@xnetjs/data 2.2.0 → 2.4.0

package/dist/{chunk-4S73XDWH.js → chunk-EGGRKSRH.js}

@@ -1,18 +1,28 @@
 import {
-  applyNodeQueryDescriptor,
-  getNodeQuerySearchTokens,
-  withoutNodeQueryMaterializedView,
-  withoutNodeQueryPagination
-} from "./chunk-S5RP5RKY.js";
+  evaluateLedgerWrite,
+  foldAccountRecord,
+  ledgerAccountId,
+  ledgerWriteKind
+} from "./chunk-3UOUVEZW.js";
+import {
+  accountRecordId,
+  revocationRecordId
+} from "./chunk-5ECIKN6Z.js";
 import {
   SYSTEM_SCHEMA_BASE_IRIS,
   isSystemNamespaceResource,
   isSystemSchemaIri
-} from "./chunk-XJBDESCX.js";
+} from "./chunk-ZNHLH7SC.js";
+import {
+  applyNodeQueryDescriptor,
+  getNodeQuerySearchTokens,
+  withoutNodeQueryMaterializedView,
+  withoutNodeQueryPagination
+} from "./chunk-WOEFYS7Y.js";
 import {
   createNodeId,
   getBaseSchemaIRI
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/store/query-ast.ts
 var QUERY_AST_VERSION = 1;
@@ -2642,6 +2652,53 @@ var NodeStore = class {
    *
    * @throws Error if signature verification fails
    */
+  /**
+   * Account-ledger enforcement for inbound changes (0149/0243, wired by 0337):
+   * hydrate the account's controllers/epoch and the author's revocation status
+   * from local storage, then require the write to pass `evaluateLedgerWrite`.
+   * Mirrors the hub's `enforceLedgerWrite` so a hostile or auth-less hub still
+   * cannot push unauthorized ledger records into a client.
+   */
+  async enforceRemoteLedgerWrite(change) {
+    const schemaId = change.payload.schemaId;
+    const kind = ledgerWriteKind(schemaId);
+    if (!kind) return;
+    const properties = change.payload.properties ?? {};
+    const accountId = ledgerAccountId(kind, properties);
+    let account = null;
+    let authorRevoked = false;
+    if (accountId) {
+      const accountNode = await this.storage.getNode(accountRecordId(accountId));
+      if (accountNode) {
+        account = foldAccountRecord(accountNode.properties);
+      }
+      const revocationNode = await this.storage.getNode(
+        revocationRecordId(accountId, change.authorDID)
+      );
+      authorRevoked = revocationNode !== null && revocationNode !== void 0;
+    }
+    const decision = evaluateLedgerWrite({
+      schemaId,
+      authorDid: change.authorDID,
+      properties,
+      state: { account, authorRevoked }
+    });
+    if (!decision.allowed) {
+      this.telemetry?.reportSecurityEvent("data.ledger_write_rejected", "high");
+      throw new PermissionError({
+        allowed: false,
+        action: "update",
+        subject: change.authorDID,
+        resource: change.payload.nodeId,
+        roles: [],
+        grants: [],
+        reasons: ["DENY_NODE_POLICY"],
+        cached: false,
+        evaluatedAt: Date.now(),
+        duration: 0
+      });
+    }
+  }
   async applyRemoteChange(change) {
     const start = this.telemetry ? Date.now() : 0;
     try {
@@ -2669,6 +2726,7 @@ var NodeStore = class {
           `[NodeStore] Remote change ${change.id} failed verification: ${err instanceof Error ? err.message : String(err)}`
         );
       }
+      await this.enforceRemoteLedgerWrite(change);
       if (this.authEvaluator) {
         const stored = await this.storage.getNode(change.payload.nodeId);
         const action = this.inferActionFromChange(change, stored);
@@ -2749,6 +2807,18 @@ var NodeStore = class {
   async getAllChanges() {
     return this.storage.getAllChanges();
   }
+  /**
+   * Whether a change with this hash is already in the local log. Cheap
+   * existence probe (falls back to a full fetch when the adapter lacks the
+   * optional fast path) — used for idempotent import and bundle
+   * prerequisite checks (exploration 0344).
+   */
+  async hasChange(hash) {
+    if (this.storage.hasChange) {
+      return this.storage.hasChange(hash);
+    }
+    return await this.storage.getChangeByHash(hash) !== null;
+  }
   /**
    * Get changes since a Lamport time (for delta sync).
    */
@@ -4792,7 +4862,22 @@ CREATE INDEX IF NOT EXISTS idx_node_spatial_ids_schema
       return null;
     }
     const value = node.properties[key];
-    return typeof value === "number" && Number.isFinite(value) ? value : null;
+    if (typeof value === "number" && Number.isFinite(value)) {
+      return value;
+    }
+    if (value === void 0) {
+      const dot = key.indexOf(".");
+      if (dot > 0) {
+        const parent = node.properties[key.slice(0, dot)];
+        if (typeof parent === "object" && parent !== null && !Array.isArray(parent)) {
+          const sub = parent[key.slice(dot + 1)];
+          if (typeof sub === "number" && Number.isFinite(sub)) {
+            return sub;
+          }
+        }
+      }
+    }
+    return null;
   }
 };
 

package/dist/{chunk-NSMSOIEW.js → chunk-EUJR5QQC.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   json,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/dashboard.ts
 var DashboardSchema = defineSchema({

package/dist/{chunk-RXBLWQQI.js → chunk-EZJ3OD5A.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   date,
   defineSchema,
@@ -8,7 +8,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/experiment.ts
 var ExperimentSchema = defineSchema({

package/dist/{chunk-SOXXBQ4P.js → chunk-F6ICOU6R.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   money,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/posting.ts
 var POSTING_SCHEMA_IRI = "xnet://xnet.fyi/Posting@1.0.0";

package/dist/{chunk-D4EVJN2P.js → chunk-FTKHARBY.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   created,
   createdBy,
@@ -11,7 +11,7 @@ import {
   select,
   text,
   url
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/external-item.ts
 var EXTERNAL_ITEM_SCHEMA_IRI = "xnet://xnet.fyi/ExternalItem@1.0.0";

package/dist/{chunk-LK5ZIAIE.js → chunk-GSLOK5KV.js}

@@ -6,7 +6,7 @@ import {
   person,
   relation,
   select
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/space-membership.ts
 var SPACE_MEMBERSHIP_SCHEMA_IRI = "xnet://xnet.fyi/SpaceMembership@1.0.0";
@@ -34,6 +34,13 @@ var SpaceMembershipSchema = defineSchema({
     addedBy: person({}),
     /** When the member was added (ms since epoch) */
     addedAt: number({}),
+    /**
+     * Optional expiry (ms since epoch) for time-boxed grants — e.g. sharing a
+     * diagnostics Space with a support identity (exploration 0341). Absent =
+     * permanent. Clients treat an expired membership as revoked and sweep the
+     * edge node on sight.
+     */
+    expiresAt: number({}),
     createdAt: created(),
     createdBy: createdBy()
   },

package/dist/{chunk-EZTBWWMS.js → chunk-HSCGVBQN.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   json,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/map.ts
 var MapSchema = defineSchema({

package/dist/{chunk-Z5I2T75Z.js → chunk-HXIEK5L6.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   created,
   createdBy,
@@ -10,7 +10,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/debug-report.ts
 var lanes = [
@@ -41,6 +41,8 @@ var DebugReportSchema = defineSchema({
     lane: select({ options: lanes, required: true, default: "auto" }),
     /** Grouping key: hash(errorName + normalized top frame + release). */
     fingerprint: text({ required: true, maxLength: 64 }),
+    /** Cross-release issue identity: the fingerprint minus release (0341). */
+    issueKey: text({ maxLength: 64 }),
     errorName: text({ required: true, maxLength: 120 }),
     message: text({ maxLength: 500 }),
     stack: text({ maxLength: 6e3 }),
@@ -55,6 +57,8 @@ var DebugReportSchema = defineSchema({
     didHash: text({ maxLength: 128 }),
     occurrences: number({ integer: true }),
     status: select({ options: statuses, required: true, default: "new" }),
+    /** Set when the operator escalated this report to the vendor: the quotable XR-… handle (0341). */
+    escalatedId: text({ maxLength: 16 }),
     firstSeen: number({}),
     lastSeen: number({}),
     createdAt: created(),

package/dist/{chunk-I7JMGCV6.js → chunk-ICBC5VLZ.js}

@@ -1,6 +1,6 @@
 import {
   spaceContributorAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   checkbox,
   created,
@@ -13,7 +13,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 import {
   allow,
   role

package/dist/{chunk-C4CQH7UD.js → chunk-IJZ5YPYT.js}

@@ -7,7 +7,7 @@ import {
   defineSchema,
   relation,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 import {
   presets
 } from "./chunk-D4LUUZYD.js";

package/dist/{chunk-WWQO7QKV.js → chunk-IKREWSCX.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   checkbox,
   defineSchema,
@@ -8,7 +8,7 @@ import {
   number,
   relation,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/database-field.ts
 var DatabaseFieldSchema = defineSchema({

package/dist/{chunk-XQDXQ7WG.js → chunk-IVCHWQY7.js}

@@ -1,12 +1,12 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/saved-view.ts
 var SavedViewSchema = defineSchema({

package/dist/{chunk-ZKJXGQCR.js → chunk-JB6BPIVP.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   file,
@@ -8,7 +8,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/database.ts
 var DatabaseSchema = defineSchema({

package/dist/{chunk-3PV6QTKF.js → chunk-JUTPAFDP.js}

@@ -3,7 +3,7 @@ import {
   json,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 import {
   presets
 } from "./chunk-D4LUUZYD.js";

package/dist/{chunk-HTZTBXKL.js → chunk-KHLOVRMQ.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   money,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/budget.ts
 var BUDGET_SCHEMA_IRI = "xnet://xnet.fyi/Budget@1.0.0";

package/dist/{chunk-IKI5FBNO.js → chunk-L6DF76E2.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   checkbox,
   defineSchema,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/account.ts
 var ACCOUNT_SCHEMA_IRI = "xnet://xnet.fyi/Account@1.0.0";

package/dist/{chunk-7PCMTV6J.js → chunk-LDKJDNSW.js}

@@ -4,7 +4,7 @@ import {
   number,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 import {
   presets
 } from "./chunk-D4LUUZYD.js";

package/dist/{chunk-22FKOLMX.js → chunk-M6STMJ2V.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   date,
   defineSchema,
@@ -8,7 +8,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/import-batch.ts
 var IMPORT_BATCH_SCHEMA_IRI = "xnet://xnet.fyi/ImportBatch@1.0.0";

package/dist/{chunk-RRXJNZX5.js → chunk-NH6OLO3X.js}

@@ -462,6 +462,50 @@ function dateRange(options = {}) {
   };
 }
 
+// src/schema/properties/geo.ts
+function isGeoPoint(value) {
+  if (value === null || typeof value !== "object") return false;
+  const v = value;
+  return typeof v.lat === "number" && Number.isFinite(v.lat) && Math.abs(v.lat) <= 90 && typeof v.lng === "number" && Number.isFinite(v.lng) && Math.abs(v.lng) <= 180;
+}
+function geo(options = {}) {
+  return {
+    definition: {
+      type: "geo",
+      required: options.required ?? false
+    },
+    validate(value) {
+      if (value === null || value === void 0) {
+        return !options.required;
+      }
+      return isGeoPoint(value);
+    },
+    coerce(value) {
+      if (value === null || value === void 0) return null;
+      if (isGeoPoint(value)) {
+        return { lat: value.lat, lng: value.lng };
+      }
+      if (typeof value === "object") {
+        const obj = value;
+        const candidate = {
+          lat: obj.lat ?? obj.latitude,
+          lng: obj.lng ?? obj.lon ?? obj.longitude
+        };
+        if (isGeoPoint(candidate)) return candidate;
+      }
+      if (typeof value === "string") {
+        const parts = value.split(",").map((s) => Number(s.trim()));
+        if (parts.length === 2) {
+          const candidate = { lat: parts[0], lng: parts[1] };
+          if (isGeoPoint(candidate)) return candidate;
+        }
+      }
+      return null;
+    },
+    _type: {}
+  };
+}
+
 // src/schema/properties/select.ts
 function select(options) {
   const validIds = new Set(options.options.map((o) => o.id));
@@ -882,6 +926,8 @@ export {
   money,
   date,
   dateRange,
+  isGeoPoint,
+  geo,
   select,
   multiSelect,
   person,

package/dist/{chunk-26HTTVJN.js → chunk-O34JPX6Q.js}

@@ -1,12 +1,12 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/canvas.ts
 var CanvasSchema = defineSchema({

package/dist/{chunk-YD2ZPFT7.js → chunk-PKLHOQSO.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   date,
   defineSchema,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/transaction.ts
 var TRANSACTION_SCHEMA_IRI = "xnet://xnet.fyi/Transaction@1.0.0";

package/dist/{chunk-DPJ4T2LQ.js → chunk-QH7RZEHT.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   created,
   createdBy,
@@ -9,7 +9,7 @@ import {
   relation,
   text,
   url
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/feed-item.ts
 var FEED_ITEM_SCHEMA_IRI = "xnet://xnet.fyi/FeedItem@1.0.0";

package/dist/{chunk-S6JWYPVW.js → chunk-QOTR4SGT.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   file,
@@ -9,7 +9,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/meeting.ts
 var MEETING_SCHEMA_IRI = "xnet://xnet.fyi/Meeting@1.0.0";

package/dist/{chunk-52DR23IW.js → chunk-QVGTYLL3.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   defineSchema,
   json,
@@ -8,7 +8,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/metric.ts
 var MetricSchema = defineSchema({

package/dist/{chunk-IA23CLGV.js → chunk-R2AZXT3D.js}

@@ -1,13 +1,13 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   date,
   defineSchema,
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/milestone.ts
 var MILESTONE_SCHEMA_IRI = "xnet://xnet.fyi/Milestone@1.0.0";

package/dist/{chunk-YSD4NSCE.js → chunk-RAJNAD64.js}

@@ -1,6 +1,6 @@
 import {
   spaceCascadeAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   created,
   createdBy,
@@ -9,7 +9,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/reaction.ts
 var reactionTypes = [

package/dist/{chunk-JA56EQJO.js → chunk-RLRAWZJE.js}

@@ -1,6 +1,6 @@
 import {
   SPACE_MEMBERSHIP_SCHEMA_IRI
-} from "./chunk-LK5ZIAIE.js";
+} from "./chunk-GSLOK5KV.js";
 import {
   allow,
   role

package/dist/{chunk-ZKVRGKLM.js → chunk-RRIRY7FP.js}

@@ -4,10 +4,10 @@ import {
   folderAncestorIds,
   folderPathIds,
   wouldCreateFolderCycle
-} from "./chunk-C4CQH7UD.js";
+} from "./chunk-IJZ5YPYT.js";
 import {
   spaceOwnAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   checkbox,
   created,
@@ -17,7 +17,7 @@ import {
   relation,
   select,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/space.ts
 var SPACE_SCHEMA_IRI = "xnet://xnet.fyi/Space@1.0.0";

package/dist/{chunk-GCTONBF6.js → chunk-TH2BJPDZ.js}

@@ -3,7 +3,7 @@ import {
   number,
   person,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/grant.ts
 var GrantSchema = defineSchema({

package/dist/{chunk-6ZUJID52.js → chunk-TOQ2LBAN.js}

@@ -1,6 +1,6 @@
 import {
   spaceContributorAuthorization
-} from "./chunk-JA56EQJO.js";
+} from "./chunk-RLRAWZJE.js";
 import {
   created,
   createdBy,
@@ -8,7 +8,7 @@ import {
   json,
   relation,
   text
-} from "./chunk-RRXJNZX5.js";
+} from "./chunk-NH6OLO3X.js";
 
 // src/schema/schemas/checkpoint.ts
 var CHECKPOINT_SCHEMA_IRI = "xnet://xnet.fyi/Checkpoint@1.0.0";