@xnetjs/data 0.11.1 → 1.0.0

package/dist/account-ZD3HMRY6.js

@@ -0,0 +1,12 @@
+import {
+  ACCOUNT_SCHEMA_IRI,
+  AccountSchema
+} from "./chunk-IKI5FBNO.js";
+import "./chunk-JA56EQJO.js";
+import "./chunk-LK5ZIAIE.js";
+import "./chunk-RRXJNZX5.js";
+import "./chunk-D4LUUZYD.js";
+export {
+  ACCOUNT_SCHEMA_IRI,
+  AccountSchema
+};

package/dist/{account-ledger-R2GAFJL6.js → account-ledger-ZHBNVREV.js}

@@ -15,9 +15,9 @@ import {
   resolveActiveDevices,
   revocationRecordId,
   revokedSubjects
-} from "./chunk-KQUALW4O.js";
-import "./chunk-EBNMV2VO.js";
-import "./chunk-RL64OJJ5.js";
+} from "./chunk-4KJ4NAMC.js";
+import "./chunk-RRXJNZX5.js";
+import "./chunk-D4LUUZYD.js";
 export {
   ACCOUNT_RECORD_SCHEMA_IRI,
   AccountRecordSchema,

package/dist/auth/index.d.ts

@@ -1,12 +1,12 @@
 import { AllowExpr, DenyExpr, AuthExpression, AndExpr, OrExpr, NotExpr, PublicExpr, AuthenticatedExpr, CreatorRoleResolver, PropertyRoleResolver, RelationRoleResolver, MembershipRoleResolver, AuthorizationDefinition, SerializedAuthorization, SerializedAuthExpression, DID } from '@xnetjs/core';
 export { AUTH_ACTIONS, AllowExpr, AndExpr, AuthAction, AuthCheckInput, AuthDecision, AuthDenyReason, AuthExpression, AuthTrace, AuthTraceStep, AuthenticatedExpr, AuthorizationDefinition, CreatorRoleResolver, DenyExpr, MembershipRoleResolver, NotExpr, OrExpr, PolicyEvaluator, PropertyRoleResolver, PublicExpr, RelationRoleResolver, RoleRefExpr, RoleResolver, SerializedAuthExpression, SerializedAuthorization, SerializedRoleResolver } from '@xnetjs/core';
-import { E as PropertyDefinition, a as Schema, h as NodeState, S as SchemaIRI } from '../types-BB8-SLEa.js';
-export { aX as DEFAULT_OFFLINE_POLICY, aV as GRANT_SCHEMA_IRI, b1 as Grant, w as GrantIndex, b6 as GrantIndexOptions, b5 as GrantIndexStore, b0 as GrantInput, b4 as GrantNode, aU as GrantRateLimiter, b9 as GrantRateLimiterOptions, O as OfflineAuthPolicy, b8 as RevocationConfig, b7 as RevocationConsistency, aT as StoreAuth, e as StoreAuthAPI, b2 as StoreAuthError, b3 as StoreAuthErrorCode, a$ as StoreAuthKeyManager, aZ as StoreAuthOptions, a_ as StoreAuthStore, aW as isGrantActive, aY as mergeOfflinePolicy } from '../types-BB8-SLEa.js';
-export { A as ActionPermission, m as AuthDecisionEvent, b as DecisionCache, g as DecisionCacheOptions, D as DefaultPolicyEvaluator, j as DefaultPolicyEvaluatorOptions, a as DefaultRoleResolver, i as DefaultRoleResolverOptions, k as DefinedSchemaLike, G as GrantExpirationCleaner, o as GrantExpirationCleanerOptions, n as GrantExpirationStore, H as HubPolicy, N as NodeStoreReader, P as PermissionMatrix, l as RevalidationEvent, R as RoleSummary, S as SchemaRegistryReader, c as buildPermissionMatrix, f as createPolicyEvaluator, d as describeRoleResolver, e as evaluateExpression, h as hubActionsForSpaceRole, s as schemaToHubPolicy } from '../grant-expiration-cleaner-Bm1fSG42.js';
+import { E as PropertyDefinition, a as Schema, h as NodeState, S as SchemaIRI } from '../types-B5rrBwRI.js';
+export { aX as DEFAULT_OFFLINE_POLICY, aV as GRANT_SCHEMA_IRI, b1 as Grant, w as GrantIndex, b6 as GrantIndexOptions, b5 as GrantIndexStore, b0 as GrantInput, b4 as GrantNode, aU as GrantRateLimiter, b9 as GrantRateLimiterOptions, O as OfflineAuthPolicy, b8 as RevocationConfig, b7 as RevocationConsistency, aT as StoreAuth, e as StoreAuthAPI, b2 as StoreAuthError, b3 as StoreAuthErrorCode, a$ as StoreAuthKeyManager, aZ as StoreAuthOptions, a_ as StoreAuthStore, aW as isGrantActive, aY as mergeOfflinePolicy } from '../types-B5rrBwRI.js';
+export { A as ActionPermission, m as AuthDecisionEvent, b as DecisionCache, g as DecisionCacheOptions, D as DefaultPolicyEvaluator, j as DefaultPolicyEvaluatorOptions, a as DefaultRoleResolver, i as DefaultRoleResolverOptions, k as DefinedSchemaLike, G as GrantExpirationCleaner, o as GrantExpirationCleanerOptions, n as GrantExpirationStore, H as HubPolicy, N as NodeStoreReader, P as PermissionMatrix, l as RevalidationEvent, R as RoleSummary, S as SchemaRegistryReader, c as buildPermissionMatrix, f as createPolicyEvaluator, d as describeRoleResolver, e as evaluateExpression, h as hubActionsForSpaceRole, s as schemaToHubPolicy } from '../grant-expiration-cleaner-BrMW0ffX.js';
 import { PublicKeyResolver } from '@xnetjs/crypto';
 import '@xnetjs/sqlite';
 import '@xnetjs/sync';
-import '../registry-_49rC6IG.js';
+import '../registry-BGD80QCd.js';
 
 /**
  * Authorization expression builders for schema definitions.
@@ -28,6 +28,10 @@ import '../registry-_49rC6IG.js';
  *     actions: {
  *       read: allow('editor', 'admin', 'owner'),
  *       write: allow('editor', 'admin', 'owner'),
+ *       // optional refinements (0304) — split who may add vs. who may modify;
+ *       // each falls back to `write` when not declared
+ *       create: allow('editor', 'admin'),
+ *       update: allow('owner', 'admin'),
  *       delete: allow('admin', 'owner'),
  *       share: allow('admin', 'owner')
  *     }
@@ -200,7 +204,7 @@ interface AuthValidationError {
 /**
  * Error codes for authorization schema validation.
  */
-type AuthSchemaErrorCode = 'AUTH_SCHEMA_INVALID_ROLE_REF' | 'AUTH_SCHEMA_INVALID_ACTION_REF' | 'AUTH_SCHEMA_INVALID_RELATION_PATH' | 'AUTH_SCHEMA_ROLE_CYCLE' | 'AUTH_SCHEMA_EXPR_LIMIT_EXCEEDED' | 'AUTH_SCHEMA_UNSAFE_PUBLIC_MUTATION' | 'AUTH_SCHEMA_INVALID_FIELD_REF' | 'AUTH_SCHEMA_INVALID_PUBLIC_PROP';
+type AuthSchemaErrorCode = 'AUTH_SCHEMA_INVALID_ROLE_REF' | 'AUTH_SCHEMA_INVALID_ACTION_REF' | 'AUTH_SCHEMA_INVALID_RELATION_PATH' | 'AUTH_SCHEMA_ROLE_CYCLE' | 'AUTH_SCHEMA_EXPR_LIMIT_EXCEEDED' | 'AUTH_SCHEMA_UNSAFE_PUBLIC_MUTATION' | 'AUTH_SCHEMA_INVALID_FIELD_REF' | 'AUTH_SCHEMA_INVALID_PUBLIC_PROP' | 'AUTH_SCHEMA_INCOMPLETE_MUTATION_ACTIONS';
 /**
  * Roles that are always available without definition.
  */
@@ -283,6 +287,12 @@ declare function deserializeAuthorization(serialized: SerializedAuthorization):
 
 /**
  * Authorization presets for common patterns.
+ *
+ * Each preset declares the coarse `write` action, which also governs the
+ * `create`/`update` refinements via fallback (exploration 0304). For
+ * author-owned content inside a Space ("members may post, only the author may
+ * edit") use `spaceContributorAuthorization()` from the schema helpers, or
+ * declare `create`/`update` directly.
  */
 declare const presets: {
     /**

package/dist/auth/index.js

@@ -48,7 +48,7 @@ import {
   serializeAuthorization,
   validateAuthorization,
   warnLegacySchema
-} from "../chunk-RL64OJJ5.js";
+} from "../chunk-D4LUUZYD.js";
 export {
   AUTHENTICATED,
   AUTH_ACTIONS,

package/dist/budget-FTGZEXX6.js

@@ -0,0 +1,12 @@
+import {
+  BUDGET_SCHEMA_IRI,
+  BudgetSchema
+} from "./chunk-HTZTBXKL.js";
+import "./chunk-JA56EQJO.js";
+import "./chunk-LK5ZIAIE.js";
+import "./chunk-RRXJNZX5.js";
+import "./chunk-D4LUUZYD.js";
+export {
+  BUDGET_SCHEMA_IRI,
+  BudgetSchema
+};

package/dist/canvas-NQBTRNLS.js

@@ -0,0 +1,10 @@
+import {
+  CanvasSchema
+} from "./chunk-26HTTVJN.js";
+import "./chunk-JA56EQJO.js";
+import "./chunk-LK5ZIAIE.js";
+import "./chunk-RRXJNZX5.js";
+import "./chunk-D4LUUZYD.js";
+export {
+  CanvasSchema
+};

package/dist/channel-474QAZGP.js

@@ -0,0 +1,12 @@
+import {
+  CHANNEL_KINDS,
+  ChannelSchema
+} from "./chunk-UUQVNDBG.js";
+import "./chunk-JA56EQJO.js";
+import "./chunk-LK5ZIAIE.js";
+import "./chunk-RRXJNZX5.js";
+import "./chunk-D4LUUZYD.js";
+export {
+  CHANNEL_KINDS,
+  ChannelSchema
+};

package/dist/chat-message-LGLCITLE.js

@@ -0,0 +1,10 @@
+import {
+  ChatMessageSchema
+} from "./chunk-5UJMY3AH.js";
+import "./chunk-JA56EQJO.js";
+import "./chunk-LK5ZIAIE.js";
+import "./chunk-RRXJNZX5.js";
+import "./chunk-D4LUUZYD.js";
+export {
+  ChatMessageSchema
+};

package/dist/{chunk-VQ7JHB67.js → chunk-22FKOLMX.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-OCMSAKWV.js";
+} from "./chunk-JA56EQJO.js";
 import {
   date,
   defineSchema,
@@ -8,7 +8,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-EBNMV2VO.js";
+} from "./chunk-RRXJNZX5.js";
 
 // src/schema/schemas/import-batch.ts
 var IMPORT_BATCH_SCHEMA_IRI = "xnet://xnet.fyi/ImportBatch@1.0.0";

package/dist/{chunk-LYSWLCOI.js → chunk-26HTTVJN.js}

@@ -1,12 +1,12 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-OCMSAKWV.js";
+} from "./chunk-JA56EQJO.js";
 import {
   defineSchema,
   relation,
   select,
   text
-} from "./chunk-EBNMV2VO.js";
+} from "./chunk-RRXJNZX5.js";
 
 // src/schema/schemas/canvas.ts
 var CanvasSchema = defineSchema({

package/dist/{chunk-PH3PVAR6.js → chunk-3PV6QTKF.js}

@@ -3,10 +3,10 @@ import {
   json,
   select,
   text
-} from "./chunk-EBNMV2VO.js";
+} from "./chunk-RRXJNZX5.js";
 import {
   presets
-} from "./chunk-RL64OJJ5.js";
+} from "./chunk-D4LUUZYD.js";
 
 // src/schema/schemas/workspace.ts
 var WorkspaceSchema = defineSchema({

package/dist/{chunk-KQUALW4O.js → chunk-4KJ4NAMC.js}

@@ -7,7 +7,7 @@ import {
   person,
   select,
   text
-} from "./chunk-EBNMV2VO.js";
+} from "./chunk-RRXJNZX5.js";
 
 // src/schema/schemas/account-ledger.ts
 var NS = "xnet://xnet.fyi/";

package/dist/{chunk-U64CW73O.js → chunk-52DR23IW.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-OCMSAKWV.js";
+} from "./chunk-JA56EQJO.js";
 import {
   defineSchema,
   json,
@@ -8,7 +8,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-EBNMV2VO.js";
+} from "./chunk-RRXJNZX5.js";
 
 // src/schema/schemas/metric.ts
 var MetricSchema = defineSchema({

package/dist/{chunk-SVNGSZZA.js → chunk-57UZYV3L.js}

@@ -3,10 +3,10 @@ import {
   select,
   text,
   url
-} from "./chunk-EBNMV2VO.js";
+} from "./chunk-RRXJNZX5.js";
 import {
   presets
-} from "./chunk-RL64OJJ5.js";
+} from "./chunk-D4LUUZYD.js";
 
 // src/schema/schemas/external-reference.ts
 var ExternalReferenceSchema = defineSchema({