@interop/wallet-core 0.101.1 → 0.103.0

package/dist/connections/grants.d.ts

@@ -1,4 +1,12 @@
 import type { ConnectionEntry, ConnectionZcap, GrantKind } from './entry.js';
+import type { PublishedKeyDocument } from '../webvh/index.js';
+/**
+ * The agent grant renewal window: ninety days before its `expires`, a grant
+ * to an agent is due for renewal. Distinct from the thirty-day window the
+ * standing recorded zcaps share, since an agent cannot ask the owner for a
+ * fresh grant on its own.
+ */
+export declare const AGENT_GRANT_RENEWAL_WINDOW_MS: number;
 /**
  * One grant that passed the reader checks, with the members a decision
  * reads taken off its capability.
@@ -17,7 +25,7 @@ export interface ConnectionGrant {
      */
     target: string;
     allowedAction?: string | string[];
-    expires?: string;
+    expires: string;
     grantKind: GrantKind;
     grantedAt: string;
     /**
@@ -83,8 +91,8 @@ export declare function grantTargets({ grants }: {
     grants: ConnectionGrant[];
 }): string[];
 /**
- * Splits grants into the live and the expired. A grant with no `expires` is
- * live. One whose `expires` is at or before `now` is expired.
+ * Splits grants into the live and the expired. A grant whose `expires` is at
+ * or before `now` is expired.
  *
  * @param options {object}
  * @param options.grants {ConnectionGrant[]}
@@ -109,4 +117,218 @@ export declare function splitGrantsByExpiry({ grants, now }: {
 export declare function grantRecipientKid({ grant }: {
     grant: ConnectionGrant;
 }): string | undefined;
+/**
+ * One received grant that passed the received-list checks, with the members
+ * a decision reads taken off its capability.
+ */
+export interface ConnectionReceivedGrant {
+    /**
+     * The capability's `id`.
+     */
+    zcapId: string;
+    /**
+     * The capability's `controller`, equal to the wallet's pairwise DID toward
+     * the party.
+     */
+    controller: string;
+    /**
+     * The capability's `invocationTarget`, outside this Space.
+     */
+    target: string;
+    allowedAction?: string | string[];
+    expires: string;
+    /**
+     * The record's `grantKind`, as stored.
+     */
+    grantKind: string;
+    receivedAt: string;
+    /**
+     * The stored capability, verbatim: what an invocation presents.
+     */
+    zcap: ConnectionZcap;
+}
+/**
+ * Whether a capability's action set names a verb. A string action is a
+ * one-member set.
+ *
+ * @param options {object}
+ * @param [options.allowedAction] {string | string[]}
+ * @param options.action {string}
+ * @returns {boolean}
+ */
+export declare function allowsAction({ allowedAction, action }: {
+    allowedAction?: string | string[];
+    action: string;
+}): boolean;
+/**
+ * A capability's action set as a sorted array: a string is a one-member
+ * set, and an absent member is the empty set.
+ *
+ * @param options {object}
+ * @param [options.allowedAction] {string | string[]}
+ * @returns {string[]}
+ */
+export declare function normalizedActions({ allowedAction }: {
+    allowedAction?: string | string[];
+}): string[];
+/**
+ * The scope key two capabilities share when one renews the other: the
+ * `controller`, the `invocationTarget` compared verbatim (a trailing `*`
+ * marker counts), and the normalized `allowedAction`. The renewal pivot and
+ * {@link latestGrantsPerScope} key on the same string.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ * @returns {string}
+ */
+export declare function grantScopeKey({ zcap }: {
+    zcap: ConnectionZcap;
+}): string;
+/**
+ * The received grants of one entry that pass the received-list checks, in
+ * stored order: the opposite rule to {@link connectionGrants}. A record is
+ * kept only when its `zcap.controller` is the wallet's pairwise DID toward
+ * the party and its `invocationTarget` is outside this Space. An `'inbox'`
+ * record must also allow `POST`. A retired entry yields none, since readers
+ * ignore the received list on a retired entry.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.pairwiseDid {string}   the wallet's pairwise DID toward the
+ *   party
+ * @param options.spaceUrl {string}   this Space's container URL
+ * @returns {ConnectionReceivedGrant[]}
+ */
+export declare function receivedGrants({ entry, pairwiseDid, spaceUrl }: {
+    entry: ConnectionEntry;
+    pairwiseDid: string;
+    spaceUrl: string;
+}): ConnectionReceivedGrant[];
+/**
+ * Whether a received grant has lapsed as of `now`: it lapses at the earlier
+ * of its `expires` and `receivedAt + maxLifetimeMs`. A record with an
+ * unparseable `receivedAt` reads as lapsed.
+ *
+ * @param options {object}
+ * @param options.grant {object}   the grant's `expires` and `receivedAt`: a
+ *   `ConnectionReceivedGrant`, or a stored record's members
+ * @param options.now {Date}
+ * @param options.maxLifetimeMs {number}   the longest a received grant is
+ *   used after it was stored
+ * @returns {boolean}
+ */
+export declare function receivedGrantLapsed({ grant, now, maxLifetimeMs }: {
+    grant: Pick<ConnectionReceivedGrant, 'expires' | 'receivedAt'>;
+    now: Date;
+    maxLifetimeMs: number;
+}): boolean;
+/**
+ * The live inbox channel: of the `'inbox'` received grants not lapsed
+ * ({@link receivedGrantLapsed}), the one with the greatest `expires`. A tie
+ * keeps the later record in stored order.
+ *
+ * @param options {object}
+ * @param options.grants {ConnectionReceivedGrant[]}   the received list, as
+ *   {@link receivedGrants} returns it
+ * @param options.now {Date}
+ * @param options.maxLifetimeMs {number}
+ * @returns {ConnectionReceivedGrant | undefined}
+ */
+export declare function liveInboxChannel({ grants, now, maxLifetimeMs }: {
+    grants: ConnectionReceivedGrant[];
+    now: Date;
+    maxLifetimeMs: number;
+}): ConnectionReceivedGrant | undefined;
+/**
+ * The latest grant per scope. A scope is the grant's `controller`, its
+ * `target` compared verbatim (a trailing `*` marker included), and its
+ * action set (a string is a one-member set, and order does not matter). The
+ * latest is the one with the greatest `expires`, and a tie keeps the later
+ * record in stored order. One grant per scope, in first-seen scope order.
+ *
+ * @param options {object}
+ * @param options.grants {ConnectionGrant[]}
+ * @returns {ConnectionGrant[]}
+ */
+export declare function latestGrantsPerScope({ grants }: {
+    grants: ConnectionGrant[];
+}): ConnectionGrant[];
+/**
+ * The index of the latest capability in each scope ({@link grantScopeKey})
+ * of a list: the greatest `expires`, a tie going to the later one. Scopes
+ * come out in first-seen order.
+ *
+ * @param options {object}
+ * @param options.zcaps {ConnectionZcap[]}
+ * @returns {Map<string, number>}   scope key to the latest capability's index
+ */
+export declare function latestIndexPerScope({ zcaps }: {
+    zcaps: ConnectionZcap[];
+}): Map<string, number>;
+/**
+ * The grants one connection request's consent produced: those sharing their
+ * `grantedAt` with an inbox grant on the same list (one targeting exactly
+ * this Space's inbox collection container and allowing `POST`), whose action
+ * set is exactly `GET` and `HEAD` on a Collection container, or exactly
+ * `POST` on the inbox. A write grant, and a read grant from another consent,
+ * are out of scope.
+ *
+ * @param options {object}
+ * @param options.grants {ConnectionGrant[]}
+ * @param options.spaceUrl {string}   this Space's container URL
+ * @returns {ConnectionGrant[]}
+ */
+export declare function renewalScopeGrants({ grants, spaceUrl }: {
+    grants: ConnectionGrant[];
+    spaceUrl: string;
+}): ConnectionGrant[];
+/**
+ * Whether a grant to an agent is due for renewal. A grant already past its
+ * `expires` is not due: it is gone, and a fresh consent replaces it. One
+ * inside the renewal window is due (`zcapExpiring`'s polarity). Past that, a
+ * grant whose embedded parent is
+ * not the generation delegation the account currently points at is dead by
+ * replacement and due, while its parent's own signer still stands under
+ * `capabilityDelegation`. When that signer has left the document the grant
+ * fails its proof check instead and is not due here. A root-anchored grant
+ * (no embedded parent) is not due on this axis. The document is consulted
+ * for the parent's signer only, since an annex VM that signs the leaf never
+ * appears in the account document.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ * @param [options.pointedDelegationId] {string}   the current generation
+ *   delegation's id, read from the account pointer's generation log head;
+ *   undefined when the document points at no generation
+ * @param options.doc {PublishedKeyDocument}   the locally verified account
+ *   document
+ * @param [options.renewalWindowMs] {number}
+ * @param [options.now] {number}   epoch milliseconds
+ * @returns {boolean}
+ */
+export declare function agentGrantDue({ zcap, pointedDelegationId, doc, renewalWindowMs, now }: {
+    zcap: ConnectionZcap;
+    pointedDelegationId?: string;
+    doc: PublishedKeyDocument;
+    renewalWindowMs?: number;
+    now?: number;
+}): boolean;
+/**
+ * The unretired agent entries holding at least one grant (through
+ * {@link connectionGrants}) a key signed. A root-anchored grant (no embedded
+ * parent) counts when its own proof names the key. A grant with an embedded
+ * parent counts when the parent's proof names the key, the parent's minter.
+ *
+ * @param options {object}
+ * @param options.entries {ConnectionEntry[]}
+ * @param options.keyId {string}   a verification-method id in either DID
+ *   form, or a bare multibase
+ * @param options.spaceUrl {string}   this Space's container URL
+ * @returns {ConnectionEntry[]}
+ */
+export declare function agentConnectionsSignedBy({ entries, keyId, spaceUrl }: {
+    entries: ConnectionEntry[];
+    keyId: string;
+    spaceUrl: string;
+}): ConnectionEntry[];
 //# sourceMappingURL=grants.d.ts.map

package/dist/connections/grants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/connections/grants.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE5E;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACjC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,IAAI,EAAE,cAAc,CAAA;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EACT,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAaV;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,KAAK,EACL,QAAQ,EACT,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,eAAe,EAAE,CAyBpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,QAAQ,EACT,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,MAAM,GAAG,SAAS,CAcrB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACP,EAAE;IACD,MAAM,EAAE,eAAe,EAAE,CAAA;CAC1B,GAAG,MAAM,EAAE,CAEX;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,GAAgB,EACjB,EAAE;IACD,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG;IAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAAC,OAAO,EAAE,eAAe,EAAE,CAAA;CAAE,CAc1D;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,KAAK,EACN,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;CACvB,GAAG,MAAM,GAAG,SAAS,CAErB"}
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/connections/grants.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAQ5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QAA2B,CAAA;AAErE;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,IAAI,EAAE,cAAc,CAAA;CACrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EACT,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,OAAO,CAaV;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,KAAK,EACL,QAAQ,EACT,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,eAAe,EAAE,CAuBpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,QAAQ,EACT,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,MAAM,GAAG,SAAS,CAcrB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACP,EAAE;IACD,MAAM,EAAE,eAAe,EAAE,CAAA;CAC1B,GAAG,MAAM,EAAE,CAEX;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,GAAgB,EACjB,EAAE;IACD,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,GAAG,CAAC,EAAE,IAAI,CAAA;CACX,GAAG;IAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAAC,OAAO,EAAE,eAAe,EAAE,CAAA;CAAE,CAW1D;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,KAAK,EACN,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;CACvB,GAAG,MAAM,GAAG,SAAS,CAErB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;IAClB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACjC,OAAO,EAAE,MAAM,CAAA;IACf;;OAEG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB;;OAEG;IACH,IAAI,EAAE,cAAc,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,EAC3B,aAAa,EACb,MAAM,EACP,EAAE;IACD,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACjC,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAEV;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,aAAa,EACd,EAAE;IACD,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAClC,GAAG,MAAM,EAAE,CAQX;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GAAG,MAAM,CAMxE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,EAC7B,KAAK,EACL,WAAW,EACX,QAAQ,EACT,EAAE;IACD,KAAK,EAAE,eAAe,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,uBAAuB,EAAE,CA+B5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,KAAK,EACL,GAAG,EACH,aAAa,EACd,EAAE;IACD,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,YAAY,CAAC,CAAA;IAC9D,GAAG,EAAE,IAAI,CAAA;IACT,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAUV;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,GAAG,EACH,aAAa,EACd,EAAE;IACD,MAAM,EAAE,uBAAuB,EAAE,CAAA;IACjC,GAAG,EAAE,IAAI,CAAA;IACT,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,uBAAuB,GAAG,SAAS,CAiBtC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,MAAM,EACP,EAAE;IACD,MAAM,EAAE,eAAe,EAAE,CAAA;CAC1B,GAAG,eAAe,EAAE,CAGpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,KAAK,EACN,EAAE;IACD,KAAK,EAAE,cAAc,EAAE,CAAA;CACxB,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CActB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,EACjC,MAAM,EACN,QAAQ,EACT,EAAE;IACD,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,eAAe,EAAE,CA0BpB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAAC,EAC5B,IAAI,EACJ,mBAAmB,EACnB,GAAG,EACH,eAA+C,EAC/C,GAAgB,EACjB,EAAE;IACD,IAAI,EAAE,cAAc,CAAA;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,GAAG,EAAE,oBAAoB,CAAA;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAeV;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,EACvC,OAAO,EACP,KAAK,EACL,QAAQ,EACT,EAAE;IACD,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;CACjB,GAAG,eAAe,EAAE,CAmBpB"}

package/dist/connections/grants.js

@@ -12,9 +12,25 @@
  * one party's id cannot steer a revocation at another party's capabilities.
  * A grant whose `zcap.invocationTarget` is not under this Space's container
  * URL is dropped, so no reader acts on a capability over another Space.
+ *
+ * The agent-connection readers sit beside them: the received list (the
+ * capabilities an agent handed the wallet, over targets outside this Space),
+ * the live inbox channel, the latest grant per scope, the grants one
+ * connection request's consent produced, the agent grant renewal predicate,
+ * and the agent entries one key signed grants for.
  */
+import { vmFragmentOf } from '@interop/vh-resource-log';
 import { connectionRecipientKid } from './didKey.js';
 import { grantKindOf } from './entry.js';
+import { INBOX_COLLECTION } from '../space/collections.js';
+import { delegationProofKeyId, delegationSignerGone, embeddedParentCapability, zcapExpiring } from '../webvh/index.js';
+/**
+ * The agent grant renewal window: ninety days before its `expires`, a grant
+ * to an agent is due for renewal. Distinct from the thirty-day window the
+ * standing recorded zcaps share, since an agent cannot ask the owner for a
+ * fresh grant on its own.
+ */
+export const AGENT_GRANT_RENEWAL_WINDOW_MS = 90 * 24 * 60 * 60 * 1000;
 /**
  * Whether a capability target sits under a Space's container URL. The target
  * is normalized by URL parsing first, so a dot segment cannot climb out of
@@ -62,10 +78,8 @@ export function connectionGrants({ entry, spaceUrl }) {
             zcapId: zcap.id,
             controller: zcap.controller,
             target: zcap.invocationTarget,
-            ...(zcap.allowedAction !== undefined && {
-                allowedAction: zcap.allowedAction
-            }),
-            ...(zcap.expires !== undefined && { expires: zcap.expires }),
+            allowedAction: zcap.allowedAction,
+            expires: zcap.expires,
             grantKind: grantKindOf(grant),
             grantedAt: grant.grantedAt,
             zcap
@@ -114,8 +128,8 @@ export function grantTargets({ grants }) {
     return [...new Set(grants.map(grant => grant.target))];
 }
 /**
- * Splits grants into the live and the expired. A grant with no `expires` is
- * live. One whose `expires` is at or before `now` is expired.
+ * Splits grants into the live and the expired. A grant whose `expires` is at
+ * or before `now` is expired.
  *
  * @param options {object}
  * @param options.grants {ConnectionGrant[]}
@@ -126,8 +140,7 @@ export function splitGrantsByExpiry({ grants, now = new Date() }) {
     const live = [];
     const expired = [];
     for (const grant of grants) {
-        if (grant.expires !== undefined &&
-            Date.parse(grant.expires) <= now.getTime()) {
+        if (Date.parse(grant.expires) <= now.getTime()) {
             expired.push(grant);
         }
         else {
@@ -147,4 +160,276 @@ export function splitGrantsByExpiry({ grants, now = new Date() }) {
 export function grantRecipientKid({ grant }) {
     return connectionRecipientKid({ did: grant.controller });
 }
+/**
+ * Whether a capability's action set names a verb. A string action is a
+ * one-member set.
+ *
+ * @param options {object}
+ * @param [options.allowedAction] {string | string[]}
+ * @param options.action {string}
+ * @returns {boolean}
+ */
+export function allowsAction({ allowedAction, action }) {
+    return normalizedActions({ allowedAction }).includes(action);
+}
+/**
+ * A capability's action set as a sorted array: a string is a one-member
+ * set, and an absent member is the empty set.
+ *
+ * @param options {object}
+ * @param [options.allowedAction] {string | string[]}
+ * @returns {string[]}
+ */
+export function normalizedActions({ allowedAction }) {
+    if (allowedAction === undefined) {
+        return [];
+    }
+    if (typeof allowedAction === 'string') {
+        return [allowedAction];
+    }
+    return [...allowedAction].sort();
+}
+/**
+ * The scope key two capabilities share when one renews the other: the
+ * `controller`, the `invocationTarget` compared verbatim (a trailing `*`
+ * marker counts), and the normalized `allowedAction`. The renewal pivot and
+ * {@link latestGrantsPerScope} key on the same string.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ * @returns {string}
+ */
+export function grantScopeKey({ zcap }) {
+    return JSON.stringify([
+        zcap.controller,
+        zcap.invocationTarget,
+        normalizedActions({ allowedAction: zcap.allowedAction })
+    ]);
+}
+/**
+ * The received grants of one entry that pass the received-list checks, in
+ * stored order: the opposite rule to {@link connectionGrants}. A record is
+ * kept only when its `zcap.controller` is the wallet's pairwise DID toward
+ * the party and its `invocationTarget` is outside this Space. An `'inbox'`
+ * record must also allow `POST`. A retired entry yields none, since readers
+ * ignore the received list on a retired entry.
+ *
+ * @param options {object}
+ * @param options.entry {ConnectionEntry}
+ * @param options.pairwiseDid {string}   the wallet's pairwise DID toward the
+ *   party
+ * @param options.spaceUrl {string}   this Space's container URL
+ * @returns {ConnectionReceivedGrant[]}
+ */
+export function receivedGrants({ entry, pairwiseDid, spaceUrl }) {
+    if (entry.retired !== undefined) {
+        return [];
+    }
+    const grants = [];
+    for (const record of entry.grantsReceived) {
+        const { zcap } = record;
+        if (zcap.controller !== pairwiseDid ||
+            isTargetInSpace({ target: zcap.invocationTarget, spaceUrl })) {
+            continue;
+        }
+        if (record.grantKind === 'inbox' &&
+            !allowsAction({ allowedAction: zcap.allowedAction, action: 'POST' })) {
+            continue;
+        }
+        grants.push({
+            zcapId: zcap.id,
+            controller: zcap.controller,
+            target: zcap.invocationTarget,
+            allowedAction: zcap.allowedAction,
+            expires: zcap.expires,
+            grantKind: record.grantKind,
+            receivedAt: record.receivedAt,
+            zcap
+        });
+    }
+    return grants;
+}
+/**
+ * Whether a received grant has lapsed as of `now`: it lapses at the earlier
+ * of its `expires` and `receivedAt + maxLifetimeMs`. A record with an
+ * unparseable `receivedAt` reads as lapsed.
+ *
+ * @param options {object}
+ * @param options.grant {object}   the grant's `expires` and `receivedAt`: a
+ *   `ConnectionReceivedGrant`, or a stored record's members
+ * @param options.now {Date}
+ * @param options.maxLifetimeMs {number}   the longest a received grant is
+ *   used after it was stored
+ * @returns {boolean}
+ */
+export function receivedGrantLapsed({ grant, now, maxLifetimeMs }) {
+    const receivedAt = Date.parse(grant.receivedAt);
+    if (Number.isNaN(receivedAt)) {
+        return true;
+    }
+    const lapsesAt = Math.min(receivedAt + maxLifetimeMs, Date.parse(grant.expires));
+    return lapsesAt <= now.getTime();
+}
+/**
+ * The live inbox channel: of the `'inbox'` received grants not lapsed
+ * ({@link receivedGrantLapsed}), the one with the greatest `expires`. A tie
+ * keeps the later record in stored order.
+ *
+ * @param options {object}
+ * @param options.grants {ConnectionReceivedGrant[]}   the received list, as
+ *   {@link receivedGrants} returns it
+ * @param options.now {Date}
+ * @param options.maxLifetimeMs {number}
+ * @returns {ConnectionReceivedGrant | undefined}
+ */
+export function liveInboxChannel({ grants, now, maxLifetimeMs }) {
+    let best;
+    let bestExpires = Number.NEGATIVE_INFINITY;
+    for (const grant of grants) {
+        if (grant.grantKind !== 'inbox' ||
+            receivedGrantLapsed({ grant, now, maxLifetimeMs })) {
+            continue;
+        }
+        const expiresAt = Date.parse(grant.expires);
+        if (best === undefined || expiresAt >= bestExpires) {
+            best = grant;
+            bestExpires = expiresAt;
+        }
+    }
+    return best;
+}
+/**
+ * The latest grant per scope. A scope is the grant's `controller`, its
+ * `target` compared verbatim (a trailing `*` marker included), and its
+ * action set (a string is a one-member set, and order does not matter). The
+ * latest is the one with the greatest `expires`, and a tie keeps the later
+ * record in stored order. One grant per scope, in first-seen scope order.
+ *
+ * @param options {object}
+ * @param options.grants {ConnectionGrant[]}
+ * @returns {ConnectionGrant[]}
+ */
+export function latestGrantsPerScope({ grants }) {
+    const latest = latestIndexPerScope({ zcaps: grants.map(grant => grant.zcap) });
+    return [...latest.values()].map(index => grants[index]);
+}
+/**
+ * The index of the latest capability in each scope ({@link grantScopeKey})
+ * of a list: the greatest `expires`, a tie going to the later one. Scopes
+ * come out in first-seen order.
+ *
+ * @param options {object}
+ * @param options.zcaps {ConnectionZcap[]}
+ * @returns {Map<string, number>}   scope key to the latest capability's index
+ */
+export function latestIndexPerScope({ zcaps }) {
+    const latest = new Map();
+    zcaps.forEach((zcap, index) => {
+        const scope = grantScopeKey({ zcap });
+        const held = latest.get(scope);
+        if (held === undefined ||
+            Date.parse(zcap.expires) >= Date.parse(zcaps[held].expires)) {
+            // Map.set on an existing key keeps the key's first-seen position.
+            latest.set(scope, index);
+        }
+    });
+    return latest;
+}
+/**
+ * The grants one connection request's consent produced: those sharing their
+ * `grantedAt` with an inbox grant on the same list (one targeting exactly
+ * this Space's inbox collection container and allowing `POST`), whose action
+ * set is exactly `GET` and `HEAD` on a Collection container, or exactly
+ * `POST` on the inbox. A write grant, and a read grant from another consent,
+ * are out of scope.
+ *
+ * @param options {object}
+ * @param options.grants {ConnectionGrant[]}
+ * @param options.spaceUrl {string}   this Space's container URL
+ * @returns {ConnectionGrant[]}
+ */
+export function renewalScopeGrants({ grants, spaceUrl }) {
+    const actionsOf = (grant) => normalizedActions({ allowedAction: grant.allowedAction }).join(' ');
+    const isInboxPostTarget = (grant) => collectionIdInSpace({ target: grant.target, spaceUrl }) === INBOX_COLLECTION;
+    const consentStamps = new Set(grants
+        .filter(grant => isInboxPostTarget(grant) &&
+        allowsAction({ allowedAction: grant.allowedAction, action: 'POST' }))
+        .map(grant => grant.grantedAt));
+    return grants.filter(grant => {
+        if (!consentStamps.has(grant.grantedAt)) {
+            return false;
+        }
+        const actions = actionsOf(grant);
+        if (actions === 'GET HEAD') {
+            return (collectionIdInSpace({ target: grant.target, spaceUrl }) !== undefined);
+        }
+        return actions === 'POST' && isInboxPostTarget(grant);
+    });
+}
+/**
+ * Whether a grant to an agent is due for renewal. A grant already past its
+ * `expires` is not due: it is gone, and a fresh consent replaces it. One
+ * inside the renewal window is due (`zcapExpiring`'s polarity). Past that, a
+ * grant whose embedded parent is
+ * not the generation delegation the account currently points at is dead by
+ * replacement and due, while its parent's own signer still stands under
+ * `capabilityDelegation`. When that signer has left the document the grant
+ * fails its proof check instead and is not due here. A root-anchored grant
+ * (no embedded parent) is not due on this axis. The document is consulted
+ * for the parent's signer only, since an annex VM that signs the leaf never
+ * appears in the account document.
+ *
+ * @param options {object}
+ * @param options.zcap {ConnectionZcap}
+ * @param [options.pointedDelegationId] {string}   the current generation
+ *   delegation's id, read from the account pointer's generation log head;
+ *   undefined when the document points at no generation
+ * @param options.doc {PublishedKeyDocument}   the locally verified account
+ *   document
+ * @param [options.renewalWindowMs] {number}
+ * @param [options.now] {number}   epoch milliseconds
+ * @returns {boolean}
+ */
+export function agentGrantDue({ zcap, pointedDelegationId, doc, renewalWindowMs = AGENT_GRANT_RENEWAL_WINDOW_MS, now = Date.now() }) {
+    if (Date.parse(zcap.expires) <= now) {
+        return false;
+    }
+    if (zcapExpiring({ expires: zcap.expires, windowMs: renewalWindowMs, now })) {
+        return true;
+    }
+    const parent = embeddedParentCapability(zcap);
+    if (parent === undefined) {
+        return false;
+    }
+    return (parent.id !== pointedDelegationId &&
+        !delegationSignerGone({ zcap: parent, doc }));
+}
+/**
+ * The unretired agent entries holding at least one grant (through
+ * {@link connectionGrants}) a key signed. A root-anchored grant (no embedded
+ * parent) counts when its own proof names the key. A grant with an embedded
+ * parent counts when the parent's proof names the key, the parent's minter.
+ *
+ * @param options {object}
+ * @param options.entries {ConnectionEntry[]}
+ * @param options.keyId {string}   a verification-method id in either DID
+ *   form, or a bare multibase
+ * @param options.spaceUrl {string}   this Space's container URL
+ * @returns {ConnectionEntry[]}
+ */
+export function agentConnectionsSignedBy({ entries, keyId, spaceUrl }) {
+    const key = vmFragmentOf(keyId) ?? keyId;
+    const signedBy = (zcap) => {
+        const proofKeyId = delegationProofKeyId(zcap);
+        return (proofKeyId !== undefined &&
+            (vmFragmentOf(proofKeyId) ?? proofKeyId) === key);
+    };
+    return entries.filter(entry => entry.kind === 'agent' &&
+        entry.retired === undefined &&
+        connectionGrants({ entry, spaceUrl }).some(grant => {
+            const zcap = grant.zcap;
+            const parent = embeddedParentCapability(zcap);
+            return signedBy(parent ?? zcap);
+        }));
+}
 //# sourceMappingURL=grants.js.map

package/dist/connections/grants.js.map

@@ -1 +1 @@
-{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/connections/grants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA8BxC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EAIT;IACC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,iDAAiD,QAAQ,IAAI,CAC9D,CAAA;IACH,CAAC;IACD,IAAI,UAAkB,CAAA;IACtB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,KAAK,EACL,QAAQ,EAIT;IACC,MAAM,MAAM,GAAsB,EAAE,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QACtB,IACE,KAAK,CAAC,EAAE,KAAK,SAAS;YACtB,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE;YAC5B,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAC7D,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,gBAAgB;YAC7B,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;gBACtC,aAAa,EAAE,IAAI,CAAC,aAAa;aAClC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5D,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI;SACL,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,MAAM,EACN,QAAQ,EAIT;IACC,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,MAAM,EAGP;IACC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,MAAM,EACN,GAAG,GAAG,IAAI,IAAI,EAAE,EAIjB;IACC,MAAM,IAAI,GAAsB,EAAE,CAAA;IAClC,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAC1C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,KAAK,EAGN;IACC,OAAO,sBAAsB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;AAC1D,CAAC"}
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/connections/grants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,EACxB,YAAY,EACb,MAAM,mBAAmB,CAAA;AAG1B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AA6BrE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,MAAM,EACN,QAAQ,EAIT;IACC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,iDAAiD,QAAQ,IAAI,CAC9D,CAAA;IACH,CAAC;IACD,IAAI,UAAkB,CAAA;IACtB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,KAAK,EACL,QAAQ,EAIT;IACC,MAAM,MAAM,GAAsB,EAAE,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;QACtB,IACE,KAAK,CAAC,EAAE,KAAK,SAAS;YACtB,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,EAAE;YAC5B,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAC7D,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,gBAAgB;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI;SACL,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,MAAM,EACN,QAAQ,EAIT;IACC,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,MAAM,EAGP;IACC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACxD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,MAAM,EACN,GAAG,GAAG,IAAI,IAAI,EAAE,EAIjB;IACC,MAAM,IAAI,GAAsB,EAAE,CAAA;IAClC,MAAM,OAAO,GAAsB,EAAE,CAAA;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,KAAK,EAGN;IACC,OAAO,sBAAsB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;AAC1D,CAAC;AAiCD;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,aAAa,EACb,MAAM,EAIP;IACC,OAAO,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,aAAa,EAGd;IACC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,aAAa,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAA;AAClC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,EAAE,IAAI,EAA4B;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,UAAU;QACf,IAAI,CAAC,gBAAgB;QACrB,iBAAiB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;KACzD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,KAAK,EACL,WAAW,EACX,QAAQ,EAKT;IACC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,MAAM,GAA8B,EAAE,CAAA;IAC5C,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;QACvB,IACE,IAAI,CAAC,UAAU,KAAK,WAAW;YAC/B,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAC5D,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IACE,MAAM,CAAC,SAAS,KAAK,OAAO;YAC5B,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EACpE,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,gBAAgB;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI;SACL,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,KAAK,EACL,GAAG,EACH,aAAa,EAKd;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CACvB,UAAU,GAAG,aAAa,EAC1B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAC1B,CAAA;IACD,OAAO,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,CAAA;AAClC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,MAAM,EACN,GAAG,EACH,aAAa,EAKd;IACC,IAAI,IAAyC,CAAA;IAC7C,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IACE,KAAK,CAAC,SAAS,KAAK,OAAO;YAC3B,mBAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,EAClD,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,IAAI,WAAW,EAAE,CAAC;YACnD,IAAI,GAAG,KAAK,CAAA;YACZ,WAAW,GAAG,SAAS,CAAA;QACzB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,MAAM,EAGP;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9E,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,KAAK,EAGN;IACC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC9B,IACE,IAAI,KAAK,SAAS;YAClB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,OAAO,CAAC,EAC5D,CAAC;YACD,kEAAkE;YAClE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,QAAQ,EAIT;IACC,MAAM,SAAS,GAAG,CAAC,KAAsB,EAAU,EAAE,CACnD,iBAAiB,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACrE,MAAM,iBAAiB,GAAG,CAAC,KAAsB,EAAW,EAAE,CAC5D,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,gBAAgB,CAAA;IAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,MAAM;SACH,MAAM,CACL,KAAK,CAAC,EAAE,CACN,iBAAiB,CAAC,KAAK,CAAC;QACxB,YAAY,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CACvE;SACA,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CACjC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC3B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QAChC,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,OAAO,CACL,mBAAmB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,SAAS,CACtE,CAAA;QACH,CAAC;QACD,OAAO,OAAO,KAAK,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,IAAI,EACJ,mBAAmB,EACnB,GAAG,EACH,eAAe,GAAG,6BAA6B,EAC/C,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAOjB;IACC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;QACpC,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAwB,CAAC,CAAA;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CACL,MAAM,CAAC,EAAE,KAAK,mBAAmB;QACjC,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAC7C,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,EACvC,OAAO,EACP,KAAK,EACL,QAAQ,EAKT;IACC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAA;IACxC,MAAM,QAAQ,GAAG,CAAC,IAAW,EAAW,EAAE;QACxC,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;QAC7C,OAAO,CACL,UAAU,KAAK,SAAS;YACxB,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,CACjD,CAAA;IACH,CAAC,CAAA;IACD,OAAO,OAAO,CAAC,MAAM,CACnB,KAAK,CAAC,EAAE,CACN,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,gBAAgB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACjD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAwB,CAAA;YAC3C,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;YAC7C,OAAO,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,CAAA;QACjC,CAAC,CAAC,CACL,CAAA;AACH,CAAC"}

package/dist/connections/index.d.ts

@@ -16,9 +16,16 @@
  * - The grant index the revocation orchestrators share
  *   (`connectionGrants`, `grantTargets`, `splitGrantsByExpiry`,
  *   `grantRecipientKid`), with the reader checks every reader applies.
+ * - The agent-connection readers: the received list (`receivedGrants`,
+ *   `receivedGrantLapsed`, `liveInboxChannel`), the latest grant per scope
+ *   (`latestGrantsPerScope`), a consent's renewal scope
+ *   (`renewalScopeGrants`), the renewal predicate (`agentGrantDue`,
+ *   `AGENT_GRANT_RENEWAL_WINDOW_MS`), and `agentConnectionsSignedBy`.
  * - The upsert helpers (`recordGrants`, `removeGrants`, `retireConnection`,
  *   `unretireConnection`, `setConnectionLabel`) and their kind refusal
- *   (`ConnectionKindMismatchError`).
+ *   (`ConnectionKindMismatchError`), and the agent-connection helpers
+ *   (`recordReceivedGrants`, `recordRenewedGrants`, `settleOutboxItem`,
+ *   `pruneSupersededGrants`, `clearReceivedGrants`, `markDeclined`).
  * - The writer arm: lazy registration (`registerConnectionWriter`), the
  *   pull-path touch (`touchConnectionWriter`), the per-entry sweep
  *   (`sweepConnectionWriters`), and `resolveWriter` for history views.
@@ -26,19 +33,19 @@
  *   and the account document, and `normalizeDisplayName`, the one name rule
  *   every producer writes `name` through.
  */
-export { CONNECTION_ENTRY_VERSION, CONNECTION_KINDS, CONNECTION_WRITER_POLICY, GRANT_KINDS, connectionKindOf, connectionWriterPolicy, grantKindOf, isWritableConnectionEntry, parseConnectionEntry } from './entry.js';
-export type { ConnectionEntry, ConnectionGrantRecord, ConnectionKind, ConnectionWriter, ConnectionWriterPolicy, ConnectionZcap, GrantKind } from './entry.js';
-export { CONNECTIONS_ID_PREFIX, connectionResourceId } from './resourceId.js';
+export { CONNECTION_ENTRY_VERSION, CONNECTION_KINDS, CONNECTION_SEED_BYTES, CONNECTION_WRITER_POLICY, GRANT_KINDS, RECEIVED_GRANT_KINDS, connectionKindOf, decodeConnectionSeed, connectionWriterPolicy, grantKindOf, isWritableConnectionEntry, parseConnectionEntry } from './entry.js';
+export type { ConnectionEntry, ConnectionGrantRecord, ConnectionKind, ConnectionOutboxItem, ConnectionReceivedGrantRecord, ConnectionWriter, ConnectionWriterPolicy, ConnectionZcap, GrantKind, ReceivedGrantKind } from './entry.js';
+export { CONNECTIONS_ID_PREFIX, connectionResourceId, connectionSeedTag, verifyConnectionSeedTag } from './resourceId.js';
 export type { ConnectionIdKey } from './resourceId.js';
 export { wasConnectionsStore } from './store.js';
 export type { ConnectionsStore, StoredConnection } from './store.js';
 export { findConnection, readConnections } from './read.js';
 export type { ConnectionsListing, ReadConnection } from './read.js';
-export { collectionIdInSpace, connectionGrants, grantRecipientKid, grantTargets, isTargetInSpace, splitGrantsByExpiry } from './grants.js';
-export type { ConnectionGrant } from './grants.js';
-export { connectionRecipientKid, signingKeyMultibaseOfDid } from './didKey.js';
+export { AGENT_GRANT_RENEWAL_WINDOW_MS, agentConnectionsSignedBy, agentGrantDue, collectionIdInSpace, connectionGrants, grantRecipientKid, grantTargets, isTargetInSpace, grantScopeKey, latestGrantsPerScope, latestIndexPerScope, liveInboxChannel, receivedGrantLapsed, receivedGrants, renewalScopeGrants, splitGrantsByExpiry } from './grants.js';
+export type { ConnectionGrant, ConnectionReceivedGrant } from './grants.js';
+export { connectionDidKey, connectionRecipientKid, signingKeyMultibaseOfDid } from './didKey.js';
 export { ConnectionKindMismatchError } from './errors.js';
-export { recordGrants, removeGrants, retireConnection, setConnectionLabel, unretireConnection } from './upsert.js';
+export { clearReceivedGrants, markDeclined, pruneSupersededGrants, recordGrants, recordReceivedGrants, recordRenewedGrants, removeGrants, retireConnection, setConnectionLabel, settleOutboxItem, unretireConnection } from './upsert.js';
 export type { ConnectionWriteOutcome, ConnectionWriteResult } from './upsert.js';
 export { registerConnectionWriter, resolveWriter, sweepConnectionWriters, touchConnectionWriter } from './writers.js';
 export type { ConnectionWritersSweep, ResolvedWriter, WriterFirstSeenRecord, WriterFirstSeenStore, WriterRegistrationOutcome, WriterTouchOutcome } from './writers.js';