@metacensus/api 0.0.0 → 0.2.0

package/README.md

@@ -1,12 +1,14 @@
 # @metacensus/api
 
 TypeScript interfaces for the MetaCensus API contract — every request and
-response under `/metacensus/api/v1`, generated from the `.proto` sources that
-also generate the Go side.
+response under `/metacensus/api/v1` and `/metacensus/public`, generated from the
+`.proto` sources that also generate the Go side.
 
-**Types only.** There are no runtime dependencies and no value imports; a build
-step enforces both. What ships is the generated interfaces, the route manifest,
-and `protobufPackage`.
+What ships is the generated interfaces, the route manifest, `protobufPackage`,
+a typed client per surface — over a transport you supply — and the signing
+chain. It reaches for nothing at runtime; `scripts/check-no-runtime.mjs` is
+what says so, and what fails the build. The signing module is inside that
+guard rather than an exception to it.
 
 ```bash
 npm install @metacensus/api
@@ -14,9 +16,122 @@ npm install @metacensus/api
 
 ```ts
 import type { Topic, PropCreateRequest } from "@metacensus/api";
-import { routes } from "@metacensus/api";
+import { routes, Client, ApiError, type Transport } from "@metacensus/api";
+
+const transport: Transport = async ({ method, path, body }) => {
+  const r = await fetch(baseUrl + path, { method, body });
+  return { status: r.status, body: await r.text() };
+};
+const api = new Client(transport);
+const topic = await api.getTopic({ topicId });
+```
+
+`path` is absolute and already carries `/metacensus/api/v1`, every segment
+percent-encoded; prepend only an origin. `body`, when present, is the exact
+string to send: the client serialises once, so what you log or hash is what
+went out.
+
+**The transport is where your own concerns go**: auth headers, a 401 policy,
+retries. The client calls no `fetch`, keeps no cache, and throws `ApiError` for
+any non-2xx the transport did not handle itself. `ApiError.body` is raw text —
+a 404 or 405 comes from the server's router rather than a handler, so parse it
+defensively rather than assuming JSON.
+
+Signing is *not* a transport concern. A participant's signature is part of the
+request message and is made before the client is called; see "Signing", below.
+
+Every scalar is required, which is what makes Go's `EmitDefaultValues` and
+these types describe the same document: `api.createTopic({ name })` does not
+type-check, `{ name, description: "" }` does. Message-typed fields are
+optional.
+
+## The public surface
+
+The public, unauthenticated surface is an entry point of its own in the same
+package, with a client to match:
+
+```ts
+import type { PartnerSubmission } from "@metacensus/api/public";
+import {
+  PartnerSubmission_Interest,
+  PublicClient,
+  publicPrefix,
+} from "@metacensus/api/public";
+
+const pub = new PublicClient(transport);
+await pub.submitPartnerInterest({ name, email, interests, message, website: "" });
 ```
 
+One package because the SPA calls both surfaces from one build; an entry point
+per surface because a consumer of only the public surface should not acquire the
+authenticated types. `@metacensus/api/signing` is a third, splitting by concern
+rather than by surface — nothing on the public surface is ever signed.
+`PublicClient` sends no credentials of its own; pass it a separate transport
+from the one you pass `Client`.
+
+`ApiError` is the same class from either entry point, so `instanceof ApiError`
+holds for a failure from either surface. Importing it twice is harmless.
+
+`PartnerSubmission_Interest` is a string enum, so the checkbox list is generated
+from the contract rather than mirrored by hand — which is the coupling this
+package exists to make mechanical. `Unspecified` is the proto3 zero value, not
+an offered choice, so filter it out:
+
+```ts
+const choices = Object.values(PartnerSubmission_Interest).filter(
+  (i) => i !== PartnerSubmission_Interest.Unspecified,
+);
+```
+
+The display labels are not in the contract; they stay in the SPA as copy. See
+the enum's comment for why.
+
+## Signing
+
+Every write on the authenticated surface carries a `content` message and a
+`userSignature` over it. A session token says who is connected; the signature
+says who authored the record, and the API server does not check it — it is
+verified by the persistence layer, behind the edge.
+
+```ts
+import { SPEC, sign, keyId, generateKeyPair, encodePublicKey } from "@metacensus/api/signing";
+
+const { privateKey, publicKey } = await generateKeyPair(); // ECDSA P-384
+
+const content = { name: "A review", description: "" };
+const userSignature = {
+  signerId,
+  keyId: await keyId(publicKey),
+  alg: "Es384",
+  publicKey: "", // inline only on sign-up, which is what enrols the key
+  signingTime: new Date().toISOString(),
+  spec: SPEC,
+  contentType: "metacensus.v1.TopicContent",
+  value: "",
+};
+userSignature.value = await sign(privateKey, content, userSignature);
+
+await api.createTopic({ content, userSignature });
+```
+
+The digest is SHA-384 over RFC 8785 canonical JSON of
+`{content, signature}`, with `value` emptied. Every field but `value` is inside
+it, so a signature cannot be re-attributed or re-dated — which also means
+`contentType` has to name the content you actually signed, and `signingTime`
+has to be set.
+
+Sign-up is the one request whose signature carries its own public key: there is
+no id yet to look one up by. Set `publicKey` there, leave `signerId` empty, and
+keep the password out of `content` — content is what gets stored.
+
+`routes` carries a `signed` flag per route, so "which routes need a key?" is a
+lookup rather than a guess.
+
+The full account of the chain, and `go/signing`, the other half that has to
+compute the same digest, are in the repository README.
+
+## Both surfaces
+
 The wire format is JSON, not protobuf binary. Field names are `lowerCamelCase`
 on the wire, enum values are PascalCase, and all ids are strings.
 

package/dist/index.d.ts

@@ -1,11 +1,9 @@
 export * from "./src/metacensus/v1/auth.js";
 export * from "./src/metacensus/v1/common.js";
-export * from "./src/metacensus/v1/extraction.js";
-export * from "./src/metacensus/v1/paper.js";
 export * from "./src/metacensus/v1/prop.js";
-export * from "./src/metacensus/v1/protocol.js";
 export * from "./src/metacensus/v1/topic.js";
 export * from "./src/metacensus/v1/user.js";
 export * from "./src/route-manifest.js";
 export { protobufPackage } from "./src/metacensus/v1/common.js";
+export { Client, ApiError, type ClientRequest, type ClientResponse, type Transport, } from "./src/client.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAIA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AAIxC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAOA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AAGxC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAIhE,OAAO,EACL,MAAM,EACN,QAAQ,EACR,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -1,16 +1,18 @@
-// The MetaCensus API contract, as TypeScript. Types only, no runtime.
+// The authenticated MetaCensus API contract (/metacensus/api/v1): generated
+// types, route manifest, and typed Client. Everything under ./src is
+// generated; a new .proto file needs a line here.
 //
-// Everything under ./src is generated; a new .proto file needs a line here.
+// See ts/README.md for why the public surface (./public.ts) is a separate
+// entry point rather than merged in here.
 export * from "./src/metacensus/v1/auth.js";
 export * from "./src/metacensus/v1/common.js";
-export * from "./src/metacensus/v1/extraction.js";
-export * from "./src/metacensus/v1/paper.js";
 export * from "./src/metacensus/v1/prop.js";
-export * from "./src/metacensus/v1/protocol.js";
 export * from "./src/metacensus/v1/topic.js";
 export * from "./src/metacensus/v1/user.js";
 export * from "./src/route-manifest.js";
-// Every generated file exports an identical `protobufPackage`, so `export *`
-// cannot pick one.
+// `export *` can't pick one file's `protobufPackage` over another's.
 export { protobufPackage } from "./src/metacensus/v1/common.js";
+// Named, not `export *`: src/client.ts has one class per surface, and this
+// entry point wants only the authenticated one.
+export { Client, ApiError, } from "./src/client.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAE5E,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AAExC,6EAA6E;AAC7E,mBAAmB;AACnB,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,qEAAqE;AACrE,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,0CAA0C;AAE1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AAExC,qEAAqE;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,2EAA2E;AAC3E,gDAAgD;AAChD,OAAO,EACL,MAAM,EACN,QAAQ,GAIT,MAAM,iBAAiB,CAAC"}

package/dist/public.d.ts

@@ -0,0 +1,6 @@
+export * from "./src/metacensus/public/v1/common.js";
+export * from "./src/metacensus/public/v1/partner.js";
+export * from "./src/route-manifest.js";
+export { protobufPackage } from "./src/metacensus/public/v1/common.js";
+export { PublicClient, ApiError, type ClientRequest, type ClientResponse, type Transport, } from "./src/client.js";
+//# sourceMappingURL=public.d.ts.map

package/dist/public.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../public.ts"],"names":[],"mappings":"AAIA,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yBAAyB,CAAC;AAGxC,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAMvE,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,iBAAiB,CAAC"}

package/dist/public.js

@@ -0,0 +1,14 @@
+// The public, unauthenticated MetaCensus surface (/metacensus/public):
+// generated types, route manifest, and PublicClient. See ts/README.md for
+// why this is a separate entry point from the authenticated one.
+export * from "./src/metacensus/public/v1/common.js";
+export * from "./src/metacensus/public/v1/partner.js";
+export * from "./src/route-manifest.js";
+// `export *` can't pick one file's `protobufPackage` over another's.
+export { protobufPackage } from "./src/metacensus/public/v1/common.js";
+// Named, not `export *`: src/client.ts has one class per surface, and this
+// entry point wants only PublicClient. A public-only consumer still carries
+// the authenticated Client as dead code (a bundler drops it), but not the
+// authenticated types, which is what the split is for.
+export { PublicClient, ApiError, } from "./src/client.js";
+//# sourceMappingURL=public.js.map

package/dist/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../public.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,0EAA0E;AAC1E,iEAAiE;AAEjE,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yBAAyB,CAAC;AAExC,qEAAqE;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEvE,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,uDAAuD;AACvD,OAAO,EACL,YAAY,EACZ,QAAQ,GAIT,MAAM,iBAAiB,CAAC"}

package/dist/signing.d.ts

@@ -0,0 +1,2 @@
+export { SPEC, canonicalize, signingInput, digest, sign, verify, generateKeyPair, encodePublicKey, decodePublicKey, keyId, } from "./src/signing.js";
+//# sourceMappingURL=signing.d.ts.map

package/dist/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../signing.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,IAAI,EACJ,MAAM,EACN,eAAe,EACf,eAAe,EACf,eAAe,EACf,KAAK,GACN,MAAM,kBAAkB,CAAC"}

package/dist/signing.js

@@ -0,0 +1,5 @@
+// The MetaCensus signing chain, producing the same digest as go/signing. A
+// third entry point splitting by concern, not surface. See ts/README.md,
+// "Signing". The runtime half is src/signing.ts.
+export { SPEC, canonicalize, signingInput, digest, sign, verify, generateKeyPair, encodePublicKey, decodePublicKey, keyId, } from "./src/signing.js";
+//# sourceMappingURL=signing.js.map

package/dist/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../signing.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,iDAAiD;AAEjD,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,IAAI,EACJ,MAAM,EACN,eAAe,EACf,eAAe,EACf,eAAe,EACf,KAAK,GACN,MAAM,kBAAkB,CAAC"}

package/dist/src/client.d.ts

@@ -0,0 +1,54 @@
+import type { PartnerReceipt, PartnerSubmission } from "./metacensus/public/v1/partner.js";
+import type { LoginRequest, LogoutRequest, LogoutResponse, Session, SignUpRequest } from "./metacensus/v1/auth.js";
+import type { HealthcheckRequest, HealthcheckResponse } from "./metacensus/v1/common.js";
+import type { Prop, PropCreateRequest, PropGetRequest, PropList, PropListRequest, Vote, VoteList, VoteListRequest, VoteSetRequest } from "./metacensus/v1/prop.js";
+import type { Member, MemberGetRequest, MemberList, MemberListRequest, Topic, TopicCreateRequest, TopicGetRequest, TopicList, TopicListRequest } from "./metacensus/v1/topic.js";
+import type { SelfGetRequest, User, UserGetRequest, UserList, UserListRequest } from "./metacensus/v1/user.js";
+export interface ClientRequest {
+    readonly method: string;
+    readonly path: string;
+    readonly body?: string;
+}
+export interface ClientResponse {
+    readonly status: number;
+    readonly body: string;
+}
+export type Transport = (req: ClientRequest) => Promise<ClientResponse>;
+export declare class ApiError extends Error {
+    readonly method: string;
+    readonly path: string;
+    readonly status: number;
+    readonly body: string;
+    constructor(method: string, path: string, status: number, body: string);
+}
+export declare class Client {
+    private readonly transport;
+    private readonly prefix;
+    constructor(transport: Transport, prefix?: string);
+    private call;
+    login(req: LoginRequest): Promise<Session>;
+    signUp(req: SignUpRequest): Promise<Session>;
+    logout(req: LogoutRequest): Promise<LogoutResponse>;
+    healthcheck(req: HealthcheckRequest): Promise<HealthcheckResponse>;
+    listProps(req: PropListRequest): Promise<PropList>;
+    getProp(req: PropGetRequest): Promise<Prop>;
+    createProp(req: PropCreateRequest): Promise<Prop>;
+    listVotes(req: VoteListRequest): Promise<VoteList>;
+    setVote(req: VoteSetRequest): Promise<Vote>;
+    listTopics(req: TopicListRequest): Promise<TopicList>;
+    getTopic(req: TopicGetRequest): Promise<Topic>;
+    createTopic(req: TopicCreateRequest): Promise<Topic>;
+    listMembers(req: MemberListRequest): Promise<MemberList>;
+    getMember(req: MemberGetRequest): Promise<Member>;
+    listUsers(req: UserListRequest): Promise<UserList>;
+    getUser(req: UserGetRequest): Promise<User>;
+    getSelf(req: SelfGetRequest): Promise<User>;
+}
+export declare class PublicClient {
+    private readonly transport;
+    private readonly prefix;
+    constructor(transport: Transport, prefix?: string);
+    private call;
+    submitPartnerInterest(req: PartnerSubmission): Promise<PartnerReceipt>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/src/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACnH,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACnK,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjL,OAAO,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAiB/G,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAKD,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAKxE,qBAAa,QAAS,SAAQ,KAAK;IAE/B,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAJvB,YACW,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAItB;CACF;AAGD,qBAAa,MAAM;IAIf,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,YACmB,SAAS,EAAE,SAAS,EACpB,MAAM,GAAE,MAAyB,EAChD;YAEU,IAAI;IAWlB,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAGzC;IAGD,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3C;IAGD,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAElD;IAGD,WAAW,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAEjE;IAGD,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEjD;IAGD,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1C;IAGD,UAAU,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhD;IAGD,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEjD;IAGD,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1C;IAGD,UAAU,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAEpD;IAGD,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,CAE7C;IAGD,WAAW,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,CAGnD;IAGD,WAAW,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAEvD;IAGD,SAAS,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAEhD;IAGD,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAEjD;IAGD,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1C;IAGD,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1C;CACF;AAGD,qBAAa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,YACmB,SAAS,EAAE,SAAS,EACpB,MAAM,GAAE,MAA4B,EACnD;YAEU,IAAI;IAWlB,qBAAqB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAGrE;CACF"}

package/dist/src/client.js

@@ -0,0 +1,146 @@
+// Code generated by routegen. DO NOT EDIT.
+// The same literal as route-manifest.ts's apiPrefix, re-emitted rather than
+// imported, since a value import under src/ is forbidden (check-no-runtime.mjs).
+const apiPrefixDefault = "/metacensus/api/v1";
+// The same literal as route-manifest.ts's publicPrefix, re-emitted rather than
+// imported, since a value import under src/ is forbidden (check-no-runtime.mjs).
+const publicPrefixDefault = "/metacensus/public";
+function param(v) {
+    return encodeURIComponent(String(v));
+}
+// ApiError is any non-2xx the transport did not act on itself. body is the
+// response text, unparsed: a 404 or 405 comes from the router, not a handler, so
+// parse it defensively rather than assuming JSON.
+export class ApiError extends Error {
+    method;
+    path;
+    status;
+    body;
+    constructor(method, path, status, body) {
+        super(`${method} ${path}: HTTP ${status}`);
+        this.method = method;
+        this.path = path;
+        this.status = status;
+        this.body = body;
+        this.name = "ApiError";
+    }
+}
+// Client calls the authenticated API: every route under /metacensus/api/v1.
+export class Client {
+    transport;
+    prefix;
+    // Defaults to this surface's own apiPrefix, but can be overridden so a
+    // test harness can mount the same routes elsewhere.
+    constructor(transport, prefix = apiPrefixDefault) {
+        this.transport = transport;
+        this.prefix = prefix;
+    }
+    async call(method, path, body) {
+        const full = this.prefix + path;
+        const res = await this.transport({ method, path: full, body });
+        if (res.status < 200 || res.status >= 300) {
+            throw new ApiError(method, full, res.status, res.body);
+        }
+        // A cast: no runtime schema to validate against.
+        return (res.body === "" ? {} : JSON.parse(res.body));
+    }
+    // AuthRoutes.Login: POST /login
+    login(req) {
+        const body = req;
+        return this.call("POST", "/login", JSON.stringify(body));
+    }
+    // AuthRoutes.SignUp: POST /signup
+    signUp(req) {
+        const body = req;
+        return this.call("POST", "/signup", JSON.stringify(body));
+    }
+    // AuthRoutes.Logout: POST /logout
+    logout(req) {
+        return this.call("POST", "/logout", undefined);
+    }
+    // HealthRoutes.Healthcheck: GET /healthcheck
+    healthcheck(req) {
+        return this.call("GET", "/healthcheck", undefined);
+    }
+    // PropRoutes.ListProps: GET /topic/{topicId}/prop
+    listProps(req) {
+        return this.call("GET", `/topic/${param(req.topicId)}/prop`, undefined);
+    }
+    // PropRoutes.GetProp: GET /topic/{topicId}/prop/{propId}
+    getProp(req) {
+        return this.call("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}`, undefined);
+    }
+    // PropRoutes.CreateProp: POST /topic/{topicId}/prop
+    createProp(req) {
+        const { topicId, ...body } = req;
+        return this.call("POST", `/topic/${param(topicId)}/prop`, JSON.stringify(body));
+    }
+    // PropRoutes.ListVotes: GET /topic/{topicId}/prop/{propId}/vote
+    listVotes(req) {
+        return this.call("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}/vote`, undefined);
+    }
+    // PropRoutes.SetVote: POST /topic/{topicId}/prop/{propId}/vote
+    setVote(req) {
+        const { topicId, propId, ...body } = req;
+        return this.call("POST", `/topic/${param(topicId)}/prop/${param(propId)}/vote`, JSON.stringify(body));
+    }
+    // TopicRoutes.ListTopics: GET /topic
+    listTopics(req) {
+        return this.call("GET", "/topic", undefined);
+    }
+    // TopicRoutes.GetTopic: GET /topic/{topicId}
+    getTopic(req) {
+        return this.call("GET", `/topic/${param(req.topicId)}`, undefined);
+    }
+    // TopicRoutes.CreateTopic: POST /topic
+    createTopic(req) {
+        const body = req;
+        return this.call("POST", "/topic", JSON.stringify(body));
+    }
+    // TopicRoutes.ListMembers: GET /topic/{topicId}/member
+    listMembers(req) {
+        return this.call("GET", `/topic/${param(req.topicId)}/member`, undefined);
+    }
+    // TopicRoutes.GetMember: GET /topic/{topicId}/member/{userId}
+    getMember(req) {
+        return this.call("GET", `/topic/${param(req.topicId)}/member/${param(req.userId)}`, undefined);
+    }
+    // UserRoutes.ListUsers: GET /user
+    listUsers(req) {
+        return this.call("GET", "/user", undefined);
+    }
+    // UserRoutes.GetUser: GET /user/{userId}
+    getUser(req) {
+        return this.call("GET", `/user/${param(req.userId)}`, undefined);
+    }
+    // UserRoutes.GetSelf: GET /self
+    getSelf(req) {
+        return this.call("GET", "/self", undefined);
+    }
+}
+// PublicClient calls the public, unauthenticated surface: every route under /metacensus/public.
+export class PublicClient {
+    transport;
+    prefix;
+    // Defaults to this surface's own publicPrefix, but can be overridden so a
+    // test harness can mount the same routes elsewhere.
+    constructor(transport, prefix = publicPrefixDefault) {
+        this.transport = transport;
+        this.prefix = prefix;
+    }
+    async call(method, path, body) {
+        const full = this.prefix + path;
+        const res = await this.transport({ method, path: full, body });
+        if (res.status < 200 || res.status >= 300) {
+            throw new ApiError(method, full, res.status, res.body);
+        }
+        // A cast: no runtime schema to validate against.
+        return (res.body === "" ? {} : JSON.parse(res.body));
+    }
+    // PartnerRoutes.SubmitPartnerInterest: POST /partner
+    submitPartnerInterest(req) {
+        const body = req;
+        return this.call("POST", "/partner", JSON.stringify(body));
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/src/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAY3C,4EAA4E;AAC5E,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,+EAA+E;AAC/E,iFAAiF;AACjF,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,SAAS,KAAK,CAAC,CAA4B;IACzC,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAuBD,2EAA2E;AAC3E,iFAAiF;AACjF,kDAAkD;AAClD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB,MAAM;IACN,IAAI;IACJ,MAAM;IACN,IAAI;IAJf,YACW,MAAc,EACd,IAAY,EACZ,MAAc,EACd,IAAY;QAErB,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,UAAU,MAAM,EAAE,CAAC,CAAC;sBALlC,MAAM;oBACN,IAAI;sBACJ,MAAM;oBACN,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,OAAO,MAAM;IAIE,SAAS;IACT,MAAM;IAJzB,uEAAuE;IACvE,oDAAoD;IACpD,YACmB,SAAoB,EACpB,MAAM,GAAW,gBAAgB;yBADjC,SAAS;sBACT,MAAM;IACtB,CAAC;IAEI,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,iDAAiD;QACjD,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAM,CAAC;IAC5D,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,GAAiB;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,GAAkB;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,GAAkB;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,6CAA6C;IAC7C,WAAW,CAAC,GAAuB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,kDAAkD;IAClD,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED,yDAAyD;IACzD,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/F,CAAC;IAED,oDAAoD;IACpD,UAAU,CAAC,GAAsB;QAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,gEAAgE;IAChE,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpG,CAAC;IAED,+DAA+D;IAC/D,OAAO,CAAC,GAAmB;QACzB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,qCAAqC;IACrC,UAAU,CAAC,GAAqB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,6CAA6C;IAC7C,QAAQ,CAAC,GAAoB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;IAED,uCAAuC;IACvC,WAAW,CAAC,GAAuB;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,uDAAuD;IACvD,WAAW,CAAC,GAAsB;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC;IAED,8DAA8D;IAC9D,SAAS,CAAC,GAAqB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACjG,CAAC;IAED,kCAAkC;IAClC,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,yCAAyC;IACzC,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IAED,gCAAgC;IAChC,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,OAAO,YAAY;IAIJ,SAAS;IACT,MAAM;IAJzB,0EAA0E;IAC1E,oDAAoD;IACpD,YACmB,SAAoB,EACpB,MAAM,GAAW,mBAAmB;yBADpC,SAAS;sBACT,MAAM;IACtB,CAAC;IAEI,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,iDAAiD;QACjD,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAM,CAAC;IAC5D,CAAC;IAED,qDAAqD;IACrD,qBAAqB,CAAC,GAAsB;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/dist/src/metacensus/public/v1/common.d.ts

@@ -0,0 +1,20 @@
+export declare const protobufPackage = "metacensus.public.v1";
+/**
+ * Shared types for the public surface. See README.md, "The two surfaces" and
+ * "Errors on the two surfaces".
+ *
+ * The statuses this surface answers with, which `google.api.http` cannot
+ * express and so live nowhere else. 400 and 403 share a sentence on purpose:
+ * which applies is not a caller's business.
+ *
+ *   400  the submission was not valid, or the body was not JSON
+ *   403  the `Origin` was absent or not allowlisted
+ *   413  the body exceeded 16 KiB
+ *   429  the per-client rate limit was exceeded; `Retry-After` carries seconds
+ *   502  the submission could not be relayed upstream
+ *   500  something else went wrong
+ *
+ * No messages yet: this is the one file the cross-file typing rule exempts, so
+ * a type shared across the surface's resources would go here.
+ */
+//# sourceMappingURL=common.d.ts.map

package/dist/src/metacensus/public/v1/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../../src/metacensus/public/v1/common.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,yBAAyB,CAAC;AAEtD;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/src/metacensus/public/v1/common.js

@@ -0,0 +1,26 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.7.7
+//   protoc               unknown
+// source: metacensus/public/v1/common.proto
+/* eslint-disable */
+export const protobufPackage = "metacensus.public.v1";
+/**
+ * Shared types for the public surface. See README.md, "The two surfaces" and
+ * "Errors on the two surfaces".
+ *
+ * The statuses this surface answers with, which `google.api.http` cannot
+ * express and so live nowhere else. 400 and 403 share a sentence on purpose:
+ * which applies is not a caller's business.
+ *
+ *   400  the submission was not valid, or the body was not JSON
+ *   403  the `Origin` was absent or not allowlisted
+ *   413  the body exceeded 16 KiB
+ *   429  the per-client rate limit was exceeded; `Retry-After` carries seconds
+ *   502  the submission could not be relayed upstream
+ *   500  something else went wrong
+ *
+ * No messages yet: this is the one file the cross-file typing rule exempts, so
+ * a type shared across the surface's resources would go here.
+ */
+//# sourceMappingURL=common.js.map

package/dist/src/metacensus/public/v1/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../../src/metacensus/public/v1/common.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,YAAY;AACZ,gCAAgC;AAChC,iCAAiC;AACjC,4CAA4C;AAE5C,oBAAoB;AAEpB,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAEtD;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/src/metacensus/public/v1/partner.d.ts

@@ -0,0 +1,55 @@
+export declare const protobufPackage = "metacensus.public.v1";
+/** The partner / express-interest form the marketing site posts to. */
+/**
+ * One express-interest form post. The length caps below are enforced but not
+ * machine-readable — ts-proto drops field options, so protovalidate can't
+ * reach the client; see README.md.
+ */
+export interface PartnerSubmission {
+    /** Required. Whitespace-collapsed, then capped at 120 characters. */
+    name: string;
+    /**
+     * Required. Trimmed, capped at 254 characters, and must contain an `@`
+     * with a dotted host after it. Deliberately a shape check, not RFC 5322.
+     */
+    email: string;
+    /**
+     * May be empty. Duplicates are collapsed rather than rejected; an
+     * unrecognised value rejects the whole submission.
+     */
+    interests: PartnerSubmission_Interest[];
+    /** Optional. Trimmed, capped at 2000 characters. */
+    message: string;
+    /**
+     * Honeypot. Must be empty; a filled one receives an ordinary receipt and
+     * is never delivered.
+     */
+    website: string;
+}
+/**
+ * The set of checkboxes is a contract; display wording lives in the SPA
+ * (see README.md). Unspecified is the proto3 zero value, not an offered
+ * choice — filter it out when building a form.
+ */
+export declare enum PartnerSubmission_Interest {
+    Unspecified = "Unspecified",
+    PartnerOrPilot = "PartnerOrPilot",
+    FundTheWork = "FundTheWork",
+    ContributeExpertise = "ContributeExpertise",
+    BringToMyField = "BringToMyField",
+    RequestEarlyAccess = "RequestEarlyAccess"
+}
+/**
+ * The 200 answer. `submission_id` correlates with the service's logs; it
+ * isn't a fetchable handle.
+ */
+export interface PartnerReceipt {
+    /**
+     * Always true; the one place this surface's shape still differs from
+     * metacensus.v1 (bare resources) — required because
+     * contract.UnmarshalOptions rejects unknown fields.
+     */
+    ok: boolean;
+    submissionId: string;
+}
+//# sourceMappingURL=partner.d.ts.map

package/dist/src/metacensus/public/v1/partner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner.d.ts","sourceRoot":"","sources":["../../../../../src/metacensus/public/v1/partner.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,yBAAyB,CAAC;AAEtD,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,EAAE,0BAA0B,EAAE,CAAC;IACxC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,oBAAY,0BAA0B;IACpC,WAAW,gBAAgB;IAC3B,cAAc,mBAAmB;IACjC,WAAW,gBAAgB;IAC3B,mBAAmB,wBAAwB;IAC3C,cAAc,mBAAmB;IACjC,kBAAkB,uBAAuB;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/src/metacensus/public/v1/partner.js

@@ -0,0 +1,22 @@
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.7.7
+//   protoc               unknown
+// source: metacensus/public/v1/partner.proto
+/* eslint-disable */
+export const protobufPackage = "metacensus.public.v1";
+/**
+ * The set of checkboxes is a contract; display wording lives in the SPA
+ * (see README.md). Unspecified is the proto3 zero value, not an offered
+ * choice — filter it out when building a form.
+ */
+export var PartnerSubmission_Interest;
+(function (PartnerSubmission_Interest) {
+    PartnerSubmission_Interest["Unspecified"] = "Unspecified";
+    PartnerSubmission_Interest["PartnerOrPilot"] = "PartnerOrPilot";
+    PartnerSubmission_Interest["FundTheWork"] = "FundTheWork";
+    PartnerSubmission_Interest["ContributeExpertise"] = "ContributeExpertise";
+    PartnerSubmission_Interest["BringToMyField"] = "BringToMyField";
+    PartnerSubmission_Interest["RequestEarlyAccess"] = "RequestEarlyAccess";
+})(PartnerSubmission_Interest || (PartnerSubmission_Interest = {}));
+//# sourceMappingURL=partner.js.map

package/dist/src/metacensus/public/v1/partner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner.js","sourceRoot":"","sources":["../../../../../src/metacensus/public/v1/partner.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,YAAY;AACZ,gCAAgC;AAChC,iCAAiC;AACjC,6CAA6C;AAE7C,oBAAoB;AAEpB,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AA+BtD;;;;GAIG;AACH,MAAM,CAAN,IAAY,0BAOX;AAPD,WAAY,0BAA0B;IACpC,yDAA2B,CAAA;IAC3B,+DAAiC,CAAA;IACjC,yDAA2B,CAAA;IAC3B,yEAA2C,CAAA;IAC3C,+DAAiC,CAAA;IACjC,uEAAyC,CAAA;AAC3C,CAAC,EAPW,0BAA0B,KAA1B,0BAA0B,QAOrC"}

package/dist/src/metacensus/v1/auth.d.ts

@@ -1,14 +1,28 @@
+import type { UserContent, UserSignature } from "./common.js";
 export declare const protobufPackage = "metacensus.v1";
 /** Sign-up, login and logout. */
 export interface LoginRequest {
     email: string;
     password: string;
 }
+/**
+ * Creates an account and enrolls the signing key every later write is
+ * signed with: trust on first use — nobody vouches for the key, the service
+ * binds whatever it's handed, and the signature proves possession of the
+ * matching private key at enrollment.
+ */
 export interface SignUpRequest {
-    name: string;
-    email: string;
-    country: string;
+    content?: UserContent | undefined;
+    /**
+     * Deliberately outside `content`: a password must never be inside a
+     * signed, stored document.
+     */
     password: string;
+    /**
+     * Over `content`, made with the key being enrolled. `signer_id` is empty
+     * (no id exists yet) and `public_key` carries the key inline.
+     */
+    userSignature?: UserSignature | undefined;
 }
 export interface Session {
     /** Bearer token, sent back as `Authorization: Bearer <token>`. */