@metacensus/api 0.2.0 → 0.4.0

package/dist/src/client.js

@@ -1,146 +1,213 @@
 // Code generated by routegen. DO NOT EDIT.
-// The same literal as route-manifest.ts's apiPrefix, re-emitted rather than
-// imported, since a value import under src/ is forbidden (check-no-runtime.mjs).
-const apiPrefixDefault = "/metacensus/api/v1";
-// The same literal as route-manifest.ts's publicPrefix, re-emitted rather than
-// imported, since a value import under src/ is forbidden (check-no-runtime.mjs).
-const publicPrefixDefault = "/metacensus/public";
-function param(v) {
-    return encodeURIComponent(String(v));
-}
-// ApiError is any non-2xx the transport did not act on itself. body is the
-// response text, unparsed: a 404 or 405 comes from the router, not a handler, so
-// parse it defensively rather than assuming JSON.
+import { apiPrefix, publicPrefix } from "./route-manifest.js";
+// ApiError is any non-2xx response. body is the response text, unparsed: a 404
+// or 405 comes from the router, not a handler, so parse it defensively.
 export class ApiError extends Error {
     method;
-    path;
+    url;
     status;
     body;
-    constructor(method, path, status, body) {
-        super(`${method} ${path}: HTTP ${status}`);
+    constructor(method, url, status, body) {
+        super(`${method} ${url}: HTTP ${status}`);
         this.method = method;
-        this.path = path;
+        this.url = url;
         this.status = status;
         this.body = body;
         this.name = "ApiError";
     }
 }
-// Client calls the authenticated API: every route under /metacensus/api/v1.
+function param(v) {
+    return encodeURIComponent(String(v));
+}
+async function request(f, url, method, body, token, credentials) {
+    const headers = {};
+    if (body !== undefined)
+        headers["Content-Type"] = "application/json";
+    if (token !== undefined)
+        headers["Authorization"] = `Bearer ${token}`;
+    const res = await f(url, { method, headers, body, credentials });
+    if (res.status < 200 || res.status >= 300) {
+        throw new ApiError(method, url, res.status, await res.text());
+    }
+    const text = await res.text();
+    return (text === "" ? {} : JSON.parse(text));
+}
+function flattenProp(r) {
+    return { id: r.id, recorded: r.recorded, ...r.content };
+}
+function flattenTopic(r) {
+    return { id: r.id, recorded: r.recorded, ...r.content };
+}
+function flattenUser(r) {
+    return { id: r.id, recorded: r.recorded, ...r.content };
+}
+function flattenVote(r) {
+    return { recorded: r.recorded, ...r.content };
+}
+// Client calls the authenticated API.
 export class Client {
-    transport;
-    prefix;
-    // Defaults to this surface's own apiPrefix, but can be overridden so a
-    // test harness can mount the same routes elsewhere.
-    constructor(transport, prefix = apiPrefixDefault) {
-        this.transport = transport;
-        this.prefix = prefix;
-    }
-    async call(method, path, body) {
-        const full = this.prefix + path;
-        const res = await this.transport({ method, path: full, body });
-        if (res.status < 200 || res.status >= 300) {
-            throw new ApiError(method, full, res.status, res.body);
+    #baseUrl;
+    #fetch;
+    #prefix;
+    #signer;
+    #credentials;
+    #token;
+    constructor(options) {
+        this.#baseUrl = options.baseUrl;
+        this.#fetch = options.fetch ?? globalThis.fetch.bind(globalThis);
+        this.#prefix = options.prefix ?? apiPrefix;
+        this.#signer = options.signer;
+        this.#credentials = options.credentials;
+        this.#token = options.token;
+    }
+    // The session token from the last login/signUp, for persisting a session.
+    get token() {
+        return this.#token;
+    }
+    #request(method, path, body) {
+        return request(this.#fetch, this.#baseUrl + this.#prefix + path, method, body, this.#token, this.#credentials);
+    }
+    #sign(content, contentType) {
+        if (this.#signer === undefined) {
+            throw new Error("Client: a write needs a signer; construct new Client({ ..., signer })");
         }
-        // A cast: no runtime schema to validate against.
-        return (res.body === "" ? {} : JSON.parse(res.body));
+        return this.#signer(content, contentType);
     }
     // AuthRoutes.Login: POST /login
-    login(req) {
-        const body = req;
-        return this.call("POST", "/login", JSON.stringify(body));
+    async login(req) {
+        const session = await this.#request("POST", "/login", JSON.stringify(req));
+        this.#token = session.token;
+        return session;
     }
     // AuthRoutes.SignUp: POST /signup
-    signUp(req) {
-        const body = req;
-        return this.call("POST", "/signup", JSON.stringify(body));
+    async signUp(req) {
+        const { interpretation, signature, publicKey } = await this.#sign(req.content, "metacensus.v1.User");
+        const session = await this.#request("POST", "/signup", JSON.stringify({ ...req, interpretation, publicKey, userSignature: signature }));
+        this.#token = session.token;
+        return session;
+    }
+    // AuthRoutes.Refresh: POST /refresh
+    async refresh(req) {
+        const session = await this.#request("POST", "/refresh", JSON.stringify(req));
+        this.#token = session.token;
+        return session;
     }
     // AuthRoutes.Logout: POST /logout
-    logout(req) {
-        return this.call("POST", "/logout", undefined);
+    async logout(req) {
+        const res = await this.#request("POST", "/logout", JSON.stringify(req));
+        this.#token = undefined;
+        return res;
     }
     // HealthRoutes.Healthcheck: GET /healthcheck
     healthcheck(req) {
-        return this.call("GET", "/healthcheck", undefined);
+        return this.#request("GET", "/healthcheck", undefined);
     }
     // PropRoutes.ListProps: GET /topic/{topicId}/prop
     listProps(req) {
-        return this.call("GET", `/topic/${param(req.topicId)}/prop`, undefined);
+        return this.#request("GET", `/topic/${param(req.topicId)}/prop`, undefined).then((r) => r.items.map(flattenProp));
+    }
+    // PropRoutes.ListProps: GET /topic/{topicId}/prop
+    listPropsSigned(req) {
+        return this.#request("GET", `/topic/${param(req.topicId)}/prop`, undefined).then((r) => r.items);
     }
     // PropRoutes.GetProp: GET /topic/{topicId}/prop/{propId}
     getProp(req) {
-        return this.call("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}`, undefined);
+        return this.#request("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}`, undefined).then(flattenProp);
+    }
+    // PropRoutes.GetProp: GET /topic/{topicId}/prop/{propId}
+    getPropSigned(req) {
+        return this.#request("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}`, undefined);
     }
     // PropRoutes.CreateProp: POST /topic/{topicId}/prop
-    createProp(req) {
-        const { topicId, ...body } = req;
-        return this.call("POST", `/topic/${param(topicId)}/prop`, JSON.stringify(body));
+    async createProp(req) {
+        const { topicId, ...rest } = req;
+        const { interpretation, signature } = await this.#sign(rest.content, "metacensus.v1.Prop");
+        return flattenProp(await this.#request("POST", `/topic/${param(topicId)}/prop`, JSON.stringify({ ...rest, interpretation, userSignature: signature })));
     }
     // PropRoutes.ListVotes: GET /topic/{topicId}/prop/{propId}/vote
     listVotes(req) {
-        return this.call("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}/vote`, undefined);
+        return this.#request("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}/vote`, undefined).then((r) => r.items.map(flattenVote));
+    }
+    // PropRoutes.ListVotes: GET /topic/{topicId}/prop/{propId}/vote
+    listVotesSigned(req) {
+        return this.#request("GET", `/topic/${param(req.topicId)}/prop/${param(req.propId)}/vote`, undefined).then((r) => r.items);
     }
     // PropRoutes.SetVote: POST /topic/{topicId}/prop/{propId}/vote
-    setVote(req) {
-        const { topicId, propId, ...body } = req;
-        return this.call("POST", `/topic/${param(topicId)}/prop/${param(propId)}/vote`, JSON.stringify(body));
+    async setVote(req) {
+        const { topicId, propId, ...rest } = req;
+        const { interpretation, signature } = await this.#sign(rest.content, "metacensus.v1.Vote");
+        return flattenVote(await this.#request("POST", `/topic/${param(topicId)}/prop/${param(propId)}/vote`, JSON.stringify({ ...rest, interpretation, userSignature: signature })));
     }
     // TopicRoutes.ListTopics: GET /topic
     listTopics(req) {
-        return this.call("GET", "/topic", undefined);
+        return this.#request("GET", "/topic", undefined).then((r) => r.items.map(flattenTopic));
+    }
+    // TopicRoutes.ListTopics: GET /topic
+    listTopicsSigned(req) {
+        return this.#request("GET", "/topic", undefined).then((r) => r.items);
     }
     // TopicRoutes.GetTopic: GET /topic/{topicId}
     getTopic(req) {
-        return this.call("GET", `/topic/${param(req.topicId)}`, undefined);
+        return this.#request("GET", `/topic/${param(req.topicId)}`, undefined).then(flattenTopic);
+    }
+    // TopicRoutes.GetTopic: GET /topic/{topicId}
+    getTopicSigned(req) {
+        return this.#request("GET", `/topic/${param(req.topicId)}`, undefined);
     }
     // TopicRoutes.CreateTopic: POST /topic
-    createTopic(req) {
-        const body = req;
-        return this.call("POST", "/topic", JSON.stringify(body));
+    async createTopic(req) {
+        const { interpretation, signature } = await this.#sign(req.content, "metacensus.v1.Topic");
+        return flattenTopic(await this.#request("POST", "/topic", JSON.stringify({ ...req, interpretation, userSignature: signature })));
     }
     // TopicRoutes.ListMembers: GET /topic/{topicId}/member
     listMembers(req) {
-        return this.call("GET", `/topic/${param(req.topicId)}/member`, undefined);
+        return this.#request("GET", `/topic/${param(req.topicId)}/member`, undefined).then((r) => r.items);
     }
     // TopicRoutes.GetMember: GET /topic/{topicId}/member/{userId}
     getMember(req) {
-        return this.call("GET", `/topic/${param(req.topicId)}/member/${param(req.userId)}`, undefined);
+        return this.#request("GET", `/topic/${param(req.topicId)}/member/${param(req.userId)}`, undefined);
     }
     // UserRoutes.ListUsers: GET /user
     listUsers(req) {
-        return this.call("GET", "/user", undefined);
+        return this.#request("GET", "/user", undefined).then((r) => r.items.map(flattenUser));
+    }
+    // UserRoutes.ListUsers: GET /user
+    listUsersSigned(req) {
+        return this.#request("GET", "/user", undefined).then((r) => r.items);
     }
     // UserRoutes.GetUser: GET /user/{userId}
     getUser(req) {
-        return this.call("GET", `/user/${param(req.userId)}`, undefined);
+        return this.#request("GET", `/user/${param(req.userId)}`, undefined).then(flattenUser);
+    }
+    // UserRoutes.GetUser: GET /user/{userId}
+    getUserSigned(req) {
+        return this.#request("GET", `/user/${param(req.userId)}`, undefined);
     }
     // UserRoutes.GetSelf: GET /self
     getSelf(req) {
-        return this.call("GET", "/self", undefined);
+        return this.#request("GET", "/self", undefined).then(flattenUser);
+    }
+    // UserRoutes.GetSelf: GET /self
+    getSelfSigned(req) {
+        return this.#request("GET", "/self", undefined);
     }
 }
-// PublicClient calls the public, unauthenticated surface: every route under /metacensus/public.
+// PublicClient calls the public, unauthenticated surface.
 export class PublicClient {
-    transport;
-    prefix;
-    // Defaults to this surface's own publicPrefix, but can be overridden so a
-    // test harness can mount the same routes elsewhere.
-    constructor(transport, prefix = publicPrefixDefault) {
-        this.transport = transport;
-        this.prefix = prefix;
-    }
-    async call(method, path, body) {
-        const full = this.prefix + path;
-        const res = await this.transport({ method, path: full, body });
-        if (res.status < 200 || res.status >= 300) {
-            throw new ApiError(method, full, res.status, res.body);
-        }
-        // A cast: no runtime schema to validate against.
-        return (res.body === "" ? {} : JSON.parse(res.body));
+    #baseUrl;
+    #fetch;
+    #prefix;
+    constructor(options) {
+        this.#baseUrl = options.baseUrl;
+        this.#fetch = options.fetch ?? globalThis.fetch.bind(globalThis);
+        this.#prefix = options.prefix ?? publicPrefix;
+    }
+    #request(method, path, body) {
+        return request(this.#fetch, this.#baseUrl + this.#prefix + path, method, body, undefined);
     }
     // PartnerRoutes.SubmitPartnerInterest: POST /partner
     submitPartnerInterest(req) {
-        const body = req;
-        return this.call("POST", "/partner", JSON.stringify(body));
+        return this.#request("POST", "/partner", JSON.stringify(req));
     }
 }
 //# sourceMappingURL=client.js.map

package/dist/src/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAY3C,4EAA4E;AAC5E,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,+EAA+E;AAC/E,iFAAiF;AACjF,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,SAAS,KAAK,CAAC,CAA4B;IACzC,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAuBD,2EAA2E;AAC3E,iFAAiF;AACjF,kDAAkD;AAClD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB,MAAM;IACN,IAAI;IACJ,MAAM;IACN,IAAI;IAJf,YACW,MAAc,EACd,IAAY,EACZ,MAAc,EACd,IAAY;QAErB,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,UAAU,MAAM,EAAE,CAAC,CAAC;sBALlC,MAAM;oBACN,IAAI;sBACJ,MAAM;oBACN,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,OAAO,MAAM;IAIE,SAAS;IACT,MAAM;IAJzB,uEAAuE;IACvE,oDAAoD;IACpD,YACmB,SAAoB,EACpB,MAAM,GAAW,gBAAgB;yBADjC,SAAS;sBACT,MAAM;IACtB,CAAC;IAEI,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,iDAAiD;QACjD,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAM,CAAC;IAC5D,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,GAAiB;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,GAAkB;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,kCAAkC;IAClC,MAAM,CAAC,GAAkB;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,6CAA6C;IAC7C,WAAW,CAAC,GAAuB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,kDAAkD;IAClD,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAED,yDAAyD;IACzD,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/F,CAAC;IAED,oDAAoD;IACpD,UAAU,CAAC,GAAsB;QAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,gEAAgE;IAChE,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpG,CAAC;IAED,+DAA+D;IAC/D,OAAO,CAAC,GAAmB;QACzB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,qCAAqC;IACrC,UAAU,CAAC,GAAqB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,6CAA6C;IAC7C,QAAQ,CAAC,GAAoB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;IAED,uCAAuC;IACvC,WAAW,CAAC,GAAuB;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,uDAAuD;IACvD,WAAW,CAAC,GAAsB;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC;IAED,8DAA8D;IAC9D,SAAS,CAAC,GAAqB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACjG,CAAC;IAED,kCAAkC;IAClC,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,yCAAyC;IACzC,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IAED,gCAAgC;IAChC,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,gGAAgG;AAChG,MAAM,OAAO,YAAY;IAIJ,SAAS;IACT,MAAM;IAJzB,0EAA0E;IAC1E,oDAAoD;IACpD,YACmB,SAAoB,EACpB,MAAM,GAAW,mBAAmB;yBADpC,SAAS;sBACT,MAAM;IACtB,CAAC;IAEI,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,iDAAiD;QACjD,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAM,CAAC;IAC5D,CAAC;IAED,qDAAqD;IACrD,qBAAqB,CAAC,GAAsB;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAW3C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,+EAA+E;AAC/E,wEAAwE;AACxE,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB,MAAM;IACN,GAAG;IACH,MAAM;IACN,IAAI;IAJf,YACW,MAAc,EACd,GAAW,EACX,MAAc,EACd,IAAY;QAErB,KAAK,CAAC,GAAG,MAAM,IAAI,GAAG,UAAU,MAAM,EAAE,CAAC,CAAC;sBALjC,MAAM;mBACN,GAAG;sBACH,MAAM;oBACN,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAiBD,SAAS,KAAK,CAAC,CAA4B;IACzC,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,CAA0B,EAC1B,GAAW,EACX,MAAc,EACd,IAAwB,EACxB,KAAyB,EACzB,WAAgC;IAEhC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IACrE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACjE,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAM,CAAC;AACpD,CAAC;AAOD,SAAS,WAAW,CAAC,CAAa;IAChC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAI,CAAC,CAAC,OAAgB,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,YAAY,CAAC,CAAc;IAClC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAI,CAAC,CAAC,OAAiB,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,CAAa;IAChC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAI,CAAC,CAAC,OAAgB,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,CAAa;IAChC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAI,CAAC,CAAC,OAAgB,EAAE,CAAC;AAC1D,CAAC;AAaD,sCAAsC;AACtC,MAAM,OAAO,MAAM;IACR,QAAQ,CAAS;IACjB,MAAM,CAA0B;IAChC,OAAO,CAAS;IAChB,OAAO,CAAU;IACjB,YAAY,CAAsB;IAC3C,MAAM,CAAU;IAEhB,YAAY,OAAsB;QAChC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAC9B,CAAC;IAED,0EAA0E;IAC1E,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,QAAQ,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;QACrD,OAAO,OAAO,CAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACpH,CAAC;IAED,KAAK,CAAC,OAAgB,EAAE,WAAmB;QACzC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,KAAK,CAAC,GAAiB;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAU,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,MAAM,CAAC,GAA0E;QACrF,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAU,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACjJ,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,OAAO,CAAC,GAAmB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAU,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,MAAM,CAAC,GAAkB;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAiB,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6CAA6C;IAC7C,WAAW,CAAC,GAAuB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAsB,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAC9E,CAAC;IAED,kDAAkD;IAClD,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAW,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9H,CAAC;IAED,kDAAkD;IAClD,eAAe,CAAC,GAAoB;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAW,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7G,CAAC;IAED,yDAAyD;IACzD,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAa,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjI,CAAC;IAED,yDAAyD;IACzD,aAAa,CAAC,GAAmB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAa,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/G,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,UAAU,CAAC,GAA8E;QAC7F,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACjC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QAC3F,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAa,MAAM,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACtK,CAAC;IAED,gEAAgE;IAChE,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAW,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IACxJ,CAAC;IAED,gEAAgE;IAChE,eAAe,CAAC,GAAoB;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAW,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvI,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,OAAO,CAAC,GAA2E;QACvF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACzC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QAC3F,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAa,MAAM,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5L,CAAC;IAED,qCAAqC;IACrC,UAAU,CAAC,GAAqB;QAC9B,OAAO,IAAI,CAAC,QAAQ,CAAY,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,qCAAqC;IACrC,gBAAgB,CAAC,GAAqB;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAY,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC;IAED,6CAA6C;IAC7C,QAAQ,CAAC,GAAoB;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAc,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzG,CAAC;IAED,6CAA6C;IAC7C,cAAc,CAAC,GAAoB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAc,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACtF,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,WAAW,CAAC,GAA+E;QAC/F,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QAC3F,OAAO,YAAY,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAc,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAChJ,CAAC;IAED,uDAAuD;IACvD,WAAW,CAAC,GAAsB;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAa,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjH,CAAC;IAED,8DAA8D;IAC9D,SAAS,CAAC,GAAqB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAS,KAAK,EAAE,UAAU,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC7G,CAAC;IAED,kCAAkC;IAClC,SAAS,CAAC,GAAoB;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAW,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,kCAAkC;IAClC,eAAe,CAAC,GAAoB;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAW,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IAED,yCAAyC;IACzC,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAa,KAAK,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACrG,CAAC;IAED,yCAAyC;IACzC,aAAa,CAAC,GAAmB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAa,KAAK,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACnF,CAAC;IAED,gCAAgC;IAChC,OAAO,CAAC,GAAmB;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAa,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChF,CAAC;IAED,gCAAgC;IAChC,aAAa,CAAC,GAAmB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAa,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAQD,0DAA0D;AAC1D,MAAM,OAAO,YAAY;IACd,QAAQ,CAAS;IACjB,MAAM,CAA0B;IAChC,OAAO,CAAS;IAEzB,YAAY,OAA4B;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAChD,CAAC;IAED,QAAQ,CAAI,MAAc,EAAE,IAAY,EAAE,IAAa;QACrD,OAAO,OAAO,CAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/F,CAAC;IAED,qDAAqD;IACrD,qBAAqB,CAAC,GAAsB;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAiB,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/src/metacensus/v1/auth.d.ts

@@ -1,4 +1,4 @@
-import type { UserContent, UserSignature } from "./common.js";
+import type { Interpretation, Signature, User } from "./common.js";
 export declare const protobufPackage = "metacensus.v1";
 /** Sign-up, login and logout. */
 export interface LoginRequest {
@@ -8,27 +8,71 @@ export interface LoginRequest {
 /**
  * Creates an account and enrolls the signing key every later write is
  * signed with: trust on first use — nobody vouches for the key, the service
- * binds whatever it's handed, and the signature proves possession of the
- * matching private key at enrollment.
+ * binds whatever it's handed, and the assertion proves possession of the
+ * matching private key at enrollment. This is the one write whose key is not
+ * resolved from persistence: no account, and so no key history, exists yet.
  */
 export interface SignUpRequest {
-    content?: UserContent | undefined;
+    content?: User | undefined;
     /**
      * Deliberately outside `content`: a password must never be inside a
      * signed, stored document.
      */
     password: string;
+    /** How the enrolling assertion is to be read; re-stamped onto the UserSigned. */
+    interpretation?: Interpretation | undefined;
     /**
-     * Over `content`, made with the key being enrolled. `signer_id` is empty
-     * (no id exists yet) and `public_key` carries the key inline.
+     * The public half of the key being enrolled: base64url SPKI DER. Carried
+     * here, on the one enrollment write, rather than on every Signature — a
+     * usually-empty key field on every record is a footgun (forge content, key
+     * and signature and it "verifies"). The store checks `user_signature.key_id`
+     * thumbprints this key before binding it. For a passkey this is the public
+     * key the navigator.credentials.create() ceremony yielded.
      */
-    userSignature?: UserSignature | undefined;
+    publicKey: string;
+    /**
+     * Over `content`, made with the key being enrolled; verified at sign-up
+     * against `public_key` (bound by key_id), not against a resolved key.
+     */
+    userSignature?: Signature | undefined;
 }
 export interface Session {
-    /** Bearer token, sent back as `Authorization: Bearer <token>`. */
+    /**
+     * Short-lived access token, sent back as `Authorization: Bearer <token>`.
+     * Opaque; the client cannot read an expiry out of it, which is what
+     * `expires_in` is for.
+     */
     token: string;
+    /**
+     * Seconds until `token` expires, measured from when this response was
+     * issued. The client refreshes at or before that horizon (see `/refresh`);
+     * it is the only expiry signal, since the token is opaque.
+     */
+    expiresIn: number;
+    /**
+     * Long-lived credential that mints a fresh access token at `/refresh`,
+     * rotated on every use and revoked at logout. In the browser posture it
+     * never travels here: the server lifts it into an `HttpOnly` cookie and
+     * blanks this field, so JavaScript never holds it. A non-browser caller (a
+     * proxy or another server) reads it here instead. See ts/README.md, "Auth
+     * and the session token".
+     */
+    refreshToken: string;
+}
+/**
+ * Exchanges a refresh token for a fresh session. Cookie or body delivery is as
+ * on `Session.refresh_token`; a request that carries neither is rejected.
+ */
+export interface RefreshRequest {
+    refreshToken: string;
 }
 export interface LogoutRequest {
+    /**
+     * The refresh token whose session to end — its rotation lineage and its
+     * access tokens with it. Cookie or body delivery is as on
+     * `Session.refresh_token`.
+     */
+    refreshToken: string;
 }
 export interface LogoutResponse {
 }

package/dist/src/metacensus/v1/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/metacensus/v1/auth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE9D,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,iCAAiC;AAEjC,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EACJ,WAAW,GACX,SAAS,CAAC;IACd;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,WAAW,OAAO;IACtB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;CAC7B;AAED,MAAM,WAAW,cAAc;CAC9B"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/metacensus/v1/auth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnE,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,iCAAiC;AAEjC,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EACJ,IAAI,GACJ,SAAS,CAAC;IACd;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,cAAc,CAAC,EACX,cAAc,GACd,SAAS,CAAC;IACd;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,OAAO;IACtB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;CAC9B"}

package/dist/src/metacensus/v1/common.d.ts

@@ -14,53 +14,99 @@ export interface HealthcheckResponse {
     status: string;
 }
 /**
- * One participant's signature over one content message. Not verified at the
- * API edge — see README.md, "The signing chain".
+ * How to read a stored record: which signing scheme produced it and which
+ * message its `content` holds. A stored record is append-only — it can be
+ * neither re-signed nor allowed to assume the schema around it stays put — so
+ * it self-describes how to verify it rather than deriving that from the current
+ * envelope. Two independent axes of one concern, so one object; it is a
+ * record-level property, identical for both signatures, sealed by both digests.
+ * See README.md, "The signing chain".
  */
-export interface UserSignature {
+export interface Interpretation {
     /**
-     * Empty only on the sign-up that enrolls the key; public_key carries it
-     * inline there instead.
+     * The signing scheme as one atom: canonicalization, digest, curve and
+     * encoding together. Changing any of them changes this string, and a verifier
+     * that does not recognize it refuses rather than guesses.
      */
-    signerId: string;
-    /** base64url SHA-256 of public_key's SPKI DER. */
-    keyId: string;
-    alg: UserSignature_Alg;
-    /** base64url SPKI DER; set only on the sign-up that enrolls the key. */
-    publicKey: string;
+    spec: string;
     /**
-     * The signer's claimed time, not the server's — see `recorded` on signed
-     * records for what the pair does and does not bound.
+     * Full proto name of the message `content` holds, e.g. "metacensus.v1.Prop".
+     * Read from the record, never inferred from the surrounding envelope: the
+     * envelope's schema may drift, the sealed name does not. Stops a signature
+     * over one type being replayed as another.
      */
-    signingTime?: string | undefined;
+    contentType: string;
+}
+/**
+ * One signature in the chain, in one format for every layer. The participant
+ * signs with a passkey (WebAuthn); the institution countersigns headless
+ * (server/HSM). Both are the same object — a WebAuthn-shaped assertion whose
+ * challenge is the record's digest — so there is one decoder and one crypto
+ * primitive (ECDSA P-256 / ES256) the whole chain down. The only honest
+ * difference between the layers is the assertion's own metadata (`type`,
+ * `origin`, the user-verified flag), which each layer's acceptance policy
+ * checks; it is never a second code path. Not verified at the API edge — see
+ * README.md, "The signing chain".
+ */
+export interface Signature {
     /**
-     * Exactly how this signature is computed and checked; changing the
-     * canonicalization, digest, or encoding changes this string.
+     * Selects the signer's enrolled key from persistence's key history; that
+     * enrolled key is the trust anchor. Deliberately not a key carried on the
+     * record: resolving against persistence is what stops a forged {content, key,
+     * signature} triple verifying against itself. The signer's id is not carried
+     * either — it is this key_id's resolved owner, persistence's to determine,
+     * never a client claim. The one exception is sign-up, where no key is
+     * enrolled yet; see auth.proto's SignUpRequest.
      */
-    spec: string;
+    keyId: string;
     /**
-     * Full proto name of the message `content` holds, e.g.
-     * "metacensus.v1.PropContent". Stops a signature over one type being
-     * replayed as another.
+     * This signer's own time: a participant's claim, an institution's
+     * observation. Inside the digest, so it cannot be re-dated after the fact.
+     * Record ordering still uses the record-level `recorded`, never this — see
+     * `recorded` on the signed records.
      */
-    contentType: string;
-    /** Excluded from its own digest by being emptied, not dropped. */
-    value: string;
+    time?: string | undefined;
+    /**
+     * The WebAuthn assertion. Stored verbatim; the digest it commits to is
+     * recomputed from the record's own fields at verify time, never
+     * reverse-engineered from what is stored.
+     */
+    assertion?: Signature_Assertion | undefined;
 }
 /**
- * Closed vocabulary: an unrecognized value fails to decode rather than
- * reaching a verifier. See README.md, "The signing chain", before adding one.
+ * What navigator.credentials.get() returns for a passkey, and what a headless
+ * signer emits in the identical shape. WebAuthn does not sign arbitrary bytes:
+ * it signs authenticator_data ‖ SHA-256(client_data_json), with the content
+ * digest carried inside client_data_json.challenge.
  */
-export declare enum UserSignature_Alg {
-    Unspecified = "Unspecified",
-    /** Es384 - JOSE fixed-width r||s, never DER. */
-    Es384 = "Es384"
+export interface Signature_Assertion {
+    /**
+     * base64url of authenticatorData: the rpId hash, and the UP/UV/BE/BS flags
+     * a verifier reads presence, user-verification and credential custody
+     * (synced vs device-bound) from. Signed over directly.
+     */
+    authenticatorData: string;
+    /**
+     * base64url of the UTF-8 clientDataJSON. Its `challenge` is this record's
+     * digest (base64url); its `type` and, for a passkey, `origin` are the
+     * honest per-layer metadata the acceptance policy checks. A headless signer
+     * uses an honest institutional `type` and no origin, and never forges a
+     * passkey's metadata — the flags and type are the custody signal a verifier
+     * reads.
+     */
+    clientDataJson: string;
+    /**
+     * base64url of the ECDSA signature over authenticator_data ‖
+     * SHA-256(client_data_json). DER (ASN.1 SEQUENCE), as WebAuthn emits — not
+     * the fixed-width r‖s the prior scheme carried.
+     */
+    signature: string;
 }
 /**
  * The part of a user record its owner signs. Lives here, not user.proto,
- * because auth.proto's SignUpRequest and user.proto's User both need it.
+ * because auth.proto's SignUpRequest and user.proto's UserSigned both need it.
  */
-export interface UserContent {
+export interface User {
     name: string;
     email: string;
     country: string;

package/dist/src/metacensus/v1/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/metacensus/v1/common.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,oBAAoB;AAEpB,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,iBAAiB,CAAC;IACvB,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,WAAW,CAAC,EACR,MAAM,GACN,SAAS,CAAC;IACd;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,oBAAY,iBAAiB;IAC3B,WAAW,gBAAgB;IAC3B,gDAAgD;IAChD,KAAK,UAAU;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/metacensus/v1/common.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C,oBAAoB;AAEpB,sEAAsE;AACtE,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,SAAS;IACxB;;;;;;;;OAQG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,IAAI,CAAC,EACD,MAAM,GACN,SAAS,CAAC;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/src/metacensus/v1/common.js

@@ -5,14 +5,4 @@
 // source: metacensus/v1/common.proto
 /* eslint-disable */
 export const protobufPackage = "metacensus.v1";
-/**
- * Closed vocabulary: an unrecognized value fails to decode rather than
- * reaching a verifier. See README.md, "The signing chain", before adding one.
- */
-export var UserSignature_Alg;
-(function (UserSignature_Alg) {
-    UserSignature_Alg["Unspecified"] = "Unspecified";
-    /** Es384 - JOSE fixed-width r||s, never DER. */
-    UserSignature_Alg["Es384"] = "Es384";
-})(UserSignature_Alg || (UserSignature_Alg = {}));
 //# sourceMappingURL=common.js.map

package/dist/src/metacensus/v1/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/metacensus/v1/common.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,YAAY;AACZ,gCAAgC;AAChC,iCAAiC;AACjC,qCAAqC;AAErC,oBAAoB;AAEpB,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;AAyD/C;;;GAGG;AACH,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,gDAA2B,CAAA;IAC3B,gDAAgD;IAChD,oCAAe,CAAA;AACjB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/metacensus/v1/common.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,YAAY;AACZ,gCAAgC;AAChC,iCAAiC;AACjC,qCAAqC;AAErC,oBAAoB;AAEpB,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC"}