@xnetjs/data 0.0.3 → 0.1.1

package/dist/account-MWNCH4GJ.js

@@ -0,0 +1,12 @@
+import {
+  ACCOUNT_SCHEMA_IRI,
+  AccountSchema
+} from "./chunk-XMSKJ5PV.js";
+import "./chunk-OCMSAKWV.js";
+import "./chunk-T5AZAOG5.js";
+import "./chunk-EBNMV2VO.js";
+import "./chunk-RL64OJJ5.js";
+export {
+  ACCOUNT_SCHEMA_IRI,
+  AccountSchema
+};

package/dist/account-ledger-R2GAFJL6.js

@@ -0,0 +1,38 @@
+import {
+  ACCOUNT_RECORD_SCHEMA_IRI,
+  AccountRecordSchema,
+  DEVICE_RECORD_SCHEMA_IRI,
+  DeviceRecordSchema,
+  RECOVERY_RECORD_SCHEMA_IRI,
+  REVOCATION_RECORD_SCHEMA_IRI,
+  RecoveryRecordSchema,
+  RevocationRecordSchema,
+  accountRecordId,
+  deviceRecipientExpander,
+  deviceRecordId,
+  isDeviceAuthorized,
+  recoveryRecordId,
+  resolveActiveDevices,
+  revocationRecordId,
+  revokedSubjects
+} from "./chunk-KQUALW4O.js";
+import "./chunk-EBNMV2VO.js";
+import "./chunk-RL64OJJ5.js";
+export {
+  ACCOUNT_RECORD_SCHEMA_IRI,
+  AccountRecordSchema,
+  DEVICE_RECORD_SCHEMA_IRI,
+  DeviceRecordSchema,
+  RECOVERY_RECORD_SCHEMA_IRI,
+  REVOCATION_RECORD_SCHEMA_IRI,
+  RecoveryRecordSchema,
+  RevocationRecordSchema,
+  accountRecordId,
+  deviceRecipientExpander,
+  deviceRecordId,
+  isDeviceAuthorized,
+  recoveryRecordId,
+  resolveActiveDevices,
+  revocationRecordId,
+  revokedSubjects
+};

package/dist/auth/index.d.ts

@@ -1,12 +1,12 @@
 import { AllowExpr, DenyExpr, AuthExpression, AndExpr, OrExpr, NotExpr, PublicExpr, AuthenticatedExpr, CreatorRoleResolver, PropertyRoleResolver, RelationRoleResolver, MembershipRoleResolver, AuthorizationDefinition, SerializedAuthorization, SerializedAuthExpression, DID } from '@xnetjs/core';
 export { AUTH_ACTIONS, AllowExpr, AndExpr, AuthAction, AuthCheckInput, AuthDecision, AuthDenyReason, AuthExpression, AuthTrace, AuthTraceStep, AuthenticatedExpr, AuthorizationDefinition, CreatorRoleResolver, DenyExpr, MembershipRoleResolver, NotExpr, OrExpr, PolicyEvaluator, PropertyRoleResolver, PublicExpr, RelationRoleResolver, RoleRefExpr, RoleResolver, SerializedAuthExpression, SerializedAuthorization, SerializedRoleResolver } from '@xnetjs/core';
-import { E as PropertyDefinition, a as Schema, h as NodeState, S as SchemaIRI } from '../types-Def-5Nka.js';
-export { aX as DEFAULT_OFFLINE_POLICY, aV as GRANT_SCHEMA_IRI, b1 as Grant, w as GrantIndex, b6 as GrantIndexOptions, b5 as GrantIndexStore, b0 as GrantInput, b4 as GrantNode, aU as GrantRateLimiter, b9 as GrantRateLimiterOptions, O as OfflineAuthPolicy, b8 as RevocationConfig, b7 as RevocationConsistency, aT as StoreAuth, e as StoreAuthAPI, b2 as StoreAuthError, b3 as StoreAuthErrorCode, a$ as StoreAuthKeyManager, aZ as StoreAuthOptions, a_ as StoreAuthStore, aW as isGrantActive, aY as mergeOfflinePolicy } from '../types-Def-5Nka.js';
-export { A as ActionPermission, m as AuthDecisionEvent, b as DecisionCache, g as DecisionCacheOptions, D as DefaultPolicyEvaluator, j as DefaultPolicyEvaluatorOptions, a as DefaultRoleResolver, i as DefaultRoleResolverOptions, k as DefinedSchemaLike, G as GrantExpirationCleaner, o as GrantExpirationCleanerOptions, n as GrantExpirationStore, H as HubPolicy, N as NodeStoreReader, P as PermissionMatrix, l as RevalidationEvent, R as RoleSummary, S as SchemaRegistryReader, c as buildPermissionMatrix, f as createPolicyEvaluator, d as describeRoleResolver, e as evaluateExpression, h as hubActionsForSpaceRole, s as schemaToHubPolicy } from '../grant-expiration-cleaner-DBiNTWbD.js';
+import { E as PropertyDefinition, a as Schema, h as NodeState, S as SchemaIRI } from '../types-S-BJAKyK.js';
+export { aX as DEFAULT_OFFLINE_POLICY, aV as GRANT_SCHEMA_IRI, b1 as Grant, w as GrantIndex, b6 as GrantIndexOptions, b5 as GrantIndexStore, b0 as GrantInput, b4 as GrantNode, aU as GrantRateLimiter, b9 as GrantRateLimiterOptions, O as OfflineAuthPolicy, b8 as RevocationConfig, b7 as RevocationConsistency, aT as StoreAuth, e as StoreAuthAPI, b2 as StoreAuthError, b3 as StoreAuthErrorCode, a$ as StoreAuthKeyManager, aZ as StoreAuthOptions, a_ as StoreAuthStore, aW as isGrantActive, aY as mergeOfflinePolicy } from '../types-S-BJAKyK.js';
+export { A as ActionPermission, m as AuthDecisionEvent, b as DecisionCache, g as DecisionCacheOptions, D as DefaultPolicyEvaluator, j as DefaultPolicyEvaluatorOptions, a as DefaultRoleResolver, i as DefaultRoleResolverOptions, k as DefinedSchemaLike, G as GrantExpirationCleaner, o as GrantExpirationCleanerOptions, n as GrantExpirationStore, H as HubPolicy, N as NodeStoreReader, P as PermissionMatrix, l as RevalidationEvent, R as RoleSummary, S as SchemaRegistryReader, c as buildPermissionMatrix, f as createPolicyEvaluator, d as describeRoleResolver, e as evaluateExpression, h as hubActionsForSpaceRole, s as schemaToHubPolicy } from '../grant-expiration-cleaner-CY6BcmlR.js';
 import { PublicKeyResolver } from '@xnetjs/crypto';
 import '@xnetjs/sqlite';
 import '@xnetjs/sync';
-import '../registry-CQoN_p8U.js';
+import '../registry-DunPv__d.js';
 
 /**
  * Authorization expression builders for schema definitions.
@@ -350,6 +350,13 @@ interface RecipientDependencies {
     listNodes?: (schemaId: string) => Promise<NodeState[]>;
     grantIndex?: GrantIndexReader;
     maxDepth?: number;
+    /**
+     * Account/device re-wrap (exploration 0243, P2.3). When set, each DID recipient is
+     * expanded to every active device of the account it belongs to, so a user's content
+     * is decryptable on all their devices. Build it with `deviceRecipientExpander` from
+     * the ledger records. Omitted → recipients are exactly the resolved DIDs (no change).
+     */
+    expandDeviceRecipients?: (did: DID) => readonly string[];
 }
 declare function computeRecipients(schema: Schema, node: NodeState, dependencies: RecipientDependencies): Promise<Recipient[]>;
 declare function hasRecipientsChanged(previous: Recipient[], next: Recipient[]): boolean;

package/dist/auth/index.js

@@ -48,7 +48,7 @@ import {
   serializeAuthorization,
   validateAuthorization,
   warnLegacySchema
-} from "../chunk-JESSJ5CZ.js";
+} from "../chunk-RL64OJJ5.js";
 export {
   AUTHENTICATED,
   AUTH_ACTIONS,

package/dist/budget-NN7P35XP.js

@@ -0,0 +1,12 @@
+import {
+  BUDGET_SCHEMA_IRI,
+  BudgetSchema
+} from "./chunk-ZPZ7XDA6.js";
+import "./chunk-OCMSAKWV.js";
+import "./chunk-T5AZAOG5.js";
+import "./chunk-EBNMV2VO.js";
+import "./chunk-RL64OJJ5.js";
+export {
+  BUDGET_SCHEMA_IRI,
+  BudgetSchema
+};

package/dist/canvas-6WYBNH53.js

@@ -0,0 +1,10 @@
+import {
+  CanvasSchema
+} from "./chunk-LYSWLCOI.js";
+import "./chunk-OCMSAKWV.js";
+import "./chunk-T5AZAOG5.js";
+import "./chunk-EBNMV2VO.js";
+import "./chunk-RL64OJJ5.js";
+export {
+  CanvasSchema
+};

package/dist/channel-AT3LQF4A.js

@@ -0,0 +1,12 @@
+import {
+  CHANNEL_KINDS,
+  ChannelSchema
+} from "./chunk-ZCOFZY5M.js";
+import "./chunk-OCMSAKWV.js";
+import "./chunk-T5AZAOG5.js";
+import "./chunk-EBNMV2VO.js";
+import "./chunk-RL64OJJ5.js";
+export {
+  CHANNEL_KINDS,
+  ChannelSchema
+};

package/dist/chat-message-DSVO72B3.js

@@ -0,0 +1,10 @@
+import {
+  ChatMessageSchema
+} from "./chunk-Q3IEGH4B.js";
+import "./chunk-OCMSAKWV.js";
+import "./chunk-T5AZAOG5.js";
+import "./chunk-EBNMV2VO.js";
+import "./chunk-RL64OJJ5.js";
+export {
+  ChatMessageSchema
+};

package/dist/{chunk-J6EDPPH4.js → chunk-2ZNJWIQG.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-6OPZJ7MG.js";
+} from "./chunk-OCMSAKWV.js";
 import {
   defineSchema,
   file,
@@ -8,7 +8,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/transcription.ts
 var TRANSCRIPTION_SCHEMA_IRI = "xnet://xnet.fyi/Transcription@1.0.0";

package/dist/{chunk-5FHJE7RC.js → chunk-3J3HILXO.js}

@@ -4,10 +4,10 @@ import {
   number,
   select,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 import {
   presets
-} from "./chunk-JESSJ5CZ.js";
+} from "./chunk-RL64OJJ5.js";
 
 // src/schema/schemas/media-asset.ts
 var MediaAssetSchema = defineSchema({

package/dist/{chunk-EZA5UT4Y.js → chunk-3RUDVTMH.js}

@@ -5,7 +5,7 @@ import {
   ExtensionFieldSchema,
   SchemaExtensionSchema,
   schemaExtensionId
-} from "./chunk-WUR3WWQM.js";
+} from "./chunk-WEPK7SZF.js";
 import {
   MAX_KEY_LENGTH,
   compareSortKeys,
@@ -16,19 +16,19 @@ import {
 } from "./chunk-QWFTRZQT.js";
 import {
   DatabaseRowSchema
-} from "./chunk-SPFKSTPT.js";
+} from "./chunk-DWEXKD6E.js";
 import {
   DatabaseFieldSchema
-} from "./chunk-UDUPQKRB.js";
+} from "./chunk-KQAT4XBL.js";
 import {
   DatabaseSelectOptionSchema
-} from "./chunk-37267RSF.js";
+} from "./chunk-6OMG4I7M.js";
 import {
   DatabaseViewSchema
-} from "./chunk-XTUGZSYQ.js";
+} from "./chunk-H4GA4BBK.js";
 import {
   createNodeQueryDescriptor
-} from "./chunk-S4B5OPZU.js";
+} from "./chunk-S5RP5RKY.js";
 
 // src/database/cell-types.ts
 var CELL_PREFIX = "cell_";

package/dist/{chunk-YEQ6LLUY.js → chunk-4EYKGTSQ.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-6OPZJ7MG.js";
+} from "./chunk-OCMSAKWV.js";
 import {
   defineSchema,
   json,
   relation,
   select,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/task-view.ts
 var TaskViewSchema = defineSchema({

package/dist/{chunk-L66WXPTW.js → chunk-53F4PRNC.js}

@@ -2,10 +2,10 @@ import {
   defineSchema,
   json,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 import {
   presets
-} from "./chunk-JESSJ5CZ.js";
+} from "./chunk-RL64OJJ5.js";
 
 // src/schema/schemas/user-widget.ts
 var UserWidgetSchema = defineSchema({

package/dist/{chunk-LGD72FVD.js → chunk-5EXHNXPL.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-6OPZJ7MG.js";
+} from "./chunk-OCMSAKWV.js";
 import {
   created,
   createdBy,
@@ -9,7 +9,7 @@ import {
   relation,
   text,
   url
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/feed-item.ts
 var FEED_ITEM_SCHEMA_IRI = "xnet://xnet.fyi/FeedItem@1.0.0";

package/dist/{chunk-4U4KBCDN.js → chunk-5HC5NO57.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-6OPZJ7MG.js";
+} from "./chunk-OCMSAKWV.js";
 import {
   checkbox,
   created,
@@ -13,7 +13,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/comment.ts
 var CommentSchema = defineSchema({

package/dist/{chunk-YWN27MLD.js → chunk-6KLGA6IR.js}

@@ -4,10 +4,10 @@ import {
   createdBy,
   defineSchema,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 import {
   presets
-} from "./chunk-JESSJ5CZ.js";
+} from "./chunk-RL64OJJ5.js";
 
 // src/schema/schemas/tag.ts
 var TAG_SCHEMA_IRI = "xnet://xnet.fyi/Tag@1.0.0";

package/dist/{chunk-37267RSF.js → chunk-6OMG4I7M.js}

@@ -1,11 +1,11 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-6OPZJ7MG.js";
+} from "./chunk-OCMSAKWV.js";
 import {
   defineSchema,
   relation,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/database-select-option.ts
 var DatabaseSelectOptionSchema = defineSchema({

package/dist/{chunk-DOZJXPQ6.js → chunk-BQLQSWKZ.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-6OPZJ7MG.js";
+} from "./chunk-OCMSAKWV.js";
 import {
   date,
   defineSchema,
@@ -11,7 +11,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/game.ts
 var GAME_NAMESPACE = "xnet://xnet.fyi/";

package/dist/{chunk-V6HZ3LF3.js → chunk-BY5O6LNC.js}

@@ -5,7 +5,7 @@ import {
   person,
   select,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/system.ts
 import { base64ToBytes, hashHex, verify } from "@xnetjs/crypto";

package/dist/{chunk-64AM6JPM.js → chunk-DCTRX6II.js}

@@ -4,7 +4,7 @@ import {
   defineSchema,
   person,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/profile.ts
 var ProfileSchema = defineSchema({

package/dist/{chunk-SPFKSTPT.js → chunk-DWEXKD6E.js}

@@ -1,11 +1,11 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-6OPZJ7MG.js";
+} from "./chunk-OCMSAKWV.js";
 import {
   defineSchema,
   relation,
   text
-} from "./chunk-O64EK5FK.js";
+} from "./chunk-EBNMV2VO.js";
 
 // src/schema/schemas/database-row.ts
 var DatabaseRowSchema = defineSchema({

package/dist/{chunk-O64EK5FK.js → chunk-EBNMV2VO.js}

@@ -2,7 +2,7 @@ import {
   serializeAuthorization,
   validateAuthorization,
   warnLegacySchema
-} from "./chunk-JESSJ5CZ.js";
+} from "./chunk-RL64OJJ5.js";
 
 // src/schema/node.ts
 import { nanoid } from "nanoid";
@@ -73,7 +73,16 @@ var AUTH_EXEMPT_SCHEMA_IRIS = /* @__PURE__ */ new Set([
   "xnet://xnet.fyi/SyncPolicy@1.0.0",
   "xnet://xnet.fyi/SyncPolicy",
   "xnet://xnet.fyi/PresenceSummary@1.0.0",
-  "xnet://xnet.fyi/PresenceSummary"
+  "xnet://xnet.fyi/PresenceSummary",
+  // Account/device ledger (0149/0243) — controller-signed + epoch-gated, hub-enforced.
+  "xnet://xnet.fyi/AccountRecord@1.0.0",
+  "xnet://xnet.fyi/AccountRecord",
+  "xnet://xnet.fyi/DeviceRecord@1.0.0",
+  "xnet://xnet.fyi/DeviceRecord",
+  "xnet://xnet.fyi/RecoveryRecord@1.0.0",
+  "xnet://xnet.fyi/RecoveryRecord",
+  "xnet://xnet.fyi/RevocationRecord@1.0.0",
+  "xnet://xnet.fyi/RevocationRecord"
 ]);
 function isAuthExemptSchema(schemaId) {
   return AUTH_EXEMPT_SCHEMA_IRIS.has(schemaId);