@vibes.diy/identity 3.0.3 → 4.0.2

package/dash-api/protocols-dashboard/msg-is.js

@@ -0,0 +1,184 @@
+import { Result, Option } from "@adviser/cement";
+function hasType(jso, t) {
+    return typeof jso === "object" && jso !== null && jso.type === t;
+}
+export async function validateDeleteTenant(jso) {
+    if (hasType(jso, "reqDeleteTenant")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateUpdateTenant(jso) {
+    if (hasType(jso, "reqUpdateTenant")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateCreateTenant(jso) {
+    if (hasType(jso, "reqCreateTenant")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateCreateLedger(jso) {
+    if (hasType(jso, "reqCreateLedger")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateDeleteLedger(jso) {
+    if (hasType(jso, "reqDeleteLedger")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateUpdateLedger(jso) {
+    if (hasType(jso, "reqUpdateLedger")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateListInvites(jso) {
+    if (hasType(jso, "reqListInvites")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateInviteUser(jso) {
+    if (hasType(jso, "reqInviteUser")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateFindUser(jso) {
+    if (hasType(jso, "reqFindUser")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateRedeemInvite(jso) {
+    if (hasType(jso, "reqRedeemInvite")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateListTenantsByUser(jso) {
+    if (hasType(jso, "reqListTenantsByUser")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateUpdateUserTenant(jso) {
+    if (hasType(jso, "reqUpdateUserTenant")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateListLedgersByUser(jso) {
+    if (hasType(jso, "reqListLedgersByUser")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateDeleteInvite(jso) {
+    if (hasType(jso, "reqDeleteInvite")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateCloudSessionToken(jso) {
+    if (hasType(jso, "reqCloudSessionToken")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateTokenByResultId(jso) {
+    if (hasType(jso, "reqTokenByResultId")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateCertFromCsr(jso) {
+    if (hasType(jso, "reqCertFromCsr")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateEnsureUser(jso) {
+    if (hasType(jso, "reqEnsureUser")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export async function validateEnsureCloudToken(jso) {
+    if (hasType(jso, "reqEnsureCloudToken")) {
+        return Result.Ok(Option.Some(jso));
+    }
+    return Result.Ok(Option.None());
+}
+export class FAPIMsgImpl {
+    isDeleteTenant(jso) {
+        return hasType(jso, "reqDeleteTenant");
+    }
+    isUpdateTenant(jso) {
+        return hasType(jso, "reqUpdateTenant");
+    }
+    isCreateTenant(jso) {
+        return hasType(jso, "reqCreateTenant");
+    }
+    isDeleteInvite(jso) {
+        return hasType(jso, "reqDeleteInvite");
+    }
+    isListInvites(jso) {
+        return hasType(jso, "reqListInvites");
+    }
+    isInviteUser(jso) {
+        return hasType(jso, "reqInviteUser");
+    }
+    isFindUser(jso) {
+        return hasType(jso, "reqFindUser");
+    }
+    isRedeemInvite(jso) {
+        return hasType(jso, "reqRedeemInvite");
+    }
+    isEnsureUser(jso) {
+        return hasType(jso, "reqEnsureUser");
+    }
+    isListTenantsByUser(jso) {
+        return hasType(jso, "reqListTenantsByUser");
+    }
+    isUpdateUserTenant(jso) {
+        return hasType(jso, "reqUpdateUserTenant");
+    }
+    isListLedgersByUser(jso) {
+        return hasType(jso, "reqListLedgersByUser");
+    }
+    isCreateLedger(jso) {
+        return hasType(jso, "reqCreateLedger");
+    }
+    isUpdateLedger(jso) {
+        return hasType(jso, "reqUpdateLedger");
+    }
+    isDeleteLedger(jso) {
+        return hasType(jso, "reqDeleteLedger");
+    }
+    isCloudSessionToken(jso) {
+        return hasType(jso, "reqCloudSessionToken");
+    }
+    isReqTokenByResultId(jso) {
+        return hasType(jso, "reqTokenByResultId");
+    }
+    isResTokenByResultId(jso) {
+        return hasType(jso, "resTokenByResultId");
+    }
+    isReqExtendToken(jso) {
+        return hasType(jso, "reqExtendToken");
+    }
+    isReqCertFromCsr(jso) {
+        return hasType(jso, "reqCertFromCsr");
+    }
+    isEnsureCloudToken(jso) {
+        return hasType(jso, "reqEnsureCloudToken");
+    }
+}
+//# sourceMappingURL=msg-is.js.map

package/dash-api/protocols-dashboard/msg-is.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"msg-is.js","sourceRoot":"","sources":["../../../jsr/dash-api/protocols-dashboard/msg-is.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAiDjD,SAAS,OAAO,CAAC,GAAY,EAAE,CAAS;IACtC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAA0B,CAAC,IAAI,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAA2B,GAAY;IAC9E,IAAI,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAA0B,GAAY;IAC5E,IAAI,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAwB,GAAY;IACxE,IAAI,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAiC,GAAY;IAC1F,IAAI,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAgC,GAAY;IACxF,IAAI,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAiC,GAAY;IAC1F,IAAI,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAA4B,GAAY;IAChF,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAiC,GAAY;IAC1F,IAAI,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAA+B,GAAY;IACtF,IAAI,OAAO,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAA2B,GAAY;IAC9E,IAAI,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAA0B,GAAY;IAC5E,IAAI,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAgC,GAAY;IACxF,IAAI,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,aAAa,CAAC,GAAY;QACxB,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACxC,CAAC;IACD,YAAY,CAAC,GAAY;QACvB,OAAO,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACvC,CAAC;IACD,UAAU,CAAC,GAAY;QACrB,OAAO,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACrC,CAAC;IACD,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,YAAY,CAAC,GAAY;QACvB,OAAO,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACvC,CAAC;IACD,mBAAmB,CAAC,GAAY;QAC9B,OAAO,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC9C,CAAC;IACD,kBAAkB,CAAC,GAAY;QAC7B,OAAO,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC7C,CAAC;IACD,mBAAmB,CAAC,GAAY;QAC9B,OAAO,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC9C,CAAC;IACD,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,cAAc,CAAC,GAAY;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACzC,CAAC;IACD,mBAAmB,CAAC,GAAY;QAC9B,OAAO,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAC9C,CAAC;IACD,oBAAoB,CAAC,GAAY;QAC/B,OAAO,OAAO,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IACD,oBAAoB,CAAC,GAAY;QAC/B,OAAO,OAAO,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IACD,gBAAgB,CAAC,GAAY;QAC3B,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACxC,CAAC;IACD,gBAAgB,CAAC,GAAY;QAC3B,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACxC,CAAC;IACD,kBAAkB,CAAC,GAAY;QAC7B,OAAO,OAAO,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dash-api/protocols-dashboard/msg-types.d.ts

@@ -0,0 +1,429 @@
+import { ClerkEmailTemplateClaim } from "../../clerk-claim.js";
+import { JWKPublic } from "../../types/wire.js";
+import { FPCloudClaim, ReadWrite, Role, TenantLedger } from "../protocols-cloud-types.js";
+export type AuthProvider = "github" | "google" | "fp" | "invite-per-email" | "device-id";
+export interface Queryable {
+    readonly userId?: string;
+    readonly queryProvider?: AuthProvider;
+    readonly queryEmail?: string;
+    readonly queryNick?: string;
+}
+export interface QueryUser {
+    readonly byString?: string;
+    readonly existingUserId?: string;
+    readonly byEmail?: string;
+    readonly byNick?: string;
+    readonly andProvider?: AuthProvider;
+}
+export interface Tenant {
+    readonly tenantId: string;
+    readonly name: string;
+    readonly ownerUserId: string;
+    readonly adminUserIds: string[];
+    readonly memberUserIds: string[];
+    readonly maxAdminUsers: number;
+    readonly maxMemberUsers: number;
+    readonly maxLedgers: number;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export type InviteTicketStatus = "pending" | "accepted" | "rejected" | "expired";
+export interface SqlInvitedParams {
+    readonly tenant?: {
+        readonly role: "admin" | "member";
+    };
+    readonly ledger?: {
+        readonly role: "admin" | "member";
+        readonly right: "read" | "write";
+    };
+}
+export interface InvitedParams {
+    readonly tenant?: SqlInvitedParams["tenant"] & {
+        readonly id: string;
+    };
+    readonly ledger?: SqlInvitedParams["ledger"] & {
+        readonly id: string;
+    };
+}
+export interface InviteTicket {
+    readonly inviteId: string;
+    readonly sendEmailCount: number;
+    readonly inviterUserId: string;
+    readonly query: QueryUser;
+    readonly status: InviteTicketStatus;
+    readonly statusReason: string;
+    readonly invitedUserId?: string;
+    readonly invitedParams: InvitedParams;
+    readonly expiresAfter: Date;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export type UserStatus = "active" | "inactive" | "banned" | "invited";
+export interface DashAuthType {
+    readonly type: "ucan" | "clerk" | "device-id";
+    readonly token: string;
+}
+export interface User {
+    readonly userId: string;
+    readonly maxTenants: number;
+    readonly status: UserStatus;
+    readonly statusReason?: string;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+    readonly byProviders: UserByProvider[];
+}
+export interface UserByProvider extends Queryable {
+    readonly providerUserId: string;
+    readonly cleanEmail?: string;
+    readonly cleanNick?: string;
+    readonly queryProvider: AuthProvider;
+    readonly queryEmail?: string;
+    readonly queryNick?: string;
+    readonly params: ClerkEmailTemplateClaim;
+    readonly used: Date;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export interface ResCreateTenant {
+    readonly type: "resCreateTenant";
+    readonly tenant: OutTenantParams;
+}
+export interface FPApiParameters {
+    cloudPublicKeys: JWKPublic[];
+    clerkPublishableKey: string;
+    maxTenants: number;
+    maxAdminUsers: number;
+    maxMemberUsers: number;
+    maxInvites: number;
+    maxLedgers: number;
+    maxAppIdBindings: number;
+}
+export interface InCreateTenantParams {
+    readonly name?: string;
+    readonly ownerUserId: string;
+    readonly defaultTenant?: boolean;
+}
+export interface ReqCreateTenant {
+    readonly type: "reqCreateTenant";
+    readonly auth: DashAuthType;
+    readonly tenant: Omit<InCreateTenantParams, "ownerUserId">;
+}
+export interface InUpdateTenantParams {
+    readonly tenantId: string;
+    readonly name?: string;
+    readonly maxAdminUsers?: number;
+    readonly maxMemberUsers?: number;
+    readonly maxInvites?: number;
+}
+export interface ResUpdateTenant {
+    readonly type: "resUpdateTenant";
+    readonly tenant: OutTenantParams;
+}
+export interface ReqUpdateTenant {
+    readonly type: "reqUpdateTenant";
+    readonly auth: DashAuthType;
+    readonly tenant: InUpdateTenantParams;
+}
+export interface ResEnsureTenant {
+    readonly type: "resEnsureTenant";
+    readonly tenant: Tenant;
+}
+export interface ReqRedeemInvite {
+    readonly type: "reqRedeemInvite";
+    readonly auth: DashAuthType;
+}
+export interface ResRedeemInvite {
+    readonly type: "resRedeemInvite";
+    readonly invites?: InviteTicket[];
+}
+export interface ReqListLedgersByUser {
+    readonly type: "reqListLedgersByUser";
+    readonly auth: DashAuthType;
+    readonly tenantIds?: string[];
+}
+interface LedgerUserRight {
+    readonly userId: string;
+    readonly role: Role;
+    readonly right: ReadWrite;
+    readonly name?: string;
+    readonly default: boolean;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export interface LedgerUser {
+    readonly ledgerId: string;
+    readonly tenantId: string;
+    readonly name: string;
+    readonly ownerId: string;
+    readonly maxShares: number;
+    readonly users: LedgerUserRight[];
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export interface ResListLedgersByUser {
+    readonly type: "resListLedgersByUser";
+    readonly userId: string;
+    readonly ledgers: LedgerUser[];
+}
+export interface ReqListTenantsByUser {
+    readonly type: "reqListTenantsByUser";
+    readonly auth: DashAuthType;
+}
+export interface UserTenantCommon {
+    readonly name?: string;
+    readonly status: UserStatus;
+    readonly statusReason: string;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export interface TenantLimits {
+    readonly maxAdminUsers: number;
+    readonly maxMemberUsers: number;
+    readonly maxInvites: number;
+    readonly maxLedgers: number;
+}
+export interface UserTenant {
+    readonly tenantId: string;
+    readonly role: Role;
+    readonly default: boolean;
+    readonly user: UserTenantCommon & {
+        readonly limits: {
+            readonly maxTenants: number;
+        };
+    };
+    readonly tenant: UserTenantCommon & {
+        readonly limits: TenantLimits;
+    };
+}
+export declare function isAdmin(ut: UserTenant): boolean;
+export interface AdminTenant extends UserTenant {
+    readonly role: "admin";
+    readonly adminUserIds: string[];
+    readonly memberUserIds: string[];
+    readonly maxAdminUsers: number;
+    readonly maxMemberUsers: number;
+}
+export interface ResListTenantsByUser {
+    readonly type: "resListTenantsByUser";
+    readonly userId: string;
+    readonly authUserId: string;
+    readonly tenants: (AdminTenant | UserTenant)[];
+}
+export interface ReqFindUser {
+    readonly type: "reqFindUser";
+    readonly auth: DashAuthType;
+    readonly query: QueryUser;
+}
+export interface ResFindUser {
+    readonly type: "resFindUser";
+    readonly query: QueryUser;
+    readonly results: User[];
+}
+export interface QueryInviteTicket {
+    readonly incSendEmailCount?: boolean;
+    readonly inviteId?: string;
+    readonly query: QueryUser;
+    readonly invitedParams: InvitedParams;
+}
+export interface ReqInviteUser {
+    readonly type: "reqInviteUser";
+    readonly auth: DashAuthType;
+    readonly ticket: QueryInviteTicket;
+}
+export interface ResInviteUser {
+    readonly type: "resInviteUser";
+    readonly invite: InviteTicket;
+}
+export interface ReqDeleteInvite {
+    readonly type: "reqDeleteInvite";
+    readonly auth: DashAuthType;
+    readonly inviteId: string;
+}
+export interface ResDeleteInvite {
+    readonly type: "resDeleteInvite";
+    readonly inviteId: string;
+}
+export interface ReqListInvites {
+    readonly type: "reqListInvites";
+    readonly auth: DashAuthType;
+    readonly tenantIds?: string[];
+    readonly ledgerIds?: string[];
+}
+export interface ResListInvites {
+    readonly type: "resListInvites";
+    readonly tickets: InviteTicket[];
+}
+export interface ReqUpdateUserTenant {
+    readonly type: "reqUpdateUserTenant";
+    readonly auth: DashAuthType;
+    readonly tenantId: string;
+    readonly userId?: string;
+    readonly role: Role;
+    readonly default?: boolean;
+    readonly name?: string;
+}
+export interface ResUpdateUserTenant {
+    readonly type: "resUpdateUserTenant";
+    readonly tenantId: string;
+    readonly userId: string;
+    readonly role: Role;
+    readonly default: boolean;
+    readonly name?: string;
+}
+export interface CreateLedger {
+    readonly tenantId: string;
+    readonly name: string;
+}
+export interface ReqCreateLedger {
+    readonly type: "reqCreateLedger";
+    readonly auth: DashAuthType;
+    readonly ledger: CreateLedger;
+}
+export interface ResCreateLedger {
+    readonly type: "resCreateLedger";
+    readonly ledger: LedgerUser;
+}
+export interface UpdateLedger {
+    readonly ledgerId: string;
+    readonly tenantId: string;
+    readonly right?: ReadWrite;
+    readonly role?: Role;
+    readonly name?: string;
+    readonly default?: boolean;
+}
+export interface ReqUpdateLedger {
+    readonly type: "reqUpdateLedger";
+    readonly auth: DashAuthType;
+    readonly ledger: UpdateLedger;
+}
+export interface ResUpdateLedger {
+    readonly type: "resUpdateLedger";
+    readonly ledger: LedgerUser;
+}
+export interface DeleteLedger {
+    readonly ledgerId: string;
+    readonly tenantId: string;
+}
+export interface ReqDeleteLedger {
+    readonly type: "reqDeleteLedger";
+    readonly auth: DashAuthType;
+    readonly ledger: DeleteLedger;
+}
+export interface ResDeleteLedger {
+    readonly type: "resDeleteLedger";
+}
+export interface ReqCloudSessionToken {
+    readonly type: "reqCloudSessionToken";
+    readonly auth: DashAuthType;
+    readonly selected?: Partial<TenantLedger>;
+    readonly resultId?: string;
+}
+export interface ResCloudSessionToken {
+    readonly type: "resCloudSessionToken";
+    readonly token: string;
+}
+export interface ReqTokenByResultId {
+    readonly type: "reqTokenByResultId";
+    readonly resultId: string;
+}
+export interface ResTokenByResultId {
+    readonly type: "resTokenByResultId";
+    readonly status: "found" | "not-found";
+    readonly resultId: string;
+    readonly token?: string;
+}
+export interface ResDeleteTenant {
+    readonly type: "resDeleteTenant";
+    readonly tenantId: string;
+}
+export interface ReqDeleteTenant {
+    readonly type: "reqDeleteTenant";
+    readonly auth: DashAuthType;
+    readonly tenantId: string;
+}
+export interface OutTenantParams {
+    readonly tenantId: string;
+    readonly name: string;
+    readonly ownerUserId: string;
+    readonly maxAdminUsers: number;
+    readonly maxMemberUsers: number;
+    readonly maxInvites: number;
+    readonly maxLedgers: number;
+    readonly status: UserStatus;
+    readonly statusReason: string;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+export interface ResEnsureUser {
+    readonly type: "resEnsureUser";
+    readonly user: User;
+    readonly tenants: UserTenant[];
+}
+export interface ReqEnsureUser {
+    readonly type: "reqEnsureUser";
+    readonly auth: DashAuthType;
+}
+interface RoleBase {
+    readonly tenantId?: string;
+    readonly ledgerId?: string;
+    readonly userId: string;
+    readonly role: Role;
+    readonly adminUserIds: string[];
+    readonly memberUserIds: string[];
+}
+interface TenantRole extends RoleBase {
+    readonly tenantId: string;
+}
+interface LedgerRole extends RoleBase {
+    readonly ledgerId: string;
+    readonly right: ReadWrite;
+}
+export type RoleType = TenantRole | LedgerRole;
+export interface ReqInsertTenant {
+    readonly tenantId: string;
+    readonly name?: string;
+    readonly ownerUserId: string;
+    readonly adminUserIds?: string[];
+    readonly memberUserIds?: string[];
+    readonly maxAdminUsers?: number;
+    readonly maxMemberUsers?: number;
+    readonly createdAt?: Date;
+    readonly updatedAt?: Date;
+}
+export interface ReqExtendToken {
+    readonly type: "reqExtendToken";
+    readonly token: string;
+}
+export interface ResExtendToken {
+    readonly type: "resExtendToken";
+    readonly token: string;
+}
+export interface ReqCertFromCsr {
+    readonly type: "reqCertFromCsr";
+    readonly auth: DashAuthType;
+    readonly csr: string;
+}
+export interface ResCertFromCsr {
+    readonly type: "resCertFromCsr";
+    readonly certificate: string;
+}
+export interface ReqEnsureCloudToken {
+    readonly type: "reqEnsureCloudToken";
+    readonly auth: DashAuthType;
+    readonly appId: string;
+    readonly env?: string;
+    readonly tenant?: string;
+    readonly ledger?: string;
+    readonly prevCloudToken?: string;
+}
+export interface ResEnsureCloudToken {
+    readonly type: "resEnsureCloudToken";
+    readonly cloudToken: string;
+    readonly appId: string;
+    readonly tenant: string;
+    readonly ledger: string;
+    readonly expiresInSec: number;
+    readonly expiresDate: string;
+    readonly claims: FPCloudClaim;
+}
+export {};

package/dash-api/protocols-dashboard/msg-types.js

@@ -0,0 +1,4 @@
+export function isAdmin(ut) {
+    return ut.role === "admin";
+}
+//# sourceMappingURL=msg-types.js.map

package/dash-api/protocols-dashboard/msg-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"msg-types.js","sourceRoot":"","sources":["../../../jsr/dash-api/protocols-dashboard/msg-types.ts"],"names":[],"mappings":"AAqPA,MAAM,UAAU,OAAO,CAAC,EAAc;IACpC,OAAO,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC;AAC7B,CAAC"}

package/dash-api/protocols-dashboard/token.d.ts

@@ -0,0 +1,37 @@
+import { Result } from "@adviser/cement";
+import { DashAuthType, User } from "./msg-types.js";
+import { ClerkClaim } from "../../clerk-claim.js";
+export interface TokenByResultIdParam {
+    readonly status: "found" | "not-found";
+    readonly resultId: string;
+    readonly token?: string;
+    readonly now: Date;
+}
+export interface FPApiToken {
+    verify(token: string): Promise<Result<VerifiedClaimsResult>>;
+    decode(token: string): Promise<Result<VerifiedClaimsResult>>;
+}
+export interface WithAuth {
+    readonly auth: DashAuthType;
+}
+export interface VerifiedClaimsResult {
+    readonly type: DashAuthType["type"];
+    readonly token: string;
+    readonly claims: unknown;
+}
+export interface ClerkVerifiedAuth {
+    readonly type: "clerk";
+    readonly claims: ClerkClaim;
+}
+export interface VerifiedAuthResult {
+    readonly type: "VerifiedAuthResult";
+    readonly inDashAuth: DashAuthType;
+    readonly verifiedAuth: ClerkVerifiedAuth;
+}
+export interface VerifiedAuthUserResult extends Omit<VerifiedAuthResult, "type"> {
+    readonly type: "VerifiedAuthUserResult";
+    readonly user: User;
+}
+export type VerifiedResult = VerifiedAuthResult | VerifiedAuthUserResult;
+export declare function isVerifiedAuth(obj: VerifiedResult): obj is VerifiedAuthResult;
+export declare function isVerifiedAuthUser(obj: VerifiedResult): obj is VerifiedAuthUserResult;

package/dash-api/protocols-dashboard/token.js

@@ -0,0 +1,7 @@
+export function isVerifiedAuth(obj) {
+    return obj.type === "VerifiedAuthResult";
+}
+export function isVerifiedAuthUser(obj) {
+    return obj.type === "VerifiedAuthUserResult";
+}
+//# sourceMappingURL=token.js.map

package/dash-api/protocols-dashboard/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../jsr/dash-api/protocols-dashboard/token.ts"],"names":[],"mappings":"AAsDA,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,OAAQ,GAA0B,CAAC,IAAI,KAAK,oBAAoB,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACpD,OAAQ,GAA8B,CAAC,IAAI,KAAK,wBAAwB,CAAC;AAC3E,CAAC"}

package/dash-api/token.d.ts

@@ -1,9 +1,9 @@
 import { Result } from "@adviser/cement";
-import type { SuperThis, JWKPublic } from "@fireproof/core-types-base";
-import type { VerifyWithCertificateOptions } from "@fireproof/core-types-device-id";
+import type { SuperThis } from "../types/sthis.js";
+import type { VerifyWithCertificateOptions } from "../types/device-id-types.js";
 import { DeviceIdCA } from "../device-id/ca.js";
 import { ClerkApiToken } from "./clerk-token.js";
-import type { FPApiToken, VerifiedClaimsResult } from "../types/wire.js";
+import type { FPApiToken, VerifiedClaimsResult, JWKPublic } from "../types/wire.js";
 export { ClerkApiToken } from "./clerk-token.js";
 export declare class DeviceIdApiToken implements FPApiToken {
     readonly sthis: SuperThis;