holosphere 2.0.0-alpha15 → 2.0.0-alpha16

package/dist/cjs/holosphere.cjs

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:"Module"}});const e=require("../index-ChpSfdYS.cjs");exports.AuthorizationError=e.AuthorizationError,exports.ChainManager=e.ChainManager,exports.Classifier=e.Classifier,exports.ContractABIs=e.ABIs,exports.ContractDeployer=e.ContractDeployer,exports.ContractOperations=e.ContractOperations,exports.ContractQueries=e.ContractQueries,exports.Council=e.Council,exports.Embeddings=e.Embeddings,exports.EventListener=e.EventListener,exports.FederationAdvisor=e.FederationAdvisor,exports.H3AI=e.H3AI,exports.HoloSphere=e.HoloSphere,exports.HolonContracts=e.HolonContracts,exports.JSONOps=e.JSONOps,exports.LLMService=e.LLMService,exports.LensKeyStore=e.LensKeyStore,exports.MODELS=e.MODELS,exports.NETWORKS=e.NETWORKS,exports.NLQuery=e.NLQuery,exports.RelationshipDiscovery=e.RelationshipDiscovery,exports.SANKEY_EVENTS=e.SANKEY_EVENTS,exports.SchemaExtractor=e.SchemaExtractor,exports.SmartAggregation=e.SmartAggregation,exports.SpatialAnalysis=e.SpatialAnalysis,exports.TTS=e.TTS,exports.TaskBreakdown=e.TaskBreakdown,exports.VOICES=e.VOICES,exports.ValidationError=e.ValidationError,exports.buildLensPath=e.buildLensPath,exports.capabilities=e.capabilities,exports.cardStorage=e.cardStorage,exports.createAIServices=e.createAIServices,exports.createFederationCard=e.createFederationCard,exports.createHologram=e.createHologram,exports.crypto=e.secp256k1,exports.default=e.HoloSphere,exports.dismissCard=e.dismissCard,exports.dismissRequest=e.dismissRequest,exports.federation=e.hologram,exports.getAddressUrl=e.getAddressUrl,exports.getCard=e.getCard,exports.getDisplayableCards=e.getDisplayableCards,exports.getLensConfigForHandshake=e.getLensConfigForHandshake,exports.getNetwork=e.getNetwork,exports.getNetworksByType=e.getNetworksByType,exports.getTxUrl=e.getTxUrl,exports.getVisibleLenses=e.getVisibleLenses,exports.handshake=e.handshake,exports.hierarchical=e.upcast,exports.holonRegistry=e.holonRegistry,exports.isNetworkSupported=e.isNetworkSupported,exports.isResponseProcessed=e.isResponseProcessed,exports.lensKeys=e.lensKeys,exports.listNetworks=e.listNetworks,exports.markResponseProcessed=e.markResponseProcessed,exports.matchScope=e.matchScope,exports.networks=e.networks,exports.nostrUtils=e.nostrUtils,exports.parseLensPath=e.parseLensPath,exports.registry=e.registry,exports.requestCard=e.requestCard,exports.saveCard=e.saveCard,exports.schema=e.validator,exports.social=e.socialProtocols,exports.spatial=e.h3Operations,exports.storage=e.unifiedStorage,exports.subscriptions=e.manager,exports.toggleCardExpansion=e.toggleCardExpansion,exports.toggleLens=e.toggleLens;
+"use strict";Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:"Module"}});const e=require("../index-DXFsE8r6.cjs");exports.AuthorizationError=e.AuthorizationError,exports.ChainManager=e.ChainManager,exports.Classifier=e.Classifier,exports.ContractABIs=e.ABIs,exports.ContractDeployer=e.ContractDeployer,exports.ContractOperations=e.ContractOperations,exports.ContractQueries=e.ContractQueries,exports.Council=e.Council,exports.Embeddings=e.Embeddings,exports.EventListener=e.EventListener,exports.FederationAdvisor=e.FederationAdvisor,exports.H3AI=e.H3AI,exports.HoloSphere=e.HoloSphere,exports.HolonContracts=e.HolonContracts,exports.JSONOps=e.JSONOps,exports.LLMService=e.LLMService,exports.LensKeyStore=e.LensKeyStore,exports.MODELS=e.MODELS,exports.NETWORKS=e.NETWORKS,exports.NLQuery=e.NLQuery,exports.RelationshipDiscovery=e.RelationshipDiscovery,exports.SANKEY_EVENTS=e.SANKEY_EVENTS,exports.SchemaExtractor=e.SchemaExtractor,exports.SmartAggregation=e.SmartAggregation,exports.SpatialAnalysis=e.SpatialAnalysis,exports.TTS=e.TTS,exports.TaskBreakdown=e.TaskBreakdown,exports.VOICES=e.VOICES,exports.ValidationError=e.ValidationError,exports.buildLensPath=e.buildLensPath,exports.capabilities=e.capabilities,exports.cardStorage=e.cardStorage,exports.createAIServices=e.createAIServices,exports.createFederationCard=e.createFederationCard,exports.createHologram=e.createHologram,exports.crypto=e.secp256k1,exports.default=e.HoloSphere,exports.dismissCard=e.dismissCard,exports.dismissRequest=e.dismissRequest,exports.federation=e.hologram,exports.getAddressUrl=e.getAddressUrl,exports.getCard=e.getCard,exports.getDisplayableCards=e.getDisplayableCards,exports.getLensConfigForHandshake=e.getLensConfigForHandshake,exports.getNetwork=e.getNetwork,exports.getNetworksByType=e.getNetworksByType,exports.getTxUrl=e.getTxUrl,exports.getVisibleLenses=e.getVisibleLenses,exports.handshake=e.handshake,exports.hierarchical=e.upcast,exports.holonRegistry=e.holonRegistry,exports.isNetworkSupported=e.isNetworkSupported,exports.isResponseProcessed=e.isResponseProcessed,exports.lensKeys=e.lensKeys,exports.listNetworks=e.listNetworks,exports.markResponseProcessed=e.markResponseProcessed,exports.matchScope=e.matchScope,exports.networks=e.networks,exports.nostrUtils=e.nostrUtils,exports.parseLensPath=e.parseLensPath,exports.registry=e.registry,exports.requestCard=e.requestCard,exports.saveCard=e.saveCard,exports.schema=e.validator,exports.social=e.socialProtocols,exports.spatial=e.h3Operations,exports.storage=e.unifiedStorage,exports.subscriptions=e.manager,exports.toggleCardExpansion=e.toggleCardExpansion,exports.toggleLens=e.toggleLens;
 //# sourceMappingURL=holosphere.cjs.map

package/dist/esm/holosphere.js

@@ -1,4 +1,4 @@
-import { aX, bs, b6, bw, bt, bv, by, b1, b0, bx, b9, bc, aW, bu, a$, aZ, bD, b4, bU, b5, ba, bz, a_, b8, b7, b2, bb, b3, aY, bE, bn, bp, bT, bH, bC, bi, aW as aW2, bM, bQ, bg, b_, bO, bP, bJ, bV, bW, bZ, bI, bh, bm, bq, bY, bS, bG, bX, bR, bB, bA, bj, bF, br, bo, bN, bf, bk, bd, be, bl, bL, bK } from "../index-C3Cag0SV.js";
+import { aX, bs, b6, bw, bt, bv, by, b1, b0, bx, b9, bc, aW, bu, a$, aZ, bD, b4, bU, b5, ba, bz, a_, b8, b7, b2, bb, b3, aY, bE, bn, bp, bT, bH, bC, bi, aW as aW2, bM, bQ, bg, b_, bO, bP, bJ, bV, bW, bZ, bI, bh, bm, bq, bY, bS, bG, bX, bR, bB, bA, bj, bF, br, bo, bN, bf, bk, bd, be, bl, bL, bK } from "../index-B7ERi4ng.js";
 export {
   aX as AuthorizationError,
   bs as ChainManager,

package/dist/{index-C3Cag0SV.js → index-B7ERi4ng.js}

@@ -18011,12 +18011,12 @@ async function createPersistentStorage(namespace, options = {}) {
   const isBrowser = typeof window !== "undefined" && typeof window.indexedDB !== "undefined";
   typeof process !== "undefined" && process.versions && void 0;
   if (isBrowser) {
-    const { IndexedDBStorage } = await import("./indexeddb-storage-dx01N0ET.js");
+    const { IndexedDBStorage } = await import("./indexeddb-storage-yEswGGMG.js");
     const storage = new IndexedDBStorage();
     await storage.init(namespace);
     return storage;
   } else {
-    const { MemoryStorage } = await import("./memory-storage-BPIfkpcf.js");
+    const { MemoryStorage } = await import("./memory-storage-CSB5_IfU.js");
     const storage = new MemoryStorage();
     await storage.init(namespace);
     return storage;
@@ -18029,7 +18029,7 @@ async function loadNDKCacheAdapter() {
   ndkCacheAdapterLoaded = true;
   if (typeof window !== "undefined" && typeof indexedDB !== "undefined") {
     try {
-      const module2 = await import("./index-nMC3dWZ5.js");
+      const module2 = await import("./index-DusXavIT.js");
       NDKCacheAdapterDexie = module2.default || module2.NDKCacheAdapterDexie;
     } catch (e) {
       console.debug("[nostr] NDK cache adapter not available, using LRU cache");
@@ -21015,7 +21015,7 @@ class GunSchemaValidator {
       return true;
     }
     try {
-      const AjvModule = await import("./2019-BfjzDRje.js").then((n2) => n2._);
+      const AjvModule = await import("./2019-CyFQLuqg.js").then((n2) => n2._);
       this.Ajv = AjvModule.default || AjvModule;
       this.validator = new this.Ajv({
         allErrors: true,
@@ -21236,7 +21236,7 @@ class GunDBBackend extends StorageBackend {
     let Gun;
     try {
       console.log("[gundb-backend] Importing Gun...");
-      const gunModule = await import("./browser-CKTczilW.js").then((n2) => n2.b);
+      const gunModule = await import("./browser-BIvmkBi9.js").then((n2) => n2.b);
       Gun = gunModule.default || gunModule;
       console.log("[gundb-backend] Gun imported:", typeof Gun);
     } catch (error) {
@@ -21867,7 +21867,7 @@ class GunDBBackend extends StorageBackend {
   }
 }
 const name = "holosphere";
-const version$1 = "2.0.0-alpha14";
+const version$1 = "2.0.0-alpha16";
 const description = "Holonic geospatial communication infrastructure combining H3 hexagonal indexing with distributed P2P storage";
 const type = "module";
 const bin = {
@@ -23609,8 +23609,13 @@ async function nostrGetAllHybrid(client, pathPrefix, kind2 = 3e4, options = {})
   }
   return Array.from(byPath.values()).map((item) => item.data);
 }
-async function nostrDelete(client, path, kind2 = 3e4) {
-  const existing = await nostrGet(client, path, kind2);
+async function nostrDelete(client, path, kindOrOptions = 3e4) {
+  const options = typeof kindOrOptions === "number" ? { kind: kindOrOptions } : kindOrOptions;
+  const kind2 = options.kind || 3e4;
+  const { signingKey } = options;
+  const authorPubkey = options.authorPubkey || client.publicKey;
+  const readOptions = authorPubkey !== client.publicKey ? { authors: [authorPubkey] } : {};
+  const existing = await nostrGet(client, path, kind2, readOptions);
   if (!existing) {
     return { reason: "not_found", results: [] };
   }
@@ -23618,14 +23623,10 @@ async function nostrDelete(client, path, kind2 = 3e4) {
     _deleted: true,
     _deletedAt: Date.now()
   };
-  const result = await nostrPut(client, path, tombstone, kind2);
-  if (client.persistentStorage) {
-    try {
-      await client.persistentStorage.delete(path);
-    } catch (e) {
-    }
-  }
-  const coordinate = `${kind2}:${client.publicKey}:${path}`;
+  const putOptions = { kind: kind2 };
+  if (signingKey) putOptions.signingKey = signingKey;
+  const result = await nostrPut(client, path, tombstone, putOptions);
+  const coordinate = `${kind2}:${authorPubkey}:${path}`;
   const deletionEvent = {
     kind: 5,
     // NIP-09 deletion event
@@ -23637,17 +23638,22 @@ async function nostrDelete(client, path, kind2 = 3e4) {
     content: ""
     // Optional deletion reason/note
   };
+  const publishOptions = signingKey ? { signingKey } : {};
   try {
-    await client.publish(deletionEvent);
+    await client.publish(deletionEvent, publishOptions);
   } catch (error) {
   }
   return result;
 }
 const DELETE_RATE_LIMIT_MS = 100;
-async function nostrDeleteAll(client, pathPrefix, kind2 = 3e4) {
+async function nostrDeleteAll(client, pathPrefix, kindOrOptions = 3e4) {
+  const options = typeof kindOrOptions === "number" ? { kind: kindOrOptions } : kindOrOptions;
+  const kind2 = options.kind || 3e4;
+  const { signingKey } = options;
+  const authorPubkey = options.authorPubkey || client.publicKey;
   const filter = {
     kinds: [kind2],
-    authors: [client.publicKey],
+    authors: [authorPubkey],
     limit: 1e3
   };
   const relayEvents = await client.query(filter, { timeout: 3e4 });
@@ -23678,6 +23684,8 @@ async function nostrDeleteAll(client, pathPrefix, kind2 = 3e4) {
   if (matching.length === 0) {
     return { success: true, count: 0, results: [] };
   }
+  const putOptions = { kind: kind2 };
+  if (signingKey) putOptions.signingKey = signingKey;
   const tombstoneResults = [];
   for (let i = 0; i < matching.length; i++) {
     const event = matching[i];
@@ -23687,14 +23695,8 @@ async function nostrDeleteAll(client, pathPrefix, kind2 = 3e4) {
         _deleted: true,
         _deletedAt: Date.now()
       };
-      const result = await nostrPut(client, dTag, tombstone, kind2);
+      const result = await nostrPut(client, dTag, tombstone, putOptions);
       tombstoneResults.push(result);
-      if (client.persistentStorage) {
-        try {
-          await client.persistentStorage.delete(dTag);
-        } catch (e) {
-        }
-      }
       if (i < matching.length - 1 && DELETE_RATE_LIMIT_MS > 0) {
         await new Promise((resolve) => setTimeout(resolve, DELETE_RATE_LIMIT_MS));
       }
@@ -23704,8 +23706,9 @@ async function nostrDeleteAll(client, pathPrefix, kind2 = 3e4) {
   }
   const coordinates2 = matching.map((event) => {
     const dTag = event.tags.find((t) => t[0] === "d")[1];
-    return `${kind2}:${client.publicKey}:${dTag}`;
+    return `${kind2}:${authorPubkey}:${dTag}`;
   });
+  const publishOptions = signingKey ? { signingKey } : {};
   try {
     const deletionEvent = {
       kind: 5,
@@ -23715,7 +23718,7 @@ async function nostrDeleteAll(client, pathPrefix, kind2 = 3e4) {
       content: ""
       // Optional deletion reason/note
     };
-    await client.publish(deletionEvent);
+    await client.publish(deletionEvent, publishOptions);
   } catch (error) {
   }
   return {
@@ -23976,9 +23979,12 @@ async function update$1(client, path, updates) {
     throw error;
   }
 }
-async function deleteData$1(client, path) {
+async function deleteData$1(client, path, options = {}) {
   try {
-    const result = await nostrDelete(client, path);
+    const deleteOptions = { kind: 3e4 };
+    if (options.signingKey) deleteOptions.signingKey = options.signingKey;
+    if (options.authorPubkey) deleteOptions.authorPubkey = options.authorPubkey;
+    const result = await nostrDelete(client, path, deleteOptions);
     if (result.reason === "not_found") {
       return false;
     }
@@ -23989,9 +23995,12 @@ async function deleteData$1(client, path) {
     throw error;
   }
 }
-async function deleteAll$1(client, path) {
+async function deleteAll$1(client, path, options = {}) {
   try {
-    const result = await nostrDeleteAll(client, path);
+    const deleteOptions = { kind: 3e4 };
+    if (options.signingKey) deleteOptions.signingKey = options.signingKey;
+    if (options.authorPubkey) deleteOptions.authorPubkey = options.authorPubkey;
+    const result = await nostrDeleteAll(client, path, deleteOptions);
     return result;
   } catch (error) {
     console.error("Nostr deleteAll error:", error);
@@ -24051,20 +24060,20 @@ async function update(client, path, updates) {
   }
   return update$1(client, path, updates);
 }
-async function deleteData(client, path) {
+async function deleteData(client, path, options = {}) {
   if (client.delete && client.gun) {
     return client.delete(path);
   }
   if (client.gun) {
     return deleteData$2(client.gun, path);
   }
-  return deleteData$1(client, path);
+  return deleteData$1(client, path, options);
 }
-async function deleteAll(client, path) {
+async function deleteAll(client, path, options = {}) {
   if (client.gun) {
     return deleteAll$2(client.gun, path);
   }
-  return deleteAll$1(client, path);
+  return deleteAll$1(client, path, options);
 }
 function subscribe(client, path, callback, options = {}) {
   if (client.subscribe && client.gun) {
@@ -24564,7 +24573,7 @@ async function issueCapability$1(permissions, scope, recipient, options = {}) {
     // Mark self-capabilities for clarity
     nonce: generateNonce(),
     issued: Date.now(),
-    expires: Date.now() + expiresIn
+    expires: expiresIn != null ? Date.now() + expiresIn : null
   };
   const payload = JSON.stringify(token);
   const encoded = typeof btoa === "function" ? btoa(payload) : Buffer.from(payload).toString("base64");
@@ -24643,7 +24652,7 @@ async function verifyCapability$1(token, requiredPermission, scope) {
       console.log("[verifyCapability] ❌ Invalid token type:", { type: tokenObj?.type, tokenObj });
       return false;
     }
-    if (Date.now() > tokenObj.expires) {
+    if (tokenObj.expires != null && Date.now() > tokenObj.expires) {
       console.log("[verifyCapability] ❌ Token expired:", {
         expires: tokenObj.expires,
         now: Date.now(),
@@ -25585,8 +25594,8 @@ async function createHologramWithCapability(client, sourceHolon, targetHolon, le
       { holonId: sourceHolon, lensName, dataId },
       targetAuthorPubKey,
       {
-        expiresIn: expiresIn !== null ? expiresIn : isSelfCapability2 ? 365 * 24 * 60 * 60 * 1e3 : 36e5,
-        // 1 year for self, 1 hour for cross
+        expiresIn: expiresIn !== void 0 ? expiresIn : null,
+        // Hologram capabilities don't expire — they live as long as the hologram
         issuer: sourceAuthorPubKey,
         issuerKey: sourceAuthorPrivKey
         // Use passed private key (holon's key when federated via holonsbot)
@@ -38344,7 +38353,7 @@ class ChainManager {
    */
   async _loadEthers() {
     if (!this.ethers) {
-      const ethersModule = await import("./index-BdnrGafX.js");
+      const ethersModule = await import("./index-HW9kbrzC.js");
       this.ethers = ethersModule;
     }
     return this.ethers;
@@ -47135,7 +47144,7 @@ class ContractDeployer {
    */
   async _loadEthers() {
     if (!this.ethers) {
-      this.ethers = await import("./index-BdnrGafX.js");
+      this.ethers = await import("./index-HW9kbrzC.js");
     }
     return this.ethers;
   }
@@ -47521,7 +47530,7 @@ class ContractOperations {
    */
   async _loadEthers() {
     if (!this.ethers) {
-      this.ethers = await import("./index-BdnrGafX.js");
+      this.ethers = await import("./index-HW9kbrzC.js");
     }
     return this.ethers;
   }
@@ -60613,7 +60622,15 @@ class HoloSphereBase extends HoloSphere$1 {
       throw new ValidationError$1("ValidationError: dataId must be a non-empty string");
     }
     const isPubkeyHolon = typeof holonId === "string" && /^[0-9a-f]{64}$/i.test(holonId);
-    const isOwnHolon = this.client && (holonId === this.client.publicKey || !isPubkeyHolon);
+    let effectiveDeleterPubKey = this.client?.publicKey;
+    if (options.signingKey) {
+      try {
+        effectiveDeleterPubKey = getPublicKey(options.signingKey);
+      } catch (err) {
+        this._log("WARN", "⚠️ Invalid signingKey in delete, using client key", { error: err.message });
+      }
+    }
+    const isOwnHolon = effectiveDeleterPubKey && (holonId === effectiveDeleterPubKey || !isPubkeyHolon);
     const capToken = options.capabilityToken || options.capability;
     if (!isOwnHolon && !capToken) {
       this._log("WARN", "🚫 Delete denied: No capability token for federated holon", { holonId, lensName, dataId });
@@ -60627,7 +60644,11 @@ class HoloSphereBase extends HoloSphere$1 {
     let existingData = cached ? cached.data : null;
     let dataSource = cached ? "write-cache" : null;
     if (!existingData) {
-      existingData = await read(this.client, path);
+      const readOptions = {};
+      if (effectiveDeleterPubKey && effectiveDeleterPubKey !== this.client?.publicKey) {
+        readOptions.authors = [effectiveDeleterPubKey];
+      }
+      existingData = await read(this.client, path, readOptions);
       dataSource = existingData ? "storage" : null;
     }
     if (!existingData) {
@@ -60636,7 +60657,7 @@ class HoloSphereBase extends HoloSphere$1 {
     }
     this._log("DEBUG", "🗑️ DELETE: Found data", { path, source: dataSource });
     const dataOwner = existingData.owner || existingData._creator;
-    const isDataOwner = !dataOwner || dataOwner === this.client.publicKey;
+    const isDataOwner = !dataOwner || dataOwner === this.client.publicKey || dataOwner === effectiveDeleterPubKey;
     if (!isDataOwner) {
       if (!capToken) {
         throw new AuthorizationError("AuthorizationError: Capability token required for delete operation", "delete");
@@ -60666,7 +60687,16 @@ class HoloSphereBase extends HoloSphere$1 {
     }
     const startTime = Date.now();
     this._log("DEBUG", "🔄 DELETE SYNC START", { path, dataId });
-    const deletePromise = deleteData(this.client, path).then(() => {
+    const storageOptions = {};
+    if (options.signingKey) {
+      storageOptions.signingKey = options.signingKey;
+      try {
+        storageOptions.authorPubkey = getPublicKey(options.signingKey);
+      } catch (err) {
+        this._log("WARN", "⚠️ Invalid signingKey in delete, using client key", { error: err.message });
+      }
+    }
+    const deletePromise = deleteData(this.client, path, storageOptions).then(() => {
       const duration = Date.now() - startTime;
       this._metrics.deletes++;
       this._deleteCache.delete(path);
@@ -60782,13 +60812,25 @@ class HoloSphereBase extends HoloSphere$1 {
    *
    * @param {string} holonId - H3 cell ID for the holon
    * @param {string} lensName - Name of the lens (data category)
+   * @param {Object} [options] - Delete options
+   * @param {string} [options.signingKey] - Private key for signing tombstones (hex format).
+   *   Required when deleting data written by a different keypair (e.g., per-holon keys).
    * @returns {Promise<boolean>} True if deletion succeeded
    */
-  async deleteAll(holonId, lensName) {
+  async deleteAll(holonId, lensName, options = {}) {
     if (holonId != null) holonId = String(holonId);
     if (lensName != null) lensName = String(lensName);
     const path = buildPath(this.config.appName, holonId, lensName);
-    return deleteAll(this.client, path);
+    const storageOptions = {};
+    if (options.signingKey) {
+      storageOptions.signingKey = options.signingKey;
+      try {
+        storageOptions.authorPubkey = getPublicKey(options.signingKey);
+      } catch (err) {
+        this._log("WARN", "⚠️ Invalid signingKey in deleteAll, using client key", { error: err.message });
+      }
+    }
+    return deleteAll(this.client, path, storageOptions);
   }
   // === Schema Operations ===
   /**
@@ -61335,16 +61377,52 @@ class HoloSphereBase extends HoloSphere$1 {
     const subscriptionId = `${holonId}-${lensName}-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
     let innerSubscription = null;
     let unsubscribeCalled = false;
-    createSubscription(this.client, path, callback, subscriptionOptions).then((subscription) => {
-      innerSubscription = subscription;
-      if (unsubscribeCalled) {
-        subscription.unsubscribe();
-      } else {
-        this.subscriptionRegistry.register(subscriptionId, subscription);
+    (async () => {
+      try {
+        const targetPubkey = await this._resolveHolonToPubkey(holonId);
+        const isOtherAuthor = targetPubkey && targetPubkey !== this.client.publicKey;
+        if (isOtherAuthor) {
+          const capToken = options.capabilityToken || options.capability;
+          if (capToken) {
+            const authorized = await this.verifyCapability(capToken, "read", { holonId, lensName });
+            if (!authorized) {
+              this._log("WARN", "❌ Subscribe: invalid capability token - skipping", { holonId, lensName });
+              return;
+            }
+          } else {
+            const capability = await this._getCapabilityForAuthor(targetPubkey, { holonId, lensName });
+            if (!capability) {
+              this._log("WARN", "❌ Subscribe: no capability for federated author - skipping", {
+                holonId,
+                lensName,
+                targetPubkey: targetPubkey?.slice(0, 12) + "..."
+              });
+              return;
+            }
+            this._log("DEBUG", "✅ Subscribe: capability found for federated author", {
+              holonId,
+              lensName,
+              targetPubkey: targetPubkey?.slice(0, 12) + "..."
+            });
+          }
+        }
+        if (unsubscribeCalled) return;
+        const subscription = await createSubscription(
+          this.client,
+          path,
+          callback,
+          subscriptionOptions
+        );
+        innerSubscription = subscription;
+        if (unsubscribeCalled) {
+          subscription.unsubscribe();
+        } else {
+          this.subscriptionRegistry.register(subscriptionId, subscription);
+        }
+      } catch (err) {
+        this._log("ERROR", "Subscription setup failed", { path, error: err.message });
       }
-    }).catch((err) => {
-      this._log("ERROR", "Subscription setup failed", { path, error: err.message });
-    });
+    })();
     this._metrics.subscriptions = (this._metrics.subscriptions || 0) + 1;
     return {
       unsubscribe: () => {
@@ -61923,4 +62001,4 @@ export {
   concatBytes as y,
   dataLength as z
 };
-//# sourceMappingURL=index-C3Cag0SV.js.map
+//# sourceMappingURL=index-B7ERi4ng.js.map