@fuzdev/fuz_app 0.55.0 → 0.56.0

package/dist/auth/{permit_offer_action_specs.d.ts → role_grant_offer_action_specs.d.ts}

@@ -1,120 +1,122 @@
 /**
- * Permit offer RPC action specs — declarative contract for the
- * consentful-permits surface (offer lifecycle + admin revoke).
+ * Role grant offer RPC action specs — declarative contract for the
+ * consentful-role-grants surface (offer lifecycle + admin revoke).
  *
- * Import this module for the specs, Input/Output schemas, `ERROR_OFFER_*`
- * reason constants, and the `all_permit_offer_action_specs` registry.
- * Handlers live in `auth/permit_offer_actions.ts`.
+ * Import this module for the specs, Input/Output schemas, `ERROR_ROLE_GRANT_OFFER_*`
+ * reason constants, and the `all_role_grant_offer_action_specs` registry.
+ * Handlers live in `auth/role_grant_offer_actions.ts`.
  *
- * Authorization enforcement: offer-lifecycle specs declare
- * `auth: 'authenticated'` and rely on `query_*` IDOR guards or in-handler
- * policy checks (e.g. `permit_offer_list`/`_history` elevate to admin only
+ * Authorization enforcement: offer-lifecycle specs declare account+actor
+ * required (no roles) and rely on `query_*` IDOR guards or in-handler
+ * policy checks (e.g. `role_grant_offer_list`/`_history` elevate to admin only
  * when inspecting another account — an input-dependent check that can't be
- * expressed at the spec level). `permit_revoke` declares
- * `auth: {role: 'admin'}` — the RPC dispatcher's per-spec post-authorization
- * auth gate (`check_action_auth_post_authorization`) rejects non-admin
- * callers before the handler runs even though the endpoint hosts non-admin
- * methods alongside.
+ * expressed at the spec level). `role_grant_revoke` adds `roles: ['admin']` —
+ * the RPC dispatcher's per-spec post-authorization auth gate
+ * (`check_action_auth_post_authorization`) rejects non-admin callers before
+ * the handler runs even though the endpoint hosts non-admin methods
+ * alongside.
  *
  * @module
  */
 import { z } from 'zod';
 import type { RequestResponseActionSpec } from '../actions/action_spec.js';
-/** Error reason — caller tried to offer themselves a permit. */
-export declare const ERROR_OFFER_SELF_TARGET: "offer_self_target";
+/** Error reason — caller tried to offer themselves a role_grant. */
+export declare const ERROR_ROLE_GRANT_OFFER_SELF_TARGET: "role_grant_offer_self_target";
 /** Error reason — offer is declined, retracted, or superseded. */
-export declare const ERROR_OFFER_TERMINAL: "offer_terminal";
+export declare const ERROR_ROLE_GRANT_OFFER_TERMINAL: "role_grant_offer_terminal";
 /** Error reason — offer's `expires_at` has passed. */
-export declare const ERROR_OFFER_EXPIRED: "offer_expired";
+export declare const ERROR_ROLE_GRANT_OFFER_EXPIRED: "role_grant_offer_expired";
 /** Error reason — offer does not exist or belongs to a different recipient (404-over-403 IDOR mask). */
-export declare const ERROR_OFFER_NOT_FOUND: "offer_not_found";
-/** Error reason — the offered role is not `web_grantable` (nobody may offer it via this surface). */
-export declare const ERROR_OFFER_ROLE_NOT_GRANTABLE: "offer_role_not_grantable";
+export declare const ERROR_ROLE_GRANT_OFFER_NOT_FOUND: "role_grant_offer_not_found";
+/** Error reason — the offered role does not include `'admin'` in its `RoleSpec.grant_paths` (nobody may offer it via this surface). */
+export declare const ERROR_ROLE_GRANT_OFFER_ROLE_NOT_GRANTABLE: "role_grant_offer_role_not_grantable";
 /** Error reason — caller is not authorized to offer this role (default policy: caller lacks the role; consumer `authorize` callback may add further policy). */
-export declare const ERROR_OFFER_NOT_AUTHORIZED: "offer_not_authorized";
+export declare const ERROR_ROLE_GRANT_OFFER_NOT_AUTHORIZED: "role_grant_offer_not_authorized";
 /** Error reason — actor-targeted offer was accepted by an actor other than `to_actor_id`. */
-export declare const ERROR_OFFER_ACTOR_MISMATCH: "offer_actor_mismatch";
-/** Error reason — `permit_offer_create` was called with a `to_actor_id` that does not belong to `to_account_id`. */
-export declare const ERROR_OFFER_ACTOR_ACCOUNT_MISMATCH: "offer_actor_account_mismatch";
+export declare const ERROR_ROLE_GRANT_OFFER_ACTOR_MISMATCH: "role_grant_offer_actor_mismatch";
+/** Error reason — `role_grant_offer_create` was called with a `to_actor_id` that does not belong to `to_account_id`. */
+export declare const ERROR_ROLE_GRANT_OFFER_ACTOR_ACCOUNT_MISMATCH: "role_grant_offer_actor_account_mismatch";
 /**
- * Input for `permit_offer_create`.
+ * Input for `role_grant_offer_create`.
  *
  * `to_actor_id` (optional) narrows the offer to a specific actor on the
- * recipient account. When supplied, `permit_offer_accept` will only admit
+ * recipient account. When supplied, `role_grant_offer_accept` will only admit
  * the named actor — wrong-actor accepts reject with
- * `offer_actor_mismatch`. The audit envelope's `target_actor_id` is
+ * `role_grant_offer_actor_mismatch`. The audit envelope's `target_actor_id` is
  * stamped from this column on the create / supersede / expire / retract
  * events. Omit (or pass null) for the account-grain default — any actor
  * on `to_account_id` may accept.
  */
-export declare const PermitOfferCreateInput: z.ZodObject<{
+export declare const RoleGrantOfferCreateInput: z.ZodObject<{
     to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
     to_actor_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
     role: z.ZodString;
+    scope_kind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     scope_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
     message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitOfferCreateInput = z.infer<typeof PermitOfferCreateInput>;
-/** Input for `permit_offer_accept`. */
-export declare const PermitOfferAcceptInput: z.ZodObject<{
+export type RoleGrantOfferCreateInput = z.infer<typeof RoleGrantOfferCreateInput>;
+/** Input for `role_grant_offer_accept`. */
+export declare const RoleGrantOfferAcceptInput: z.ZodObject<{
     offer_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitOfferAcceptInput = z.infer<typeof PermitOfferAcceptInput>;
-/** Input for `permit_offer_decline`. */
-export declare const PermitOfferDeclineInput: z.ZodObject<{
+export type RoleGrantOfferAcceptInput = z.infer<typeof RoleGrantOfferAcceptInput>;
+/** Input for `role_grant_offer_decline`. */
+export declare const RoleGrantOfferDeclineInput: z.ZodObject<{
     offer_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
     reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitOfferDeclineInput = z.infer<typeof PermitOfferDeclineInput>;
-/** Input for `permit_offer_retract`. */
-export declare const PermitOfferRetractInput: z.ZodObject<{
+export type RoleGrantOfferDeclineInput = z.infer<typeof RoleGrantOfferDeclineInput>;
+/** Input for `role_grant_offer_retract`. */
+export declare const RoleGrantOfferRetractInput: z.ZodObject<{
     offer_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitOfferRetractInput = z.infer<typeof PermitOfferRetractInput>;
-/** Input for `permit_offer_list`. `account_id` is admin-only (inspect another account's inbox). */
-export declare const PermitOfferListInput: z.ZodObject<{
+export type RoleGrantOfferRetractInput = z.infer<typeof RoleGrantOfferRetractInput>;
+/** Input for `role_grant_offer_list`. `account_id` is admin-only (inspect another account's inbox). */
+export declare const RoleGrantOfferListInput: z.ZodObject<{
     account_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitOfferListInput = z.infer<typeof PermitOfferListInput>;
+export type RoleGrantOfferListInput = z.infer<typeof RoleGrantOfferListInput>;
 /**
- * Input for `permit_revoke`. Admin-only mutation that revokes an active
- * permit on a target actor. `actor_id` is the natural key — permits are
+ * Input for `role_grant_revoke`. Admin-only mutation that revokes an active
+ * role_grant on a target actor. `actor_id` is the natural key — role_grants are
  * actor-scoped, and the admin UI reads `row.actor.id` straight from the
  * listing. Deriving `actor_id` from `account_id` would collapse under
  * multi-actor accounts.
  */
-export declare const PermitRevokeInput: z.ZodObject<{
+export declare const RoleGrantRevokeInput: z.ZodObject<{
     actor_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
-    permit_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+    role_grant_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
     reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitRevokeInput = z.infer<typeof PermitRevokeInput>;
+export type RoleGrantRevokeInput = z.infer<typeof RoleGrantRevokeInput>;
 /**
- * Input for `permit_offer_history`. Returns every offer involving the account
+ * Input for `role_grant_offer_history`. Returns every offer involving the account
  * in either direction (recipient or grantor), including terminal rows, newest
  * first. `account_id` is admin-only.
  */
-export declare const PermitOfferHistoryInput: z.ZodObject<{
+export declare const RoleGrantOfferHistoryInput: z.ZodObject<{
     account_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
     limit: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     offset: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitOfferHistoryInput = z.infer<typeof PermitOfferHistoryInput>;
-/** Output for `permit_offer_create`. */
-export declare const PermitOfferCreateOutput: z.ZodObject<{
+export type RoleGrantOfferHistoryInput = z.infer<typeof RoleGrantOfferHistoryInput>;
+/** Output for `role_grant_offer_create`. */
+export declare const RoleGrantOfferCreateOutput: z.ZodObject<{
     offer: z.ZodObject<{
         id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         from_actor_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         role: z.ZodString;
+        scope_kind: z.ZodNullable<z.ZodString>;
         scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         message: z.ZodNullable<z.ZodString>;
         created_at: z.ZodString;
@@ -124,19 +126,20 @@ export declare const PermitOfferCreateOutput: z.ZodObject<{
         decline_reason: z.ZodNullable<z.ZodString>;
         retracted_at: z.ZodNullable<z.ZodString>;
         superseded_at: z.ZodNullable<z.ZodString>;
-        resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
 }, z.core.$strict>;
-export type PermitOfferCreateOutput = z.infer<typeof PermitOfferCreateOutput>;
-/** Output for `permit_offer_accept`. */
-export declare const PermitOfferAcceptOutput: z.ZodObject<{
-    permit_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+export type RoleGrantOfferCreateOutput = z.infer<typeof RoleGrantOfferCreateOutput>;
+/** Output for `role_grant_offer_accept`. */
+export declare const RoleGrantOfferAcceptOutput: z.ZodObject<{
+    role_grant_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
     offer: z.ZodObject<{
         id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         from_actor_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         role: z.ZodString;
+        scope_kind: z.ZodNullable<z.ZodString>;
         scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         message: z.ZodNullable<z.ZodString>;
         created_at: z.ZodString;
@@ -146,24 +149,25 @@ export declare const PermitOfferAcceptOutput: z.ZodObject<{
         decline_reason: z.ZodNullable<z.ZodString>;
         retracted_at: z.ZodNullable<z.ZodString>;
         superseded_at: z.ZodNullable<z.ZodString>;
-        resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     superseded_offer_ids: z.ZodArray<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
 }, z.core.$strict>;
-export type PermitOfferAcceptOutput = z.infer<typeof PermitOfferAcceptOutput>;
-/** Output for `permit_offer_decline` / `permit_offer_retract`. */
-export declare const PermitOfferOkOutput: z.ZodObject<{
+export type RoleGrantOfferAcceptOutput = z.infer<typeof RoleGrantOfferAcceptOutput>;
+/** Output for `role_grant_offer_decline` / `role_grant_offer_retract`. */
+export declare const RoleGrantOfferOkOutput: z.ZodObject<{
     ok: z.ZodLiteral<true>;
 }, z.core.$strict>;
-export type PermitOfferOkOutput = z.infer<typeof PermitOfferOkOutput>;
-/** Output for `permit_offer_list`. */
-export declare const PermitOfferListOutput: z.ZodObject<{
+export type RoleGrantOfferOkOutput = z.infer<typeof RoleGrantOfferOkOutput>;
+/** Output for `role_grant_offer_list`. */
+export declare const RoleGrantOfferListOutput: z.ZodObject<{
     offers: z.ZodArray<z.ZodObject<{
         id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         from_actor_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         role: z.ZodString;
+        scope_kind: z.ZodNullable<z.ZodString>;
         scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         message: z.ZodNullable<z.ZodString>;
         created_at: z.ZodString;
@@ -173,18 +177,19 @@ export declare const PermitOfferListOutput: z.ZodObject<{
         decline_reason: z.ZodNullable<z.ZodString>;
         retracted_at: z.ZodNullable<z.ZodString>;
         superseded_at: z.ZodNullable<z.ZodString>;
-        resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
-export type PermitOfferListOutput = z.infer<typeof PermitOfferListOutput>;
-/** Output for `permit_offer_history`. */
-export declare const PermitOfferHistoryOutput: z.ZodObject<{
+export type RoleGrantOfferListOutput = z.infer<typeof RoleGrantOfferListOutput>;
+/** Output for `role_grant_offer_history`. */
+export declare const RoleGrantOfferHistoryOutput: z.ZodObject<{
     offers: z.ZodArray<z.ZodObject<{
         id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         from_actor_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         role: z.ZodString;
+        scope_kind: z.ZodNullable<z.ZodString>;
         scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         message: z.ZodNullable<z.ZodString>;
         created_at: z.ZodString;
@@ -194,26 +199,30 @@ export declare const PermitOfferHistoryOutput: z.ZodObject<{
         decline_reason: z.ZodNullable<z.ZodString>;
         retracted_at: z.ZodNullable<z.ZodString>;
         superseded_at: z.ZodNullable<z.ZodString>;
-        resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+        resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
-export type PermitOfferHistoryOutput = z.infer<typeof PermitOfferHistoryOutput>;
-/** Output for `permit_revoke`. */
-export declare const PermitRevokeOutput: z.ZodObject<{
+export type RoleGrantOfferHistoryOutput = z.infer<typeof RoleGrantOfferHistoryOutput>;
+/** Output for `role_grant_revoke`. */
+export declare const RoleGrantRevokeOutput: z.ZodObject<{
     ok: z.ZodLiteral<true>;
     revoked: z.ZodLiteral<true>;
 }, z.core.$strict>;
-export type PermitRevokeOutput = z.infer<typeof PermitRevokeOutput>;
-export declare const permit_offer_create_action_spec: {
+export type RoleGrantRevokeOutput = z.infer<typeof RoleGrantRevokeOutput>;
+export declare const role_grant_offer_create_action_spec: {
     method: string;
     kind: "request_response";
     initiator: "frontend";
-    auth: "authenticated";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
     side_effects: true;
     input: z.ZodObject<{
         to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         to_actor_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
         role: z.ZodString;
+        scope_kind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         scope_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
         message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
@@ -225,6 +234,7 @@ export declare const permit_offer_create_action_spec: {
             to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
             to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             role: z.ZodString;
+            scope_kind: z.ZodNullable<z.ZodString>;
             scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             message: z.ZodNullable<z.ZodString>;
             created_at: z.ZodString;
@@ -234,31 +244,35 @@ export declare const permit_offer_create_action_spec: {
             decline_reason: z.ZodNullable<z.ZodString>;
             retracted_at: z.ZodNullable<z.ZodString>;
             superseded_at: z.ZodNullable<z.ZodString>;
-            resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         }, z.core.$strict>;
     }, z.core.$strict>;
     async: true;
     description: string;
-    error_reasons: ("offer_self_target" | "offer_role_not_grantable" | "offer_not_authorized" | "offer_actor_account_mismatch")[];
+    error_reasons: ("role_grant_offer_self_target" | "role_grant_offer_role_not_grantable" | "role_grant_offer_not_authorized" | "role_grant_offer_actor_account_mismatch")[];
 };
-export declare const permit_offer_accept_action_spec: {
+export declare const role_grant_offer_accept_action_spec: {
     method: string;
     kind: "request_response";
     initiator: "frontend";
-    auth: "authenticated";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
     side_effects: true;
     input: z.ZodObject<{
         offer_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     output: z.ZodObject<{
-        permit_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        role_grant_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         offer: z.ZodObject<{
             id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
             from_actor_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
             to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
             to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             role: z.ZodString;
+            scope_kind: z.ZodNullable<z.ZodString>;
             scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             message: z.ZodNullable<z.ZodString>;
             created_at: z.ZodString;
@@ -268,19 +282,22 @@ export declare const permit_offer_accept_action_spec: {
             decline_reason: z.ZodNullable<z.ZodString>;
             retracted_at: z.ZodNullable<z.ZodString>;
             superseded_at: z.ZodNullable<z.ZodString>;
-            resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         }, z.core.$strict>;
         superseded_offer_ids: z.ZodArray<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
     async: true;
     description: string;
-    error_reasons: ("offer_terminal" | "offer_expired" | "offer_not_found" | "offer_actor_mismatch")[];
+    error_reasons: ("role_grant_offer_terminal" | "role_grant_offer_expired" | "role_grant_offer_not_found" | "role_grant_offer_actor_mismatch")[];
 };
-export declare const permit_offer_decline_action_spec: {
+export declare const role_grant_offer_decline_action_spec: {
     method: string;
     kind: "request_response";
     initiator: "frontend";
-    auth: "authenticated";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
     side_effects: true;
     input: z.ZodObject<{
         offer_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
@@ -292,13 +309,16 @@ export declare const permit_offer_decline_action_spec: {
     }, z.core.$strict>;
     async: true;
     description: string;
-    error_reasons: ("offer_terminal" | "offer_not_found")[];
+    error_reasons: ("role_grant_offer_terminal" | "role_grant_offer_not_found")[];
 };
-export declare const permit_offer_retract_action_spec: {
+export declare const role_grant_offer_retract_action_spec: {
     method: string;
     kind: "request_response";
     initiator: "frontend";
-    auth: "authenticated";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
     side_effects: true;
     input: z.ZodObject<{
         offer_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
@@ -309,13 +329,16 @@ export declare const permit_offer_retract_action_spec: {
     }, z.core.$strict>;
     async: true;
     description: string;
-    error_reasons: ("offer_terminal" | "offer_not_found")[];
+    error_reasons: ("role_grant_offer_terminal" | "role_grant_offer_not_found")[];
 };
-export declare const permit_offer_list_action_spec: {
+export declare const role_grant_offer_list_action_spec: {
     method: string;
     kind: "request_response";
     initiator: "frontend";
-    auth: "authenticated";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
     side_effects: false;
     input: z.ZodObject<{
         account_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
@@ -328,6 +351,7 @@ export declare const permit_offer_list_action_spec: {
             to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
             to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             role: z.ZodString;
+            scope_kind: z.ZodNullable<z.ZodString>;
             scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             message: z.ZodNullable<z.ZodString>;
             created_at: z.ZodString;
@@ -337,17 +361,20 @@ export declare const permit_offer_list_action_spec: {
             decline_reason: z.ZodNullable<z.ZodString>;
             retracted_at: z.ZodNullable<z.ZodString>;
             superseded_at: z.ZodNullable<z.ZodString>;
-            resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
     async: true;
     description: string;
 };
-export declare const permit_offer_history_action_spec: {
+export declare const role_grant_offer_history_action_spec: {
     method: string;
     kind: "request_response";
     initiator: "frontend";
-    auth: "authenticated";
+    auth: {
+        account: "required";
+        actor: "required";
+    };
     side_effects: false;
     input: z.ZodObject<{
         account_id: z.ZodOptional<z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>>;
@@ -362,6 +389,7 @@ export declare const permit_offer_history_action_spec: {
             to_account_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
             to_actor_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             role: z.ZodString;
+            scope_kind: z.ZodNullable<z.ZodString>;
             scope_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
             message: z.ZodNullable<z.ZodString>;
             created_at: z.ZodString;
@@ -371,23 +399,25 @@ export declare const permit_offer_history_action_spec: {
             decline_reason: z.ZodNullable<z.ZodString>;
             retracted_at: z.ZodNullable<z.ZodString>;
             superseded_at: z.ZodNullable<z.ZodString>;
-            resulting_permit_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
+            resulting_role_grant_id: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
     async: true;
     description: string;
 };
-export declare const permit_revoke_action_spec: {
+export declare const role_grant_revoke_action_spec: {
     method: string;
     kind: "request_response";
     initiator: "frontend";
     auth: {
-        role: string;
+        account: "required";
+        actor: "required";
+        roles: string[];
     };
     side_effects: true;
     input: z.ZodObject<{
         actor_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
-        permit_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
+        role_grant_id: z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">;
         reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         acting: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
     }, z.core.$strict>;
@@ -397,13 +427,13 @@ export declare const permit_revoke_action_spec: {
     }, z.core.$strict>;
     async: true;
     description: string;
-    error_reasons: ("role_not_web_grantable" | "permit_not_found")[];
+    error_reasons: ("role_not_web_grantable" | "role_grant_not_found")[];
     rate_limit: "account";
 };
 /**
- * All permit-offer action specs — a codegen-ready registry. Consumers spread
+ * All role-grant-offer action specs — a codegen-ready registry. Consumers spread
  * this into their own action-spec array to include offer lifecycle + revoke
  * methods in a typed client surface.
  */
-export declare const all_permit_offer_action_specs: Array<RequestResponseActionSpec>;
-//# sourceMappingURL=permit_offer_action_specs.d.ts.map
+export declare const all_role_grant_offer_action_specs: Array<RequestResponseActionSpec>;
+//# sourceMappingURL=role_grant_offer_action_specs.d.ts.map

package/dist/auth/role_grant_offer_action_specs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role_grant_offer_action_specs.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/auth/role_grant_offer_action_specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAGtB,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,2BAA2B,CAAC;AAUzE,oEAAoE;AACpE,eAAO,MAAM,kCAAkC,EAAG,8BAAuC,CAAC;AAC1F,kEAAkE;AAClE,eAAO,MAAM,+BAA+B,EAAG,2BAAoC,CAAC;AACpF,sDAAsD;AACtD,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAClF,wGAAwG;AACxG,eAAO,MAAM,gCAAgC,EAAG,4BAAqC,CAAC;AACtF,uIAAuI;AACvI,eAAO,MAAM,yCAAyC,EACrD,qCAA8C,CAAC;AAChD,gKAAgK;AAChK,eAAO,MAAM,qCAAqC,EAAG,iCAA0C,CAAC;AAChG,6FAA6F;AAC7F,eAAO,MAAM,qCAAqC,EAAG,iCAA0C,CAAC;AAChG,wHAAwH;AACxH,eAAO,MAAM,6CAA6C,EACzD,yCAAkD,CAAC;AAIpD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;kBAoBpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,2CAA2C;AAC3C,eAAO,MAAM,yBAAyB;;;kBAGpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,4CAA4C;AAC5C,eAAO,MAAM,0BAA0B;;;;kBAQrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,4CAA4C;AAC5C,eAAO,MAAM,0BAA0B;;;kBAGrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,uGAAuG;AACvG,eAAO,MAAM,uBAAuB;;;kBAKlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB;;;;;kBAQ/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;kBAWrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,4CAA4C;AAC5C,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;kBAErC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,4CAA4C;AAC5C,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;kBAIrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB;;kBAAwC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,0CAA0C;AAC1C,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;kBAAwD,CAAC;AAC9F,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,6CAA6C;AAC7C,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;kBAAwD,CAAC;AACjG,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF,sCAAsC;AACtC,eAAO,MAAM,qBAAqB;;;kBAGhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiBX,CAAC;AAEtC,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiBX,CAAC;AAEtC,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;CAWZ,CAAC;AAEtC,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;CAWZ,CAAC;AAEtC,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWT,CAAC;AAEtC,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAWZ,CAAC;AAEtC,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;CAaL,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,EAAE,KAAK,CAAC,yBAAyB,CAQ9E,CAAC"}