igniter 0.5.0 → 0.5.2

data/packages/igniter-web/README.md

@@ -0,0 +1,539 @@
+# igniter-web
+
+Contracts-first web package for Igniter.
+
+Primary entrypoints:
+
+- `require "igniter-web"`
+- `require "igniter/web"`
+
+Current package shape:
+
+- `Igniter::Web::Api`
+- `Igniter::Web::Application`
+- `Igniter::Web::ScreenSpec`
+- `Igniter::Web::Composer`
+- `Igniter::Web::CompositionPreset`
+- `Igniter::Web::ViewGraph`
+- `Igniter::Web::ViewGraphRenderer`
+- `Igniter::Web::SurfaceStructure`
+- `Igniter::Web::SurfaceManifest`
+- `Igniter::Web::FlowInteractionAdapter`
+- `Igniter::Web::FlowSurfaceProjection`
+- `Igniter::Web::Page`
+- `Igniter::Web::Component`
+- `Igniter::Web::Record`
+
+## Direction
+
+`igniter-web` is the active rebuild target for Igniter's web authoring and
+transport surface.
+
+It is intentionally not a generic CRUD-first MVC framework.
+The package should optimize for the shapes Igniter actually cares about:
+
+- dashboards
+- chats
+- streams
+- automations
+- webhooks
+- operator surfaces
+- agent-driven and environment-driven flows
+- long-lived wizard/process UIs
+
+Current design notes live in:
+
+- [docs/dev/igniter-web-target-plan.md](../../docs/dev/igniter-web-target-plan.md)
+- [docs/dev/igniter-web-dsl-sketch.md](../../docs/dev/igniter-web-dsl-sketch.md)
+
+For the richer application examples that exercise `igniter-web`, see
+[Application Showcase Portfolio](../../docs/guide/application-showcase-portfolio.md).
+
+## Current Status
+
+This package currently ships only a skeleton:
+
+- package facade
+- namespace entrypoints
+- route/endpoint declaration objects
+- Arbre-backed `Page` and `Component` base classes
+- compact `root` / `page` authoring DSL
+- initial screen composition objects for agent-managed views and flows
+- first Arbre renderer for composed view graphs
+- semantic Arbre components for screen, zone, and node rendering
+- specialized Arbre components for action, chat, stream, ask, and compare nodes
+- web-side `ApplicationWebMount` for future `igniter-application` integration
+- `MountContext` for mounted pages to access routes, app manifest, services,
+  interfaces, and mount metadata without custom handler/context classes
+- `SurfaceStructure` for web-owned surface groups inside application layout
+  profiles
+- `SurfaceManifest` for web-owned exports/imports metadata that can be lifted
+  into application capsule exports
+- flow pending-state/projection helpers for inspection and explicit
+  application flow handoff
+- an adapter-oriented `Record` placeholder
+
+That gives the rebuild a real package boundary now, while leaving room to shape
+the full web runtime and authoring DSL incrementally.
+
+The package README is not a production server claim. Current showcase Web
+surfaces use manual server mode as review scaffolding and stable app-local
+`data-` attributes as inspection seams; they do not graduate marker DSL,
+route DSL, component DSL, browser automation default, auth, persistence, live
+transport, deployment behavior, or cluster placement.
+
+## Current DSL Sketch
+
+```ruby
+app = Igniter::Web.application do
+  root title: "Operator" do
+    main class: "shell" do
+      h1 "Operator"
+      para "Everything is healthy"
+    end
+  end
+
+  page "/projects/:id", title: "Project" do
+    main do
+      h1 assigns[:project_name]
+      para assigns[:status]
+    end
+  end
+
+  command "/projects/:id/advance", to: Contracts::AdvanceProject
+  stream "/projects/:id/events", to: Projections::ProjectEvents
+end
+```
+
+Composition starts from screen intent:
+
+```ruby
+result = Igniter::Web.compose(name: :plan_review, intent: :human_decision) do
+  title "Plan review"
+
+  show :plan_summary
+  show :risk_panel
+  compare :current_plan, :proposed_plan
+
+  action :approve, run: Contracts::ApprovePlan
+  chat with: Agents::ProjectLead
+
+  compose with: :decision_workspace
+end
+
+result.success?
+result.graph.zone(:footer)
+Igniter::Web.render(result.graph, context: assigns[:ctx])
+```
+
+Web applications can also be wrapped as a web-owned mount object:
+
+```ruby
+web = Igniter::Web.application do
+  root title: "Operator" do
+    main { h1 "Operator" }
+  end
+end
+
+mount = Igniter::Web.mount(:operator, path: "/operator", application: web)
+bound_mount = mount.bind(environment: app_environment)
+bound_mount.rack_app.call("PATH_INFO" => "/operator")
+```
+
+Mounted pages receive `assigns[:ctx]`:
+
+```ruby
+root title: "Operator" do
+  main do
+    h1 assigns[:ctx].manifest.name
+    para assigns[:ctx].route("/events")
+    para assigns[:ctx].service(:cluster_status).call
+  end
+end
+
+command "/incidents/:id/resolve", to: Igniter::Web.contract("Contracts::ResolveIncident")
+stream "/events", to: Igniter::Web.projection("Projections::ClusterEvents")
+```
+
+## Application Capsule Structure
+
+`igniter-web` treats web as an optional surface inside an
+`igniter-application` capsule, not as the application itself.
+
+If you are starting from application structure, read the user-facing
+[Application Capsules guide](../../docs/guide/application-capsules.md) first.
+This README explains the web-owned half of that boundary.
+
+Application layout owns only the top-level `:web` group:
+
+- compact capsule profile: `web`
+- standalone / expanded profile: `app/web`
+
+Inside that root, `igniter-web` owns this initial surface vocabulary:
+
+- `screens` - composed screen specs and agent-managed flows
+- `pages` - routeable page templates
+- `components` - reusable Arbre-backed view components
+- `projections` - read-model and stream targets for live surfaces
+- `webhooks` - external ingress endpoints
+- `assets` - optional web-local static or generated assets
+
+This vocabulary is deliberately web-local. Non-web applications remain
+first-class and do not need a `web` directory.
+
+```ruby
+blueprint = Igniter::Application.blueprint(
+  name: :operator,
+  root: "apps/operator",
+  layout_profile: :capsule,
+  web_surfaces: [:operator_console]
+)
+
+structure = Igniter::Web.surface_structure(blueprint)
+structure.web_root      # => "web"
+structure.path(:screens) # => "web/screens"
+```
+
+## Surface Exports And Imports
+
+`igniter-web` can describe a mounted web surface without asking
+`igniter-application` to understand pages, Arbre, or screen graphs.
+
+```ruby
+web = Igniter::Web.application do
+  command "/incidents/:id/resolve",
+          to: Igniter::Web.contract("Contracts::ResolveIncident")
+
+  stream "/events",
+         to: Igniter::Web.projection("Projections::ClusterEvents")
+end
+
+surface = Igniter::Web.surface_manifest(web, name: :operator_console, path: "/operator")
+surface.exports # route/api/screen surface exported by the mount
+surface.imports # contract/service/projection/agent targets required by it
+surface.to_h.fetch(:interactions) # pending asks/actions plus streams/chats
+Igniter::Web.flow_pending_state(surface, current_step: :review)
+surface.to_capsule_export # compatible with ApplicationBlueprint exports:
+```
+
+This is intentionally web-owned metadata. The application capsule can export
+the whole web surface as `kind: :web_surface`, while the detailed route/screen
+imports stay nested until a host decides which targets are local and which are
+external requirements.
+
+For agent-native flows, `SurfaceManifest` also extracts interaction metadata
+from screen specs:
+
+- `pending_inputs` from `ask`
+- `pending_actions` from `action`
+- `streams` from `stream`
+- `chats` from `chat`
+
+This remains metadata only. Application-owned flow sessions decide which
+interactions are active for a concrete snapshot.
+
+When an application wants to start a flow from a web surface, use
+`Igniter::Web.flow_pending_state(...)` as an explicit boundary adapter. It
+returns plain `pending_inputs` and `pending_actions` hashes suitable for
+`Environment#start_flow`, while preserving the original web interaction under
+metadata for inspection.
+
+`Igniter::Web.flow_surface_projection(...)` can also compare a surface manifest
+with application-owned flow declaration and feature-slice metadata. Use it for
+inspection/reporting, not for starting flows or mutating sessions.
+
+For application capsule reports, use `Igniter::Web.flow_surface_metadata(...)`
+or `surface.to_surface_metadata(projections: ...)` to pass a plain web-owned
+surface hash into `ApplicationBlueprint#capsule_report(surface_metadata:)`.
+The envelope keeps `kind: :web_surface`, summary `status`, related `flows` /
+`features`, and nested projection hashes on the web side.
+
+The same plain surface metadata can be carried into application transfer
+artifacts:
+
+```ruby
+surface_metadata = Igniter::Web.surface_metadata(surface)
+
+Igniter::Application.handoff_manifest(
+  subject: :operator_bundle,
+  capsules: [operator],
+  mount_intents: [
+    {
+      capsule: :operator,
+      kind: :web,
+      at: "/operator",
+      metadata: { surface: surface.name }
+    }
+  ],
+  surface_metadata: [surface_metadata]
+)
+```
+
+This is still a read-only handoff manifest. It does not bind the web mount, call
+Rack, route browser traffic, or make `igniter-application` inspect
+`SurfaceManifest`, screens, pages, or components.
+
+For dry-run transfer inventories, keep web-local paths as supplied metadata too:
+
+```ruby
+structure = Igniter::Web.surface_structure(operator)
+
+Igniter::Application.transfer_inventory(
+  operator,
+  surface_metadata: [
+    {
+      name: :operator_console,
+      kind: :web_surface,
+      path: structure.web_root,
+      screens_path: structure.path(:screens)
+    }
+  ]
+)
+```
+
+The inventory may report that the top-level application `web` group is missing,
+but it should not inspect `web/screens`, `web/pages`, or other web-local
+subgroups as application-owned structure.
+
+For the final read-only decision report before any future transfer/package
+tool, pass the same supplied metadata into transfer readiness:
+
+```ruby
+readiness = Igniter::Application.transfer_readiness(
+  operator,
+  surface_metadata: [
+    {
+      name: :operator_console,
+      kind: :web_surface,
+      path: structure.web_root,
+      screens_path: structure.path(:screens)
+    }
+  ]
+)
+```
+
+Readiness may count supplied web surfaces and warn when a declared surface has
+no supplied metadata. It still treats the metadata as an opaque hash and does
+not load `igniter-web`, inspect screen graphs, bind mounts, or route browser
+traffic.
+
+Bundle plans reuse the same boundary. A future package writer can inspect the
+read-only plan's `surfaces` count and metadata, but the plan still contains only
+supplied hashes:
+
+```ruby
+bundle_plan = Igniter::Application.transfer_bundle_plan(
+  operator,
+  surface_metadata: [
+    {
+      name: :operator_console,
+      kind: :web_surface,
+      path: structure.web_root,
+      screens_path: structure.path(:screens)
+    }
+  ]
+)
+```
+
+This is planning metadata, not an archive writer, mount binder, route
+activation step, or web screen/component inspection pass.
+
+If an application writes an explicit transfer bundle artifact from that plan,
+the artifact metadata manifest preserves the same supplied surface hashes inside
+the serialized plan:
+
+```ruby
+result = Igniter::Application.write_transfer_bundle(
+  bundle_plan,
+  output: "tmp/operator_bundle"
+)
+```
+
+The writer copies only files already listed by the plan and writes
+`igniter-transfer-bundle.json`. Web metadata is embedded for review; it is not
+used to discover web-local files, load `SurfaceManifest`, bind mounts, or
+activate routes.
+
+Bundle verification reads that artifact metadata back and counts supplied
+surfaces from the serialized plan:
+
+```ruby
+verification = Igniter::Application.verify_transfer_bundle("tmp/operator_bundle")
+```
+
+This readback step does not require `igniter-web`. It verifies the artifact
+shape and file list only; web surface hashes remain opaque review metadata.
+
+Destination intake planning keeps the same rule. The receiving-side plan may
+report the supplied surface count while previewing artifact files against an
+explicit destination root:
+
+```ruby
+intake = Igniter::Application.transfer_intake_plan(
+  verification,
+  destination_root: "apps/incoming"
+)
+```
+
+The intake plan is read-only. It does not create web directories, copy bundle
+contents, install surfaces, bind mounts, activate routes, or inspect web-local
+screen/component structure.
+
+Apply planning stays read-only too. It converts accepted intake data into
+operation hashes for future review:
+
+```ruby
+apply_plan = Igniter::Application.transfer_apply_plan(intake)
+```
+
+The operation list may include directory and file-copy review steps, plus
+manual host wiring steps, but it does not execute them. Supplied web surfaces
+remain a count on the plan; there is no web mount binding, route activation, or
+screen/component inspection.
+
+Apply execution is the first mutable transfer boundary and is still explicit:
+
+```ruby
+dry_run = Igniter::Application.apply_transfer_plan(apply_plan)
+committed = Igniter::Application.apply_transfer_plan(apply_plan, commit: true)
+```
+
+Dry-run is the default. Commit mode may create reviewed directories and copy
+reviewed files, but it still treats web surface metadata as an opaque count and
+does not install surfaces, bind mounts, activate routes, or inspect web
+internals.
+
+Post-apply verification is the read-only closure step after an explicit commit:
+
+```ruby
+report = Igniter::Application.verify_applied_transfer(
+  committed,
+  apply_plan: apply_plan
+)
+```
+
+The report verifies only reviewed destination directories/files and artifact
+sources. It may preserve the supplied web surface count from the committed
+result, but it does not require `igniter-web`, inspect web metadata, install
+surfaces, bind mounts, activate routes, or repair destination state.
+
+Transfer receipts are the audit/closure summary over already-built reports:
+
+```ruby
+receipt = Igniter::Application.transfer_receipt(
+  report,
+  apply_result: committed,
+  apply_plan: apply_plan
+)
+```
+
+The receipt can carry the same supplied web surface count forward for humans,
+agents, and CI logs. It remains application-owned reporting only; it does not
+load web classes, interpret surface metadata, mount routes, activate browser
+traffic, or mutate destination files.
+
+For the complete public transfer path, start with
+`examples/application/capsule_transfer_end_to_end.rb`. It demonstrates the
+application-owned chain from capsule declaration to receipt while keeping web
+surface metadata as supplied hashes. The example does not activate web routes,
+bind mounts, inspect screens/components, or require `igniter-web`.
+
+After a transfer receipt, host integration is still a separate review boundary.
+Mount intents describe where a host might bind an interaction surface later;
+they are not `Igniter::Web.mount(...)` calls, Rack traffic, route activation, or
+screen/component inspection. A web-capable host can use `igniter-web` to turn
+reviewed metadata into a real mount, but non-web capsules and application-owned
+transfer reports never require this package.
+
+Host activation readiness is the read-only preflight over those host decisions:
+
+```ruby
+readiness = Igniter::Application.host_activation_readiness(
+  receipt,
+  handoff_manifest: manifest,
+  mount_decisions: [
+    { capsule: :operator, kind: :web, at: "/operator", status: :accepted }
+  ],
+  surface_metadata: [{ name: :operator_console, kind: :web_surface }]
+)
+```
+
+For web surfaces, readiness confirms only that the host has reviewed supplied
+mount intents and surface metadata. It still does not instantiate web mounts,
+bind routes, call Rack, inspect screens/components, or require `igniter-web`
+for non-web capsules.
+
+Host activation plans turn accepted readiness into descriptive review
+operations:
+
+```ruby
+plan = Igniter::Application.host_activation_plan(readiness)
+```
+
+For web-capable capsules, the application-owned plan may include
+`review_mount_intent` operations. These are still not executable web operations:
+they do not bind `Igniter::Web::ApplicationWebMount`, activate routes, call
+Rack, render screens, or inspect components. A future host/web activation step
+must consume the reviewed intent explicitly.
+
+Activation plan verification reads that descriptive plan back:
+
+```ruby
+verification = Igniter::Application.verify_host_activation_plan(plan)
+```
+
+For web-related operations, verification accepts only `review_mount_intent`
+entries with supplied intent metadata. It does not require `igniter-web`, bind
+an `ApplicationWebMount`, activate routes, call Rack, render screens, inspect
+components, or turn the reviewed mount intent into browser traffic. Any future
+web-capable activation adapter must still consume the verified metadata through
+an explicit web-owned boundary.
+
+Future web activation is therefore a separate proposal, not an implied next
+step. Before `igniter-web` should offer a mutable adapter for
+`review_mount_intent`, that adapter would need explicit evidence:
+
+- a valid activation plan verification with no findings
+- an explicit host/web caller decision, similar to `commit: true`
+- the reviewed `review_mount_intent` operation and original intent metadata
+- an explicit `Igniter::Web::ApplicationWebMount` or equivalent web-owned mount
+  object supplied by the caller
+- an explicit host target or rack/router adapter supplied by the caller
+- a receipt/report shape for dry-run vs committed mount activation
+
+Even then, the application layer should only hand off verified metadata. It
+should not discover web surfaces, create mounts, bind routes, call Rack, render
+screens, inspect component graphs, or send browser traffic on behalf of web.
+
+Application dry-run activation reporting keeps that same boundary:
+
+```ruby
+dry_run = Igniter::Application.dry_run_host_activation(
+  verification,
+  host_target: "Host::OperatorRuntime"
+)
+```
+
+For `review_mount_intent`, the dry-run report may include a skipped operation
+with a web/host-owned mount reason. That is still evidence for a future adapter,
+not mount activation. The dry-run report does not create or bind
+`ApplicationWebMount`, activate routes, render screens, call Rack, inspect
+component graphs, or send browser traffic.
+
+Commit readiness is also only a read-only evidence gate:
+
+```ruby
+commit_readiness = Igniter::Application.host_activation_commit_readiness(
+  dry_run,
+  provided_adapters: [
+    { name: :web_mount_adapter_evidence, kind: :web_or_host_mount_evidence }
+  ]
+)
+```
+
+For web mount intents, `web_mount_adapter_evidence` means a caller has supplied
+explicit acknowledgement or future adapter evidence for the skipped
+`review_mount_intent` operation. It is not an `ApplicationWebMount`, router, or
+Rack adapter, and commit readiness must not discover, instantiate, bind, or
+call one. A future mutable web activation track would still need to define the
+actual web-owned adapter and its receipt before any mount can become live.

data/packages/igniter-web/lib/igniter/web/api.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+module Igniter
+  module Web
+    class Api
+      Endpoint = Struct.new(:kind, :verb, :path, :target, :metadata, keyword_init: true)
+
+      attr_reader :endpoints
+
+      def initialize
+        @endpoints = []
+      end
+
+      def draw(&block)
+        instance_eval(&block) if block
+        self
+      end
+
+      def command(path, to:, via: :post, **metadata)
+        register_endpoint(:command, path, to, via, metadata)
+      end
+
+      def query(path, to:, via: :get, **metadata)
+        register_endpoint(:query, path, to, via, metadata)
+      end
+
+      def stream(path, to:, via: :get, **metadata)
+        register_endpoint(:stream, path, to, via, metadata)
+      end
+
+      def webhook(path, to:, via: :post, **metadata)
+        register_endpoint(:webhook, path, to, via, metadata)
+      end
+
+      private
+
+      def register_endpoint(kind, path, target, verb, metadata)
+        @endpoints << Endpoint.new(
+          kind: kind,
+          verb: verb.to_sym,
+          path: path,
+          target: target,
+          metadata: metadata.freeze
+        )
+        self
+      end
+    end
+  end
+end

data/packages/igniter-web/lib/igniter/web/application.rb

@@ -0,0 +1,99 @@
+# frozen_string_literal: true
+
+module Igniter
+  module Web
+    class Application
+      Route = Struct.new(:verb, :path, :target, :metadata, keyword_init: true)
+      Mount = Struct.new(:path, :target, :metadata, keyword_init: true)
+
+      attr_reader :routes, :mounts, :api_surface, :pages, :screens
+
+      def initialize(api: nil)
+        @routes = []
+        @mounts = []
+        @api_surface = api
+        @pages = []
+        @screens = []
+      end
+
+      def draw(&block)
+        instance_eval(&block) if block
+        self
+      end
+
+      %i[get post put patch delete].each do |verb|
+        define_method(verb) do |path, to:, **metadata|
+          @routes << Route.new(
+            verb: verb,
+            path: path,
+            target: to,
+            metadata: metadata.freeze
+          )
+          self
+        end
+      end
+
+      def mount(path, to:, **metadata)
+        @mounts << Mount.new(path: path, target: to, metadata: metadata.freeze)
+        self
+      end
+
+      def root(to: nil, title: nil, **metadata, &block)
+        page("/", to: to, title: title, **metadata, &block)
+      end
+
+      def page(path, to: nil, title: nil, **metadata, &block)
+        target = if to
+                   to
+                 elsif block
+                   Page.define(title: title, &block)
+                 else
+                   raise ArgumentError, "page requires either `to:` or a block"
+                 end
+
+        @pages << target if target.is_a?(Class) && target <= Page
+        get(path, to: target, page: true, title: title, **metadata)
+      end
+
+      def screen(name, intent: nil, compose: true, **options, &block)
+        spec = ScreenSpec.build(name, intent: intent, **options, &block)
+        @screens << (compose ? Composer.compose(spec) : spec)
+        self
+      end
+
+      def screen_route(path, screen_name, **metadata)
+        screen = @screens.find do |candidate|
+          candidate.respond_to?(:screen) && candidate.screen.name == screen_name.to_sym
+        end
+        raise ArgumentError, "unknown composed screen: #{screen_name.inspect}" unless screen
+
+        get(path, to: screen, screen: true, **metadata)
+      end
+
+      def api(&block)
+        @api_surface ||= Api.new
+        @api_surface.draw(&block)
+      end
+
+      def command(...)
+        api.command(...)
+        self
+      end
+
+      def query(...)
+        api.query(...)
+        self
+      end
+
+      def stream(...)
+        api.stream(...)
+        self
+      end
+
+      def webhook(...)
+        api.webhook(...)
+        self
+      end
+    end
+  end
+end