructAdditionalMessageFilter?(filter: MessagesFilter): Filter | undefined;
+}
+/**
+ * Registry of core protocols. Owned by a `Dwn` instance (not a static singleton)
+ * so that each DWN — including those in tests — gets an isolated registry.
+ */
+export declare class CoreProtocolRegistry {
+    private readonly _protocols;
+    /** Register a core protocol. */
+    register(protocol: CoreProtocol): void;
+    /** Get a core protocol by URI, or `undefined` if not registered. */
+    get(uri: string): CoreProtocol | undefined;
+    /**
+     * Get the protocol definition for a core protocol, or `undefined`.
+     * Used by `fetchProtocolDefinition()` to bypass the message store for core protocols.
+     */
+    getDefinition(uri: string): ProtocolDefinition | undefined;
+    /** Check whether a URI is a registered core protocol. */
+    has(uri: string): boolean;
+    /** Get all registered core protocols. */
+    all(): CoreProtocol[];
+    /**
+     * Delegate error code mapping to all registered core protocols.
+     * Returns the first non-`undefined` status code, or `undefined` if no protocol claims the error.
+     */
+    mapErrorToStatusCode(errorCode: string): number | undefined;
+}
+//# sourceMappingURL=core-protocol.d.ts.map

package/dist/types/src/core/core-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-protocol.d.ts","sourceRoot":"","sources":["../../../../src/core/core-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAG,YAAY,CAAC;IAC5B,SAAS,EAAG,SAAS,CAAC;IACtB,UAAU,EAAG,UAAU,CAAC;CACzB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IAExC,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,cAAc,CAAC,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,GAAG,IAAI,CAAC;IAE3E;;;;OAIG;IACH,eAAe,CAAC,CACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,mBAAmB,EAC5B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;OAGG;IACH,gBAAgB,CAAC,CACf,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;OAGG;IACH,oBAAoB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAE7D;;;;;;;;;OASG;IACH,gCAAgC,CAAC,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;CAC/E;AAED;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IAEnE,gCAAgC;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAI7C,oEAAoE;IAC7D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIjD;;;OAGG;IACI,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIjE,yDAAyD;IAClD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIhC,yCAAyC;IAClC,GAAG,IAAI,YAAY,EAAE;IAI5B;;;OAGG;IACI,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CASnE"}

package/dist/types/src/core/dwn-error.d.ts

@@ -16,10 +16,10 @@ export declare enum DwnErrorCode {
     ComputeCidCodecNotSupported = "ComputeCidCodecNotSupported",
     ComputeCidMultihashNotSupported = "ComputeCidMultihashNotSupported",
     Ed25519InvalidJwk = "Ed25519InvalidJwk",
-    EventEmitterStreamNotOpenError = "EventEmitterStreamNotOpenError",
+    EventLogNotOpenError = "EventLogNotOpenError",
     MessagesGrantAuthorizationMismatchedProtocol = "EventsGrantAuthorizationMismatchedProtocol",
     MessagesSubscribeAuthorizationFailed = "MessagesSubscribeAuthorizationFailed",
-    MessagesSubscribeEventStreamUnimplemented = "MessagesSubscribeEventStreamUnimplemented",
+    MessagesSubscribeEventLogUnimplemented = "MessagesSubscribeEventLogUnimplemented",
     GeneralJwsVerifierGetPublicKeyNotFound = "GeneralJwsVerifierGetPublicKeyNotFound",
     GeneralJwsVerifierInvalidSignature = "GeneralJwsVerifierInvalidSignature",
     GeneralJwsVerifierMissingAlg = "GeneralJwsVerifierMissingAlg",
@@ -74,11 +74,17 @@ export declare enum DwnErrorCode {
     ProtocolAuthorizationIncorrectProtocolPath = "ProtocolAuthorizationIncorrectProtocolPath",
     ProtocolAuthorizationDuplicateRoleRecipient = "ProtocolAuthorizationDuplicateRoleRecipient",
     ProtocolAuthorizationEncryptionRequired = "ProtocolAuthorizationEncryptionRequired",
+    ProtocolAuthorizationImmutableRecord = "ProtocolAuthorizationImmutableRecord",
     ProtocolAuthorizationInvalidSchema = "ProtocolAuthorizationInvalidSchema",
     ProtocolAuthorizationInvalidType = "ProtocolAuthorizationInvalidType",
     ProtocolAuthorizationMatchingRoleRecordNotFound = "ProtocolAuthorizationMatchingRoleRecordNotFound",
     ProtocolAuthorizationMaxSizeInvalid = "ProtocolAuthorizationMaxSizeInvalid",
     ProtocolAuthorizationMinSizeInvalid = "ProtocolAuthorizationMinSizeInvalid",
+    ProtocolAuthorizationRecordLimitExceeded = "ProtocolAuthorizationRecordLimitExceeded",
+    ProtocolAuthorizationRecordLimitStrategyNotImplemented = "ProtocolAuthorizationRecordLimitStrategyNotImplemented",
+    ProtocolAuthorizationSquashNotEnabled = "ProtocolAuthorizationSquashNotEnabled",
+    ProtocolAuthorizationSquashNotInitialWrite = "ProtocolAuthorizationSquashNotInitialWrite",
+    ProtocolAuthorizationSquashBackstop = "ProtocolAuthorizationSquashBackstop",
     ProtocolAuthorizationMissingContextId = "ProtocolAuthorizationMissingContextId",
     ProtocolAuthorizationMissingRuleSet = "ProtocolAuthorizationMissingRuleSet",
     ProtocolAuthorizationParentlessIncorrectProtocolPath = "ProtocolAuthorizationParentlessIncorrectProtocolPath",
@@ -95,6 +101,8 @@ export declare enum DwnErrorCode {
     ProtocolsConfigureInvalidRefNodeHasDirectives = "ProtocolsConfigureInvalidRefNodeHasDirectives",
     ProtocolsConfigureInvalidRefNotAtRoot = "ProtocolsConfigureInvalidRefNotAtRoot",
     ProtocolsConfigureInvalidRefProtocolPath = "ProtocolsConfigureInvalidRefProtocolPath",
+    ProtocolsConfigureInvalidRefTargetThroughRef = "ProtocolsConfigureInvalidRefTargetThroughRef",
+    ProtocolsConfigureInvalidRecordLimit = "ProtocolsConfigureInvalidRecordLimit",
     ProtocolsConfigureInvalidSize = "ProtocolsConfigureInvalidSize",
     ProtocolsConfigureInvalidActionMissingOf = "ProtocolsConfigureInvalidActionMissingOf",
     ProtocolsConfigureInvalidActionOfNotAnAncestor = "ProtocolsConfigureInvalidActionOfNotAnAncestor",
@@ -121,7 +129,6 @@ export declare enum DwnErrorCode {
     RecordsAuthorDelegatedGrantNotADelegatedGrant = "RecordsAuthorDelegatedGrantNotADelegatedGrant",
     RecordsDecryptNoMatchingKeyEncryptedFound = "RecordsDecryptNoMatchingKeyEncryptedFound",
     RecordsCountFilterMissingRequiredProperties = "RecordsCountFilterMissingRequiredProperties",
-    RecordsDeleteAuthorizationFailed = "RecordsDeleteAuthorizationFailed",
     RecordsQueryCreateFilterPublishedSortInvalid = "RecordsQueryCreateFilterPublishedSortInvalid",
     RecordsQueryParseFilterPublishedSortInvalid = "RecordsQueryParseFilterPublishedSortInvalid",
     RecordsGrantAuthorizationConditionPublicationProhibited = "RecordsGrantAuthorizationConditionPublicationProhibited",
@@ -137,23 +144,18 @@ export declare enum DwnErrorCode {
     RecordsOwnerDelegatedGrantCidMismatch = "RecordsOwnerDelegatedGrantCidMismatch",
     RecordsOwnerDelegatedGrantGrantedToAndOwnerSignatureMismatch = "RecordsOwnerDelegatedGrantGrantedToAndOwnerSignatureMismatch",
     RecordsOwnerDelegatedGrantNotADelegatedGrant = "RecordsOwnerDelegatedGrantNotADelegatedGrant",
-    RecordsProtocolContextDerivationSchemeMissingContextId = "RecordsProtocolContextDerivationSchemeMissingContextId",
-    RecordsProtocolPathDerivationSchemeMissingProtocol = "RecordsProtocolPathDerivationSchemeMissingProtocol",
     RecordsQueryFilterMissingRequiredProperties = "RecordsQueryFilterMissingRequiredProperties",
-    RecordsReadAuthorizationFailed = "RecordsReadAuthorizationFailed",
     RecordsReadCreateFilterPublishedSortInvalid = "RecordsReadCreateFilterPublishedSortInvalid",
     RecordsReadParseFilterPublishedSortInvalid = "RecordsReadParseFilterPublishedSortInvalid",
-    RecordsSubscribeEventStreamUnimplemented = "RecordsSubscribeEventStreamUnimplemented",
+    RecordsSubscribeEventLogUnimplemented = "RecordsSubscribeEventLogUnimplemented",
     RecordsSubscribeFilterMissingRequiredProperties = "RecordsSubscribeFilterMissingRequiredProperties",
-    RecordsSchemasDerivationSchemeMissingSchema = "RecordsSchemasDerivationSchemeMissingSchema",
     RecordsWriteAttestationIntegrityMoreThanOneSignature = "RecordsWriteAttestationIntegrityMoreThanOneSignature",
     RecordsWriteAttestationIntegrityDescriptorCidMismatch = "RecordsWriteAttestationIntegrityDescriptorCidMismatch",
     RecordsWriteAttestationIntegrityInvalidPayloadProperty = "RecordsWriteAttestationIntegrityInvalidPayloadProperty",
-    RecordsWriteAuthorizationFailed = "RecordsWriteAuthorizationFailed",
     RecordsWriteCreateMissingSigner = "RecordsWriteCreateMissingSigner",
     RecordsWriteCreateDataAndDataCidMutuallyExclusive = "RecordsWriteCreateDataAndDataCidMutuallyExclusive",
     RecordsWriteCreateDataCidAndDataSizeMutuallyInclusive = "RecordsWriteCreateDataCidAndDataSizeMutuallyInclusive",
-    RecordsWriteCreateProtocolAndProtocolPathMutuallyInclusive = "RecordsWriteCreateProtocolAndProtocolPathMutuallyInclusive",
+    RecordsWriteCreateMissingProtocol = "RecordsWriteCreateMissingProtocol",
     RecordsWriteDataCidMismatch = "RecordsWriteDataCidMismatch",
     RecordsWriteDataSizeMismatch = "RecordsWriteDataSizeMismatch",
     RecordsWriteGetEntryIdUndefinedAuthor = "RecordsWriteGetEntryIdUndefinedAuthor",
@@ -164,8 +166,6 @@ export declare enum DwnErrorCode {
     RecordsWriteMissingDataInPrevious = "RecordsWriteMissingDataInPrevious",
     RecordsWriteMissingEncodedDataInPrevious = "RecordsWriteMissingEncodedDataInPrevious",
     RecordsWriteMissingEncryption = "RecordsWriteMissingEncryption",
-    RecordsWriteMissingProtocol = "RecordsWriteMissingProtocol",
-    RecordsWriteMissingSchema = "RecordsWriteMissingSchema",
     RecordsWriteNotAllowedAfterDelete = "RecordsWriteNotAllowedAfterDelete",
     RecordsWriteOwnerAndTenantMismatch = "RecordsWriteOwnerAndTenantMismatch",
     RecordsWriteSignAsOwnerDelegateUnknownAuthor = "RecordsWriteSignAsOwnerDelegateUnknownAuthor",

package/dist/types/src/core/dwn-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dwn-error.d.ts","sourceRoot":"","sources":["../../../../src/core/dwn-error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACb,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKlD;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,sBAAsB,2BAA2B;IACjD,iCAAiC,sCAAsC;IACvE,8CAA8C,mDAAmD;IACjG,+BAA+B,oCAAoC;IACnE,2BAA2B,gCAAgC;IAC3D,+BAA+B,oCAAoC;IACnE,iBAAiB,sBAAsB;IACvC,8BAA8B,mCAAmC;IACjE,4CAA4C,+CAA+C;IAC3F,oCAAoC,yCAAyC;IAC7E,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,kCAAkC,uCAAuC;IACzE,4BAA4B,iCAAiC;IAC7D,4BAA4B,iCAAiC;IAC7D,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,qCAAqC,0CAA0C;IAC/E,oCAAoC,yCAAyC;IAC7E,mCAAmC,wCAAwC;IAC3E,0BAA0B,+BAA+B;IACzD,gCAAgC,qCAAqC;IACrE,2BAA2B,gCAAgC;IAC3D,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IACrE,6BAA6B,kCAAkC;IAC/D,kCAAkC,uCAAuC;IACzE,sBAAsB,2BAA2B;IACjD,+BAA+B,oCAAoC;IACnE,oBAAoB,yBAAyB;IAC7C,6BAA6B,kCAAkC;IAC/D,+BAA+B,oCAAoC;IACnE,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,6BAA6B,kCAAkC;IAC/D,yDAAyD,8DAA8D;IACvH,2DAA2D,gEAAgE;IAC3H,0CAA0C,+CAA+C;IACzF,iDAAiD,sDAAsD;IACvG,6DAA6D,kEAAkE;IAC/H,gDAAgD,qDAAqD;IACrG,kDAAkD,uDAAuD;IACzG,wDAAwD,6DAA6D;IACrH,wCAAwC,6CAA6C;IACrF,sCAAsC,2CAA2C;IACjF,oCAAoC,yCAAyC;IAC7E,gCAAgC,qCAAqC;IACrE,sCAAsC,2CAA2C;IACjF,0CAA0C,+CAA+C;IACzF,wCAAwC,6CAA6C;IACrF,kCAAkC,uCAAuC;IACzE,uCAAuC,4CAA4C;IACnF,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,qCAAqC,0CAA0C;IAC/E,wCAAwC,6CAA6C;IACrF,gDAAgD,qDAAqD;IACrG,wCAAwC,6CAA6C;IACrF,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,2CAA2C,gDAAgD;IAC3F,uCAAuC,4CAA4C;IACnF,kCAAkC,uCAAuC;IACzE,gCAAgC,qCAAqC;IACrE,+CAA+C,oDAAoD;IACnG,mCAAmC,wCAAwC;IAC3E,mCAAmC,wCAAwC;IAC3E,qCAAqC,0CAA0C;IAC/E,mCAAmC,wCAAwC;IAC3E,oDAAoD,yDAAyD;IAC7G,6BAA6B,kCAAkC;IAC/D,0DAA0D,+DAA+D;IACzH,qCAAqC,0CAA0C;IAC/E,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,qCAAqC,0CAA0C;IAC/E,8CAA8C,mDAAmD;IACjG,yCAAyC,8CAA8C;IACvF,wCAAwC,6CAA6C;IACrF,iCAAiC,sCAAsC;IACvE,6CAA6C,kDAAkD;IAC/F,qCAAqC,0CAA0C;IAC/E,wCAAwC,6CAA6C;IACrF,6BAA6B,kCAAkC;IAC/D,wCAAwC,6CAA6C;IACrF,8CAA8C,mDAAmD;IACjG,2CAA2C,gDAAgD;IAC3F,kDAAkD,uDAAuD;IACzG,iDAAiD,sDAAsD;IACvG,kDAAkD,uDAAuD;IACzG,wCAAwC,6CAA6C;IACrF,0CAA0C,+CAA+C;IACzF,0CAA0C,+CAA+C;IACzF,0CAA0C,+CAA+C;IACzF,kCAAkC,uCAAuC;IACzE,kCAAkC,uCAAuC;IACzE,wCAAwC,6CAA6C;IACrF,0CAA0C,+CAA+C;IACzF,4CAA4C,iDAAiD;IAC7F,6CAA6C,kDAAkD;IAC/F,qDAAqD,0DAA0D;IAC/G,gDAAgD,qDAAqD;IACrG,0BAA0B,+BAA+B;IACzD,iDAAiD,sDAAsD;IACvG,sCAAsC,2CAA2C;IACjF,6DAA6D,kEAAkE;IAC/H,6CAA6C,kDAAkD;IAC/F,yCAAyC,8CAA8C;IACvF,2CAA2C,gDAAgD;IAC3F,gCAAgC,qCAAqC;IACrE,4CAA4C,iDAAiD;IAC7F,2CAA2C,gDAAgD;IAC3F,uDAAuD,4DAA4D;IACnH,qDAAqD,0DAA0D;IAC/G,oDAAoD,yDAAyD;IAC7G,8DAA8D,mEAAmE;IACjI,+CAA+C,oDAAoD;IACnG,8CAA8C,mDAAmD;IACjG,kDAAkD,uDAAuD;IACzG,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,gDAAgD,qDAAqD;IACrG,qCAAqC,0CAA0C;IAC/E,4DAA4D,iEAAiE;IAC7H,4CAA4C,iDAAiD;IAC7F,sDAAsD,2DAA2D;IACjH,kDAAkD,uDAAuD;IACzG,2CAA2C,gDAAgD;IAC3F,8BAA8B,mCAAmC;IACjE,2CAA2C,gDAAgD;IAC3F,0CAA0C,+CAA+C;IACzF,wCAAwC,6CAA6C;IACrF,+CAA+C,oDAAoD;IACnG,2CAA2C,gDAAgD;IAC3F,oDAAoD,yDAAyD;IAC7G,qDAAqD,0DAA0D;IAC/G,sDAAsD,2DAA2D;IACjH,+BAA+B,oCAAoC;IACnE,+BAA+B,oCAAoC;IACnE,iDAAiD,sDAAsD;IACvG,qDAAqD,0DAA0D;IAC/G,0DAA0D,+DAA+D;IACzH,2BAA2B,gCAAgC;IAC3D,4BAA4B,iCAAiC;IAC7D,qCAAqC,0CAA0C;IAC/E,wCAAwC,6CAA6C;IACrF,mCAAmC,wCAAwC;IAC3E,oCAAoC,yCAAyC;IAC7E,yBAAyB,8BAA8B;IACvD,iCAAiC,sCAAsC;IACvE,wCAAwC,6CAA6C;IACrF,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,yBAAyB,8BAA8B;IACvD,iCAAiC,sCAAsC;IACvE,kCAAkC,uCAAuC;IACzE,4CAA4C,iDAAiD;IAC7F,oCAAoC,yCAAyC;IAC7E,gDAAgD,qDAAqD;IACrG,8CAA8C,mDAAmD;IACjG,iEAAiE,sEAAsE;IACvI,gDAAgD,qDAAqD;IACrG,kDAAkD,uDAAuD;IACzG,iDAAiD,sDAAsD;IACvG,2CAA2C,gDAAgD;IAC3F,sBAAsB,2BAA2B;IACjD,6BAA6B,kCAAkC;IAC/D,4CAA4C,iDAAiD;IAC7F,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,gBAAgB,qBAAqB;IACrC,wBAAwB,6BAA6B;IACrD,0BAA0B,+BAA+B;IACzD,sBAAsB,2BAA2B;IACjD,+BAA+B,oCAAoC;CACpE"}
+{"version":3,"file":"dwn-error.d.ts","sourceRoot":"","sources":["../../../../src/core/dwn-error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACb,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKlD;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,sBAAsB,2BAA2B;IACjD,iCAAiC,sCAAsC;IACvE,8CAA8C,mDAAmD;IACjG,+BAA+B,oCAAoC;IACnE,2BAA2B,gCAAgC;IAC3D,+BAA+B,oCAAoC;IACnE,iBAAiB,sBAAsB;IACvC,oBAAoB,yBAAyB;IAC7C,4CAA4C,+CAA+C;IAC3F,oCAAoC,yCAAyC;IAC7E,sCAAsC,2CAA2C;IACjF,sCAAsC,2CAA2C;IACjF,kCAAkC,uCAAuC;IACzE,4BAA4B,iCAAiC;IAC7D,4BAA4B,iCAAiC;IAC7D,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,8BAA8B,mCAAmC;IACjE,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,qCAAqC,0CAA0C;IAC/E,oCAAoC,yCAAyC;IAC7E,mCAAmC,wCAAwC;IAC3E,0BAA0B,+BAA+B;IACzD,gCAAgC,qCAAqC;IACrE,2BAA2B,gCAAgC;IAC3D,8BAA8B,mCAAmC;IACjE,gCAAgC,qCAAqC;IACrE,6BAA6B,kCAAkC;IAC/D,kCAAkC,uCAAuC;IACzE,sBAAsB,2BAA2B;IACjD,+BAA+B,oCAAoC;IACnE,oBAAoB,yBAAyB;IAC7C,6BAA6B,kCAAkC;IAC/D,+BAA+B,oCAAoC;IACnE,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,6BAA6B,kCAAkC;IAC/D,yDAAyD,8DAA8D;IACvH,2DAA2D,gEAAgE;IAC3H,0CAA0C,+CAA+C;IACzF,iDAAiD,sDAAsD;IACvG,6DAA6D,kEAAkE;IAC/H,gDAAgD,qDAAqD;IACrG,kDAAkD,uDAAuD;IACzG,wDAAwD,6DAA6D;IACrH,wCAAwC,6CAA6C;IACrF,sCAAsC,2CAA2C;IACjF,oCAAoC,yCAAyC;IAC7E,gCAAgC,qCAAqC;IACrE,sCAAsC,2CAA2C;IACjF,0CAA0C,+CAA+C;IACzF,wCAAwC,6CAA6C;IACrF,kCAAkC,uCAAuC;IACzE,uCAAuC,4CAA4C;IACnF,mCAAmC,wCAAwC;IAC3E,gCAAgC,qCAAqC;IACrE,qCAAqC,0CAA0C;IAC/E,wCAAwC,6CAA6C;IACrF,gDAAgD,qDAAqD;IACrG,wCAAwC,6CAA6C;IACrF,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,2CAA2C,gDAAgD;IAC3F,uCAAuC,4CAA4C;IACnF,oCAAoC,yCAAyC;IAC7E,kCAAkC,uCAAuC;IACzE,gCAAgC,qCAAqC;IACrE,+CAA+C,oDAAoD;IACnG,mCAAmC,wCAAwC;IAC3E,mCAAmC,wCAAwC;IAC3E,wCAAwC,6CAA6C;IACrF,sDAAsD,2DAA2D;IACjH,qCAAqC,0CAA0C;IAC/E,0CAA0C,+CAA+C;IACzF,mCAAmC,wCAAwC;IAC3E,qCAAqC,0CAA0C;IAC/E,mCAAmC,wCAAwC;IAC3E,oDAAoD,yDAAyD;IAC7G,6BAA6B,kCAAkC;IAC/D,0DAA0D,+DAA+D;IACzH,qCAAqC,0CAA0C;IAC/E,yCAAyC,8CAA8C;IACvF,sCAAsC,2CAA2C;IACjF,qCAAqC,0CAA0C;IAC/E,8CAA8C,mDAAmD;IACjG,yCAAyC,8CAA8C;IACvF,wCAAwC,6CAA6C;IACrF,iCAAiC,sCAAsC;IACvE,6CAA6C,kDAAkD;IAC/F,qCAAqC,0CAA0C;IAC/E,wCAAwC,6CAA6C;IACrF,4CAA4C,iDAAiD;IAC7F,oCAAoC,yCAAyC;IAC7E,6BAA6B,kCAAkC;IAC/D,wCAAwC,6CAA6C;IACrF,8CAA8C,mDAAmD;IACjG,2CAA2C,gDAAgD;IAC3F,kDAAkD,uDAAuD;IACzG,iDAAiD,sDAAsD;IACvG,kDAAkD,uDAAuD;IACzG,wCAAwC,6CAA6C;IACrF,0CAA0C,+CAA+C;IACzF,0CAA0C,+CAA+C;IACzF,0CAA0C,+CAA+C;IACzF,kCAAkC,uCAAuC;IACzE,kCAAkC,uCAAuC;IACzE,wCAAwC,6CAA6C;IACrF,0CAA0C,+CAA+C;IACzF,4CAA4C,iDAAiD;IAC7F,6CAA6C,kDAAkD;IAC/F,qDAAqD,0DAA0D;IAC/G,gDAAgD,qDAAqD;IACrG,0BAA0B,+BAA+B;IACzD,iDAAiD,sDAAsD;IACvG,sCAAsC,2CAA2C;IACjF,6DAA6D,kEAAkE;IAC/H,6CAA6C,kDAAkD;IAC/F,yCAAyC,8CAA8C;IACvF,2CAA2C,gDAAgD;IAE3F,4CAA4C,iDAAiD;IAC7F,2CAA2C,gDAAgD;IAC3F,uDAAuD,4DAA4D;IACnH,qDAAqD,0DAA0D;IAC/G,oDAAoD,yDAAyD;IAC7G,8DAA8D,mEAAmE;IACjI,+CAA+C,oDAAoD;IACnG,8CAA8C,mDAAmD;IACjG,kDAAkD,uDAAuD;IACzG,uCAAuC,4CAA4C;IACnF,0CAA0C,+CAA+C;IACzF,gDAAgD,qDAAqD;IACrG,qCAAqC,0CAA0C;IAC/E,4DAA4D,iEAAiE;IAC7H,4CAA4C,iDAAiD;IAE7F,2CAA2C,gDAAgD;IAE3F,2CAA2C,gDAAgD;IAC3F,0CAA0C,+CAA+C;IACzF,qCAAqC,0CAA0C;IAC/E,+CAA+C,oDAAoD;IAEnG,oDAAoD,yDAAyD;IAC7G,qDAAqD,0DAA0D;IAC/G,sDAAsD,2DAA2D;IAEjH,+BAA+B,oCAAoC;IACnE,iDAAiD,sDAAsD;IACvG,qDAAqD,0DAA0D;IAC/G,iCAAiC,sCAAsC;IACvE,2BAA2B,gCAAgC;IAC3D,4BAA4B,iCAAiC;IAC7D,qCAAqC,0CAA0C;IAC/E,wCAAwC,6CAA6C;IACrF,mCAAmC,wCAAwC;IAC3E,oCAAoC,yCAAyC;IAC7E,yBAAyB,8BAA8B;IACvD,iCAAiC,sCAAsC;IACvE,wCAAwC,6CAA6C;IACrF,6BAA6B,kCAAkC;IAE/D,iCAAiC,sCAAsC;IACvE,kCAAkC,uCAAuC;IACzE,4CAA4C,iDAAiD;IAC7F,oCAAoC,yCAAyC;IAC7E,gDAAgD,qDAAqD;IACrG,8CAA8C,mDAAmD;IACjG,iEAAiE,sEAAsE;IACvI,gDAAgD,qDAAqD;IACrG,kDAAkD,uDAAuD;IACzG,iDAAiD,sDAAsD;IACvG,2CAA2C,gDAAgD;IAC3F,sBAAsB,2BAA2B;IACjD,6BAA6B,kCAAkC;IAC/D,4CAA4C,iDAAiD;IAC7F,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,gBAAgB,qBAAqB;IACrC,wBAAwB,6BAA6B;IACrD,0BAA0B,+BAA+B;IACzD,sBAAsB,2BAA2B;IACjD,+BAA+B,oCAAoC;CACpE"}

package/dist/types/src/core/grant-authorization.d.ts

@@ -34,8 +34,12 @@ export declare class GrantAuthorization {
      */
     private static verifyGrantActive;
     /**
-     * Verify that the `interface` and `method` grant scopes match the incoming message
-     * @param permissionGrantId Purely being passed for logging purposes.
+     * Verify that the `interface` and `method` grant scopes match the incoming message.
+     *
+     * For the Messages interface, a `Read` scope is treated as a unified scope that also authorizes
+     * `Subscribe` and `Sync` operations. This mirrors how protocol `$actions` treats `read` as a
+     * unified action covering read, query, subscribe, and count.
+     *
      * @throws {DwnError} if the `interface` and `method` of the incoming message do not match the scope of the permission grant.
      */
     private static verifyGrantScopeInterfaceAndMethod;

package/dist/types/src/core/grant-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grant-authorization.d.ts","sourceRoot":"","sources":["../../../../src/core/grant-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAKxE,qBAAa,kBAAkB;IAE7B;;;;;;;;;;OAUG;WACiB,qBAAqB,CAAC,KAAK,EAAE;QAC/C,eAAe,EAAE,cAAc,CAAC;QAChC,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBnB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,+BAA+B;IAuB9C;;;;;OAKG;mBACkB,iBAAiB;IAwCtC;;;;OAIG;mBACkB,kCAAkC;CAkBxD"}
+{"version":3,"file":"grant-authorization.d.ts","sourceRoot":"","sources":["../../../../src/core/grant-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAOxE,qBAAa,kBAAkB;IAE7B;;;;;;;;;;OAUG;WACiB,qBAAqB,CAAC,KAAK,EAAE;QAC/C,eAAe,EAAE,cAAc,CAAC;QAChC,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBnB;;;;OAIG;IACH,OAAO,CAAC,MAAM,CAAC,+BAA+B;IAuB9C;;;;;OAKG;mBACkB,iBAAiB;IAwCtC;;;;;;;;OAQG;mBACkB,kCAAkC;CA6BxD"}

package/dist/types/src/core/protocol-authorization-action.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol-authorization-action.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol-authorization-action.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG3G,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAI9D,OAAO,EAAE,cAAc,EAAiB,MAAM,6BAA6B,CAAC;AAE5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,YAAY,EAC5G,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CA6Ff;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,YAAY,EAC5G,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,cAAc,EAAE,CAAC,CA4E3B;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,YAAY,EAC5G,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,mBAAmB,EAAE,EAClC,YAAY,EAAE,YAAY,EAC1B,kBAAkB,CAAC,EAAE,kBAAkB,GACtC,OAAO,CAAC,IAAI,CAAC,CAyFf;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,kBAAkB,EAC9B,WAAW,EAAE,mBAAmB,EAAE,EAClC,mBAAmB,CAAC,EAAE,kBAAkB,GACvC,OAAO,CAAC,OAAO,CAAC,CA0ClB"}
+{"version":3,"file":"protocol-authorization-action.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol-authorization-action.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG3G,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAI9D,OAAO,EAAE,cAAc,EAAiB,MAAM,6BAA6B,CAAC;AAE5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,YAAY,EAC5G,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CA6Ff;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,YAAY,EAC5G,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,cAAc,EAAE,CAAC,CAiF3B;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,GAAG,YAAY,EAC5G,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,mBAAmB,EAAE,EAClC,YAAY,EAAE,YAAY,EAC1B,kBAAkB,CAAC,EAAE,kBAAkB,GACtC,OAAO,CAAC,IAAI,CAAC,CAyFf;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,kBAAkB,EAC9B,WAAW,EAAE,mBAAmB,EAAE,EAClC,mBAAmB,CAAC,EAAE,kBAAkB,GACvC,OAAO,CAAC,OAAO,CAAC,CA0ClB"}

package/dist/types/src/core/protocol-authorization-validation.d.ts

@@ -57,4 +57,34 @@ export declare function verifyTagsIfNeeded(incomingMessage: RecordsWrite, ruleSe
  * 1. The same role has not been assigned to the same entity/recipient.
  */
 export declare function verifyAsRoleRecordIfNeeded(tenant: string, incomingMessage: RecordsWrite, ruleSet: ProtocolRuleSet, messageStore: MessageStore): Promise<void>;
+/**
+ * Verifies that a new record creation does not exceed the `$recordLimit` defined in the rule set.
+ *
+ * This check only applies to initial writes (new records). Updates to existing records are not counted.
+ * The count is scoped to the same `protocol + protocolPath` within the parent context:
+ * - For root-level records: counted across the entire protocol for the tenant.
+ * - For nested records: counted within the parent record's context.
+ *
+ * @throws {DwnError} with `ProtocolAuthorizationRecordLimitExceeded` if the limit is reached and strategy is `reject`.
+ * @throws {DwnError} with `ProtocolAuthorizationRecordLimitStrategyNotImplemented` if strategy is not yet implemented.
+ */
+export declare function verifyRecordLimit(tenant: string, incomingMessage: RecordsWrite, ruleSet: ProtocolRuleSet, messageStore: MessageStore): Promise<void>;
+/**
+ * Verifies that a `RecordsWrite` with `squash: true` is eligible:
+ * 1. The protocol rule set at the record's `protocolPath` must have `$squash: true`.
+ * 2. The squash write must be an initial write (a new record, not an update).
+ *
+ * @throws {DwnError} with `ProtocolAuthorizationSquashNotEnabled` if `$squash` is not enabled.
+ * @throws {DwnError} with `ProtocolAuthorizationSquashNotInitialWrite` if the squash write is not an initial write.
+ */
+export declare function verifySquashEligibility(incomingMessage: RecordsWrite, ruleSet: ProtocolRuleSet): Promise<void>;
+/**
+ * Verifies that an update is not attempted on a record whose protocol path has `$immutable: true`.
+ *
+ * Only non-initial writes (updates) are rejected — initial writes are always allowed.
+ * `RecordsDelete` is not affected by this check; immutability prevents data mutation, not removal.
+ *
+ * @throws {DwnError} with `ProtocolAuthorizationImmutableRecord` if an update is attempted on an immutable record.
+ */
+export declare function verifyImmutability(incomingMessage: RecordsWrite, ruleSet: ProtocolRuleSet): Promise<void>;
 //# sourceMappingURL=protocol-authorization-validation.d.ts.map

package/dist/types/src/core/protocol-authorization-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol-authorization-validation.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol-authorization-validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAgB,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEpH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AASnE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,YAAY,EAC5B,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CAwEf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,MAAM,CAAC,CAuCjB;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,mBAAmB,EACnC,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,aAAa,CAAC,CAqBxB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,aAAa,EAC5B,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CAsCN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,GACvB,IAAI,CAgBN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,GACvB,IAAI,CA8BN;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CA6Cf"}
+{"version":3,"file":"protocol-authorization-validation.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol-authorization-validation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAgB,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAIpH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AASnE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,YAAY,EAC5B,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CAwEf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,MAAM,CAAC,CAuCjB;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,mBAAmB,EACnC,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY,EAC1B,uBAAuB,EAAE,yBAAyB,EAClD,kBAAkB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,aAAa,CAAC,CAqBxB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,cAAc,EAAE,mBAAmB,EACnC,aAAa,EAAE,aAAa,EAC5B,QAAQ,CAAC,EAAE,MAAM,GAChB,IAAI,CAsCN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,GACvB,IAAI,CAgBN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,GACvB,IAAI,CA8BN;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CA6Cf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CAiDf;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,eAAe,EAAE,YAAY,EAC7B,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,IAAI,CAAC,CAcf"}

package/dist/types/src/core/protocol-authorization.d.ts

@@ -1,3 +1,4 @@
+import type { CoreProtocolRegistry } from './core-protocol.js';
 import type { MessageStore } from '../types/message-store.js';
 import type { RecordsCount } from '../interfaces/records-count.js';
 import type { RecordsDelete } from '../interfaces/records-delete.js';
@@ -16,39 +17,46 @@ export declare class ProtocolAuthorization {
      * Performs validation on the structure of RecordsWrite messages that use a protocol.
      * @throws {Error} if validation fails.
      */
-    static validateReferentialIntegrity(tenant: string, incomingMessage: RecordsWrite, messageStore: MessageStore): Promise<void>;
+    static validateReferentialIntegrity(tenant: string, incomingMessage: RecordsWrite, messageStore: MessageStore, coreProtocols?: CoreProtocolRegistry): Promise<void>;
     /**
      * Performs protocol-based authorization against the incoming RecordsWrite message.
      * @throws {Error} if authorization fails.
      */
-    static authorizeWrite(tenant: string, incomingMessage: RecordsWrite, messageStore: MessageStore): Promise<void>;
+    static authorizeWrite(tenant: string, incomingMessage: RecordsWrite, messageStore: MessageStore, coreProtocols?: CoreProtocolRegistry): Promise<void>;
     /**
      * Performs protocol-based authorization against the incoming `RecordsRead` message.
      * @param newestRecordsWrite The latest RecordsWrite associated with the recordId being read.
      * @throws {Error} if authorization fails.
      */
-    static authorizeRead(tenant: string, incomingMessage: RecordsRead, newestRecordsWrite: RecordsWrite, messageStore: MessageStore): Promise<void>;
-    static authorizeQueryOrSubscribe(tenant: string, incomingMessage: RecordsCount | RecordsQuery | RecordsSubscribe, messageStore: MessageStore): Promise<void>;
+    static authorizeRead(tenant: string, incomingMessage: RecordsRead, newestRecordsWrite: RecordsWrite, messageStore: MessageStore, coreProtocols?: CoreProtocolRegistry): Promise<void>;
+    static authorizeQueryOrSubscribe(tenant: string, incomingMessage: RecordsCount | RecordsQuery | RecordsSubscribe, messageStore: MessageStore, coreProtocols?: CoreProtocolRegistry): Promise<void>;
     /**
      * Performs protocol-based authorization against the incoming `RecordsDelete` message.
      * @param recordsWrite A `RecordsWrite` of the record being deleted.
      */
-    static authorizeDelete(tenant: string, incomingMessage: RecordsDelete, recordsWrite: RecordsWrite, messageStore: MessageStore): Promise<void>;
+    static authorizeDelete(tenant: string, incomingMessage: RecordsDelete, recordsWrite: RecordsWrite, messageStore: MessageStore, coreProtocols?: CoreProtocolRegistry): Promise<void>;
     /**
      * Fetches the protocol definition based on the protocol specified in the given message.
      * When `messageTimestamp` is provided, returns the protocol definition that was active at that
      * point in time — i.e. the ProtocolsConfigure with the greatest `messageTimestamp` that is <= the
      * given timestamp. When not provided, returns the latest (current) protocol definition.
+     *
+     * When `coreProtocols` is provided, core protocol definitions are returned directly from the
+     * registry without a message store query. The extra parameter does not affect the
+     * `FetchProtocolDefinitionFn` callback type — callers that pass this function as a callback
+     * should bind the registry via a closure (see `createBoundFetchDefinition`).
      */
-    static fetchProtocolDefinition(tenant: string, protocolUri: string, messageStore: MessageStore, messageTimestamp?: string): Promise<ProtocolDefinition>;
+    static fetchProtocolDefinition(tenant: string, protocolUri: string, messageStore: MessageStore, messageTimestamp?: string, coreProtocols?: CoreProtocolRegistry): Promise<ProtocolDefinition>;
     /**
-     * Gets the rule set corresponding to the given protocolPath.
+     * Creates a `FetchProtocolDefinitionFn` closure that binds the given `CoreProtocolRegistry`.
+     * This allows core protocol definitions to be resolved from the registry without changing
+     * the `FetchProtocolDefinitionFn` type signature — zero ripple to downstream consumers
+     * like `protocol-authorization-action.ts` and `protocol-authorization-validation.ts`.
      */
-    private static getRuleSet;
+    private static createBoundFetchDefinition;
     /**
-     * Returns all the ProtocolActions that would authorize the incoming message.
-     * Delegates to the standalone function in `protocol-authorization-action.ts`.
+     * Gets the rule set corresponding to the given protocolPath.
      */
-    private static getActionsSeekingARuleMatch;
+    private static getRuleSet;
 }
 //# sourceMappingURL=protocol-authorization.d.ts.map

package/dist/types/src/core/protocol-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol-authorization.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol-authorization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,KAAK,EAAE,kBAAkB,EAA8C,MAAM,6BAA6B,CAAC;AAkBlH;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,gBAAgB,CAAC,EAAE,MAAM,KACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEjC,qBAAa,qBAAqB;IAEhC;;;OAGG;WACiB,4BAA4B,CAC9C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,EAC7B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC;IAkDhB;;;OAGG;WACiB,cAAc,CAChC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,EAC7B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC;IAuDhB;;;;OAIG;WACiB,aAAa,CAC/B,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,WAAW,EAC5B,kBAAkB,EAAE,YAAY,EAChC,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC;WAmDI,yBAAyB,CAC3C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,YAAY,GAAG,gBAAgB,EAC/D,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC;IAsChB;;;OAGG;WACiB,eAAe,CACjC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,aAAa,EAC9B,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC;IAmDhB;;;;;OAKG;WACiB,uBAAuB,CACzC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,gBAAgB,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC,kBAAkB,CAAC;IAoC9B;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAYzB;;;OAGG;mBACkB,2BAA2B;CAOjD"}
+{"version":3,"file":"protocol-authorization.d.ts","sourceRoot":"","sources":["../../../../src/core/protocol-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,KAAK,EAAE,kBAAkB,EAA8C,MAAM,6BAA6B,CAAC;AAoBlH;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,gBAAgB,CAAC,EAAE,MAAM,KACtB,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEjC,qBAAa,qBAAqB;IAEhC;;;OAGG;WACiB,4BAA4B,CAC9C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,EAC7B,YAAY,EAAE,YAAY,EAC1B,aAAa,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,IAAI,CAAC;IA+DhB;;;OAGG;WACiB,cAAc,CAChC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,EAC7B,YAAY,EAAE,YAAY,EAC1B,aAAa,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,IAAI,CAAC;IA0DhB;;;;OAIG;WACiB,aAAa,CAC/B,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,WAAW,EAC5B,kBAAkB,EAAE,YAAY,EAChC,YAAY,EAAE,YAAY,EAC1B,aAAa,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,IAAI,CAAC;WAsDI,yBAAyB,CAC3C,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,YAAY,GAAG,YAAY,GAAG,gBAAgB,EAC/D,YAAY,EAAE,YAAY,EAC1B,aAAa,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,IAAI,CAAC;IA0ChB;;;OAGG;WACiB,eAAe,CACjC,MAAM,EAAE,MAAM,EACd,eAAe,EAAE,aAAa,EAC9B,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY,EAC1B,aAAa,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,IAAI,CAAC;IAsDhB;;;;;;;;;;OAUG;WACiB,uBAAuB,CACzC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,YAAY,EAC1B,gBAAgB,CAAC,EAAE,MAAM,EACzB,aAAa,CAAC,EAAE,oBAAoB,GACnC,OAAO,CAAC,kBAAkB,CAAC;IAuC9B;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,0BAA0B;IAWzC;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;CAY1B"}

package/dist/types/src/core/records-grant-authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"records-grant-authorization.d.ts","sourceRoot":"","sources":["../../../../src/core/records-grant-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAMlL,qBAAa,yBAAyB;IACpC;;OAEG;WACiB,cAAc,CAAC,KAAK,EAAE;QACxC,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBjB;;;OAGG;WACiB,aAAa,CAAC,KAAK,EAAE;QACvC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,2BAA2B,EAAE,mBAAmB,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjB;;;OAGG;WACiB,yBAAyB,CAAC,KAAK,EAAE;QACnD,eAAe,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;QACrF,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BjB;;;OAGG;WACiB,eAAe,CAAC,KAAK,EAAE;QACzC,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,oBAAoB,EAAE,mBAAmB,CAAC;QAC1C,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BjB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IAgC1B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;CAkBhC"}
+{"version":3,"file":"records-grant-authorization.d.ts","sourceRoot":"","sources":["../../../../src/core/records-grant-authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAExE,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAMlL,qBAAa,yBAAyB;IACpC;;OAEG;WACiB,cAAc,CAAC,KAAK,EAAE;QACxC,mBAAmB,EAAE,mBAAmB,CAAC;QACzC,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBjB;;;OAGG;WACiB,aAAa,CAAC,KAAK,EAAE;QACvC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,2BAA2B,EAAE,mBAAmB,CAAC;QACjD,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjB;;;OAGG;WACiB,yBAAyB,CAAC,KAAK,EAAE;QACnD,eAAe,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;QACrF,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBjB;;;OAGG;WACiB,eAAe,CAAC,KAAK,EAAE;QACzC,oBAAoB,EAAE,oBAAoB,CAAC;QAC3C,oBAAoB,EAAE,mBAAmB,CAAC;QAC1C,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,eAAe,CAAC;QACjC,YAAY,EAAE,YAAY,CAAC;KAC5B,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBjB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IAgC1B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;CAkBhC"}