@fuzdev/fuz_app 0.54.0 → 0.56.0

package/dist/ui/audit_log_state.svelte.js

@@ -1,7 +1,7 @@
 /**
  * Reactive state for the audit log viewer.
  *
- * Two fetch primitives (`fetch` for events, `fetch_permit_history` for the
+ * Two fetch primitives (`fetch` for events, `fetch_role_grant_history` for the
  * grant/revoke shortcut) flow through an injected RPC adapter; the SSE
  * stream continues to use `EventSource` directly — streams aren't an RPC
  * concern.
@@ -19,7 +19,7 @@ export const audit_log_rpc_context = create_context(() => () => null);
 export class AuditLogState extends Loadable {
     #get_rpc;
     events = $state.raw([]);
-    permit_history_events = $state.raw([]);
+    role_grant_history_events = $state.raw([]);
     count = $derived(this.events.length);
     /** Whether the SSE stream is currently connected. */
     connected = $state.raw(false);
@@ -34,7 +34,7 @@ export class AuditLogState extends Loadable {
         this.#get_rpc = options?.get_rpc ?? (() => null);
         this.#stream_url = options?.stream_url ?? '/api/admin/audit/stream';
     }
-    /** True when an RPC adapter is wired. `fetch`/`fetch_permit_history` no-op without it. */
+    /** True when an RPC adapter is wired. `fetch`/`fetch_role_grant_history` no-op without it. */
     get has_rpc() {
         return this.#get_rpc() !== null;
     }
@@ -50,15 +50,15 @@ export class AuditLogState extends Loadable {
             this.#update_last_seq(this.events);
         });
     }
-    async fetch_permit_history(limit, offset) {
+    async fetch_role_grant_history(limit, offset) {
         const rpc = this.#get_rpc();
         if (!rpc) {
             this.error = 'rpc adapter not wired';
             return;
         }
         await this.run(async () => {
-            const { events } = await rpc.permit_history({ limit, offset });
-            this.permit_history_events = events;
+            const { events } = await rpc.role_grant_history({ limit, offset });
+            this.role_grant_history_events = events;
         });
     }
     /**

package/dist/ui/auth_state.svelte.d.ts

@@ -31,7 +31,7 @@
  *
  * @module
  */
-import { type ActorSummaryJson, type PermitSummaryJson, type SessionAccount } from '../auth/account_schema.js';
+import { type ActorSummaryJson, type RoleGrantSummaryJson, type SessionAccount } from '../auth/account_schema.js';
 /**
  * Svelte context for `AuthState`.
  * Use `auth_state_context.set(state)` in the provider and `auth_state_context.get()` to access.
@@ -47,8 +47,8 @@ export declare class AuthState {
     verify_error: string | null;
     account: SessionAccount | null;
     actor: ActorSummaryJson | null;
-    permits: Array<PermitSummaryJson>;
-    readonly active_permits: Array<PermitSummaryJson>;
+    role_grants: Array<RoleGrantSummaryJson>;
+    readonly active_role_grants: Array<RoleGrantSummaryJson>;
     readonly roles: Array<string>;
     /** True when bootstrap is available (no accounts exist yet). */
     needs_bootstrap: boolean;

package/dist/ui/auth_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/auth_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,OAAO,EACN,KAAK,gBAAgB,EAErB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;CAA8B,CAAC;AAE9D,qBAAa,SAAS;IACrB,SAAS,UAAqB;IAC9B,QAAQ,UAAqB;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC/C,OAAO,EAAE,cAAc,GAAG,IAAI,CAAoB;IAClD,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAoB;IAClD,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAkB;IACnD,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAE/C;IACF,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAoD;IAEjF,gEAAgE;IAChE,eAAe,UAAqB;IAEpC;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA6BpC;;;;;;;OAOG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCjE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiCpF;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4ClF;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAW7B"}
+{"version":3,"file":"auth_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/auth_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,OAAO,EACN,KAAK,gBAAgB,EAErB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;CAA8B,CAAC;AAE9D,qBAAa,SAAS;IACrB,SAAS,UAAqB;IAC9B,QAAQ,UAAqB;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAoB;IAC/C,OAAO,EAAE,cAAc,GAAG,IAAI,CAAoB;IAClD,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAoB;IAClD,WAAW,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAkB;IAC1D,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAEtD;IACF,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAwD;IAErF,gEAAgE;IAChE,eAAe,UAAqB;IAEpC;;;;;;;;OAQG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA6BpC;;;;;;;OAOG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCjE;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiCpF;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA4ClF;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CAW7B"}

package/dist/ui/auth_state.svelte.js

@@ -33,7 +33,7 @@
  */
 import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
 import { ui_fetch } from './ui_fetch.js';
-import { is_permit_active, } from '../auth/account_schema.js';
+import { is_role_grant_active, } from '../auth/account_schema.js';
 /**
  * Svelte context for `AuthState`.
  * Use `auth_state_context.set(state)` in the provider and `auth_state_context.get()` to access.
@@ -45,9 +45,9 @@ export class AuthState {
     verify_error = $state.raw(null);
     account = $state.raw(null);
     actor = $state.raw(null);
-    permits = $state.raw([]);
-    active_permits = $derived(this.permits.filter((p) => is_permit_active(p)));
-    roles = $derived(this.active_permits.map((p) => p.role));
+    role_grants = $state.raw([]);
+    active_role_grants = $derived(this.role_grants.filter((p) => is_role_grant_active(p)));
+    roles = $derived(this.active_role_grants.map((p) => p.role));
     /** True when bootstrap is available (no accounts exist yet). */
     needs_bootstrap = $state.raw(false);
     /**
@@ -68,7 +68,7 @@ export class AuthState {
                 this.verified = true;
                 this.account = data.account ?? null;
                 this.actor = data.actor ?? null;
-                this.permits = data.permits ?? [];
+                this.role_grants = data.role_grants ?? [];
                 this.needs_bootstrap = false;
             }
             else {
@@ -248,6 +248,6 @@ export class AuthState {
         this.verified = false;
         this.account = null;
         this.actor = null;
-        this.permits = [];
+        this.role_grants = [];
     }
 }

package/dist/ui/format_scope.d.ts

@@ -1,7 +1,7 @@
 /**
- * Shared `format_scope` callback contract for permit-display components.
+ * Shared `format_scope` callback contract for role-grant-display components.
  *
- * Permits and offers carry a `scope_id` that names a consumer-owned resource
+ * Role grants and offers carry a `scope_id` that names a consumer-owned resource
  * (e.g. a classroom uuid). The default render is the raw uuid. Consumers wire
  * a `FormatScope` via context to render a human label without per-page
  * lookup or forking the components.

package/dist/ui/format_scope.js

@@ -1,7 +1,7 @@
 /**
- * Shared `format_scope` callback contract for permit-display components.
+ * Shared `format_scope` callback contract for role-grant-display components.
  *
- * Permits and offers carry a `scope_id` that names a consumer-owned resource
+ * Role grants and offers carry a `scope_id` that names a consumer-owned resource
  * (e.g. a classroom uuid). The default render is the raw uuid. Consumers wire
  * a `FormatScope` via context to render a human label without per-page
  * lookup or forking the components.

package/dist/ui/{permit_offers_state.svelte.d.ts → role_grant_offers_state.svelte.d.ts}

@@ -1,8 +1,8 @@
 /**
- * Reactive state for the consentful-permits offer flow.
+ * Reactive state for the consentful-role-grants offer flow.
  *
  * Maintains one offer cache keyed by id, seeded by the RPC list/history
- * actions and kept live by the six permit-offer WebSocket notifications.
+ * actions and kept live by the six role-grant-offer WebSocket notifications.
  * `incoming` (recipient-side pending) and `outgoing` (grantor-side pending)
  * are derived views; `history` is the full cache ordered newest-first for
  * the grantor/admin history view.
@@ -16,44 +16,45 @@
  * @module
  */
 import { Loadable } from './loadable.svelte.js';
-import type { PermitOfferJson } from '../auth/permit_offer_schema.js';
+import type { RoleGrantOfferJson } from '../auth/role_grant_offer_schema.js';
 /**
- * Svelte context for `PermitOffersState`.
- * Use `permit_offers_state_context.set(state)` in the provider and
- * `permit_offers_state_context.get()` to access.
+ * Svelte context for `RoleGrantOffersState`.
+ * Use `role_grant_offers_state_context.set(state)` in the provider and
+ * `role_grant_offers_state_context.get()` to access.
  */
-export declare const permit_offers_state_context: {
-    get: (error_message?: string) => PermitOffersState;
-    get_maybe: () => PermitOffersState | undefined;
-    set: (value: PermitOffersState) => PermitOffersState;
+export declare const role_grant_offers_state_context: {
+    get: (error_message?: string) => RoleGrantOffersState;
+    get_maybe: () => RoleGrantOffersState | undefined;
+    set: (value: RoleGrantOffersState) => RoleGrantOffersState;
 };
 /**
- * Narrow RPC surface consumed by `PermitOffersState`. Consumers adapt their
+ * Narrow RPC surface consumed by `RoleGrantOffersState`. Consumers adapt their
  * typed client (e.g. a `create_rpc_client` Proxy) to this shape — the state
  * class stays decoupled from the client's `Result` return type so tests can
  * inject plain-function stubs.
  */
-export interface PermitOffersRpc {
+export interface RoleGrantOffersRpc {
     list: () => Promise<{
-        offers: Array<PermitOfferJson>;
+        offers: Array<RoleGrantOfferJson>;
     }>;
     history: (options?: {
         limit?: number;
         offset?: number;
     }) => Promise<{
-        offers: Array<PermitOfferJson>;
+        offers: Array<RoleGrantOfferJson>;
     }>;
     create: (params: {
         to_account_id: string;
+        to_actor_id?: string | null;
         role: string;
         scope_id?: string | null;
         message?: string | null;
     }) => Promise<{
-        offer: PermitOfferJson;
+        offer: RoleGrantOfferJson;
     }>;
     accept: (offer_id: string) => Promise<{
-        permit_id: string;
-        offer: PermitOfferJson;
+        role_grant_id: string;
+        offer: RoleGrantOfferJson;
         superseded_offer_ids: Array<string>;
     }>;
     decline: (offer_id: string, reason?: string | null) => Promise<{
@@ -64,14 +65,14 @@ export interface PermitOffersRpc {
     }>;
 }
 /** Narrow WS notification envelope — method + params, matching `JsonrpcNotification`. */
-export interface PermitOfferNotification {
+export interface RoleGrantOfferNotification {
     method: string;
     params: unknown;
 }
 /** Subscription primitive — consumer wires their WS receiver; returns a disposer. */
-export type PermitOfferSubscribe = (handler: (notification: PermitOfferNotification) => void) => () => void;
-export interface PermitOffersStateOptions {
-    rpc: PermitOffersRpc;
+export type RoleGrantOfferSubscribe = (handler: (notification: RoleGrantOfferNotification) => void) => () => void;
+export interface RoleGrantOffersStateOptions {
+    rpc: RoleGrantOffersRpc;
     /** Reactive accessor for the current account id; returns `null` when logged out. */
     account_id: () => string | null;
     /**
@@ -80,16 +81,16 @@ export interface PermitOffersStateOptions {
      */
     actor_id: () => string | null;
 }
-export declare class PermitOffersState extends Loadable {
+export declare class RoleGrantOffersState extends Loadable {
     #private;
     /** Pending offers for the current account, soonest-expiring first. */
-    readonly incoming: Array<PermitOfferJson>;
+    readonly incoming: Array<RoleGrantOfferJson>;
     /** Pending offers from the current actor, newest-created first. */
-    readonly outgoing: Array<PermitOfferJson>;
+    readonly outgoing: Array<RoleGrantOfferJson>;
     /** Every offer known to this state, newest-created first. Feeds the history view. */
-    readonly history: Array<PermitOfferJson>;
+    readonly history: Array<RoleGrantOfferJson>;
     readonly incoming_count: number;
-    constructor(options: PermitOffersStateOptions);
+    constructor(options: RoleGrantOffersStateOptions);
     /** Seed the cache with the recipient-side pending inbox. */
     fetch(): Promise<void>;
     /** Seed both-directions history (includes terminal rows). */
@@ -97,13 +98,20 @@ export declare class PermitOffersState extends Loadable {
         limit?: number;
         offset?: number;
     }): Promise<void>;
-    /** Issue a new offer; merges the returned offer into the cache on success. */
+    /**
+     * Issue a new offer; merges the returned offer into the cache on success.
+     *
+     * `to_actor_id` (optional) narrows the offer to a specific actor on
+     * `to_account_id`; omit / null for the account-grain default (any actor
+     * on the recipient account may accept).
+     */
     create(params: {
         to_account_id: string;
+        to_actor_id?: string | null;
         role: string;
         scope_id?: string | null;
         message?: string | null;
-    }): Promise<PermitOfferJson | undefined>;
+    }): Promise<RoleGrantOfferJson | undefined>;
     /** Accept an offer; stamps it terminal in the cache and drops any siblings the server superseded. */
     accept(offer_id: string): Promise<void>;
     decline(offer_id: string, reason?: string | null): Promise<void>;
@@ -112,7 +120,7 @@ export declare class PermitOffersState extends Loadable {
      * Wire a notification subscription. The handler dispatches each matching
      * notification into `apply_notification`; the returned disposer unwires.
      */
-    subscribe(subscribe_fn: PermitOfferSubscribe): () => void;
+    subscribe(subscribe_fn: RoleGrantOfferSubscribe): () => void;
     /**
      * Reduce a single WS notification into the cache. Exposed so consumers
      * wiring their WS receiver directly (without `subscribe`) and tests can
@@ -120,8 +128,8 @@ export declare class PermitOffersState extends Loadable {
      *
      * @mutates `this`
      */
-    apply_notification(notification: PermitOfferNotification): void;
+    apply_notification(notification: RoleGrantOfferNotification): void;
     /** Clear the cache and reset loading/error state. */
     reset(): void;
 }
-//# sourceMappingURL=permit_offers_state.svelte.d.ts.map
+//# sourceMappingURL=role_grant_offers_state.svelte.d.ts.map

package/dist/ui/role_grant_offers_state.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role_grant_offers_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/role_grant_offers_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAC9C,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,oCAAoC,CAAC;AAU3E;;;;GAIG;AACH,eAAO,MAAM,+BAA+B;;;;CAAyC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAC,CAAC,CAAC;IACzD,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC;QAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAC,CAAC,CAAC;IACnD,MAAM,EAAE,CAAC,MAAM,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,KAAK,OAAO,CAAC;QAAC,KAAK,EAAE,kBAAkB,CAAA;KAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,kBAAkB,CAAC;QAC1B,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAC,CAAC,CAAC;CACnD;AAED,yFAAyF;AACzF,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,MAAM,uBAAuB,GAAG,CACrC,OAAO,EAAE,CAAC,YAAY,EAAE,0BAA0B,KAAK,IAAI,KACvD,MAAM,IAAI,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC3C,GAAG,EAAE,kBAAkB,CAAC;IACxB,oFAAoF;IACpF,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChC;;;OAGG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC9B;AAQD,qBAAa,oBAAqB,SAAQ,QAAQ;;IAOjD,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAazC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAazC;IAEH,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAIxC;IAEH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAkC;gBAErD,OAAO,EAAE,2BAA2B;IAOhD,4DAA4D;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,6DAA6D;IACvD,aAAa,CAAC,OAAO,CAAC,EAAE;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/E;;;;;;OAMG;IACG,MAAM,CAAC,MAAM,EAAE;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ3C,qGAAqG;IAC/F,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAavC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAOhE,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9C;;;OAGG;IACH,SAAS,CAAC,YAAY,EAAE,uBAAuB,GAAG,MAAM,IAAI;IAM5D;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,0BAA0B,GAAG,IAAI;IAwBlE,qDAAqD;IAC5C,KAAK,IAAI,IAAI;CAmBtB"}

package/dist/ui/{permit_offers_state.svelte.js → role_grant_offers_state.svelte.js}

@@ -1,8 +1,8 @@
 /**
- * Reactive state for the consentful-permits offer flow.
+ * Reactive state for the consentful-role-grants offer flow.
  *
  * Maintains one offer cache keyed by id, seeded by the RPC list/history
- * actions and kept live by the six permit-offer WebSocket notifications.
+ * actions and kept live by the six role-grant-offer WebSocket notifications.
  * `incoming` (recipient-side pending) and `outgoing` (grantor-side pending)
  * are derived views; `history` is the full cache ordered newest-first for
  * the grantor/admin history view.
@@ -17,18 +17,18 @@
  */
 import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
 import { Loadable } from './loadable.svelte.js';
-import { PERMIT_OFFER_ACCEPTED_NOTIFICATION_METHOD, PERMIT_OFFER_DECLINED_NOTIFICATION_METHOD, PERMIT_OFFER_RECEIVED_NOTIFICATION_METHOD, PERMIT_OFFER_RETRACTED_NOTIFICATION_METHOD, PERMIT_OFFER_SUPERSEDE_NOTIFICATION_METHOD, PERMIT_REVOKE_NOTIFICATION_METHOD, } from '../auth/permit_offer_notifications.js';
+import { ROLE_GRANT_OFFER_ACCEPTED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_DECLINED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_RECEIVED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_RETRACTED_NOTIFICATION_METHOD, ROLE_GRANT_OFFER_SUPERSEDE_NOTIFICATION_METHOD, ROLE_GRANT_REVOKE_NOTIFICATION_METHOD, } from '../auth/role_grant_offer_notifications.js';
 /**
- * Svelte context for `PermitOffersState`.
- * Use `permit_offers_state_context.set(state)` in the provider and
- * `permit_offers_state_context.get()` to access.
+ * Svelte context for `RoleGrantOffersState`.
+ * Use `role_grant_offers_state_context.set(state)` in the provider and
+ * `role_grant_offers_state_context.get()` to access.
  */
-export const permit_offers_state_context = create_context();
+export const role_grant_offers_state_context = create_context();
 const is_terminal = (o) => o.accepted_at !== null ||
     o.declined_at !== null ||
     o.retracted_at !== null ||
     o.superseded_at !== null;
-export class PermitOffersState extends Loadable {
+export class RoleGrantOffersState extends Loadable {
     #rpc;
     #get_account_id;
     #get_actor_id;
@@ -98,7 +98,13 @@ export class PermitOffersState extends Loadable {
             this.#merge_offers(offers);
         });
     }
-    /** Issue a new offer; merges the returned offer into the cache on success. */
+    /**
+     * Issue a new offer; merges the returned offer into the cache on success.
+     *
+     * `to_actor_id` (optional) narrows the offer to a specific actor on
+     * `to_account_id`; omit / null for the account-grain default (any actor
+     * on the recipient account may accept).
+     */
     async create(params) {
         return this.run(async () => {
             const { offer } = await this.#rpc.create(params);
@@ -149,23 +155,23 @@ export class PermitOffersState extends Loadable {
      */
     apply_notification(notification) {
         switch (notification.method) {
-            case PERMIT_OFFER_RECEIVED_NOTIFICATION_METHOD:
-            case PERMIT_OFFER_RETRACTED_NOTIFICATION_METHOD:
-            case PERMIT_OFFER_ACCEPTED_NOTIFICATION_METHOD:
-            case PERMIT_OFFER_DECLINED_NOTIFICATION_METHOD:
-            case PERMIT_OFFER_SUPERSEDE_NOTIFICATION_METHOD: {
+            case ROLE_GRANT_OFFER_RECEIVED_NOTIFICATION_METHOD:
+            case ROLE_GRANT_OFFER_RETRACTED_NOTIFICATION_METHOD:
+            case ROLE_GRANT_OFFER_ACCEPTED_NOTIFICATION_METHOD:
+            case ROLE_GRANT_OFFER_DECLINED_NOTIFICATION_METHOD:
+            case ROLE_GRANT_OFFER_SUPERSEDE_NOTIFICATION_METHOD: {
                 const params = notification.params;
                 if (!params || typeof params !== 'object' || !('offer' in params))
                     return;
                 const offer = params.offer;
-                if (!is_permit_offer_like(offer))
+                if (!is_role_grant_offer_like(offer))
                     return;
                 this.#merge_offers([offer]);
                 return;
             }
-            case PERMIT_REVOKE_NOTIFICATION_METHOD:
-                // permit_revoke is a permit-lifecycle event — the offer cache
-                // is unaffected. Consumers handle it in an auth/permits state.
+            case ROLE_GRANT_REVOKE_NOTIFICATION_METHOD:
+                // role_grant_revoke is a role-grant-lifecycle event — the offer cache
+                // is unaffected. Consumers handle it in an auth/role_grants state.
                 return;
             default:
                 // unrelated notifications — ignore silently.
@@ -192,7 +198,7 @@ export class PermitOffersState extends Loadable {
         this.#offers = next;
     }
 }
-const is_permit_offer_like = (value) => !!value &&
+const is_role_grant_offer_like = (value) => !!value &&
     typeof value === 'object' &&
     typeof value.id === 'string' &&
     typeof value.to_account_id === 'string' &&

package/dist/ui/ui_format.js

@@ -159,9 +159,9 @@ export const format_audit_metadata = (event_type, metadata) => {
             return metadata.token_id ? `token: ${truncate_middle(metadata.token_id, 12)}` : '';
         case 'token_revoke_all':
             return metadata.count != null ? `${metadata.count} tokens` : '';
-        case 'permit_grant':
+        case 'role_grant_create':
             return metadata.role ? `role: ${metadata.role}` : '';
-        case 'permit_revoke':
+        case 'role_grant_revoke':
             return metadata.role ? `role: ${metadata.role}` : '';
         case 'invite_create':
             return [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.54.0",
+  "version": "0.56.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",
@@ -22,7 +22,7 @@
     "node": ">=24.14"
   },
   "peerDependencies": {
-    "@electric-sql/pglite": ">=0.3",
+    "@electric-sql/pglite": ">=0.4",
     "@fuzdev/blake3_wasm": ">=0.1.0",
     "@fuzdev/fuz_util": ">=0.53.4",
     "@node-rs/argon2": ">=2",
@@ -41,7 +41,7 @@
     }
   },
   "devDependencies": {
-    "@electric-sql/pglite": "^0.3.16",
+    "@electric-sql/pglite": "^0.4.5",
     "@fuzdev/blake3_wasm": "^0.1.0",
     "@fuzdev/fuz_code": "^0.45.1",
     "@fuzdev/fuz_css": "^0.59.0",

package/dist/auth/permit_offer_action_specs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permit_offer_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/permit_offer_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,2BAA2B,CAAC;AAUzE,gEAAgE;AAChE,eAAO,MAAM,uBAAuB,EAAG,mBAA4B,CAAC;AACpE,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,EAAG,gBAAyB,CAAC;AAC9D,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,EAAG,eAAwB,CAAC;AAC5D,wGAAwG;AACxG,eAAO,MAAM,qBAAqB,EAAG,iBAA0B,CAAC;AAChE,qGAAqG;AACrG,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAClF,gKAAgK;AAChK,eAAO,MAAM,0BAA0B,EAAG,sBAA+B,CAAC;AAI1E,uCAAuC;AACvC,eAAO,MAAM,sBAAsB;;;;;kBAWjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,uCAAuC;AACvC,eAAO,MAAM,sBAAsB;;kBAEjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,wCAAwC;AACxC,eAAO,MAAM,uBAAuB;;;kBAOlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,wCAAwC;AACxC,eAAO,MAAM,uBAAuB;;kBAElC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,mGAAmG;AACnG,eAAO,MAAM,oBAAoB;;kBAI/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;kBAO5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;kBAUlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,wCAAwC;AACxC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;kBAElC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,wCAAwC;AACxC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;kBAIlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,kEAAkE;AAClE,eAAO,MAAM,mBAAmB;;kBAAwC,CAAC;AACzE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,sCAAsC;AACtC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;kBAAqD,CAAC;AACxF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,yCAAyC;AACzC,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;kBAAqD,CAAC;AAC3F,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,kCAAkC;AAClC,eAAO,MAAM,kBAAkB;;;kBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgBP,CAAC;AAEtC,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAYP,CAAC;AAEtC,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;CAWR,CAAC;AAEtC,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;CAWR,CAAC;AAEtC,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWL,CAAC;AAEtC,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWR,CAAC;AAEtC,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;CAaD,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,EAAE,KAAK,CAAC,yBAAyB,CAQ1E,CAAC"}