@metacensus/api 0.0.0 → 0.2.0

package/dist/src/signing.d.ts

@@ -0,0 +1,37 @@
+import type { UserSignature } from "./metacensus/v1/common.js";
+export declare const SPEC = "metacensus.sig/1";
+/**
+ * `value` as RFC 8785 canonical JSON of a ts-proto message — shaped to
+ * match what protojson emits on the Go side (see buf.gen.yaml, wire.test.mjs).
+ */
+export declare function canonicalize(value: unknown): string;
+/**
+ * The exact string the digest is taken over — exported so a mismatch between
+ * implementations shows up as two strings, not two hashes.
+ */
+export declare function signingInput(content: unknown, signature: UserSignature): string;
+/** SHA-384 over `signingInput`. */
+export declare function digest(content: unknown, signature: UserSignature): Promise<ArrayBuffer>;
+/**
+ * Signs `content`, returning the `value` for the signature. Fills in
+ * nothing else — the other fields are the signer's own claims and are
+ * already inside the digest.
+ */
+export declare function sign(privateKey: CryptoKey, content: unknown, signature: UserSignature): Promise<string>;
+/** Checks `signature` against `content` under `publicKey`. */
+export declare function verify(publicKey: CryptoKey, content: unknown, signature: UserSignature): Promise<boolean>;
+/** Generates a signing keypair. The private key is non-extractable. */
+export declare function generateKeyPair(): Promise<CryptoKeyPair>;
+/**
+ * `publicKey` as the contract carries it: base64url of SPKI DER, not PEM —
+ * a PEM body's line breaks would make `keyId`'s hash ambiguous.
+ */
+export declare function encodePublicKey(publicKey: CryptoKey): Promise<string>;
+/** Reads what `encodePublicKey` wrote. */
+export declare function decodePublicKey(encoded: string): Promise<CryptoKey>;
+/**
+ * base64url of SHA-256 over the SPKI DER — `UserSignature.keyId`. Derived
+ * rather than minted, so a client can compute it before it has an account.
+ */
+export declare function keyId(publicKey: CryptoKey): Promise<string>;
+//# sourceMappingURL=signing.d.ts.map

package/dist/src/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../../src/signing.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAI/D,eAAO,MAAM,IAAI,qBAAqB,CAAC;AAcvC;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAyBnD;AAoDD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,GAAG,MAAM,CAO/E;AAED,mCAAmC;AACnC,wBAAsB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAG7F;AAED;;;;GAIG;AACH,wBAAsB,IAAI,CACxB,UAAU,EAAE,SAAS,EACrB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,aAAa,GACvB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,8DAA8D;AAC9D,wBAAsB,MAAM,CAC1B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,aAAa,GACvB,OAAO,CAAC,OAAO,CAAC,CAIlB;AAqBD,uEAAuE;AACvE,wBAAsB,eAAe,IAAI,OAAO,CAAC,aAAa,CAAC,CAE9D;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3E;AAED,0CAA0C;AAC1C,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEzE;AAED;;;GAGG;AACH,wBAAsB,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAGjE"}

package/dist/src/signing.js

@@ -0,0 +1,193 @@
+// The TypeScript half of the MetaCensus signing chain; go/signing is the
+// other half, and ts/test/wire.test.mjs checks the two agree — neither may
+// be edited alone.
+//
+//     digest = SHA-384( JCS( {"content": C, "signature": S} ) )
+//
+// C is the content message, S is the UserSignature with `value` cleared.
+// Canonical JSON (RFC 8785) rather than the wire bytes: protojson isn't
+// byte-stable, so only canonicalizing keeps a record verifiable after it's
+// relayed, re-encoded and stored.
+//
+// No runtime dependency: the canonicalizer below is hand-written, and
+// signing uses the WebCrypto `crypto` global rather than an import.
+// Identifies this scheme (JCS + SHA-384 + base64url r||s); a verifier that
+// doesn't recognize it should refuse rather than guess.
+export const SPEC = "metacensus.sig/1";
+// P-384/SHA-384 — `UserSignature.Alg`'s `Es384`. The enum is closed; adding
+// another algorithm is a contract release.
+const ALG = {
+    name: "ECDSA",
+    namedCurve: "P-384",
+    hash: "SHA-384",
+};
+// ---------------------------------------------------------------------------
+// JCS (RFC 8785)
+// ---------------------------------------------------------------------------
+/**
+ * `value` as RFC 8785 canonical JSON of a ts-proto message — shaped to
+ * match what protojson emits on the Go side (see buf.gen.yaml, wire.test.mjs).
+ */
+export function canonicalize(value) {
+    if (value === null)
+        return "null";
+    switch (typeof value) {
+        case "boolean":
+            return value ? "true" : "false";
+        case "number":
+            return numberToJCS(value);
+        case "string":
+            return stringToJCS(value);
+        case "object":
+            break;
+        default:
+            throw new TypeError(`signing: ${typeof value} cannot appear in a canonical document`);
+    }
+    if (Array.isArray(value)) {
+        return "[" + value.map(canonicalize).join(",") + "]";
+    }
+    const entries = Object.entries(value).filter(
+    // Absent message fields are `undefined` in ts-proto; protojson omits them too.
+    ([, v]) => v !== undefined);
+    // RFC 8785 sorts by UTF-16 code unit — exactly what `<` does on JS strings
+    // (Go's sortUTF16 matches this).
+    entries.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return "{" + entries.map(([k, v]) => stringToJCS(k) + ":" + canonicalize(v)).join(",") + "}";
+}
+/**
+ * Only int32/uint32 survive JCS identically in both languages (RFC 8785's
+ * ECMAScript number formatting doesn't reproduce cleanly in Go); the schema
+ * enforces this via `TestNoWideNumbersCrossJCS` — this is its runtime half.
+ */
+function numberToJCS(n) {
+    if (!Number.isInteger(n) || !Number.isSafeInteger(n)) {
+        throw new RangeError(`signing: ${n} is not a safe integer; the contract carries no float, double ` +
+            `or 64-bit integer field (TestNoWideNumbersCrossJCS), because ECMAScript ` +
+            `number formatting is the one part of RFC 8785 that does not reimplement cleanly`);
+    }
+    return String(n);
+}
+/**
+ * RFC 8785 §3.2.2.2 escaping, spelled out rather than delegated to
+ * `JSON.stringify` — which would match, but Go's `encoding/json` also
+ * escapes `<`, `>` and `&`, and two implementations read alike this way.
+ */
+const SHORT = {
+    "\b": "\\b",
+    "\t": "\\t",
+    "\n": "\\n",
+    "\f": "\\f",
+    "\r": "\\r",
+    '"': '\\"',
+    "\\": "\\\\",
+};
+function stringToJCS(s) {
+    let out = '"';
+    for (const ch of s) {
+        const short = SHORT[ch];
+        if (short !== undefined) {
+            out += short;
+        }
+        else if (ch < " ") {
+            out += "\\u" + ch.charCodeAt(0).toString(16).padStart(4, "0");
+        }
+        else {
+            out += ch;
+        }
+    }
+    return out + '"';
+}
+// ---------------------------------------------------------------------------
+// The chain
+// ---------------------------------------------------------------------------
+/**
+ * The exact string the digest is taken over — exported so a mismatch between
+ * implementations shows up as two strings, not two hashes.
+ */
+export function signingInput(content, signature) {
+    if (!signature.signingTime) {
+        // Message-typed, so canonicalization can't tell "absent" from a default;
+        // it must be set explicitly.
+        throw new Error("signing: signingTime is unset; every signature carries the time its signer claims");
+    }
+    return canonicalize({ content, signature: { ...signature, value: "" } });
+}
+/** SHA-384 over `signingInput`. */
+export async function digest(content, signature) {
+    const bytes = new TextEncoder().encode(signingInput(content, signature));
+    return crypto.subtle.digest("SHA-384", bytes);
+}
+/**
+ * Signs `content`, returning the `value` for the signature. Fills in
+ * nothing else — the other fields are the signer's own claims and are
+ * already inside the digest.
+ */
+export async function sign(privateKey, content, signature) {
+    checkAttributes(signature);
+    const raw = await crypto.subtle.sign(ALG, privateKey, new TextEncoder().encode(signingInput(content, signature)));
+    // WebCrypto returns fixed-width r||s directly, not a DER SEQUENCE — no
+    // re-encoding needed.
+    return toBase64Url(new Uint8Array(raw));
+}
+/** Checks `signature` against `content` under `publicKey`. */
+export async function verify(publicKey, content, signature) {
+    checkAttributes(signature);
+    const value = fromBase64Url(signature.value);
+    return crypto.subtle.verify(ALG, publicKey, value, new TextEncoder().encode(signingInput(content, signature)));
+}
+// Checked by both sign and verify, so a signature this module would refuse
+// is one it will never produce. `contentType` is the caller's responsibility
+// to set correctly — nothing here knows a plain object's proto name.
+function checkAttributes(signature) {
+    if (signature.spec !== SPEC) {
+        throw new Error(`signing: spec is ${JSON.stringify(signature.spec)}, and this module implements ${JSON.stringify(SPEC)}`);
+    }
+    if (signature.alg !== "Es384") {
+        throw new Error(`signing: alg is ${JSON.stringify(signature.alg)}, and this module implements "Es384"`);
+    }
+    if (!signature.contentType) {
+        throw new Error("signing: contentType is empty; it names the message the signature covers");
+    }
+}
+// ---------------------------------------------------------------------------
+// Keys
+// ---------------------------------------------------------------------------
+/** Generates a signing keypair. The private key is non-extractable. */
+export async function generateKeyPair() {
+    return crypto.subtle.generateKey(ALG, false, ["sign", "verify"]);
+}
+/**
+ * `publicKey` as the contract carries it: base64url of SPKI DER, not PEM —
+ * a PEM body's line breaks would make `keyId`'s hash ambiguous.
+ */
+export async function encodePublicKey(publicKey) {
+    return toBase64Url(new Uint8Array(await crypto.subtle.exportKey("spki", publicKey)));
+}
+/** Reads what `encodePublicKey` wrote. */
+export async function decodePublicKey(encoded) {
+    return crypto.subtle.importKey("spki", fromBase64Url(encoded), ALG, true, ["verify"]);
+}
+/**
+ * base64url of SHA-256 over the SPKI DER — `UserSignature.keyId`. Derived
+ * rather than minted, so a client can compute it before it has an account.
+ */
+export async function keyId(publicKey) {
+    const spki = await crypto.subtle.exportKey("spki", publicKey);
+    return toBase64Url(new Uint8Array(await crypto.subtle.digest("SHA-256", spki)));
+}
+function toBase64Url(bytes) {
+    let binary = "";
+    for (const b of bytes)
+        binary += String.fromCharCode(b);
+    return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+// Uint8Array<ArrayBuffer>, not the default <ArrayBufferLike>: WebCrypto's
+// BufferSource excludes SharedArrayBuffer.
+function fromBase64Url(s) {
+    const binary = atob(s.replace(/-/g, "+").replace(/_/g, "/"));
+    const out = new Uint8Array(new ArrayBuffer(binary.length));
+    for (let i = 0; i < binary.length; i++)
+        out[i] = binary.charCodeAt(i);
+    return out;
+}
+//# sourceMappingURL=signing.js.map

package/dist/src/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../src/signing.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,mBAAmB;AACnB,EAAE;AACF,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,2EAA2E;AAC3E,kCAAkC;AAClC,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AAIpE,2EAA2E;AAC3E,wDAAwD;AACxD,MAAM,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAC;AAEvC,4EAA4E;AAC5E,2CAA2C;AAC3C,MAAM,GAAG,GAAqD;IAC5D,IAAI,EAAE,OAAO;IACb,UAAU,EAAE,OAAO;IACnB,IAAI,EAAE,SAAS;CAChB,CAAC;AAEF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,QAAQ;YACX,MAAM;QACR;YACE,MAAM,IAAI,SAAS,CAAC,YAAY,OAAO,KAAK,wCAAwC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM;IACrE,+EAA+E;IAC/E,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAC3B,CAAC;IACF,2EAA2E;IAC3E,iCAAiC;IACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAClB,YAAY,CAAC,gEAAgE;YAC3E,0EAA0E;YAC1E,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,KAAK,GAA2B;IACpC,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;YACpB,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAgB,EAAE,SAAwB;IACrE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAC3B,yEAAyE;QACzE,6BAA6B;QAC7B,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,mCAAmC;AACnC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAgB,EAAE,SAAwB;IACrE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,UAAqB,EACrB,OAAgB,EAChB,SAAwB;IAExB,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAClH,uEAAuE;IACvE,sBAAsB;IACtB,OAAO,WAAW,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,SAAoB,EACpB,OAAgB,EAChB,SAAwB;IAExB,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,qEAAqE;AACrE,SAAS,eAAe,CAAC,SAAwB;IAC/C,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAA2B,CAAC;AAC7F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAoB;IACxD,OAAO,WAAW,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,SAAoB;IAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9D,OAAO,WAAW,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,0EAA0E;AAC1E,2CAA2C;AAC3C,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "@metacensus/api",
-  "version": "0.0.0",
-  "description": "TypeScript interfaces generated from the MetaCensus API contract (/metacensus/api/v1). Types only, no runtime dependencies.",
+  "version": "0.2.0",
+  "description": "TypeScript for the MetaCensus API contract (/metacensus/api/v1 and /metacensus/public): generated types, a route manifest, a typed transport-agnostic client per surface, and the signing chain. No runtime dependencies.",
   "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
   "sideEffects": false,
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -11,6 +14,14 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./public": {
+      "types": "./dist/public.d.ts",
+      "default": "./dist/public.js"
+    },
+    "./signing": {
+      "types": "./dist/signing.d.ts",
+      "default": "./dist/signing.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -31,12 +42,13 @@
   },
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.build.json",
-    "check": "tsc --noEmit && node scripts/check-no-runtime.mjs",
+    "check": "tsc --noEmit && node scripts/check-no-runtime.mjs && node scripts/check-entry-points.mjs",
+    "test": "npm run build && node --test \"test/**/*.test.mjs\"",
     "prepack": "npm run build"
   },
   "dependencies": {},
   "devDependencies": {
     "ts-proto": "2.7.7",
-    "typescript": "5.5.4"
+    "typescript": "7.0.2"
   }
 }

package/dist/src/metacensus/v1/extraction.d.ts

@@ -1,48 +0,0 @@
-export declare const protobufPackage = "metacensus.v1";
-/** Data extraction: the values pulled from one paper against one protocol. */
-/**
- * DataExtraction is the values extracted from one paper against one protocol,
- * identified by the three ids together. Upserted and read back as-is.
- */
-export interface DataExtraction {
-    topicId: string;
-    paperId: string;
-    protocolId: string;
-    data: DatumExtraction[];
-}
-/** DatumExtraction is one answered protocol element. */
-export interface DatumExtraction {
-    protocolElementId: string;
-    /**
-     * The extracted value. A string for every element type the contract
-     * describes; multi-select elements have no representation yet.
-     */
-    datum: string;
-    /**
-     * Where in the PDF the value was read from. Empty when the value was typed
-     * rather than selected.
-     */
-    sourceLocation: SourceLocationPage[];
-}
-/** SourceLocationPage is the highlighted rectangles on one page of a PDF. */
-export interface SourceLocationPage {
-    page: number;
-    rects: SourceRect[];
-}
-/** SourceRect is one highlight rectangle, in the PDF viewer's coordinate space. */
-export interface SourceRect {
-    x: number;
-    y: number;
-    w: number;
-    h: number;
-}
-/**
- * DataExtractionGetRequest requires all three fields; together they identify
- * one DataExtraction.
- */
-export interface DataExtractionGetRequest {
-    topicId: string;
-    paperId: string;
-    protocolId: string;
-}
-//# sourceMappingURL=extraction.d.ts.map

package/dist/src/metacensus/v1/extraction.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"extraction.d.ts","sourceRoot":"","sources":["../../../../src/metacensus/v1/extraction.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,eAAe,EAAE,CAAC;CACzB;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,cAAc,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAED,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/src/metacensus/v1/extraction.js

@@ -1,8 +0,0 @@
-// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
-// versions:
-//   protoc-gen-ts_proto  v2.7.7
-//   protoc               unknown
-// source: metacensus/v1/extraction.proto
-/* eslint-disable */
-export const protobufPackage = "metacensus.v1";
-//# sourceMappingURL=extraction.js.map

package/dist/src/metacensus/v1/extraction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extraction.js","sourceRoot":"","sources":["../../../../src/metacensus/v1/extraction.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,YAAY;AACZ,gCAAgC;AAChC,iCAAiC;AACjC,yCAAyC;AAEzC,oBAAoB;AAEpB,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC"}

package/dist/src/metacensus/v1/paper.d.ts

@@ -1,57 +0,0 @@
-export declare const protobufPackage = "metacensus.v1";
-/** Papers: the literature under review in a topic. */
-export interface Paper {
-    id: string;
-    topicId: string;
-    title: string;
-    /** Author names, in reading order. */
-    authors: string[];
-    abstract: string;
-    /**
-     * Bibliographic identifiers. Either may be empty: not every paper has both,
-     * and one uploaded as a PDF may have neither.
-     */
-    doi: string;
-    pmid: string;
-    created?: string | undefined;
-}
-/**
- * PaperListRequest requires at least one field; setting `paper_id` narrows the
- * result to a single paper.
- */
-export interface PaperListRequest {
-    topicId: string;
-    paperId: string;
-}
-export interface PaperList {
-    items: Paper[];
-}
-/**
- * PaperCreateRequest carries no PDF; uploading one is not part of this
- * contract.
- */
-export interface PaperCreateRequest {
-    topicId: string;
-    title: string;
-    authors: string[];
-    abstract: string;
-    doi: string;
-    pmid: string;
-}
-/** PaperLookupRequest names the PubMed record the create form is prefilled from. */
-export interface PaperLookupRequest {
-    pmid: string;
-}
-/** PaperLookupResponse is whatever PubMed supplied, so any field may be empty. */
-export interface PaperLookupResponse {
-    pmid: string;
-    title: string;
-    authors: string[];
-    /**
-     * Labelled sections arrive joined by blank lines and prefixed with their
-     * label — `"METHODS: …"` — rather than structured.
-     */
-    abstract: string;
-    doi: string;
-}
-//# sourceMappingURL=paper.d.ts.map

package/dist/src/metacensus/v1/paper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"paper.d.ts","sourceRoot":"","sources":["../../../../src/metacensus/v1/paper.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,sDAAsD;AAEtD,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,KAAK,EAAE,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kFAAkF;AAClF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/src/metacensus/v1/paper.js

@@ -1,8 +0,0 @@
-// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
-// versions:
-//   protoc-gen-ts_proto  v2.7.7
-//   protoc               unknown
-// source: metacensus/v1/paper.proto
-/* eslint-disable */
-export const protobufPackage = "metacensus.v1";
-//# sourceMappingURL=paper.js.map

package/dist/src/metacensus/v1/paper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paper.js","sourceRoot":"","sources":["../../../../src/metacensus/v1/paper.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,YAAY;AACZ,gCAAgC;AAChC,iCAAiC;AACjC,oCAAoC;AAEpC,oBAAoB;AAEpB,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC"}

package/dist/src/metacensus/v1/protocol.d.ts

@@ -1,42 +0,0 @@
-export declare const protobufPackage = "metacensus.v1";
-/** Protocols: the extraction form a topic's reviewers fill in per paper. */
-/** Protocol is an ordered set of sections, each an ordered set of elements. */
-export interface Protocol {
-    id: string;
-    title: string;
-    protocolSections: ProtocolSection[];
-}
-/** ProtocolSection is a titled group of elements, ordered by `sort_order`. */
-export interface ProtocolSection {
-    id: string;
-    title: string;
-    sortOrder: number;
-    protocolElements: ProtocolElement[];
-}
-export interface ProtocolElement {
-    id: string;
-    name: string;
-    /**
-     * An HTML input type, used verbatim as `<input type=…>`: `text`, `number`,
-     * `date`, `textarea`, `radio` or `checkbox`.
-     */
-    type: string;
-    label: string;
-    placeholder: string;
-    required: boolean;
-    /** Only meaningful for `radio` and `checkbox`. */
-    options: ProtocolElementOption[];
-    sortOrder: number;
-}
-/** ProtocolElementOption is one choice of a radio or checkbox element. */
-export interface ProtocolElementOption {
-    name: string;
-    value: string;
-}
-/** ProtocolCreateRequest ignores the ids on its sections and elements. */
-export interface ProtocolCreateRequest {
-    topicId: string;
-    title: string;
-    sections: ProtocolSection[];
-}
-//# sourceMappingURL=protocol.d.ts.map

package/dist/src/metacensus/v1/protocol.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../../src/metacensus/v1/protocol.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,4EAA4E;AAE5E,+EAA+E;AAC/E,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,eAAe,EAAE,CAAC;CACrC;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,eAAe,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,kDAAkD;IAClD,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B"}

package/dist/src/metacensus/v1/protocol.js

@@ -1,8 +0,0 @@
-// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
-// versions:
-//   protoc-gen-ts_proto  v2.7.7
-//   protoc               unknown
-// source: metacensus/v1/protocol.proto
-/* eslint-disable */
-export const protobufPackage = "metacensus.v1";
-//# sourceMappingURL=protocol.js.map

package/dist/src/metacensus/v1/protocol.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../src/metacensus/v1/protocol.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,YAAY;AACZ,gCAAgC;AAChC,iCAAiC;AACjC,uCAAuC;AAEvC,oBAAoB;AAEpB,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC"}