@fuzdev/fuz_app 0.30.0 → 0.32.0

package/dist/ui/app_settings_state.svelte.d.ts

@@ -1,13 +1,52 @@
 /**
  * Reactive state for admin app settings management.
  *
+ * Flows every operation through an injected `AppSettingsRpc` adapter — mirrors
+ * `AdminInvitesRpc` / `AuditLogRpc`. Tests can inject plain-function stubs
+ * and consumers adapt their typed RPC client to the same shape.
+ *
  * @module
  */
 import { Loadable } from './loadable.svelte.js';
 import type { AppSettingsWithUsernameJson } from '../auth/app_settings_schema.js';
+/**
+ * Narrow RPC surface consumed by `AppSettingsState`. Consumers adapt their
+ * typed RPC client to this shape.
+ */
+export interface AppSettingsRpc {
+    get: () => Promise<{
+        settings: AppSettingsWithUsernameJson;
+    }>;
+    update: (params: {
+        open_signup: boolean;
+    }) => Promise<{
+        ok: true;
+        settings: AppSettingsWithUsernameJson;
+    }>;
+}
+/**
+ * Svelte context carrying the reactive `AppSettingsRpc` accessor. Mirrors
+ * `admin_accounts_rpc_context`. Unset context falls back to `() => null` so
+ * `OpenSignupToggle` mounted outside a provisioner hides gracefully.
+ */
+export declare const app_settings_rpc_context: {
+    get: () => () => AppSettingsRpc | null;
+    set: (value?: (() => AppSettingsRpc | null) | undefined) => () => AppSettingsRpc | null;
+};
+export interface AppSettingsStateOptions {
+    /**
+     * Reactive accessor for the RPC adapter. `null` disables all operations
+     * (the state reports a descriptive error when fetch/update fires).
+     */
+    get_rpc?: () => AppSettingsRpc | null;
+}
 export declare class AppSettingsState extends Loadable {
+    #private;
     settings: AppSettingsWithUsernameJson | null;
     updating: boolean;
+    constructor(options?: AppSettingsStateOptions);
+    /** True when an RPC adapter is wired. All ops require it. */
+    get has_rpc(): boolean;
     fetch(): Promise<void>;
     update_open_signup(value: boolean): Promise<void>;
 }

package/dist/ui/app_settings_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app_settings_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/app_settings_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAE9C,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,gCAAgC,CAAC;AAEhF,qBAAa,gBAAiB,SAAQ,QAAQ;IAC7C,QAAQ,EAAE,2BAA2B,GAAG,IAAI,CAAoB;IAChE,QAAQ,UAAqB;IAEvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAqBvD"}
+{"version":3,"file":"app_settings_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/app_settings_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,gCAAgC,CAAC;AAEhF;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,MAAM,OAAO,CAAC;QAAC,QAAQ,EAAE,2BAA2B,CAAA;KAAC,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,MAAM,EAAE;QAChB,WAAW,EAAE,OAAO,CAAC;KACrB,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,2BAA2B,CAAA;KAAC,CAAC,CAAC;CACjE;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;qBAAwB,cAAc,GAAG,IAAI;yBAArB,cAAc,GAAG,IAAI,wBAArB,cAAc,GAAG,IAAI;CAEjF,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACvC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;CACtC;AAED,qBAAa,gBAAiB,SAAQ,QAAQ;;IAG7C,QAAQ,EAAE,2BAA2B,GAAG,IAAI,CAAoB;IAChE,QAAQ,UAAqB;gBAEjB,OAAO,CAAC,EAAE,uBAAuB;IAK7C,6DAA6D;IAC7D,IAAI,OAAO,IAAI,OAAO,CAErB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBvD"}

package/dist/ui/app_settings_state.svelte.js

@@ -1,38 +1,54 @@
 /**
  * Reactive state for admin app settings management.
  *
+ * Flows every operation through an injected `AppSettingsRpc` adapter — mirrors
+ * `AdminInvitesRpc` / `AuditLogRpc`. Tests can inject plain-function stubs
+ * and consumers adapt their typed RPC client to the same shape.
+ *
  * @module
  */
+import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
 import { Loadable } from './loadable.svelte.js';
-import { parse_response_error, ui_fetch } from './ui_fetch.js';
+/**
+ * Svelte context carrying the reactive `AppSettingsRpc` accessor. Mirrors
+ * `admin_accounts_rpc_context`. Unset context falls back to `() => null` so
+ * `OpenSignupToggle` mounted outside a provisioner hides gracefully.
+ */
+export const app_settings_rpc_context = create_context(() => () => null);
 export class AppSettingsState extends Loadable {
+    #get_rpc;
     settings = $state.raw(null);
     updating = $state.raw(false);
+    constructor(options) {
+        super();
+        this.#get_rpc = options?.get_rpc ?? (() => null);
+    }
+    /** True when an RPC adapter is wired. All ops require it. */
+    get has_rpc() {
+        return this.#get_rpc() !== null;
+    }
     async fetch() {
+        const rpc = this.#get_rpc();
+        if (!rpc) {
+            this.error = 'rpc adapter not wired';
+            return;
+        }
         await this.run(async () => {
-            const response = await ui_fetch('/api/admin/settings');
-            if (!response.ok) {
-                throw new Error(await parse_response_error(response, 'Failed to fetch settings'));
-            }
-            const data = await response.json();
-            this.settings = data.settings ?? null;
+            const { settings } = await rpc.get();
+            this.settings = settings;
         });
     }
     async update_open_signup(value) {
+        const rpc = this.#get_rpc();
+        if (!rpc) {
+            this.error = 'rpc adapter not wired';
+            return;
+        }
         this.updating = true;
         this.error = null;
         try {
-            const response = await ui_fetch('/api/admin/settings', {
-                method: 'PATCH',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({ open_signup: value }),
-            });
-            if (!response.ok) {
-                this.error = await parse_response_error(response);
-                return;
-            }
-            const data = await response.json();
-            this.settings = data.settings ?? null;
+            const { settings } = await rpc.update({ open_signup: value });
+            this.settings = settings;
         }
         catch (e) {
             this.error = e instanceof Error ? e.message : 'Failed to update settings';

package/dist/ui/audit_log_state.svelte.d.ts

@@ -1,8 +1,10 @@
 /**
  * Reactive state for the audit log viewer.
  *
- * Supports both fetch-based pagination and realtime SSE streaming.
- * SSE events are prepended to the list; use `fetch()` for initial load and filters.
+ * Two fetch primitives (`fetch` for events, `fetch_permit_history` for the
+ * grant/revoke shortcut) flow through an injected RPC adapter; the SSE
+ * stream continues to use `EventSource` directly — streams aren't an RPC
+ * concern.
  *
  * @module
  */
@@ -14,6 +16,39 @@ export interface AuditLogFetchOptions {
     account_id?: string;
     limit?: number;
     offset?: number;
+    since_seq?: number;
+}
+/**
+ * Narrow RPC surface consumed by `AuditLogState`. Consumers adapt their typed
+ * RPC client to this shape. Mirrors `AdminAccountsRpc` / `AdminInvitesRpc`.
+ */
+export interface AuditLogRpc {
+    list: (options?: AuditLogFetchOptions) => Promise<{
+        events: Array<AuditLogEventWithUsernamesJson>;
+    }>;
+    permit_history: (params?: {
+        limit?: number;
+        offset?: number;
+    }) => Promise<{
+        events: Array<PermitHistoryEventJson>;
+    }>;
+}
+/**
+ * Svelte context carrying the reactive `AuditLogRpc` accessor. Mirrors
+ * `admin_accounts_rpc_context`. Unset context falls back to `() => null`.
+ */
+export declare const audit_log_rpc_context: {
+    get: () => () => AuditLogRpc | null;
+    set: (value?: (() => AuditLogRpc | null) | undefined) => () => AuditLogRpc | null;
+};
+export interface AuditLogStateOptions {
+    /**
+     * Reactive accessor for the RPC adapter. Matches the `get_rpc` pattern on
+     * `AdminAccountsState` — `null` disables fetch operations (SSE still works).
+     */
+    get_rpc?: () => AuditLogRpc | null;
+    /** SSE stream URL. Defaults to the shipped admin audit-log stream route. */
+    stream_url?: string;
 }
 export declare class AuditLogState extends Loadable {
     #private;
@@ -22,7 +57,9 @@ export declare class AuditLogState extends Loadable {
     readonly count: number;
     /** Whether the SSE stream is currently connected. */
     connected: boolean;
-    constructor(stream_url?: string);
+    constructor(options?: AuditLogStateOptions);
+    /** True when an RPC adapter is wired. `fetch`/`fetch_permit_history` no-op without it. */
+    get has_rpc(): boolean;
     fetch(options?: AuditLogFetchOptions): Promise<void>;
     fetch_permit_history(limit?: number, offset?: number): Promise<void>;
     /**

package/dist/ui/audit_log_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit_log_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/audit_log_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAE9C,OAAO,KAAK,EAEX,8BAA8B,EAC9B,sBAAsB,EACtB,MAAM,6BAA6B,CAAC;AAGrC,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,aAAc,SAAQ,QAAQ;;IAC1C,MAAM,EAAE,KAAK,CAAC,8BAA8B,CAAC,CAAkB;IAC/D,qBAAqB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAkB;IAEtE,QAAQ,CAAC,KAAK,SAAgC;IAE9C,qDAAqD;IACrD,SAAS,UAAqB;gBAWlB,UAAU,SAAgC;IAKhD,KAAK,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBpD,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB1E;;;;;;;OAOG;IACH,SAAS,IAAI,MAAM,IAAI;IA0CvB,gCAAgC;IAChC,UAAU,IAAI,IAAI;CAmClB"}
+{"version":3,"file":"audit_log_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/audit_log_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAEX,8BAA8B,EAC9B,sBAAsB,EACtB,MAAM,6BAA6B,CAAC;AAGrC,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,CACL,OAAO,CAAC,EAAE,oBAAoB,KAC1B,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,8BAA8B,CAAC,CAAA;KAAC,CAAC,CAAC;IAC9D,cAAc,EAAE,CAAC,MAAM,CAAC,EAAE;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAA;KAAC,CAAC,CAAC;CACvD;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB;qBAAwB,WAAW,GAAG,IAAI;yBAAlB,WAAW,GAAG,IAAI,wBAAlB,WAAW,GAAG,IAAI;CAAmB,CAAC;AAEhG,MAAM,WAAW,oBAAoB;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,WAAW,GAAG,IAAI,CAAC;IACnC,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,aAAc,SAAQ,QAAQ;;IAG1C,MAAM,EAAE,KAAK,CAAC,8BAA8B,CAAC,CAAkB;IAC/D,qBAAqB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAkB;IAEtE,QAAQ,CAAC,KAAK,SAAgC;IAE9C,qDAAqD;IACrD,SAAS,UAAqB;gBAWlB,OAAO,CAAC,EAAE,oBAAoB;IAM1C,0FAA0F;IAC1F,IAAI,OAAO,IAAI,OAAO,CAErB;IAEK,KAAK,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAapD,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY1E;;;;;;;OAOG;IACH,SAAS,IAAI,MAAM,IAAI;IA0CvB,gCAAgC;IAChC,UAAU,IAAI,IAAI;CAiClB"}

package/dist/ui/audit_log_state.svelte.js

@@ -1,15 +1,23 @@
 /**
  * Reactive state for the audit log viewer.
  *
- * Supports both fetch-based pagination and realtime SSE streaming.
- * SSE events are prepended to the list; use `fetch()` for initial load and filters.
+ * Two fetch primitives (`fetch` for events, `fetch_permit_history` for the
+ * grant/revoke shortcut) flow through an injected RPC adapter; the SSE
+ * stream continues to use `EventSource` directly — streams aren't an RPC
+ * concern.
  *
  * @module
  */
 import { DEV } from 'esm-env';
+import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
 import { Loadable } from './loadable.svelte.js';
-import { parse_response_error, ui_fetch } from './ui_fetch.js';
+/**
+ * Svelte context carrying the reactive `AuditLogRpc` accessor. Mirrors
+ * `admin_accounts_rpc_context`. Unset context falls back to `() => null`.
+ */
+export const audit_log_rpc_context = create_context(() => () => null);
 export class AuditLogState extends Loadable {
+    #get_rpc;
     events = $state.raw([]);
     permit_history_events = $state.raw([]);
     count = $derived(this.events.length);
@@ -21,48 +29,36 @@ export class AuditLogState extends Loadable {
     #event_source = null;
     /** Path to the SSE stream endpoint. */
     #stream_url;
-    constructor(stream_url = '/api/admin/audit-log/stream') {
+    constructor(options) {
         super();
-        this.#stream_url = stream_url;
+        this.#get_rpc = options?.get_rpc ?? (() => null);
+        this.#stream_url = options?.stream_url ?? '/api/admin/audit-log/stream';
+    }
+    /** True when an RPC adapter is wired. `fetch`/`fetch_permit_history` no-op without it. */
+    get has_rpc() {
+        return this.#get_rpc() !== null;
     }
     async fetch(options) {
+        const rpc = this.#get_rpc();
+        if (!rpc) {
+            this.error = 'rpc adapter not wired';
+            return;
+        }
         await this.run(async () => {
-            const params = new URLSearchParams();
-            if (options?.event_type)
-                params.set('event_type', options.event_type);
-            if (options?.account_id)
-                params.set('account_id', options.account_id);
-            if (options?.limit != null)
-                params.set('limit', String(options.limit));
-            if (options?.offset != null)
-                params.set('offset', String(options.offset));
-            const qs = params.toString();
-            const url = `/api/admin/audit-log${qs ? `?${qs}` : ''}`;
-            const response = await ui_fetch(url);
-            if (!response.ok) {
-                throw new Error(await parse_response_error(response, 'Failed to fetch audit log'));
-            }
-            const data = await response.json();
-            this.events = data.events ?? [];
-            // track the highest seq for gap fill
+            const { events } = await rpc.list(options);
+            this.events = events;
             this.#update_last_seq(this.events);
         });
     }
     async fetch_permit_history(limit, offset) {
+        const rpc = this.#get_rpc();
+        if (!rpc) {
+            this.error = 'rpc adapter not wired';
+            return;
+        }
         await this.run(async () => {
-            const params = new URLSearchParams();
-            if (limit != null)
-                params.set('limit', String(limit));
-            if (offset != null)
-                params.set('offset', String(offset));
-            const qs = params.toString();
-            const url = `/api/admin/audit-log/permit-history${qs ? `?${qs}` : ''}`;
-            const response = await ui_fetch(url);
-            if (!response.ok) {
-                throw new Error(await parse_response_error(response, 'Failed to fetch permit history'));
-            }
-            const data = await response.json();
-            this.permit_history_events = data.events ?? [];
+            const { events } = await rpc.permit_history({ limit, offset });
+            this.permit_history_events = events;
         });
     }
     /**
@@ -123,13 +119,11 @@ export class AuditLogState extends Loadable {
     }
     /** Fetch events missed during disconnection, keyed by `since_seq`. */
     async #fill_gap(since_seq) {
+        const rpc = this.#get_rpc();
+        if (!rpc)
+            return;
         try {
-            const url = `/api/admin/audit-log?since_seq=${since_seq}&limit=200`;
-            const response = await ui_fetch(url);
-            if (!response.ok)
-                return;
-            const data = await response.json();
-            const gap_events = data.events ?? [];
+            const { events: gap_events } = await rpc.list({ since_seq, limit: 200 });
             if (gap_events.length === 0)
                 return;
             // merge — deduplicate by id, keep newest-first order

package/dist/ui/auth_state.svelte.d.ts

@@ -31,7 +31,7 @@
  *
  * @module
  */
-import { type Permit, type SessionAccount } from '../auth/account_schema.js';
+import { type ActorSummaryJson, type PermitSummaryJson, type SessionAccount } from '../auth/account_schema.js';
 /**
  * Svelte context for `AuthState`.
  * Use `auth_state_context.set(state)` in the provider and `auth_state_context.get()` to access.
@@ -46,8 +46,9 @@ export declare class AuthState {
     verified: boolean;
     verify_error: string | null;
     account: SessionAccount | null;
-    permits: Array<Permit>;
-    readonly active_permits: Array<Permit>;
+    actor: ActorSummaryJson | null;
+    permits: Array<PermitSummaryJson>;
+    readonly active_permits: Array<PermitSummaryJson>;
     readonly roles: Array<string>;
     /** True when bootstrap is available (no accounts exist yet). */
     needs_bootstrap: boolean;

package/dist/ui/auth_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/auth_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,OAAO,EAAC,KAAK,MAAM,EAAoB,KAAK,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAE7F;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;CAA8B,CAAC;AAE9D,qBAAa,SAAS;IACrB,SAAS,UAAqB;IAC9B,QAAQ,UAAqB;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC/C,OAAO,EAAE,cAAc,GAAG,IAAI,CAAoB;IAClD,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAkB;IACxC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAEpC;IACF,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAoD;IAEjF,gEAAgE;IAChE,eAAe,UAAqB;IAEpC;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA4BpC;;;;OAIG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCjE;;;;OAIG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiCpF;;;;OAIG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4ClF;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAU7B"}
+{"version":3,"file":"auth_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/auth_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,OAAO,EACN,KAAK,gBAAgB,EAErB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;CAA8B,CAAC;AAE9D,qBAAa,SAAS;IACrB,SAAS,UAAqB;IAC9B,QAAQ,UAAqB;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC/C,OAAO,EAAE,cAAc,GAAG,IAAI,CAAoB;IAClD,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAoB;IAClD,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAkB;IACnD,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAE/C;IACF,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAoD;IAEjF,gEAAgE;IAChE,eAAe,UAAqB;IAEpC;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA6BpC;;;;OAIG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCjE;;;;OAIG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiCpF;;;;OAIG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4ClF;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAW7B"}

package/dist/ui/auth_state.svelte.js

@@ -33,7 +33,7 @@
  */
 import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
 import { ui_fetch } from './ui_fetch.js';
-import { is_permit_active } from '../auth/account_schema.js';
+import { is_permit_active, } from '../auth/account_schema.js';
 /**
  * Svelte context for `AuthState`.
  * Use `auth_state_context.set(state)` in the provider and `auth_state_context.get()` to access.
@@ -44,6 +44,7 @@ export class AuthState {
     verified = $state.raw(false);
     verify_error = $state.raw(null);
     account = $state.raw(null);
+    actor = $state.raw(null);
     permits = $state.raw([]);
     active_permits = $derived(this.permits.filter((p) => is_permit_active(p)));
     roles = $derived(this.active_permits.map((p) => p.role));
@@ -64,6 +65,7 @@ export class AuthState {
                 const data = await response.json();
                 this.verified = true;
                 this.account = data.account ?? null;
+                this.actor = data.actor ?? null;
                 this.permits = data.permits ?? [];
                 this.needs_bootstrap = false;
             }
@@ -233,6 +235,7 @@ export class AuthState {
         }
         this.verified = false;
         this.account = null;
+        this.actor = null;
         this.permits = [];
     }
 }

package/dist/ui/permit_offers_state.svelte.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Reactive state for the consentful-permits offer flow.
+ *
+ * Maintains one offer cache keyed by id, seeded by the RPC list/history
+ * actions and kept live by the six permit-offer WebSocket notifications.
+ * `incoming` (recipient-side pending) and `outgoing` (grantor-side pending)
+ * are derived views; `history` is the full cache ordered newest-first for
+ * the grantor/admin history view.
+ *
+ * Wiring is transport-agnostic: the ctor accepts a narrow RPC interface
+ * the consumer adapts from their typed client, plus an `account_id` /
+ * `actor_id` getter pair (typically bound to `auth_state`). Notification
+ * delivery is pull-only via `subscribe()` — the consumer plumbs their
+ * `FrontendWebsocketClient` / `ActionPeer` receiver to `apply_notification`.
+ *
+ * @module
+ */
+import { Loadable } from './loadable.svelte.js';
+import type { PermitOfferJson } from '../auth/permit_offer_schema.js';
+/**
+ * Svelte context for `PermitOffersState`.
+ * Use `permit_offers_state_context.set(state)` in the provider and
+ * `permit_offers_state_context.get()` to access.
+ */
+export declare const permit_offers_state_context: {
+    get: (error_message?: string) => PermitOffersState;
+    get_maybe: () => PermitOffersState | undefined;
+    set: (value: PermitOffersState) => PermitOffersState;
+};
+/**
+ * Narrow RPC surface consumed by `PermitOffersState`. Consumers adapt their
+ * typed client (e.g. a `create_rpc_client` Proxy) to this shape — the state
+ * class stays decoupled from the client's `Result` return type so tests can
+ * inject plain-function stubs.
+ */
+export interface PermitOffersRpc {
+    list: () => Promise<{
+        offers: Array<PermitOfferJson>;
+    }>;
+    history: (options?: {
+        limit?: number;
+        offset?: number;
+    }) => Promise<{
+        offers: Array<PermitOfferJson>;
+    }>;
+    create: (params: {
+        to_account_id: string;
+        role: string;
+        scope_id?: string | null;
+        message?: string | null;
+    }) => Promise<{
+        offer: PermitOfferJson;
+    }>;
+    accept: (offer_id: string) => Promise<{
+        permit_id: string;
+        offer: PermitOfferJson;
+        superseded_offer_ids: Array<string>;
+    }>;
+    decline: (offer_id: string, reason?: string | null) => Promise<{
+        ok: true;
+    }>;
+    retract: (offer_id: string) => Promise<{
+        ok: true;
+    }>;
+}
+/** Narrow WS notification envelope — method + params, matching `JsonrpcNotification`. */
+export interface PermitOfferNotification {
+    method: string;
+    params: unknown;
+}
+/** Subscription primitive — consumer wires their WS receiver; returns a disposer. */
+export type PermitOfferSubscribe = (handler: (notification: PermitOfferNotification) => void) => () => void;
+export interface PermitOffersStateOptions {
+    rpc: PermitOffersRpc;
+    /** Reactive accessor for the current account id; returns `null` when logged out. */
+    account_id: () => string | null;
+    /**
+     * Reactive accessor for the current actor id — required to classify
+     * offers as outgoing. Returns `null` when unknown.
+     */
+    actor_id: () => string | null;
+}
+export declare class PermitOffersState extends Loadable {
+    #private;
+    /** Pending offers for the current account, soonest-expiring first. */
+    readonly incoming: Array<PermitOfferJson>;
+    /** Pending offers from the current actor, newest-created first. */
+    readonly outgoing: Array<PermitOfferJson>;
+    /** Every offer known to this state, newest-created first. Feeds the history view. */
+    readonly history: Array<PermitOfferJson>;
+    readonly incoming_count: number;
+    constructor(options: PermitOffersStateOptions);
+    /** Seed the cache with the recipient-side pending inbox. */
+    fetch(): Promise<void>;
+    /** Seed both-directions history (includes terminal rows). */
+    fetch_history(options?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<void>;
+    /** Issue a new offer; merges the returned offer into the cache on success. */
+    create(params: {
+        to_account_id: string;
+        role: string;
+        scope_id?: string | null;
+        message?: string | null;
+    }): Promise<PermitOfferJson | undefined>;
+    /** Accept an offer; stamps it terminal in the cache and drops any siblings the server superseded. */
+    accept(offer_id: string): Promise<void>;
+    decline(offer_id: string, reason?: string | null): Promise<void>;
+    retract(offer_id: string): Promise<void>;
+    /**
+     * Wire a notification subscription. The handler dispatches each matching
+     * notification into `apply_notification`; the returned disposer unwires.
+     */
+    subscribe(subscribe_fn: PermitOfferSubscribe): () => void;
+    /**
+     * Reduce a single WS notification into the cache. Exposed so consumers
+     * wiring their WS receiver directly (without `subscribe`) and tests can
+     * drive the reducer without allocating a subscription.
+     */
+    apply_notification(notification: PermitOfferNotification): void;
+    /** Clear the cache and reset loading/error state. */
+    reset(): void;
+}
+//# sourceMappingURL=permit_offers_state.svelte.d.ts.map

package/dist/ui/permit_offers_state.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permit_offers_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/permit_offers_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,gCAAgC,CAAC;AAUpE;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;CAAsC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;KAAC,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAA;KAAC,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,MAAM,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,KAAK,OAAO,CAAC;QAAC,KAAK,EAAE,eAAe,CAAA;KAAC,CAAC,CAAC;IACxC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,eAAe,CAAC;QACvB,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;CACnD;AAED,yFAAyF;AACzF,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAClC,OAAO,EAAE,CAAC,YAAY,EAAE,uBAAuB,KAAK,IAAI,KACpD,MAAM,IAAI,CAAC;AAEhB,MAAM,WAAW,wBAAwB;IACxC,GAAG,EAAE,eAAe,CAAC;IACrB,oFAAoF;IACpF,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChC;;;OAGG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC9B;AAQD,qBAAa,iBAAkB,SAAQ,QAAQ;;IAO9C,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,CAatC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,CAatC;IAEH,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,CAIrC;IAEH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAkC;gBAErD,OAAO,EAAE,wBAAwB;IAO7C,4DAA4D;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,6DAA6D;IACvD,aAAa,CAAC,OAAO,CAAC,EAAE;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/E,8EAA8E;IACxE,MAAM,CAAC,MAAM,EAAE;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC;IAQxC,qGAAqG;IAC/F,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAavC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhE,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9C;;;OAGG;IACH,SAAS,CAAC,YAAY,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAMzD;;;;OAIG;IACH,kBAAkB,CAAC,YAAY,EAAE,uBAAuB,GAAG,IAAI;IAwB/D,qDAAqD;IAC5C,KAAK,IAAI,IAAI;CAmBtB"}