@enbox/dwn-sdk-js 0.3.9 → 0.4.1

package/dist/esm/tests/features/records-record-limit.spec.js

@@ -2,21 +2,24 @@ import sinon from 'sinon';
 import { DataStream } from '../../src/utils/data-stream.js';
 import { DidKey } from '@enbox/dids';
 import { Dwn } from '../../src/dwn.js';
+import { DwnConstant } from '../../src/core/dwn-constant.js';
 import { DwnErrorCode } from '../../src/core/dwn-error.js';
 import { Jws } from '../../src/utils/jws.js';
 import { ProtocolsConfigure } from '../../src/interfaces/protocols-configure.js';
+import { RecordsRead } from '../../src/interfaces/records-read.js';
+import { sleep } from '@enbox/common';
 import { TestDataGenerator } from '../utils/test-data-generator.js';
 import { TestEventLog } from '../test-event-stream.js';
 import { TestStores } from '../test-stores.js';
 import { UniversalResolver } from '@enbox/dids';
 import { afterAll, beforeAll, beforeEach, describe, expect, it } from 'bun:test';
+import { DataStoreLevel, MessageStoreLevel, ResumableTaskStoreLevel } from '../../src/index.js';
 export function testRecordsRecordLimit() {
     describe('Records $recordLimit', () => {
         let didResolver;
         let messageStore;
         let dataStore;
         let resumableTaskStore;
-        let stateIndex;
         let eventLog;
         let dwn;
         // important to follow the `before` and `after` pattern to initialize and clean the stores in tests
@@ -27,20 +30,99 @@ export function testRecordsRecordLimit() {
             messageStore = stores.messageStore;
             dataStore = stores.dataStore;
             resumableTaskStore = stores.resumableTaskStore;
-            stateIndex = stores.stateIndex;
             eventLog = TestEventLog.get();
-            dwn = await Dwn.create({ didResolver, messageStore, dataStore, stateIndex, eventLog, resumableTaskStore });
+            dwn = await Dwn.create({ didResolver, messageStore, dataStore, eventLog, resumableTaskStore });
         });
         beforeEach(async () => {
             sinon.restore();
             await messageStore.clear();
             await dataStore.clear();
             await resumableTaskStore.clear();
-            await stateIndex.clear();
         });
         afterAll(async () => {
             await dwn.close();
         });
+        async function installProtocol(input) {
+            const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
+                author: input.author,
+                protocolDefinition: input.definition,
+                messageTimestamp: '2024-01-01T00:00:00.000000Z',
+            });
+            const reply = await (input.targetDwn ?? dwn).processMessage(input.author.did, protocolConfig.message);
+            expect(reply.status.code).toBe(202);
+        }
+        async function writeProtocolRecord(input) {
+            const record = await TestDataGenerator.generateRecordsWrite({
+                author: input.author,
+                recipient: input.author.did,
+                protocol: input.protocol,
+                protocolPath: input.protocolPath,
+                parentContextId: input.parentContextId,
+                dateCreated: input.dateCreated,
+                messageTimestamp: input.dateCreated,
+            });
+            const reply = await (input.targetDwn ?? dwn).processMessage(input.author.did, record.message, { dataStream: record.dataStream });
+            expect(reply.status.code).toBe(202);
+            return record;
+        }
+        async function queryProtocolRecordIds(input) {
+            const recordsQuery = await TestDataGenerator.generateRecordsQuery({
+                author: input.author,
+                filter: {
+                    protocol: input.protocol,
+                    protocolPath: input.protocolPath,
+                    ...(input.contextId === undefined ? {} : { contextId: input.contextId }),
+                },
+                pagination: input.pagination,
+            });
+            const reply = await (input.targetDwn ?? dwn).processMessage(input.author.did, recordsQuery.message);
+            expect(reply.status.code).toBe(200);
+            return {
+                recordIds: reply.entries?.map((entry) => entry.recordId) ?? [],
+                cursor: reply.cursor,
+            };
+        }
+        async function countProtocolRecords(input) {
+            const recordsCount = await TestDataGenerator.generateRecordsCount({
+                author: input.author,
+                filter: {
+                    protocol: input.protocol,
+                    protocolPath: input.protocolPath,
+                    ...(input.contextId === undefined ? {} : { contextId: input.contextId }),
+                },
+            });
+            const reply = await (input.targetDwn ?? dwn).processMessage(input.author.did, recordsCount.message);
+            expect(reply.status.code).toBe(200);
+            return reply.count;
+        }
+        async function readRecord(input) {
+            const recordsRead = await RecordsRead.create({
+                signer: Jws.createSigner(input.author),
+                filter: { recordId: input.recordId },
+            });
+            return await (input.targetDwn ?? dwn).processMessage(input.author.did, recordsRead.message);
+        }
+        async function subscribeSnapshotRecordIds(input) {
+            const recordsSubscribe = await TestDataGenerator.generateRecordsSubscribe({
+                author: input.author,
+                filter: {
+                    protocol: input.protocol,
+                    protocolPath: input.protocolPath,
+                },
+            });
+            const reply = await (input.targetDwn ?? dwn).processMessage(input.author.did, recordsSubscribe.message, { subscriptionHandler: () => { } });
+            expect(reply.status.code).toBe(200);
+            await reply.subscription?.close();
+            return reply.entries?.map((entry) => entry.recordId) ?? [];
+        }
+        async function applyReplicatedWrite(input) {
+            const result = await input.targetDwn.applyReplicatedMessage(input.tenant, input.record.message, {
+                dataStream: DataStream.fromBytes(input.record.dataBytes),
+            });
+            if (result.kind !== 'Applied' && result.kind !== 'Duplicate' && result.kind !== 'Superseded') {
+                throw new Error(`unexpected replicated write result ${result.kind}`);
+            }
+        }
         describe('ProtocolsConfigure validation', () => {
             it('should allow $recordLimit with valid max and strategy', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
@@ -85,6 +167,24 @@ export function testRecordsRecordLimit() {
                     strategy: 'reject',
                 });
             });
+            it('should reject $recordLimit above the supported max', async () => {
+                const alice = await TestDataGenerator.generateDidKeyPersona();
+                const definition = {
+                    protocol: 'http://example.com/record-limit',
+                    published: true,
+                    types: { message: {} },
+                    structure: {
+                        message: {
+                            $recordLimit: { max: DwnConstant.maxRecordLimit + 1, strategy: 'reject' },
+                        }
+                    }
+                };
+                const promise = ProtocolsConfigure.create({
+                    signer: Jws.createSigner(alice),
+                    definition,
+                });
+                await expect(promise).rejects.toThrow(DwnErrorCode.ProtocolsConfigureInvalidRecordLimit);
+            });
             it('should allow $recordLimit with purgeOldest strategy (schema validation only)', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
                 const definition = {
@@ -206,42 +306,11 @@ export function testRecordsRecordLimit() {
                 });
             });
         });
-        describe('runtime enforcement — reject strategy', () => {
-            it('should allow writes up to the record limit', async () => {
+        describe('read-time occupancy projection — reject strategy', () => {
+            it('should admit candidates and project Query, Read, and Count to top-ranked occupants', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
                 const protocolDefinition = {
-                    protocol: 'http://record-limit-test.xyz',
-                    published: true,
-                    types: { blob: {} },
-                    structure: {
-                        blob: {
-                            $recordLimit: { max: 3, strategy: 'reject' },
-                        }
-                    }
-                };
-                const protocol = protocolDefinition.protocol;
-                const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
-                    author: alice,
-                    protocolDefinition,
-                });
-                const configReply = await dwn.processMessage(alice.did, protocolConfig.message);
-                expect(configReply.status.code).toBe(202);
-                // write 3 records — all should succeed
-                for (let i = 0; i < 3; i++) {
-                    const record = await TestDataGenerator.generateRecordsWrite({
-                        author: alice,
-                        recipient: alice.did,
-                        protocol,
-                        protocolPath: 'blob',
-                    });
-                    const reply = await dwn.processMessage(alice.did, record.message, { dataStream: record.dataStream });
-                    expect(reply.status.code).toBe(202);
-                }
-            });
-            it('should reject writes that exceed the record limit', async () => {
-                const alice = await TestDataGenerator.generateDidKeyPersona();
-                const protocolDefinition = {
-                    protocol: 'http://record-limit-test.xyz',
+                    protocol: `http://record-limit-${TestDataGenerator.randomString(12)}.xyz`,
                     published: true,
                     types: { blob: {} },
                     structure: {
@@ -251,38 +320,44 @@ export function testRecordsRecordLimit() {
                     }
                 };
                 const protocol = protocolDefinition.protocol;
-                const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
+                await installProtocol({ author: alice, definition: protocolDefinition });
+                const record1 = await writeProtocolRecord({
                     author: alice,
-                    protocolDefinition,
+                    protocol,
+                    protocolPath: 'blob',
+                    dateCreated: '2025-01-01T00:00:00.000000Z',
                 });
-                const configReply = await dwn.processMessage(alice.did, protocolConfig.message);
-                expect(configReply.status.code).toBe(202);
-                // write 2 records — both should succeed
-                for (let i = 0; i < 2; i++) {
-                    const record = await TestDataGenerator.generateRecordsWrite({
-                        author: alice,
-                        recipient: alice.did,
-                        protocol,
-                        protocolPath: 'blob',
-                    });
-                    const reply = await dwn.processMessage(alice.did, record.message, { dataStream: record.dataStream });
-                    expect(reply.status.code).toBe(202);
-                }
-                // 3rd record should be rejected
-                const record3 = await TestDataGenerator.generateRecordsWrite({
+                const duplicateReply = await dwn.processMessage(alice.did, record1.message, {
+                    dataStream: DataStream.fromBytes(record1.dataBytes),
+                });
+                expect(duplicateReply.status.code).toBe(409);
+                const record2 = await writeProtocolRecord({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
                     protocolPath: 'blob',
+                    dateCreated: '2025-01-02T00:00:00.000000Z',
                 });
-                const reply3 = await dwn.processMessage(alice.did, record3.message, { dataStream: record3.dataStream });
-                expect(reply3.status.code).toBe(400);
-                expect(reply3.status.detail).toContain(DwnErrorCode.ProtocolAuthorizationRecordLimitExceeded);
+                const record3 = await writeProtocolRecord({
+                    author: alice,
+                    protocol,
+                    protocolPath: 'blob',
+                    dateCreated: '2025-01-03T00:00:00.000000Z',
+                });
+                expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'blob' })).recordIds).toEqual([
+                    record1.message.recordId,
+                    record2.message.recordId,
+                ]);
+                expect(await countProtocolRecords({ author: alice, protocol, protocolPath: 'blob' })).toBe(2);
+                const visibleRead = await readRecord({ author: alice, recordId: record1.message.recordId });
+                expect(visibleRead.status.code).toBe(200);
+                expect(visibleRead.entry?.recordsWrite?.recordId).toBe(record1.message.recordId);
+                const hiddenRead = await readRecord({ author: alice, recordId: record3.message.recordId });
+                expect(hiddenRead.status.code).toBe(404);
             });
-            it('should enforce $recordLimit with max of 1 (singleton pattern)', async () => {
+            it('should promote the next candidate at read time when the current occupant is deleted', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
                 const protocolDefinition = {
-                    protocol: 'http://record-limit-test.xyz',
+                    protocol: `http://record-limit-${TestDataGenerator.randomString(12)}.xyz`,
                     published: true,
                     types: { profile: {} },
                     structure: {
@@ -292,227 +367,377 @@ export function testRecordsRecordLimit() {
                     }
                 };
                 const protocol = protocolDefinition.protocol;
-                const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
+                await installProtocol({ author: alice, definition: protocolDefinition });
+                const record1 = await writeProtocolRecord({
                     author: alice,
-                    protocolDefinition,
-                });
-                const configReply = await dwn.processMessage(alice.did, protocolConfig.message);
-                expect(configReply.status.code).toBe(202);
-                // first record should succeed
-                const record1 = await TestDataGenerator.generateRecordsWrite({
-                    author: alice,
-                    recipient: alice.did,
                     protocol,
                     protocolPath: 'profile',
+                    dateCreated: '2025-01-01T00:00:00.000000Z',
                 });
-                const reply1 = await dwn.processMessage(alice.did, record1.message, { dataStream: record1.dataStream });
-                expect(reply1.status.code).toBe(202);
-                // exact duplicate delivery is idempotent and should not count the
-                // same recordId against its own singleton limit
-                const duplicateReply = await dwn.processMessage(alice.did, record1.message, {
-                    dataStream: DataStream.fromBytes(record1.dataBytes),
-                });
-                expect(duplicateReply.status.code).toBe(409);
-                // second record should be rejected
-                const record2 = await TestDataGenerator.generateRecordsWrite({
+                const record2 = await writeProtocolRecord({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
                     protocolPath: 'profile',
+                    dateCreated: '2025-01-02T00:00:00.000000Z',
                 });
-                const reply2 = await dwn.processMessage(alice.did, record2.message, { dataStream: record2.dataStream });
-                expect(reply2.status.code).toBe(400);
-                expect(reply2.status.detail).toContain(DwnErrorCode.ProtocolAuthorizationRecordLimitExceeded);
+                expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'profile' })).recordIds).toEqual([
+                    record1.message.recordId,
+                ]);
+                const deleteRecord = await TestDataGenerator.generateRecordsDelete({
+                    author: alice,
+                    recordId: record1.message.recordId,
+                });
+                const deleteReply = await dwn.processMessage(alice.did, deleteRecord.message);
+                expect(deleteReply.status.code).toBe(202);
+                expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'profile' })).recordIds).toEqual([
+                    record2.message.recordId,
+                ]);
+                expect((await readRecord({ author: alice, recordId: record2.message.recordId })).status.code).toBe(200);
             });
-            it('should allow new writes after records are deleted to free up space', async () => {
+            it('should project occupancy independently per exact parent context and reject broad cross-context queries', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
                 const protocolDefinition = {
-                    protocol: 'http://record-limit-test.xyz',
+                    protocol: `http://record-limit-${TestDataGenerator.randomString(12)}.xyz`,
                     published: true,
-                    types: { blob: {} },
+                    types: {
+                        room: {},
+                        message: {},
+                    },
                     structure: {
-                        blob: {
-                            $recordLimit: { max: 1, strategy: 'reject' },
+                        room: {
+                            message: {
+                                $recordLimit: { max: 2, strategy: 'reject' },
+                            }
                         }
                     }
                 };
                 const protocol = protocolDefinition.protocol;
-                const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
+                await installProtocol({ author: alice, definition: protocolDefinition });
+                const room1 = await writeProtocolRecord({
                     author: alice,
-                    protocolDefinition,
-                });
-                const configReply = await dwn.processMessage(alice.did, protocolConfig.message);
-                expect(configReply.status.code).toBe(202);
-                // write first record
-                const record1 = await TestDataGenerator.generateRecordsWrite({
-                    author: alice,
-                    recipient: alice.did,
                     protocol,
-                    protocolPath: 'blob',
+                    protocolPath: 'room',
+                    dateCreated: '2025-01-01T00:00:00.000000Z',
                 });
-                const reply1 = await dwn.processMessage(alice.did, record1.message, { dataStream: record1.dataStream });
-                expect(reply1.status.code).toBe(202);
-                // second write should be rejected
-                const record2 = await TestDataGenerator.generateRecordsWrite({
+                const room2 = await writeProtocolRecord({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
-                    protocolPath: 'blob',
+                    protocolPath: 'room',
+                    dateCreated: '2025-01-02T00:00:00.000000Z',
                 });
-                const reply2 = await dwn.processMessage(alice.did, record2.message, { dataStream: record2.dataStream });
-                expect(reply2.status.code).toBe(400);
-                // delete the first record
-                const deleteRecord = await TestDataGenerator.generateRecordsDelete({
+                const room1Messages = [
+                    await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'room/message',
+                        parentContextId: room1.message.contextId,
+                        dateCreated: '2025-02-01T00:00:00.000000Z',
+                    }),
+                    await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'room/message',
+                        parentContextId: room1.message.contextId,
+                        dateCreated: '2025-02-02T00:00:00.000000Z',
+                    }),
+                    await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'room/message',
+                        parentContextId: room1.message.contextId,
+                        dateCreated: '2025-02-03T00:00:00.000000Z',
+                    }),
+                ];
+                const room2Messages = [
+                    await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'room/message',
+                        parentContextId: room2.message.contextId,
+                        dateCreated: '2025-03-01T00:00:00.000000Z',
+                    }),
+                    await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'room/message',
+                        parentContextId: room2.message.contextId,
+                        dateCreated: '2025-03-02T00:00:00.000000Z',
+                    }),
+                    await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'room/message',
+                        parentContextId: room2.message.contextId,
+                        dateCreated: '2025-03-03T00:00:00.000000Z',
+                    }),
+                ];
+                expect((await queryProtocolRecordIds({
                     author: alice,
-                    recordId: record1.message.recordId,
-                });
-                const deleteReply = await dwn.processMessage(alice.did, deleteRecord.message);
-                expect(deleteReply.status.code).toBe(202);
-                // now a new write should succeed
-                const record3 = await TestDataGenerator.generateRecordsWrite({
+                    protocol,
+                    protocolPath: 'room/message',
+                    contextId: room1.message.contextId,
+                })).recordIds).toEqual([
+                    room1Messages[0].message.recordId,
+                    room1Messages[1].message.recordId,
+                ]);
+                expect((await queryProtocolRecordIds({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
-                    protocolPath: 'blob',
+                    protocolPath: 'room/message',
+                    contextId: room2.message.contextId,
+                })).recordIds).toEqual([
+                    room2Messages[0].message.recordId,
+                    room2Messages[1].message.recordId,
+                ]);
+                const broadQuery = await TestDataGenerator.generateRecordsQuery({
+                    author: alice,
+                    filter: {
+                        protocol,
+                        protocolPath: 'room/message',
+                    },
                 });
-                const reply3 = await dwn.processMessage(alice.did, record3.message, { dataStream: record3.dataStream });
-                expect(reply3.status.code).toBe(202);
+                const broadReply = await dwn.processMessage(alice.did, broadQuery.message);
+                expect(broadReply.status.code).toBe(400);
+                expect(broadReply.status.detail).toContain(DwnErrorCode.RecordsQueryNestedProtocolPathContextIdInvalid);
             });
-            it('should not count updates toward the record limit', async () => {
+            it('should paginate over the projected occupant set for max:N scopes', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
                 const protocolDefinition = {
-                    protocol: 'http://record-limit-test.xyz',
+                    protocol: `http://record-limit-${TestDataGenerator.randomString(12)}.xyz`,
                     published: true,
-                    types: { blob: {} },
+                    types: { item: {} },
                     structure: {
-                        blob: {
-                            $recordLimit: { max: 1, strategy: 'reject' },
+                        item: {
+                            $recordLimit: { max: 3, strategy: 'reject' },
                         }
                     }
                 };
                 const protocol = protocolDefinition.protocol;
-                const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
-                    author: alice,
-                    protocolDefinition,
-                });
-                const configReply = await dwn.processMessage(alice.did, protocolConfig.message);
-                expect(configReply.status.code).toBe(202);
-                // write the record
-                const record1 = await TestDataGenerator.generateRecordsWrite({
+                await installProtocol({ author: alice, definition: protocolDefinition });
+                const records = [];
+                for (let i = 1; i <= 5; i++) {
+                    records.push(await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'item',
+                        dateCreated: `2025-01-0${i}T00:00:00.000000Z`,
+                    }));
+                }
+                const page1 = await queryProtocolRecordIds({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
-                    protocolPath: 'blob',
-                });
-                const reply1 = await dwn.processMessage(alice.did, record1.message, { dataStream: record1.dataStream });
-                expect(reply1.status.code).toBe(202);
-                // update the same record — should succeed (not counted as new)
-                const updatedRecord = await TestDataGenerator.generateFromRecordsWrite({
+                    protocolPath: 'item',
+                    pagination: { limit: 2 },
+                });
+                expect(page1.recordIds).toEqual([
+                    records[0].message.recordId,
+                    records[1].message.recordId,
+                ]);
+                expect(page1.cursor).toBeDefined();
+                const page2 = await queryProtocolRecordIds({
                     author: alice,
-                    existingWrite: record1.recordsWrite,
+                    protocol,
+                    protocolPath: 'item',
+                    pagination: { limit: 2, cursor: page1.cursor },
                 });
-                const updateReply = await dwn.processMessage(alice.did, updatedRecord.message, { dataStream: updatedRecord.dataStream });
-                expect(updateReply.status.code).toBe(202);
+                expect(page2.recordIds).toEqual([records[2].message.recordId]);
+                expect(page2.cursor).toBeUndefined();
             });
-            it('should enforce $recordLimit per parent context for nested records', async () => {
+            it('should project RecordsSubscribe snapshots and suppress hidden live writes', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
                 const protocolDefinition = {
-                    protocol: 'http://record-limit-test.xyz',
+                    protocol: `http://record-limit-${TestDataGenerator.randomString(12)}.xyz`,
                     published: true,
-                    types: {
-                        room: {},
-                        message: {},
-                    },
+                    types: { status: {} },
                     structure: {
-                        room: {
-                            message: {
-                                $recordLimit: { max: 2, strategy: 'reject' },
-                            }
+                        status: {
+                            $recordLimit: { max: 1, strategy: 'reject' },
                         }
                     }
                 };
                 const protocol = protocolDefinition.protocol;
-                const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
+                await installProtocol({ author: alice, definition: protocolDefinition });
+                const visibleRecord = await writeProtocolRecord({
                     author: alice,
-                    protocolDefinition,
+                    protocol,
+                    protocolPath: 'status',
+                    dateCreated: '2025-01-01T00:00:00.000000Z',
                 });
-                const configReply = await dwn.processMessage(alice.did, protocolConfig.message);
-                expect(configReply.status.code).toBe(202);
-                // create two rooms
-                const room1 = await TestDataGenerator.generateRecordsWrite({
+                const hiddenRecord = await writeProtocolRecord({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
-                    protocolPath: 'room',
+                    protocolPath: 'status',
+                    dateCreated: '2025-01-02T00:00:00.000000Z',
+                });
+                expect(await subscribeSnapshotRecordIds({ author: alice, protocol, protocolPath: 'status' })).toEqual([
+                    visibleRecord.message.recordId,
+                ]);
+                const liveRecordIds = [];
+                const recordsSubscribe = await TestDataGenerator.generateRecordsSubscribe({
+                    author: alice,
+                    filter: {
+                        protocol,
+                        protocolPath: 'status',
+                    },
+                });
+                const subscribeReply = await dwn.processMessage(alice.did, recordsSubscribe.message, {
+                    subscriptionHandler: (subscriptionMessage) => {
+                        if (subscriptionMessage.type === 'event') {
+                            const eventMessage = subscriptionMessage.event.message;
+                            if (eventMessage.descriptor.method === 'Write' && 'recordId' in eventMessage && typeof eventMessage.recordId === 'string') {
+                                liveRecordIds.push(eventMessage.recordId);
+                            }
+                        }
+                    },
                 });
-                const room1Reply = await dwn.processMessage(alice.did, room1.message, { dataStream: room1.dataStream });
-                expect(room1Reply.status.code).toBe(202);
-                const room2 = await TestDataGenerator.generateRecordsWrite({
+                expect(subscribeReply.status.code).toBe(200);
+                const laterHiddenRecord = await writeProtocolRecord({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
-                    protocolPath: 'room',
+                    protocolPath: 'status',
+                    dateCreated: '2025-01-03T00:00:00.000000Z',
                 });
-                const room2Reply = await dwn.processMessage(alice.did, room2.message, { dataStream: room2.dataStream });
-                expect(room2Reply.status.code).toBe(202);
-                // write 2 messages in room1 — both should succeed
-                let firstRoom1Message;
-                for (let i = 0; i < 2; i++) {
-                    const msg = await TestDataGenerator.generateRecordsWrite({
+                expect(hiddenRecord.message.recordId).not.toBe(laterHiddenRecord.message.recordId);
+                await sleep(100);
+                expect(liveRecordIds).toEqual([]);
+                await subscribeReply.subscription?.close();
+            });
+            it('should converge projected query results when replicas create max:1 and max:N occupants offline', async () => {
+                const alice = await TestDataGenerator.generateDidKeyPersona();
+                const testId = TestDataGenerator.randomString(12);
+                const replicaAStore = new MessageStoreLevel({ location: `__TESTDATA__/record-limit-${testId}/message-a` });
+                const replicaADataStore = new DataStoreLevel({ blockstoreLocation: `__TESTDATA__/record-limit-${testId}/data-a` });
+                const replicaATaskStore = new ResumableTaskStoreLevel({ location: `__TESTDATA__/record-limit-${testId}/task-a` });
+                const replicaBStore = new MessageStoreLevel({ location: `__TESTDATA__/record-limit-${testId}/message-b` });
+                const replicaBDataStore = new DataStoreLevel({ blockstoreLocation: `__TESTDATA__/record-limit-${testId}/data-b` });
+                const replicaBTaskStore = new ResumableTaskStoreLevel({ location: `__TESTDATA__/record-limit-${testId}/task-b` });
+                const replicaA = await Dwn.create({
+                    didResolver: didResolver,
+                    messageStore: replicaAStore,
+                    dataStore: replicaADataStore,
+                    resumableTaskStore: replicaATaskStore,
+                });
+                const replicaB = await Dwn.create({
+                    didResolver: didResolver,
+                    messageStore: replicaBStore,
+                    dataStore: replicaBDataStore,
+                    resumableTaskStore: replicaBTaskStore,
+                });
+                try {
+                    const protocolDefinition = {
+                        protocol: `http://record-limit-offline-${testId}.xyz`,
+                        published: true,
+                        types: {
+                            note: {},
+                            profile: {},
+                        },
+                        structure: {
+                            note: {
+                                $recordLimit: { max: 2, strategy: 'reject' },
+                            },
+                            profile: {
+                                $recordLimit: { max: 1, strategy: 'reject' },
+                            }
+                        }
+                    };
+                    const protocol = protocolDefinition.protocol;
+                    await installProtocol({ author: alice, definition: protocolDefinition, targetDwn: replicaA });
+                    await installProtocol({ author: alice, definition: protocolDefinition, targetDwn: replicaB });
+                    const profileA = await writeProtocolRecord({
                         author: alice,
-                        recipient: alice.did,
                         protocol,
-                        protocolPath: 'room/message',
-                        parentContextId: room1.message.contextId,
+                        protocolPath: 'profile',
+                        dateCreated: '2025-01-01T00:00:00.000000Z',
+                        targetDwn: replicaA,
                     });
-                    const msgReply = await dwn.processMessage(alice.did, msg.message, { dataStream: msg.dataStream });
-                    expect(msgReply.status.code).toBe(202);
-                    firstRoom1Message ??= msg;
-                }
-                // exact duplicate nested delivery is idempotent within the parent context
-                const duplicateNestedReply = await dwn.processMessage(alice.did, firstRoom1Message.message, {
-                    dataStream: DataStream.fromBytes(firstRoom1Message.dataBytes),
-                });
-                expect(duplicateNestedReply.status.code).toBe(409);
-                // 3rd message in room1 should be rejected
-                const msg3 = await TestDataGenerator.generateRecordsWrite({
-                    author: alice,
-                    recipient: alice.did,
-                    protocol,
-                    protocolPath: 'room/message',
-                    parentContextId: room1.message.contextId,
-                });
-                const msg3Reply = await dwn.processMessage(alice.did, msg3.message, { dataStream: msg3.dataStream });
-                expect(msg3Reply.status.code).toBe(400);
-                expect(msg3Reply.status.detail).toContain(DwnErrorCode.ProtocolAuthorizationRecordLimitExceeded);
-                // but room2 still has capacity — write 2 messages
-                for (let i = 0; i < 2; i++) {
-                    const msg = await TestDataGenerator.generateRecordsWrite({
+                    const profileB = await writeProtocolRecord({
                         author: alice,
-                        recipient: alice.did,
                         protocol,
-                        protocolPath: 'room/message',
-                        parentContextId: room2.message.contextId,
+                        protocolPath: 'profile',
+                        dateCreated: '2025-01-02T00:00:00.000000Z',
+                        targetDwn: replicaB,
                     });
-                    const msgReply = await dwn.processMessage(alice.did, msg.message, { dataStream: msg.dataStream });
-                    expect(msgReply.status.code).toBe(202);
+                    const noteA1 = await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'note',
+                        dateCreated: '2025-02-01T00:00:00.000000Z',
+                        targetDwn: replicaA,
+                    });
+                    const noteB = await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'note',
+                        dateCreated: '2025-02-02T00:00:00.000000Z',
+                        targetDwn: replicaB,
+                    });
+                    const noteA2 = await writeProtocolRecord({
+                        author: alice,
+                        protocol,
+                        protocolPath: 'note',
+                        dateCreated: '2025-02-03T00:00:00.000000Z',
+                        targetDwn: replicaA,
+                    });
+                    await applyReplicatedWrite({ targetDwn: replicaA, tenant: alice.did, record: profileB });
+                    await applyReplicatedWrite({ targetDwn: replicaB, tenant: alice.did, record: profileA });
+                    await applyReplicatedWrite({ targetDwn: replicaA, tenant: alice.did, record: noteB });
+                    await applyReplicatedWrite({ targetDwn: replicaB, tenant: alice.did, record: noteA1 });
+                    await applyReplicatedWrite({ targetDwn: replicaB, tenant: alice.did, record: noteA2 });
+                    const expectedProfileIds = [profileA.message.recordId];
+                    const expectedNoteIds = [
+                        noteA1.message.recordId,
+                        noteB.message.recordId,
+                    ];
+                    expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'profile', targetDwn: replicaA })).recordIds).toEqual(expectedProfileIds);
+                    expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'profile', targetDwn: replicaB })).recordIds).toEqual(expectedProfileIds);
+                    expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'note', targetDwn: replicaA })).recordIds).toEqual(expectedNoteIds);
+                    expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'note', targetDwn: replicaB })).recordIds).toEqual(expectedNoteIds);
+                }
+                finally {
+                    await replicaAStore.clear();
+                    await replicaADataStore.clear();
+                    await replicaATaskStore.clear();
+                    await replicaBStore.clear();
+                    await replicaBDataStore.clear();
+                    await replicaBTaskStore.clear();
+                    await replicaA.close();
+                    await replicaB.close();
                 }
-                // 3rd message in room2 should also be rejected
-                const msg3Room2 = await TestDataGenerator.generateRecordsWrite({
+            });
+            it('should not count updates toward the record limit', async () => {
+                const alice = await TestDataGenerator.generateDidKeyPersona();
+                const protocolDefinition = {
+                    protocol: `http://record-limit-${TestDataGenerator.randomString(12)}.xyz`,
+                    published: true,
+                    types: { blob: {} },
+                    structure: {
+                        blob: {
+                            $recordLimit: { max: 1, strategy: 'reject' },
+                        }
+                    }
+                };
+                const protocol = protocolDefinition.protocol;
+                await installProtocol({ author: alice, definition: protocolDefinition });
+                const record = await writeProtocolRecord({
                     author: alice,
-                    recipient: alice.did,
                     protocol,
-                    protocolPath: 'room/message',
-                    parentContextId: room2.message.contextId,
+                    protocolPath: 'blob',
+                    dateCreated: '2025-01-01T00:00:00.000000Z',
+                });
+                const updatedRecord = await TestDataGenerator.generateFromRecordsWrite({
+                    author: alice,
+                    existingWrite: record.recordsWrite,
                 });
-                const msg3Room2Reply = await dwn.processMessage(alice.did, msg3Room2.message, { dataStream: msg3Room2.dataStream });
-                expect(msg3Room2Reply.status.code).toBe(400);
-                expect(msg3Room2Reply.status.detail).toContain(DwnErrorCode.ProtocolAuthorizationRecordLimitExceeded);
+                const updateReply = await dwn.processMessage(alice.did, updatedRecord.message, { dataStream: updatedRecord.dataStream });
+                expect(updateReply.status.code).toBe(202);
+                expect((await queryProtocolRecordIds({ author: alice, protocol, protocolPath: 'blob' })).recordIds).toEqual([
+                    record.message.recordId,
+                ]);
             });
             it('should reject purgeOldest strategy at write time with not-implemented error', async () => {
                 const alice = await TestDataGenerator.generateDidKeyPersona();
                 const protocolDefinition = {
-                    protocol: 'http://record-limit-test.xyz',
+                    protocol: `http://record-limit-${TestDataGenerator.randomString(12)}.xyz`,
                     published: true,
                     types: { blob: {} },
                     structure: {
@@ -522,31 +747,16 @@ export function testRecordsRecordLimit() {
                     }
                 };
                 const protocol = protocolDefinition.protocol;
-                const protocolConfig = await TestDataGenerator.generateProtocolsConfigure({
-                    author: alice,
-                    protocolDefinition,
-                });
-                const configReply = await dwn.processMessage(alice.did, protocolConfig.message);
-                expect(configReply.status.code).toBe(202);
-                // first record should succeed
-                const record1 = await TestDataGenerator.generateRecordsWrite({
-                    author: alice,
-                    recipient: alice.did,
-                    protocol,
-                    protocolPath: 'blob',
-                });
-                const reply1 = await dwn.processMessage(alice.did, record1.message, { dataStream: record1.dataStream });
-                expect(reply1.status.code).toBe(202);
-                // second record should fail because purgeOldest is not yet implemented
-                const record2 = await TestDataGenerator.generateRecordsWrite({
+                await installProtocol({ author: alice, definition: protocolDefinition });
+                const record = await TestDataGenerator.generateRecordsWrite({
                     author: alice,
                     recipient: alice.did,
                     protocol,
                     protocolPath: 'blob',
                 });
-                const reply2 = await dwn.processMessage(alice.did, record2.message, { dataStream: record2.dataStream });
-                expect(reply2.status.code).toBe(400);
-                expect(reply2.status.detail).toContain(DwnErrorCode.ProtocolAuthorizationRecordLimitStrategyNotImplemented);
+                const reply = await dwn.processMessage(alice.did, record.message, { dataStream: record.dataStream });
+                expect(reply.status.code).toBe(400);
+                expect(reply.status.detail).toContain(DwnErrorCode.ProtocolAuthorizationRecordLimitStrategyNotImplemented);
             });
         });
     });