@fuzdev/fuz_app 0.44.0 → 0.46.0

package/dist/actions/rpc_client.d.ts

@@ -5,14 +5,15 @@
  * - **Tier 1** (simple, for tx): transport send/receive, Result return. No `environment`.
  * - **Tier 2** (full, for zzz): ActionEvent lifecycle with `environment`.
  *
- * Consumers cast the return to their generated `ActionsApi` interface for full type safety.
+ * Pass the consumer's generated `ActionsApi` interface as `<TApi>` to flow
+ * full type safety through without an explicit cast at the call site.
  *
  * @module
  */
 import type { Result } from '@fuzdev/fuz_util/result.js';
 import type { ActionEventEnvironment } from './action_event_types.js';
+import { type ActionEvent } from './action_event.js';
 import type { ActionPeer, ActionPeerSendOptions } from './action_peer.js';
-import type { ActionEventDataUnion } from './action_event_data.js';
 import type { TransportName } from './transports.js';
 import type { JsonrpcErrorObject } from '../http/jsonrpc.js';
 /**
@@ -24,21 +25,21 @@ import type { JsonrpcErrorObject } from '../http/jsonrpc.js';
  * RPC surface lives on HTTP.
  */
 export type TransportForMethod = (method: string) => TransportName | undefined;
-/** Duck-typed action history — consumers pass their concrete Actions cell. */
-export interface RpcClientActionHistory {
-    add_from_json: (json: {
-        method: string;
-        action_event_data: ActionEventDataUnion;
-    }) => {
-        listen_to_action_event: (event: any) => void;
-    } | undefined;
-}
 /** Options for `create_rpc_client`. */
-export interface CreateRpcClientOptions {
+export interface CreateRpcClientOptions<TApi extends object = object> {
     peer: ActionPeer;
     environment: ActionEventEnvironment;
-    /** Optional action history tracking (duck-typed Actions cell). */
-    actions?: RpcClientActionHistory;
+    /**
+     * Optional callback fired once per dispatched action with the live
+     * `ActionEvent`. Consumers wire reactive state here — e.g. zzz's `Actions`
+     * cell calls `add_from_json` + `listen_to_action_event` inside the
+     * callback so its history stays decoupled from the rpc_client surface.
+     *
+     * `event.spec.method` and `event.data.method` narrow to
+     * `keyof TApi & string` — drop the `as ActionMethod` cast at the call
+     * site when `TApi` is a generated `ActionsApi` interface.
+     */
+    on_action_event?: (event: ActionEvent<keyof TApi & string>) => void;
     /**
      * Optional per-method transport selector. When provided, the client calls
      * `peer.send(msg, {transport_name})` with the returned transport for each
@@ -55,10 +56,22 @@ export interface CreateRpcClientOptions {
  * - `remote_notification` → send notification, return Result
  * - `local_call` → execute locally (sync or async), return Result or throw
  *
- * @param options - client options (peer, environment, optional action history)
- * @returns a Proxy that responds to any method name found in the environment's specs
+ * Generic `TApi` is the consumer's typed Proxy interface (typically a
+ * codegen-derived `ActionsApi`). Required — no default, so forgetting it
+ * is a type error rather than a silent slide into `any`. The `as unknown
+ * as TApi` coercion lives inside this function so call sites get a typed
+ * return without a cast at the seam. `TApi` is a type-layer promise about
+ * what the Proxy responds to; the runtime walks `specs` (kept in sync by
+ * the consumer, codegen recommended).
+ *
+ * ```ts
+ * const api_result = create_rpc_client<MyActionsApi>({peer, environment});
+ * ```
+ *
+ * @param options - client options (peer, environment, optional callbacks)
+ * @returns a Proxy typed as `TApi` that responds to any method name found in the environment's specs
  */
-export declare const create_rpc_client: (options: CreateRpcClientOptions) => Record<string, (...args: Array<any>) => any>;
+export declare const create_rpc_client: <TApi extends object>(options: CreateRpcClientOptions<TApi>) => TApi;
 /**
  * Per-call options accepted by every typed Proxy method. Same shape as
  * `ActionPeerSendOptions` — the client threads these through unchanged
@@ -67,54 +80,6 @@ export declare const create_rpc_client: (options: CreateRpcClientOptions) => Rec
  */
 export interface RpcClientCallOptions extends ActionPeerSendOptions {
 }
-/**
- * `method, input -> unwrapped output` signature for adapter wiring.
- *
- * The typed `create_rpc_client` Proxy returns `Result<T, JsonrpcErrorObject>`
- * on every call. UI adapters (e.g. `admin_rpc_adapters.ts`) want a
- * throw-on-error shape so form components can match on `error.data.reason`
- * via catch blocks. `create_throwing_rpc_call` bridges the two.
- */
-export type ThrowingRpcCall = <TOutput = unknown>(method: string, input?: unknown) => Promise<TOutput>;
-/**
- * Wrap a typed RPC client so every call returns its unwrapped value or throws.
- *
- * On `{ok: false}`, throws an `Error` whose `message` comes from the
- * JSON-RPC error object, plus `{code, data}` as own properties — so
- * catch blocks reading `err.message` / `err.code` / `err.data?.reason`
- * all work. On unknown method, throws a clear "rpc method not found"
- * error instead of the cryptic `undefined is not a function` that
- * would otherwise surface.
- *
- * Invariant upheld by `create_rpc_client`: every `{ok: false}` return
- * carries a well-formed `JsonrpcErrorObject` with `code` + `message`.
- * Callers must still use optional chaining on `err.data` because the
- * JSON-RPC `data` field is spec-level optional — a handler that throws
- * `jsonrpc_errors.forbidden()` without a `data` argument produces
- * `err.data === undefined`.
- *
- * Only `{code, data}` cross onto the thrown Error — `message` flows
- * through the `Error` constructor argument, and `name` / `stack` are
- * left as the Error's own so attacker-shaped `result.error` payloads
- * cannot overwrite them.
- *
- * The mapped-type generic constraint accepts both shapes without a cast:
- * a codegen-derived typed `ActionsApi` (named-method interface, e.g.
- * `{account_verify: (input) => Promise<Result<...>>, ...}`) and a loose
- * `Record<string, (input?: any) => Promise<any> | void>`. Using `keyof TApi`
- * in the constraint avoids the index-signature requirement that would
- * otherwise force consumers to `as unknown as Record<string, …>` their
- * generated client. The `| void` arm tolerates `remote_notification`
- * methods, whose `ActionsApi` signature is `(input) => void` even though
- * `create_remote_notification_method` returns a Promise at runtime — the
- * throwing wrapper is intended for `request_response` calls but must
- * accept mixed `ActionsApi` shapes without forcing a cast at the seam.
- *
- * @param api - typed RPC client from `create_rpc_client` (or any object
- *   whose values are all `(input?) => Promise<...> | void` functions —
- *   notably the consumer's generated `ActionsApi` interface)
- */
-export declare const create_throwing_rpc_call: <TApi extends Record<keyof TApi, (input?: any) => Promise<any> | void>>(api: TApi) => ThrowingRpcCall;
 /**
  * Maps a typed `ActionsApi` to a throwing variant.
  *
@@ -124,15 +89,23 @@ export declare const create_throwing_rpc_call: <TApi extends Record<keyof TApi,
  * as `=> void`, sync `local_call` methods) pass through unchanged — there
  * is nothing to unwrap.
  *
- * Input + options parameters are preserved verbatim so generics, branded
- * Uuids, and per-call `RpcClientCallOptions` keep working.
+ * Input + options parameters are preserved verbatim via `...args: infer TArgs`
+ * so the conditional matches both required-input (`input: T`) and
+ * optional-input (`input?: T` / nullary) signatures uniformly. Required-input
+ * shapes (e.g. `admin_session_revoke_all(input: AdminSessionRevokeAllInput)`)
+ * are not assignable to a `(input?: TInput) => …` pattern under
+ * `--strictFunctionTypes`, so an earlier `(input?, options?) =>` form
+ * silently fell through to `TApi[K]` and left those methods Result-shaped —
+ * `create_admin_rpc_adapters(api)` would then reject the typed throwing
+ * Proxy because half its surface still returned `Result<...>`. The rest-args
+ * form preserves both required and optional parameters and resolves the gap.
  */
 export type ThrowingApi<TApi> = {
-    [K in keyof TApi]: TApi[K] extends (input?: infer TInput, options?: infer TOptions) => Promise<Result<{
+    [K in keyof TApi]: TApi[K] extends (...args: infer TArgs) => Promise<Result<{
         value: infer TValue;
     }, {
         error: JsonrpcErrorObject;
-    }>> ? (input?: TInput, options?: TOptions) => Promise<TValue> : TApi[K];
+    }>> ? (...args: TArgs) => Promise<TValue> : TApi[K];
 };
 /**
  * Wrap a typed RPC client so every call resolves to its unwrapped value or
@@ -151,30 +124,27 @@ export type ThrowingApi<TApi> = {
  *
  * Only `{code, data}` cross onto the thrown Error — `name` / `stack` are
  * left as the Error's own properties so attacker-shaped `result.error`
- * payloads cannot overwrite them. Same hardening as
- * `create_throwing_rpc_call`.
- *
- * Composable with `create_throwing_rpc_call` — same typed underlying
- * client feeds both: the Proxy form for direct call sites, the loose
- * method-keyed form for adapter wiring (`ui/admin_rpc_adapters.ts`).
+ * payloads cannot overwrite them.
  *
- * Recommended consumer convention: bind the throwing wrapper to `api`
- * (the common case at call sites) and the underlying Result-returning
- * Proxy to `api_raw` (the composable escape hatch for callers that
- * want to inspect `error.data.reason` without try/catch).
+ * Recommended consumer convention: `create_frontend_rpc_client` ships
+ * both shapes by default — `api` (throwing) for hot-path call sites and
+ * `api_result` (Result) for sites that inspect `error.data.reason`
+ * without try/catch. Result is the protocol primitive; this wrapper is
+ * the ergonomic layer over it. Picking is per call site — both Proxies
+ * share the same underlying transport.
  *
  * Catch blocks read `err.data?.reason` — optional chaining required
  * because JSON-RPC `data` is spec-level optional.
  *
  * On unknown string-keyed methods, the get trap returns a function that
- * throws `"rpc method not found: <prop>"` on invocation — symmetric with
- * `create_throwing_rpc_call` and clearer than the JS default
- * `"api.foo is not a function"`. Symbol props and `then` stay
- * undefined so the Proxy isn't accidentally treated as a thenable
+ * throws `"rpc method not found: <prop>"` on invocation — clearer than
+ * the JS default `"api.foo is not a function"`. Symbol props and `then`
+ * stay undefined so the Proxy isn't accidentally treated as a thenable
  * (`await api` would otherwise probe `then` and trip the thrower).
  *
- * @param api_raw - typed RPC client from `create_rpc_client`, cast
- *   to a consumer-generated `ActionsApi` interface
+ * @param api_result - typed Result-returning RPC client from
+ *   `create_rpc_client<ActionsApi>(...)`. The "_result" suffix names
+ *   what the underlying calls return (`Result<{value}, {error}>`).
  */
-export declare const create_throwing_api: <TApi extends object>(api_raw: TApi) => ThrowingApi<TApi>;
+export declare const create_throwing_api: <TApi extends object>(api_result: TApi) => ThrowingApi<TApi>;
 //# sourceMappingURL=rpc_client.d.ts.map

package/dist/actions/rpc_client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rpc_client.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/rpc_client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,4BAA4B,CAAC;AAQvD,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAOpE,OAAO,KAAK,EAAC,UAAU,EAAE,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAEnD,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,aAAa,GAAG,SAAS,CAAC;AAM/E,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACtC,aAAa,EAAE,CAAC,IAAI,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,oBAAoB,CAAA;KAAC,KAC5E;QACA,sBAAsB,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,CAAC;KAC5C,GACD,SAAS,CAAC;CACb;AAED,uCAAuC;AACvC,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,sBAAsB,CAAC;IACpC,kEAAkE;IAClE,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,GAC7B,SAAS,sBAAsB,KAC7B,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAgB7C,CAAC;AA2DF;;;;;GAKG;AACH,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;CAAG;AAgItE;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,GAAG,OAAO,EAC/C,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,OAAO,KACX,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,eAAO,MAAM,wBAAwB,GACpC,IAAI,SAAS,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAErE,KAAK,IAAI,KACP,eAcF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI;KAC9B,CAAC,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAClC,KAAK,CAAC,EAAE,MAAM,MAAM,EACpB,OAAO,CAAC,EAAE,MAAM,QAAQ,KACpB,OAAO,CAAC,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,MAAM,CAAA;KAAC,EAAE;QAAC,KAAK,EAAE,kBAAkB,CAAA;KAAC,CAAC,CAAC,GACrE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,MAAM,CAAC,GACvD,IAAI,CAAC,CAAC,CAAC;CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,eAAO,MAAM,mBAAmB,GAAI,IAAI,SAAS,MAAM,EAAE,SAAS,IAAI,KAAG,WAAW,CAAC,IAAI,CA8BxF,CAAC"}
+{"version":3,"file":"rpc_client.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/actions/rpc_client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,4BAA4B,CAAC;AAQvD,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAsB,KAAK,WAAW,EAAC,MAAM,mBAAmB,CAAC;AAMxE,OAAO,KAAK,EAAC,UAAU,EAAE,qBAAqB,EAAC,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAEnD,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,aAAa,GAAG,SAAS,CAAC;AAM/E,uCAAuC;AACvC,MAAM,WAAW,sBAAsB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM;IACnE,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,sBAAsB,CAAC;IACpC;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC;IACpE;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,iBAAiB,GAAI,IAAI,SAAS,MAAM,EACpD,SAAS,sBAAsB,CAAC,IAAI,CAAC,KACnC,IA4BF,CAAC;AA6DF;;;;;GAKG;AACH,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;CAAG;AAoHtE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,WAAW,CAAC,IAAI,IAAI;KAC9B,CAAC,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAClC,GAAG,IAAI,EAAE,MAAM,KAAK,KAChB,OAAO,CAAC,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,MAAM,CAAA;KAAC,EAAE;QAAC,KAAK,EAAE,kBAAkB,CAAA;KAAC,CAAC,CAAC,GACrE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,GACnC,IAAI,CAAC,CAAC,CAAC;CACV,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,mBAAmB,GAAI,IAAI,SAAS,MAAM,EAAE,YAAY,IAAI,KAAG,WAAW,CAAC,IAAI,CA8B3F,CAAC"}

package/dist/actions/rpc_client.js

@@ -5,7 +5,8 @@
  * - **Tier 1** (simple, for tx): transport send/receive, Result return. No `environment`.
  * - **Tier 2** (full, for zzz): ActionEvent lifecycle with `environment`.
  *
- * Consumers cast the return to their generated `ActionsApi` interface for full type safety.
+ * Pass the consumer's generated `ActionsApi` interface as `<TApi>` to flow
+ * full type safety through without an explicit cast at the call site.
  *
  * @module
  */
@@ -20,18 +21,35 @@ import { jsonrpc_error_messages } from '../http/jsonrpc_errors.js';
  * - `remote_notification` → send notification, return Result
  * - `local_call` → execute locally (sync or async), return Result or throw
  *
- * @param options - client options (peer, environment, optional action history)
- * @returns a Proxy that responds to any method name found in the environment's specs
+ * Generic `TApi` is the consumer's typed Proxy interface (typically a
+ * codegen-derived `ActionsApi`). Required — no default, so forgetting it
+ * is a type error rather than a silent slide into `any`. The `as unknown
+ * as TApi` coercion lives inside this function so call sites get a typed
+ * return without a cast at the seam. `TApi` is a type-layer promise about
+ * what the Proxy responds to; the runtime walks `specs` (kept in sync by
+ * the consumer, codegen recommended).
+ *
+ * ```ts
+ * const api_result = create_rpc_client<MyActionsApi>({peer, environment});
+ * ```
+ *
+ * @param options - client options (peer, environment, optional callbacks)
+ * @returns a Proxy typed as `TApi` that responds to any method name found in the environment's specs
  */
 export const create_rpc_client = (options) => {
-    const { peer, environment, actions, transport_for_method } = options;
+    const { peer, environment, on_action_event, transport_for_method } = options;
+    // Internal factories construct broadly-typed `ActionEvent` instances; the
+    // public callback narrows `event.spec.method` to `keyof TApi & string`.
+    // Cast once here — function parameters are contravariant, so the narrow
+    // callback isn't directly assignable to the broad slot the helpers take.
+    const broad_on_action_event = on_action_event;
     return new Proxy({}, {
         get(_target, method) {
             const spec = environment.lookup_action_spec(method);
             if (!spec) {
                 return undefined;
             }
-            return create_action_method(peer, environment, spec, actions, transport_for_method);
+            return create_action_method(peer, environment, spec, broad_on_action_event, transport_for_method);
         },
         has(_target, method) {
             return environment.lookup_action_spec(method) !== undefined;
@@ -41,30 +59,26 @@ export const create_rpc_client = (options) => {
 /**
  * Creates a method that executes an action through its complete lifecycle.
  */
-const create_action_method = (peer, environment, spec, actions, transport_for_method) => {
+const create_action_method = (peer, environment, spec, on_action_event, transport_for_method) => {
     switch (spec.kind) {
         case 'local_call':
             return spec.async
-                ? create_async_local_call_method(environment, spec, actions)
-                : create_sync_local_call_method(environment, spec, actions);
+                ? create_async_local_call_method(environment, spec, on_action_event)
+                : create_sync_local_call_method(environment, spec, on_action_event);
         case 'request_response':
-            return create_request_response_method(peer, environment, spec, actions, transport_for_method);
+            return create_request_response_method(peer, environment, spec, on_action_event, transport_for_method);
         case 'remote_notification':
-            return create_remote_notification_method(peer, environment, spec, actions, transport_for_method);
+            return create_remote_notification_method(peer, environment, spec, on_action_event, transport_for_method);
     }
 };
 /**
  * Creates a synchronous local call method.
  * Returns value directly - can throw on error (sync methods cannot return Result).
  */
-const create_sync_local_call_method = (environment, spec, actions) => {
+const create_sync_local_call_method = (environment, spec, on_action_event) => {
     return (input) => {
         const event = create_action_event(environment, spec, input);
-        const action = actions?.add_from_json({
-            method: spec.method,
-            action_event_data: event.toJSON(),
-        });
-        action?.listen_to_action_event(event);
+        on_action_event?.(event);
         event.parse().handle_sync();
         const result = extract_action_result(event);
         if (result.ok) {
@@ -84,7 +98,7 @@ const create_sync_local_call_method = (environment, spec, actions) => {
  * `signal` can only short-circuit before the synchronous handler runs (no
  * cooperative interrupt mid-handler).
  */
-const create_async_local_call_method = (environment, spec, actions) => {
+const create_async_local_call_method = (environment, spec, on_action_event) => {
     return async (input, options) => {
         if (options?.signal?.aborted) {
             return {
@@ -93,11 +107,7 @@ const create_async_local_call_method = (environment, spec, actions) => {
             };
         }
         const event = create_action_event(environment, spec, input);
-        const action = actions?.add_from_json({
-            method: spec.method,
-            action_event_data: event.toJSON(),
-        });
-        action?.listen_to_action_event(event);
+        on_action_event?.(event);
         await event.parse().handle_async();
         return extract_action_result(event);
     };
@@ -105,14 +115,10 @@ const create_async_local_call_method = (environment, spec, actions) => {
 /**
  * Creates a request/response method that communicates over the network.
  */
-const create_request_response_method = (peer, environment, spec, actions, transport_for_method) => {
+const create_request_response_method = (peer, environment, spec, on_action_event, transport_for_method) => {
     return async (input, options) => {
         const event = create_action_event(environment, spec, input);
-        const action = actions?.add_from_json({
-            method: spec.method,
-            action_event_data: event.toJSON(),
-        });
-        action?.listen_to_action_event(event);
+        on_action_event?.(event);
         await event.parse().handle_async();
         // Check if we're in send_error phase before type narrowing
         if (event.data.kind === 'request_response' && event.data.phase === 'send_error') {
@@ -141,14 +147,10 @@ const create_request_response_method = (peer, environment, spec, actions, transp
  * Creates a remote notification method (fire and forget).
  * Returns Result<{value: void}> for consistency.
  */
-const create_remote_notification_method = (peer, environment, spec, actions, transport_for_method) => {
+const create_remote_notification_method = (peer, environment, spec, on_action_event, transport_for_method) => {
     return async (input, options) => {
         const event = create_action_event(environment, spec, input);
-        const action = actions?.add_from_json({
-            method: spec.method,
-            action_event_data: event.toJSON(),
-        });
-        action?.listen_to_action_event(event);
+        on_action_event?.(event);
         await event.parse().handle_async();
         if (!is_notification_send(event.data))
             throw Error(); // TODO @many maybe make this an assertion helper?
@@ -168,60 +170,6 @@ const create_remote_notification_method = (peer, environment, spec, actions, tra
         return extract_action_result(event);
     };
 };
-/**
- * Wrap a typed RPC client so every call returns its unwrapped value or throws.
- *
- * On `{ok: false}`, throws an `Error` whose `message` comes from the
- * JSON-RPC error object, plus `{code, data}` as own properties — so
- * catch blocks reading `err.message` / `err.code` / `err.data?.reason`
- * all work. On unknown method, throws a clear "rpc method not found"
- * error instead of the cryptic `undefined is not a function` that
- * would otherwise surface.
- *
- * Invariant upheld by `create_rpc_client`: every `{ok: false}` return
- * carries a well-formed `JsonrpcErrorObject` with `code` + `message`.
- * Callers must still use optional chaining on `err.data` because the
- * JSON-RPC `data` field is spec-level optional — a handler that throws
- * `jsonrpc_errors.forbidden()` without a `data` argument produces
- * `err.data === undefined`.
- *
- * Only `{code, data}` cross onto the thrown Error — `message` flows
- * through the `Error` constructor argument, and `name` / `stack` are
- * left as the Error's own so attacker-shaped `result.error` payloads
- * cannot overwrite them.
- *
- * The mapped-type generic constraint accepts both shapes without a cast:
- * a codegen-derived typed `ActionsApi` (named-method interface, e.g.
- * `{account_verify: (input) => Promise<Result<...>>, ...}`) and a loose
- * `Record<string, (input?: any) => Promise<any> | void>`. Using `keyof TApi`
- * in the constraint avoids the index-signature requirement that would
- * otherwise force consumers to `as unknown as Record<string, …>` their
- * generated client. The `| void` arm tolerates `remote_notification`
- * methods, whose `ActionsApi` signature is `(input) => void` even though
- * `create_remote_notification_method` returns a Promise at runtime — the
- * throwing wrapper is intended for `request_response` calls but must
- * accept mixed `ActionsApi` shapes without forcing a cast at the seam.
- *
- * @param api - typed RPC client from `create_rpc_client` (or any object
- *   whose values are all `(input?) => Promise<...> | void` functions —
- *   notably the consumer's generated `ActionsApi` interface)
- */
-export const create_throwing_rpc_call = (api) => {
-    const rec = api;
-    return async (method, input) => {
-        const fn = rec[method];
-        if (!fn)
-            throw new Error(`rpc method not found: ${method}`);
-        const result = await fn(input);
-        if (!result.ok) {
-            throw Object.assign(new Error(result.error?.message ?? 'rpc error'), {
-                code: result.error?.code,
-                data: result.error?.data,
-            });
-        }
-        return result.value;
-    };
-};
 /**
  * Wrap a typed RPC client so every call resolves to its unwrapped value or
  * throws an `Error` carrying the JSON-RPC `{code, message, data?}` shape.
@@ -239,33 +187,30 @@ export const create_throwing_rpc_call = (api) => {
  *
  * Only `{code, data}` cross onto the thrown Error — `name` / `stack` are
  * left as the Error's own properties so attacker-shaped `result.error`
- * payloads cannot overwrite them. Same hardening as
- * `create_throwing_rpc_call`.
- *
- * Composable with `create_throwing_rpc_call` — same typed underlying
- * client feeds both: the Proxy form for direct call sites, the loose
- * method-keyed form for adapter wiring (`ui/admin_rpc_adapters.ts`).
+ * payloads cannot overwrite them.
  *
- * Recommended consumer convention: bind the throwing wrapper to `api`
- * (the common case at call sites) and the underlying Result-returning
- * Proxy to `api_raw` (the composable escape hatch for callers that
- * want to inspect `error.data.reason` without try/catch).
+ * Recommended consumer convention: `create_frontend_rpc_client` ships
+ * both shapes by default — `api` (throwing) for hot-path call sites and
+ * `api_result` (Result) for sites that inspect `error.data.reason`
+ * without try/catch. Result is the protocol primitive; this wrapper is
+ * the ergonomic layer over it. Picking is per call site — both Proxies
+ * share the same underlying transport.
  *
  * Catch blocks read `err.data?.reason` — optional chaining required
  * because JSON-RPC `data` is spec-level optional.
  *
  * On unknown string-keyed methods, the get trap returns a function that
- * throws `"rpc method not found: <prop>"` on invocation — symmetric with
- * `create_throwing_rpc_call` and clearer than the JS default
- * `"api.foo is not a function"`. Symbol props and `then` stay
- * undefined so the Proxy isn't accidentally treated as a thenable
+ * throws `"rpc method not found: <prop>"` on invocation — clearer than
+ * the JS default `"api.foo is not a function"`. Symbol props and `then`
+ * stay undefined so the Proxy isn't accidentally treated as a thenable
  * (`await api` would otherwise probe `then` and trip the thrower).
  *
- * @param api_raw - typed RPC client from `create_rpc_client`, cast
- *   to a consumer-generated `ActionsApi` interface
+ * @param api_result - typed Result-returning RPC client from
+ *   `create_rpc_client<ActionsApi>(...)`. The "_result" suffix names
+ *   what the underlying calls return (`Result<{value}, {error}>`).
  */
-export const create_throwing_api = (api_raw) => {
-    return new Proxy(api_raw, {
+export const create_throwing_api = (api_result) => {
+    return new Proxy(api_result, {
         get(target, prop) {
             const fn = target[prop];
             if (typeof fn === 'function') {

package/dist/testing/ws_round_trip.d.ts

@@ -267,7 +267,7 @@ export declare const keeper_identity: () => WsConnectIdentity;
  * await client.wait_for(is_notification('tx_run_created'));
  * ```
  */
-export declare const build_broadcast_api: <TApi>(options: {
+export declare const build_broadcast_api: <TApi extends object>(options: {
     harness: WsTestHarness;
     specs: ReadonlyArray<ActionSpecUnion>;
 }) => TApi;

package/dist/testing/ws_round_trip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ws_round_trip.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/ws_round_trip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAC,OAAO,EAAO,MAAM,MAAM,CAAC;AACxC,OAAO,EACN,SAAS,EAET,KAAK,gBAAgB,EAErB,KAAK,QAAQ,EACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAc,KAAK,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,4BAA4B,CAAC;AAEvD,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,kCAAkC,CAAC;AAE7E,OAAO,EAEN,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAC,yBAAyB,EAAC,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAsB,KAAK,cAAc,EAAC,MAAM,4BAA4B,CAAC;AAEpF,OAAO,EAA6C,KAAK,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAC,eAAe,EAAC,MAAM,oBAAoB,CAAC;AAanD;;;GAGG;AACH,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,SAAS,CAAC;IACd,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CAChD;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAAO,MAajC,CAAC;AAEF,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACtC,eAAe,EAAE,cAAc,CAAC;IAChC,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;OAGG;IACH,eAAe,CAAC,EAAE,cAAc,CAAC;CACjC;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAI,MAAM,sBAAsB,KAAG,OAWvE,CAAC;AAEF,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACtE;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QAAO,WAatC,CAAC;AAEF;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,sBAAsB;;IACtE,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAa;gBAEjC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC;IAGjD,qBAAqB,IAAI,SAAS;IAGlC,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;CAG/D;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC/B,YAAY,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAC9C,OAAO,YAAY,EACnB,IAAI,SAAS,KACX,OAAO,CAAC,IAAI,CAId,CAAC;AAMF,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IACjC,wEAAwE;IACxE,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,yFAAyF;IACzF,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kFAAkF;IAClF,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC5B,uEAAuE;IACvE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C;;;;;;;;OAQG;IACH,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,EACpB,EAAE,EAAE,MAAM,GAAG,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,UAAU,CAAC,EAAE,MAAM,KACf,OAAO,CAAC,CAAC,CAAC,CAAC;IAChB;;;;OAIG;IACH,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE;QACT,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,GAAG,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5E,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KACrF,CAAC;CACF;AAkBD,MAAM,WAAW,wBAAwB,CAAC,CAAC,GAAG,OAAO;IACpD,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,CAAC,CAAC;CACV;AAED,MAAM,WAAW,2BAA2B,CAAC,CAAC,GAAG,OAAO;IACvD,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,CAAC;CACV;AAED,MAAM,WAAW,yBAAyB,CAAC,CAAC,GAAG,OAAO;IACrD,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,KAAK,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,CAAA;KAAC,CAAC;CACjD;AAED,6EAA6E;AAC7E,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,MACd,KAAK,OAAO,KAAG,OACsC,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,GAC/B,CAAC,EAAE,QAAQ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,MAChD,KAAK,OAAO,KAAG,GAAG,IAAI,wBAAwB,CAAC,CAAC,CAGE,CAAC;AAErD,gGAAgG;AAChG,eAAO,MAAM,eAAe,GAC1B,IAAI,MAAM,GAAG,MAAM,MACnB,KAAK,OAAO,KAAG,OAC8D,CAAC;AAEhF,4CAA4C;AAC5C,MAAM,WAAW,0BAA0B,CAAC,IAAI,SAAS,kBAAkB;IAC1E;;;;;OAKG;IACH,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,cAAc,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjE,kEAAkE;IAClE,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC;;;;OAIG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;IACvD,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,cAAc,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjE,yDAAyD;IACzD,eAAe,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC;CACnE;AAED,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC7B,SAAS,EAAE,yBAAyB,CAAC;IACrC;;;;;;OAMG;IACH,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CACjE;AA8DD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GAAI,IAAI,SAAS,kBAAkB,EACrE,SAAS,0BAA0B,CAAC,IAAI,CAAC,KACvC,aA6KF,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,eAAe,QAAO,iBAGjC,CAAC;AAYH;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,GAAI,IAAI,EAAE,SAAS;IAClD,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;CACtC,KAAG,IAIH,CAAC"}
+{"version":3,"file":"ws_round_trip.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/testing/ws_round_trip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAC,OAAO,EAAO,MAAM,MAAM,CAAC;AACxC,OAAO,EACN,SAAS,EAET,KAAK,gBAAgB,EAErB,KAAK,QAAQ,EACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAc,KAAK,IAAI,EAAC,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,4BAA4B,CAAC;AAEvD,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,kCAAkC,CAAC;AAE7E,OAAO,EAEN,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAC,yBAAyB,EAAC,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAsB,KAAK,cAAc,EAAC,MAAM,4BAA4B,CAAC;AAEpF,OAAO,EAA6C,KAAK,cAAc,EAAC,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAC,eAAe,EAAC,MAAM,oBAAoB,CAAC;AAanD;;;GAGG;AACH,MAAM,WAAW,MAAM;IACtB,EAAE,EAAE,SAAS,CAAC;IACd,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CAChD;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAAO,MAajC,CAAC;AAEF,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACtC,eAAe,EAAE,cAAc,CAAC;IAChC,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;OAGG;IACH,eAAe,CAAC,EAAE,cAAc,CAAC;CACjC;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAI,MAAM,sBAAsB,KAAG,OAWvE,CAAC;AAEF,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,iBAAiB,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CACtE;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,QAAO,WAatC,CAAC;AAEF;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,sBAAsB;;IACtE,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAa;gBAEjC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC;IAGjD,qBAAqB,IAAI,SAAS;IAGlC,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;CAG/D;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC/B,YAAY,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAC9C,OAAO,YAAY,EACnB,IAAI,SAAS,KACX,OAAO,CAAC,IAAI,CAId,CAAC;AAMF,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IACjC,wEAAwE;IACxE,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,yFAAyF;IACzF,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kFAAkF;IAClF,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC5B,uEAAuE;IACvE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C;;;;;;;;OAQG;IACH,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,EACpB,EAAE,EAAE,MAAM,GAAG,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,UAAU,CAAC,EAAE,MAAM,KACf,OAAO,CAAC,CAAC,CAAC,CAAC;IAChB;;;;OAIG;IACH,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C;;;;;;;;OAQG;IACH,QAAQ,EAAE;QACT,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,GAAG,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5E,CAAC,CAAC,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;KACrF,CAAC;CACF;AAkBD,MAAM,WAAW,wBAAwB,CAAC,CAAC,GAAG,OAAO;IACpD,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,CAAC,CAAC;CACV;AAED,MAAM,WAAW,2BAA2B,CAAC,CAAC,GAAG,OAAO;IACvD,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,CAAC;CACV;AAED,MAAM,WAAW,yBAAyB,CAAC,CAAC,GAAG,OAAO;IACrD,OAAO,EAAE,OAAO,eAAe,CAAC;IAChC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,KAAK,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,CAAA;KAAC,CAAC;CACjD;AAED,6EAA6E;AAC7E,eAAO,MAAM,eAAe,GAC1B,QAAQ,MAAM,MACd,KAAK,OAAO,KAAG,OACsC,CAAC;AAExD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,GAC/B,CAAC,EAAE,QAAQ,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,MAChD,KAAK,OAAO,KAAG,GAAG,IAAI,wBAAwB,CAAC,CAAC,CAGE,CAAC;AAErD,gGAAgG;AAChG,eAAO,MAAM,eAAe,GAC1B,IAAI,MAAM,GAAG,MAAM,MACnB,KAAK,OAAO,KAAG,OAC8D,CAAC;AAEhF,4CAA4C;AAC5C,MAAM,WAAW,0BAA0B,CAAC,IAAI,SAAS,kBAAkB;IAC1E;;;;;OAKG;IACH,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,cAAc,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjE,kEAAkE;IAClE,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC;;;;OAIG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;IACvD,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,cAAc,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACjE,yDAAyD;IACzD,eAAe,CAAC,EAAE,uBAAuB,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC;CACnE;AAED,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC7B,SAAS,EAAE,yBAAyB,CAAC;IACrC;;;;;;OAMG;IACH,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;CACjE;AA8DD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,GAAI,IAAI,SAAS,kBAAkB,EACrE,SAAS,0BAA0B,CAAC,IAAI,CAAC,KACvC,aA6KF,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,eAAe,QAAO,iBAGjC,CAAC;AAYH;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,GAAI,IAAI,SAAS,MAAM,EAAE,SAAS;IACjE,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;CACtC,KAAG,IAIH,CAAC"}

package/dist/ui/CLAUDE.md

@@ -267,17 +267,16 @@ destructive actions.
   (`get`, `update`). Fields: `settings`, `updating`. Single mutation
   `update_open_signup(boolean)`.
 - `admin_rpc_adapters.ts` (plain `.ts`, no reactive state) — bundled
-  wiring for the four admin RPC contexts. `create_admin_rpc_adapters(rpc_call)`
-  takes a single `AdminRpcCall` closure (alias of `ThrowingRpcCall` from
-  `../actions/rpc_client.ts`) and returns `{admin_accounts, admin_invites,
-audit_log, app_settings}` adapter objects. `provide_admin_rpc_contexts(adapters)`
-  calls `set` on all four contexts in one shot. Pair with
-  `create_throwing_rpc_call(api)` from `../actions/rpc_client.ts` to turn a
-  typed `create_rpc_client` Proxy into the throw-on-error `rpc_call`
-  signature — two lines at the admin shell layout. Method-name mapping is
-  in the module TSDoc (`grant_permit` → `permit_offer_create`,
-  `retract_offer` → `permit_offer_retract`, etc.) and the
-  `admin_rpc_adapters.test.ts` fixtures.
+  wiring for the four admin RPC contexts. `create_admin_rpc_adapters(api)`
+  takes the typed throwing Proxy from `create_frontend_rpc_client` (or
+  any object satisfying the `AdminRpcApi` interface) and returns
+  `{admin_accounts, admin_invites, audit_log, app_settings}` adapter
+  objects. `provide_admin_rpc_contexts(adapters)` calls `set` on all
+  four contexts in one shot. One line at the admin shell layout:
+  `provide_admin_rpc_contexts(create_admin_rpc_adapters(api))`.
+  Method-name mapping is in the module TSDoc (`grant_permit` →
+  `permit_offer_create`, `retract_offer` → `permit_offer_retract`, etc.)
+  and the `admin_rpc_adapters.test.ts` fixtures.
 
 ## RPC adapter contexts
 

package/dist/ui/admin_accounts_state.svelte.d.ts

@@ -4,10 +4,13 @@
  * @module
  */
 import { SvelteSet } from 'svelte/reactivity';
+import type { Uuid } from '@fuzdev/fuz_util/id.js';
 import { Loadable } from './loadable.svelte.js';
 import type { AdminAccountEntryJson } from '../auth/account_schema.js';
-import type { AdminSessionJson } from '../auth/audit_log_schema.js';
+import type { RoleName } from '../auth/role_schema.js';
 import type { PermitOfferJson } from '../auth/permit_offer_schema.js';
+import type { AdminAccountListOutput, AdminSessionListOutput, AdminSessionRevokeAllInput, AdminSessionRevokeAllOutput, AdminTokenRevokeAllInput, AdminTokenRevokeAllOutput } from '../auth/admin_action_specs.js';
+import type { PermitOfferCreateInput, PermitOfferCreateOutput, PermitOfferOkOutput, PermitRevokeInput, PermitRevokeOutput } from '../auth/permit_offer_action_specs.js';
 /**
  * Narrow RPC surface consumed by `AdminAccountsState`. Consumers adapt their
  * typed RPC client (e.g. a `create_rpc_client` Proxy) to this shape — the
@@ -21,44 +24,20 @@ import type { PermitOfferJson } from '../auth/permit_offer_schema.js';
  * `admin_session_revoke_all` and `admin_token_revoke_all`. Without the
  * adapter the state class cannot fetch, grant, revoke, retract, or
  * revoke-all sessions/tokens.
+ *
+ * Method signatures track the underlying action specs — `Uuid`-branded ids
+ * propagate from the wire through the state class to the components. The
+ * adapter built by `create_admin_rpc_adapters` therefore needs zero casts
+ * to bridge to the typed throwing Proxy.
  */
 export interface AdminAccountsRpc {
-    list_accounts: () => Promise<{
-        accounts: Array<AdminAccountEntryJson>;
-        grantable_roles: Array<string>;
-    }>;
-    list_sessions: () => Promise<{
-        sessions: Array<AdminSessionJson>;
-    }>;
-    grant_permit: (params: {
-        to_account_id: string;
-        role: string;
-    }) => Promise<{
-        offer: PermitOfferJson;
-    }>;
-    revoke_permit: (params: {
-        actor_id: string;
-        permit_id: string;
-        reason?: string | null;
-    }) => Promise<{
-        ok: true;
-        revoked: true;
-    }>;
-    retract_offer: (offer_id: string) => Promise<{
-        ok: true;
-    }>;
-    session_revoke_all: (params: {
-        account_id: string;
-    }) => Promise<{
-        ok: true;
-        count: number;
-    }>;
-    token_revoke_all: (params: {
-        account_id: string;
-    }) => Promise<{
-        ok: true;
-        count: number;
-    }>;
+    list_accounts: () => Promise<AdminAccountListOutput>;
+    list_sessions: () => Promise<AdminSessionListOutput>;
+    grant_permit: (params: PermitOfferCreateInput) => Promise<PermitOfferCreateOutput>;
+    revoke_permit: (params: PermitRevokeInput) => Promise<PermitRevokeOutput>;
+    retract_offer: (offer_id: Uuid) => Promise<PermitOfferOkOutput>;
+    session_revoke_all: (params: AdminSessionRevokeAllInput) => Promise<AdminSessionRevokeAllOutput>;
+    token_revoke_all: (params: AdminTokenRevokeAllInput) => Promise<AdminTokenRevokeAllOutput>;
 }
 /**
  * Svelte context carrying the reactive `AdminAccountsRpc` accessor. The
@@ -86,7 +65,7 @@ export interface AdminAccountsStateOptions {
 export declare class AdminAccountsState extends Loadable {
     #private;
     accounts: Array<AdminAccountEntryJson>;
-    grantable_roles: Array<string>;
+    grantable_roles: Array<RoleName>;
     readonly granting_keys: SvelteSet<string>;
     readonly revoking_ids: SvelteSet<string>;
     readonly retracting_ids: SvelteSet<string>;
@@ -111,7 +90,7 @@ export declare class AdminAccountsState extends Loadable {
      * No-op when the rpc adapter is absent; `error` is set to a descriptive
      * message so the UI surfaces the misconfiguration.
      */
-    grant_permit(account_id: string, role: string): Promise<PermitOfferJson | undefined>;
+    grant_permit(account_id: Uuid, role: RoleName): Promise<PermitOfferJson | undefined>;
     /**
      * Revoke an active permit via the `permit_revoke` RPC.
      *
@@ -121,7 +100,7 @@ export declare class AdminAccountsState extends Loadable {
      * The optional `reason` is stamped on `permit.revoked_reason` and
      * surfaced on the revokee's WS notification.
      */
-    revoke_permit(actor_id: string, permit_id: string, reason?: string | null): Promise<void>;
+    revoke_permit(actor_id: Uuid, permit_id: Uuid, reason?: string | null): Promise<void>;
     /**
      * Retract a pending offer the admin issued via the `permit_offer_retract`
      * RPC. The action handles auth, audit, and the
@@ -130,6 +109,6 @@ export declare class AdminAccountsState extends Loadable {
      * After success, refetches the listing so `pending_offers` drops the
      * row and the "+ {role}" button un-hides.
      */
-    retract_offer(offer_id: string): Promise<void>;
+    retract_offer(offer_id: Uuid): Promise<void>;
 }
 //# sourceMappingURL=admin_accounts_state.svelte.d.ts.map