@fougere/adapter-rest 0.20.0-alpha.0 → 0.21.0-alpha.0

package/dist/RestProtocol.d.ts

@@ -1,10 +1,41 @@
 import { Format, type Accepted } from '@fougere/schema';
-/** What `protocols: { rest: … }` may say — nothing yet, so nothing is admitted. */
-declare const REST: Format<object>;
+import { type ProtocolConfig } from '@fougere/core';
+/** Where one operation answers, when what its contract derives is not what it should be. */
+declare const ROUTE: Format<{
+    method?: "DELETE" | "GET" | "PATCH" | "POST" | "PUT" | undefined;
+    path?: string | undefined;
+    status?: number | undefined;
+}>;
+/**
+ * Where the app mounts REST, and the routes of a frond it cannot edit — `betterAuth()`, a package's.
+ * A frond of this project says its own in its `frond.config.ts`.
+ */
+declare const REST: Format<{
+    overrides?: Record<string, {
+        method?: "DELETE" | "GET" | "PATCH" | "POST" | "PUT" | undefined;
+        path?: string | undefined;
+        status?: number | undefined;
+    }> | undefined;
+    prefix?: string | undefined;
+}>;
+/** What a frond says of itself: the segment it answers under, `/journal` rather than `/blog`. */
+declare const FROND: Format<{
+    path?: string | undefined;
+}>;
+export type RestRoute = Accepted<typeof ROUTE>;
 declare module '@fougere/core' {
     interface FougereProtocols {
         rest: Accepted<typeof REST>;
     }
+    interface FougereOperationProtocols {
+        rest?: RestRoute;
+    }
+    interface FougereFrondProtocols {
+        rest?: Accepted<typeof FROND>;
+    }
 }
+/** Where REST is mounted when `protocols.rest.prefix` says nothing. */
+export declare const PREFIX = "/api";
+export declare function prefixOf(protocols: ProtocolConfig | undefined): string;
 export {};
 //# sourceMappingURL=RestProtocol.d.ts.map

package/dist/RestProtocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RestProtocol.d.ts","sourceRoot":"","sources":["../src/RestProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGxD,mFAAmF;AACnF,QAAA,MAAM,IAAI,gBAAsC,CAAC;AAEjD,OAAO,QAAQ,eAAe,CAAC;IAC7B,UAAU,gBAAgB;QACxB,IAAI,EAAE,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;KAC7B;CACF"}
+{"version":3,"file":"RestProtocol.d.ts","sourceRoot":"","sources":["../src/RestProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAA4D,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE9G,4FAA4F;AAC5F,QAAA,MAAM,KAAK;;;;EAIA,CAAC;AAEZ;;;GAGG;AACH,QAAA,MAAM,IAAI;;;;;;;EAGC,CAAC;AAEZ,iGAAiG;AACjG,QAAA,MAAM,KAAK;;EAEA,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC;AAE/C,OAAO,QAAQ,eAAe,CAAC;IAC7B,UAAU,gBAAgB;QACxB,IAAI,EAAE,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;KAC7B;IACD,UAAU,yBAAyB;QACjC,IAAI,CAAC,EAAE,SAAS,CAAC;KAClB;IACD,UAAU,qBAAqB;QAC7B,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC;KAC/B;CACF;AAED,uEAAuE;AACvE,eAAO,MAAM,MAAM,SAAS,CAAC;AAE7B,wBAAgB,QAAQ,CAAC,SAAS,EAAE,cAAc,GAAG,SAAS,GAAG,MAAM,CAEtE"}

package/dist/RestProtocol.js

@@ -1,6 +1,48 @@
 import { Format } from '@fougere/schema';
-import { Protocols } from '@fougere/core';
-/** What `protocols: { rest: … }` may say — nothing yet, so nothing is admitted. */
-const REST = Format.of('protocol/rest').closed();
-Protocols.register('rest', { format: REST });
+import { HTTP_METHODS } from '@fougere/http';
+import { Protocols, RouteAddress, isScanned } from '@fougere/core';
+/** Where one operation answers, when what its contract derives is not what it should be. */
+const ROUTE = Format.of('protocol/rest/route')
+    .key('method', Format.tokens(HTTP_METHODS))
+    .key('path', Format.text)
+    .key('status', Format.count)
+    .closed();
+/**
+ * Where the app mounts REST, and the routes of a frond it cannot edit — `betterAuth()`, a package's.
+ * A frond of this project says its own in its `frond.config.ts`.
+ */
+const REST = Format.of('protocol/rest')
+    .key('prefix', Format.text)
+    .key('overrides', Format.recordOf(ROUTE))
+    .closed();
+/** What a frond says of itself: the segment it answers under, `/journal` rather than `/blog`. */
+const FROND = Format.of('protocol/rest/frond')
+    .key('path', Format.text)
+    .closed();
+/** Where REST is mounted when `protocols.rest.prefix` says nothing. */
+export const PREFIX = '/api';
+export function prefixOf(protocols) {
+    return protocols?.rest?.prefix ?? PREFIX;
+}
+/** An override of `fougere.config.ts` that a `frond.config.ts` should have said, or that names no op. */
+function misplaced(overrides, fronds) {
+    return Object.entries(overrides ?? {}).flatMap(([key, route]) => {
+        const named = RouteAddress.parse(key);
+        if (!named)
+            return [`overrides: '${key}' names no address. An op is named '<address>.<op>'.`];
+        const owner = fronds.find((frond) => frond.handlers.some((handler) => handler.address === named.address));
+        if (!owner)
+            return [`overrides: '${key}' — no frond serves the address '${named.address}'.`];
+        if (!isScanned(owner))
+            return [];
+        return [
+            `overrides: '${key}' belongs to ${owner.name}, whose frond.config.ts is in this project — state it there:\n`
+                + `  ${owner.source.path}/frond.config.ts → operations: { '${key}': { rest: ${JSON.stringify(route)} } }`,
+        ];
+    });
+}
+Protocols.register('rest', {
+    format: REST,
+    refusals: (options, fronds) => misplaced(options.overrides, fronds),
+});
 //# sourceMappingURL=RestProtocol.js.map

package/dist/RestProtocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"RestProtocol.js","sourceRoot":"","sources":["../src/RestProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAiB,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,mFAAmF;AACnF,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC;AAQjD,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC"}
+{"version":3,"file":"RestProtocol.js","sourceRoot":"","sources":["../src/RestProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAiB,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAA6C,MAAM,eAAe,CAAC;AAE9G,4FAA4F;AAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC;KAC3C,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;KAC1C,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;KACxB,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC;KAC3B,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC;KACpC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC;KAC1B,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;KACxC,MAAM,EAAE,CAAC;AAEZ,iGAAiG;AACjG,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC;KAC3C,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;KACxB,MAAM,EAAE,CAAC;AAgBZ,uEAAuE;AACvE,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC;AAE7B,MAAM,UAAU,QAAQ,CAAC,SAAqC;IAC5D,OAAO,SAAS,EAAE,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC;AAC3C,CAAC;AAED,yGAAyG;AACzG,SAAS,SAAS,CAAC,SAAgD,EAAE,MAAkC;IACrG,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,eAAe,GAAG,sDAAsD,CAAC,CAAC;QAE9F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,eAAe,GAAG,oCAAoC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjC,OAAO;YACL,eAAe,GAAG,gBAAgB,KAAK,CAAC,IAAI,gEAAgE;kBACxG,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,qCAAqC,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM;SAC5G,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE;IACzB,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,CAAC,OAA8B,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3F,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import './RestProtocol.js';
 export { generateRoutes, type RouteDefinition } from './routes/RouteDefinition.js';
 export type { HttpMethod } from '@fougere/http';
+export { PREFIX, prefixOf, type RestRoute } from './RestProtocol.js';
 export { registerRoutes } from './register.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnF,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnF,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -1,5 +1,6 @@
 import './RestProtocol.js';
 export { generateRoutes } from './routes/RouteDefinition.js';
+export { PREFIX, prefixOf } from './RestProtocol.js';
 export { registerRoutes } from './register.js';
 // No schema endpoint here. Discovery is `rpc.discover` on the envelope — one
 // surface, which answers with what the host SERVES. A second GET published

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAwB,MAAM,6BAA6B,CAAC;AAEnF,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,sCAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAwB,MAAM,6BAA6B,CAAC;AAEnF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAkB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,sCAAsC"}

package/dist/routes/GenerateRoutesOptions.d.ts

@@ -1,13 +1,4 @@
-import type { HttpMethod } from '@fougere/http';
 export interface GenerateRoutesOptions {
-    /** Base path prefix (e.g. '/api'). Default: ''. */
-    prefix?: string;
-    /** Override route config per address, then per operation. */
-    overrides?: Record<string, Record<string, {
-        method?: HttpMethod;
-        path?: string;
-        status?: number;
-    }>>;
     /** Keep only the addresses this answers true for. */
     filter?: (address: string, frondName: string) => boolean;
     /** Surface name for filtering (e.g. 'rest', 'graphql'). Uses frond.config.ts surfaces if set. */

package/dist/routes/GenerateRoutesOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GenerateRoutesOptions.d.ts","sourceRoot":"","sources":["../../src/routes/GenerateRoutesOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACpG,qDAAqD;IACrD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"GenerateRoutesOptions.d.ts","sourceRoot":"","sources":["../../src/routes/GenerateRoutesOptions.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,qDAAqD;IACrD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACzD,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/routes/OperationMeta.d.ts

@@ -1,4 +1,4 @@
 import type { EffectiveOperation } from '@fougere/core';
 /** What a route reads of an effective operation — its `binding` is what the path is derived from. */
-export type OperationMeta = Pick<EffectiveOperation, 'input' | 'output' | 'kind' | 'description'> & Partial<Pick<EffectiveOperation, 'binding'>>;
+export type OperationMeta = Pick<EffectiveOperation, 'input' | 'output' | 'kind' | 'description'> & Partial<Pick<EffectiveOperation, 'binding' | 'protocols'>>;
 //# sourceMappingURL=OperationMeta.d.ts.map

package/dist/routes/OperationMeta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OperationMeta.d.ts","sourceRoot":"","sources":["../../src/routes/OperationMeta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,qGAAqG;AACrG,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,aAAa,CAAC,GAC7F,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC"}
+{"version":3,"file":"OperationMeta.d.ts","sourceRoot":"","sources":["../../src/routes/OperationMeta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,qGAAqG;AACrG,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,aAAa,CAAC,GAC7F,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC"}

package/dist/routes/RouteDefinition.d.ts

@@ -1,6 +1,6 @@
 import type { Fields } from '@fougere/schema';
 import type { HttpMethod } from '@fougere/http';
-import type { HandlerEntry as CoreHandlerEntry, OperationOverride } from '@fougere/core';
+import { type FougereFrondProtocols, type HandlerEntry as CoreHandlerEntry, type ProtocolConfig } from '@fougere/core';
 import type { OperationMeta } from './OperationMeta.js';
 import type { GenerateRoutesOptions } from './GenerateRoutesOptions.js';
 export interface RouteDefinition {
@@ -31,11 +31,12 @@ interface FrondLike {
     handlers: HandlerEntry[];
     presenters: PresenterEntry[];
     surfaces?: Record<string, string[]>;
-    /** What `frond.config.ts` said per op — `rest:` is read here, `graphql:` next facade. */
-    operationsOverrides?: Record<string, Pick<OperationOverride, 'rest'>>;
+    protocols?: FougereFrondProtocols;
 }
 interface AppLike {
     fronds: FrondLike[];
+    /** What `fougere.config.ts` says to each protocol — where REST is mounted, a third party's routes. */
+    protocols?: ProtocolConfig;
     /** The façade an address serves to one audience — `undefined` when none. */
     facadeFor(address: string, surface?: string): Record<string, Function> | undefined;
     /** Canonical operation table produced by core. */

package/dist/routes/RouteDefinition.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RouteDefinition.d.ts","sourceRoot":"","sources":["../../src/routes/RouteDefinition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;CAItB;AAED,4DAA4D;AAC5D,KAAK,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;AAS9E,UAAU,cAAc;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,yFAAyF;IACzF,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;CACvE;AAED,UAAU,OAAO;IACf,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,4EAA4E;IAC5E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,SAAS,CAAC;IACnF,kDAAkD;IAClD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,SAAS,CAAC;CAC1F;AA6DD,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAG,eAAe,EAAE,CAInG"}
+{"version":3,"file":"RouteDefinition.d.ts","sourceRoot":"","sources":["../../src/routes/RouteDefinition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAyB,KAAK,qBAAqB,EAAE,KAAK,YAAY,IAAI,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE9I,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGxE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,EAAE,CAAC,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;CAItB;AAED,4DAA4D;AAC5D,KAAK,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC;AAS9E,UAAU,cAAc;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,qBAAqB,CAAC;CACnC;AAED,UAAU,OAAO;IACf,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,sGAAsG;IACtG,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,4EAA4E;IAC5E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,SAAS,CAAC;IACnF,kDAAkD;IAClD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,SAAS,CAAC;CAC1F;AA4FD,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,qBAA0B,GAAG,eAAe,EAAE,CAInG"}

package/dist/routes/RouteDefinition.js

@@ -1,4 +1,6 @@
-import { Visibility } from '@fougere/schema';
+import { Card, Visibility } from '@fougere/schema';
+import { RouteAddress, wordsOf } from '@fougere/core';
+import { prefixOf } from '../RestProtocol.js';
 // ─── Naming conventions ─────────────────────────
 /** The five a Crud handler brings answer at the collection or the row, never under their own name. */
 const CRUD = new Set(['list', 'findById', 'create', 'update', 'delete']);
@@ -7,30 +9,53 @@ function pluralize(name) {
         ? name.slice(0, -1) + 'ies'
         : name + 's';
 }
-/** Derive HTTP method from operation name, honoring frond.config.ts overrides. */
-function deriveMethod(opName, resolvedKind) {
-    if (!resolvedKind) {
+/** The verbs whose op makes the row it designates disappear — the one method still read off the name. */
+const REMOVING = new Set(['delete', 'remove']);
+/** Where a request puts what it carries — the path, the query string, the body. */
+const CARRIED = new Set(['param', 'input', 'query']);
+function changeOf({ binding = [], input }) {
+    const designated = new Set(binding.flatMap(({ source }) => (source.kind === 'param' && source.identifies ? [source.identifies] : [])));
+    if (designated.size !== 1)
+        return undefined;
+    const [entity] = designated;
+    const carried = binding.filter(({ source }) => CARRIED.has(source.kind) && !(source.kind === 'param' && source.identifies));
+    if (carried.some(({ source }) => source.kind === 'input')) {
+        if (!input || Card.titleOf(input) !== entity)
+            return undefined;
+        if (input.getOpts().patch)
+            return { kind: 'modification', fields: [] };
+        return input.derivation ? undefined : { kind: 'replacement', fields: [] };
+    }
+    const fields = carried.flatMap(({ source }) => (source.kind === 'param' && source.field?.entity === entity ? [source.name] : []));
+    return fields.length > 0 && fields.length === carried.length ? { kind: 'modification', fields } : undefined;
+}
+/**
+ * Read off the contract: a query is a GET, an op whose verb removes the row a DELETE, a change of
+ * one row a PATCH or a PUT — and anything else a POST, which promises nothing and so cannot lie.
+ */
+function deriveMethod(opName, meta) {
+    if (!meta.kind) {
         throw new Error(`REST cannot project '${opName}' without its resolved operation kind. `
             + 'Build routes from App.operationsFor(), the EffectiveOperation table produced by core.');
     }
-    if (resolvedKind === 'query')
+    if (meta.kind === 'query')
         return 'GET';
-    if (opName.startsWith('create'))
-        return 'POST';
-    if (opName.startsWith('update') || opName.startsWith('edit'))
-        return 'PUT';
-    if (opName.startsWith('delete') || opName.startsWith('remove'))
+    if (REMOVING.has(wordsOf(opName)[0] ?? ''))
         return 'DELETE';
-    return 'POST';
+    const change = changeOf(meta)?.kind;
+    if (change === 'modification')
+        return 'PATCH';
+    return change === 'replacement' ? 'PUT' : 'POST';
 }
 /**
  * Read off the signature: what designates a row comes before the op, the other required values
- * after it, and an optional one is left to the query string.
- * `publish(id: Post['id'])` → `/posts/:id/publish`, `move(id: Post['id'], position: number)` →
- * `/posts/:id/move/:position`, `byTag(tag: string)` → `/posts/by-tag/:tag`.
+ * after it, and an optional one is left to the query string — save the fields a change carries,
+ * which the body holds. `publish(id: Post['id'])` → `/posts/:id/publish`,
+ * `move(id: Post['id'], position: number)` → `/posts/:id/move/:position`,
+ * `retitle(id: Post['id'], title: Post['title'])` → `/posts/:id/retitle`, `byTag(tag: string)` → `/posts/by-tag/:tag`.
  */
-function derivePath(address, opName, binding = []) {
-    const required = binding.flatMap(({ source, optional }) => source.kind === 'param' && !optional ? [source] : []);
+function derivePath(address, opName, binding = [], inBody = []) {
+    const required = binding.flatMap(({ source, optional }) => source.kind === 'param' && !optional && !inBody.includes(source.name) ? [source] : []);
     const designating = required.filter((param) => param.identifies);
     const following = required.filter((param) => !param.identifies);
     const named = CRUD.has(opName) ? [] : [opName.replace(/[A-Z]/g, (letter) => '-' + letter.toLowerCase())];
@@ -39,16 +64,17 @@ function derivePath(address, opName, binding = []) {
 function segmentOf({ name }) {
     return `:${name}`;
 }
-// ─── Route generation helpers ───────────────────
-// Update routes carry the SAME fields: input omissibility is a projection of the
-// route's MODE (operationName 'update' → patch), never forged per-field flags.
-// Membership is the axes-derived `Visibility.input` projection from @fougere/schema.
 // ─── Public API ─────────────────────────────────
 /** Generate REST route definitions from a fougere App — one route per operation, per address served. */
 export function generateRoutes(app, options = {}) {
     return app.fronds.flatMap((frond) => [...new Set(frond.handlers.map((handler) => handler.address))]
         .flatMap((address) => routesOf(app, frond, address, options)));
 }
+/** `/api/blog` — where the app mounts REST, then the segment the frond answers under. */
+function baseOf(app, frond) {
+    const segment = frond.protocols?.rest?.path ?? `/${frond.name}`;
+    return prefixOf(app.protocols) + segment;
+}
 /** What one address answers on REST — nothing, when this surface does not serve it. */
 function routesOf(app, frond, address, options) {
     const surface = options.surface;
@@ -71,22 +97,19 @@ function routesOf(app, frond, address, options) {
     // facades, which intentionally cannot enumerate their keys before discovery.
     return [...effectiveOperations.keys()].map((opName) => routeFor({
         address,
-        frond,
+        base: baseOf(app, frond),
         facade,
         opName,
         meta: effectiveOperations.get(opName),
-        options,
+        thirdParty: app.protocols?.rest?.overrides?.[new RouteAddress({ address, operation: opName }).toString()],
     }));
 }
-function routeFor({ address, frond, facade, opName, meta, options }) {
+function routeFor({ address, base, facade, opName, meta, thirdParty }) {
     if (!meta) {
         throw new Error(`REST facade '${address}' exposes '${opName}' but its EffectiveOperation table does not.`);
     }
-    // What the FROND said, then what this call said, then the convention. The frond comes first
-    // because it names the operation; a host that overrides is deciding for someone else's,
-    // which is what `overrides:` is for and why it wins.
-    const stated = frond.operationsOverrides?.[opName]?.rest;
-    const override = { ...stated, ...(options.overrides?.[address] ?? {})[opName] };
+    // What the app said of a frond it cannot edit, then what the frond said, then the contract.
+    const override = { ...meta.protocols?.rest, ...thirdParty };
     // Handler and method overrides are already executed by the facade, from the same
     // EffectiveOperation local and RPC use. The adapter never resolves DI itself.
     const op = facade[opName];
@@ -94,8 +117,8 @@ function routeFor({ address, frond, facade, opName, meta, options }) {
         throw new Error(`REST EffectiveOperation table exposes '${opName}' but its facade does not.`);
     }
     return {
-        method: override.method ?? deriveMethod(opName, meta.kind),
-        path: (options.prefix ?? '') + (override.path ?? derivePath(address, opName, meta.binding)),
+        method: override.method ?? deriveMethod(opName, meta),
+        path: base + (override.path ?? derivePath(address, opName, meta.binding, changeOf(meta)?.fields)),
         operationName: opName,
         address,
         handler: (invocation) => op(invocation),

package/dist/routes/RouteDefinition.js.map

@@ -1 +1 @@
-{"version":3,"file":"RouteDefinition.js","sourceRoot":"","sources":["../../src/routes/RouteDefinition.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA8D7C,mDAAmD;AAEnD,sGAAsG;AACtG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzE,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACvB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;QAC3B,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC;AACjB,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CACnB,MAAc,EACd,YAAmC;IAEnC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,yCAAyC;cACrE,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEhF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,OAAe,EAAE,MAAc,EAAE,OAAO,GAAgB,EAAE;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEzG,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,IAAI,EAAoB;IAC3C,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,mDAAmD;AAEnD,iFAAiF;AACjF,+EAA+E;AAC/E,qFAAqF;AAErF,mDAAmD;AAEnD,wGAAwG;AACxG,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,OAAO,GAA0B,EAAE;IAC9E,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;SAC3D,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,uFAAuF;AACvF,SAAS,QAAQ,CACf,GAAY,EACZ,KAAgB,EAChB,OAAe,EACf,OAA8B;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,mFAAmF;IACnF,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAA8B,CAAC;IAC5E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtE,MAAM,OAAO,GAAG,CAAC,OAAO;QACtB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC;QAClF,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACxF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtD,MAAM,mBAAmB,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,yCAAyC,CAAC,CAAC;IAC5F,CAAC;IAED,wFAAwF;IACxF,6EAA6E;IAC7E,OAAO,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC9D,OAAO;QACP,KAAK;QACL,MAAM;QACN,MAAM;QACN,IAAI,EAAE,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;QACrC,OAAO;KACR,CAAC,CAAC,CAAC;AACN,CAAC;AAYD,SAAS,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAc;IAC7E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,gBAAgB,OAAO,cAAc,MAAM,8CAA8C,CAC1F,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,wFAAwF;IACxF,qDAAqD;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,EAAE,IACiB,CAAC;IACtE,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EACpB,CAAC;IAE1D,iFAAiF;IACjF,8EAA8E;IAC9E,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,4BAA4B,CAAC,CAAC;IAChG,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;QAC1D,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3F,aAAa,EAAE,MAAM;QACrB,OAAO;QACP,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC;QACvC,GAAG,cAAc,CAAC,IAAI,CAAC;QACvB,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,cAAc,CAAC,IAAmB;IACzC,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACjF,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KACtF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"RouteDefinition.js","sourceRoot":"","sources":["../../src/routes/RouteDefinition.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,OAAO,EAA0F,MAAM,eAAe,CAAC;AAI9I,OAAO,EAAE,QAAQ,EAAkB,MAAM,oBAAoB,CAAC;AA0D9D,mDAAmD;AAEnD,sGAAsG;AACtG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzE,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACvB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK;QAC3B,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC;AACjB,CAAC;AAED,yGAAyG;AACzG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE/C,mFAAmF;AACnF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAYrD,SAAS,QAAQ,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,KAAK,EAAiB;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvI,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IAE5B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5H,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAEvE,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAElI,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9G,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,MAAc,EAAE,IAAmB;IACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,yCAAyC;cACrE,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE5D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACpC,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,OAAO,CAAC;IAE9C,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,OAAe,EAAE,MAAc,EAAE,OAAO,GAAgB,EAAE,EAAE,MAAM,GAAa,EAAE;IACnG,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CACxD,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEzG,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,SAAS,CAAC,EAAE,IAAI,EAAoB;IAC3C,OAAO,IAAI,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,mDAAmD;AAEnD,wGAAwG;AACxG,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,OAAO,GAA0B,EAAE;IAC9E,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;SAC3D,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,yFAAyF;AACzF,SAAS,MAAM,CAAC,GAAY,EAAE,KAAgB;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;IAEhE,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;AAC3C,CAAC;AAED,uFAAuF;AACvF,SAAS,QAAQ,CACf,GAAY,EACZ,KAAgB,EAChB,OAAe,EACf,OAA8B;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,mFAAmF;IACnF,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAA8B,CAAC;IAC5E,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtE,MAAM,OAAO,GAAG,CAAC,OAAO;QACtB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC;QAClF,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACxF,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtD,MAAM,mBAAmB,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,yCAAyC,CAAC,CAAC;IAC5F,CAAC;IAED,wFAAwF;IACxF,6EAA6E;IAC7E,OAAO,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC9D,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC;QACxB,MAAM;QACN,MAAM;QACN,IAAI,EAAE,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC;QACrC,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;KAC1G,CAAC,CAAC,CAAC;AACN,CAAC;AAcD,SAAS,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAc;IAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,gBAAgB,OAAO,cAAc,MAAM,8CAA8C,CAC1F,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,MAAM,QAAQ,GAAc,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC;IAEvE,iFAAiF;IACjF,8EAA8E;IAC9E,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,4BAA4B,CAAC,CAAC;IAChG,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC;QACrD,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjG,aAAa,EAAE,MAAM;QACrB,OAAO;QACP,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC;QACvC,GAAG,cAAc,CAAC,IAAI,CAAC;QACvB,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,cAAc,CAAC,IAAmB;IACzC,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACjF,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;KACtF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fougere/adapter-rest",
-  "version": "0.20.0-alpha.0",
+  "version": "0.21.0-alpha.0",
   "description": "Entity → REST routes.",
   "keywords": [
     "fougere",
@@ -30,9 +30,9 @@
     "src"
   ],
   "dependencies": {
-    "@fougere/core": "0.20.0-alpha.0",
-    "@fougere/schema": "0.20.0-alpha.0",
-    "@fougere/http": "0.20.0-alpha.0"
+    "@fougere/core": "0.21.0-alpha.0",
+    "@fougere/schema": "0.21.0-alpha.0",
+    "@fougere/http": "0.21.0-alpha.0"
   },
   "publishConfig": {
     "access": "public"

package/src/RestProtocol.ts

@@ -1,13 +1,67 @@
 import { Format, type Accepted } from '@fougere/schema';
-import { Protocols } from '@fougere/core';
+import { HTTP_METHODS } from '@fougere/http';
+import { Protocols, RouteAddress, isScanned, type FrondDescriptor, type ProtocolConfig } from '@fougere/core';
 
-/** What `protocols: { rest: … }` may say — nothing yet, so nothing is admitted. */
-const REST = Format.of('protocol/rest').closed();
+/** Where one operation answers, when what its contract derives is not what it should be. */
+const ROUTE = Format.of('protocol/rest/route')
+  .key('method', Format.tokens(HTTP_METHODS))
+  .key('path', Format.text)
+  .key('status', Format.count)
+  .closed();
+
+/**
+ * Where the app mounts REST, and the routes of a frond it cannot edit — `betterAuth()`, a package's.
+ * A frond of this project says its own in its `frond.config.ts`.
+ */
+const REST = Format.of('protocol/rest')
+  .key('prefix', Format.text)
+  .key('overrides', Format.recordOf(ROUTE))
+  .closed();
+
+/** What a frond says of itself: the segment it answers under, `/journal` rather than `/blog`. */
+const FROND = Format.of('protocol/rest/frond')
+  .key('path', Format.text)
+  .closed();
+
+export type RestRoute = Accepted<typeof ROUTE>;
 
 declare module '@fougere/core' {
   interface FougereProtocols {
     rest: Accepted<typeof REST>;
   }
+  interface FougereOperationProtocols {
+    rest?: RestRoute;
+  }
+  interface FougereFrondProtocols {
+    rest?: Accepted<typeof FROND>;
+  }
+}
+
+/** Where REST is mounted when `protocols.rest.prefix` says nothing. */
+export const PREFIX = '/api';
+
+export function prefixOf(protocols: ProtocolConfig | undefined): string {
+  return protocols?.rest?.prefix ?? PREFIX;
+}
+
+/** An override of `fougere.config.ts` that a `frond.config.ts` should have said, or that names no op. */
+function misplaced(overrides: Record<string, RestRoute> | undefined, fronds: readonly FrondDescriptor[]): string[] {
+  return Object.entries(overrides ?? {}).flatMap(([key, route]) => {
+    const named = RouteAddress.parse(key);
+    if (!named) return [`overrides: '${key}' names no address. An op is named '<address>.<op>'.`];
+
+    const owner = fronds.find((frond) => frond.handlers.some((handler) => handler.address === named.address));
+    if (!owner) return [`overrides: '${key}' — no frond serves the address '${named.address}'.`];
+    if (!isScanned(owner)) return [];
+
+    return [
+      `overrides: '${key}' belongs to ${owner.name}, whose frond.config.ts is in this project — state it there:\n`
+        + `  ${owner.source.path}/frond.config.ts → operations: { '${key}': { rest: ${JSON.stringify(route)} } }`,
+    ];
+  });
 }
 
-Protocols.register('rest', { format: REST });
+Protocols.register('rest', {
+  format: REST,
+  refusals: (options: Accepted<typeof REST>, fronds) => misplaced(options.overrides, fronds),
+});

package/src/index.ts

@@ -1,6 +1,7 @@
 import './RestProtocol.js';
 export { generateRoutes, type RouteDefinition } from './routes/RouteDefinition.js';
 export type { HttpMethod } from '@fougere/http';
+export { PREFIX, prefixOf, type RestRoute } from './RestProtocol.js';
 export { registerRoutes } from './register.js';
 
 // No schema endpoint here. Discovery is `rpc.discover` on the envelope — one

package/src/routes/GenerateRoutesOptions.ts

@@ -1,10 +1,4 @@
-import type { HttpMethod } from '@fougere/http';
-
 export interface GenerateRoutesOptions {
-  /** Base path prefix (e.g. '/api'). Default: ''. */
-  prefix?: string;
-  /** Override route config per address, then per operation. */
-  overrides?: Record<string, Record<string, { method?: HttpMethod; path?: string; status?: number }>>;
   /** Keep only the addresses this answers true for. */
   filter?: (address: string, frondName: string) => boolean;
   /** Surface name for filtering (e.g. 'rest', 'graphql'). Uses frond.config.ts surfaces if set. */

package/src/routes/OperationMeta.ts

@@ -2,4 +2,4 @@ import type { EffectiveOperation } from '@fougere/core';
 
 /** What a route reads of an effective operation — its `binding` is what the path is derived from. */
 export type OperationMeta = Pick<EffectiveOperation, 'input' | 'output' | 'kind' | 'description'>
-  & Partial<Pick<EffectiveOperation, 'binding'>>;
+  & Partial<Pick<EffectiveOperation, 'binding' | 'protocols'>>;

package/src/routes/RouteDefinition.ts

@@ -1,10 +1,11 @@
 import type { Fields } from '@fougere/schema';
-import { Visibility } from '@fougere/schema';
+import { Card, Visibility } from '@fougere/schema';
 import type { HttpMethod } from '@fougere/http';
-import type { HandlerEntry as CoreHandlerEntry, OperationOverride } from '@fougere/core';
+import { RouteAddress, wordsOf, type FougereFrondProtocols, type HandlerEntry as CoreHandlerEntry, type ProtocolConfig } from '@fougere/core';
 import type { BindingPlan } from '@fougere/core/descriptor';
 import type { OperationMeta } from './OperationMeta.js';
 import type { GenerateRoutesOptions } from './GenerateRoutesOptions.js';
+import { prefixOf, type RestRoute } from '../RestProtocol.js';
 
 export interface RouteDefinition {
   method: HttpMethod;
@@ -47,12 +48,13 @@ interface FrondLike {
   handlers: HandlerEntry[];
   presenters: PresenterEntry[];
   surfaces?: Record<string, string[]>;
-  /** What `frond.config.ts` said per op — `rest:` is read here, `graphql:` next facade. */
-  operationsOverrides?: Record<string, Pick<OperationOverride, 'rest'>>;
+  protocols?: FougereFrondProtocols;
 }
 
 interface AppLike {
   fronds: FrondLike[];
+  /** What `fougere.config.ts` says to each protocol — where REST is mounted, a third party's routes. */
+  protocols?: ProtocolConfig;
   /** The façade an address serves to one audience — `undefined` when none. */
   facadeFor(address: string, surface?: string): Record<string, Function> | undefined;
   /** Canonical operation table produced by core. */
@@ -72,33 +74,70 @@ function pluralize(name: string): string {
     : name + 's';
 }
 
-/** Derive HTTP method from operation name, honoring frond.config.ts overrides. */
-function deriveMethod(
-  opName: string,
-  resolvedKind: OperationMeta['kind'],
-): HttpMethod {
-  if (!resolvedKind) {
+/** The verbs whose op makes the row it designates disappear — the one method still read off the name. */
+const REMOVING = new Set(['delete', 'remove']);
+
+/** Where a request puts what it carries — the path, the query string, the body. */
+const CARRIED = new Set(['param', 'input', 'query']);
+
+/**
+ * What an op that designates one row does to it, read off its contract: hand the row whole — a
+ * replacement — or hand what changes, a `Partial<Post>` or parameters that are all its fields.
+ * Those `fields` travel in the body: the path designates, the body carries the change.
+ */
+interface Change {
+  kind: 'replacement' | 'modification';
+  fields: string[];
+}
+
+function changeOf({ binding = [], input }: OperationMeta): Change | undefined {
+  const designated = new Set(binding.flatMap(({ source }) => (source.kind === 'param' && source.identifies ? [source.identifies] : [])));
+  if (designated.size !== 1) return undefined;
+  const [entity] = designated;
+
+  const carried = binding.filter(({ source }) => CARRIED.has(source.kind) && !(source.kind === 'param' && source.identifies));
+  if (carried.some(({ source }) => source.kind === 'input')) {
+    if (!input || Card.titleOf(input) !== entity) return undefined;
+    if (input.getOpts().patch) return { kind: 'modification', fields: [] };
+
+    return input.derivation ? undefined : { kind: 'replacement', fields: [] };
+  }
+
+  const fields = carried.flatMap(({ source }) => (source.kind === 'param' && source.field?.entity === entity ? [source.name] : []));
+
+  return fields.length > 0 && fields.length === carried.length ? { kind: 'modification', fields } : undefined;
+}
+
+/**
+ * Read off the contract: a query is a GET, an op whose verb removes the row a DELETE, a change of
+ * one row a PATCH or a PUT — and anything else a POST, which promises nothing and so cannot lie.
+ */
+function deriveMethod(opName: string, meta: OperationMeta): HttpMethod {
+  if (!meta.kind) {
     throw new Error(
       `REST cannot project '${opName}' without its resolved operation kind. `
       + 'Build routes from App.operationsFor(), the EffectiveOperation table produced by core.',
     );
   }
-  if (resolvedKind === 'query') return 'GET';
-  if (opName.startsWith('create')) return 'POST';
-  if (opName.startsWith('update') || opName.startsWith('edit')) return 'PUT';
-  if (opName.startsWith('delete') || opName.startsWith('remove')) return 'DELETE';
+  if (meta.kind === 'query') return 'GET';
+  if (REMOVING.has(wordsOf(opName)[0] ?? '')) return 'DELETE';
+
+  const change = changeOf(meta)?.kind;
+  if (change === 'modification') return 'PATCH';
 
-  return 'POST';
+  return change === 'replacement' ? 'PUT' : 'POST';
 }
 
 /**
  * Read off the signature: what designates a row comes before the op, the other required values
- * after it, and an optional one is left to the query string.
- * `publish(id: Post['id'])` → `/posts/:id/publish`, `move(id: Post['id'], position: number)` →
- * `/posts/:id/move/:position`, `byTag(tag: string)` → `/posts/by-tag/:tag`.
+ * after it, and an optional one is left to the query string — save the fields a change carries,
+ * which the body holds. `publish(id: Post['id'])` → `/posts/:id/publish`,
+ * `move(id: Post['id'], position: number)` → `/posts/:id/move/:position`,
+ * `retitle(id: Post['id'], title: Post['title'])` → `/posts/:id/retitle`, `byTag(tag: string)` → `/posts/by-tag/:tag`.
  */
-function derivePath(address: string, opName: string, binding: BindingPlan = []): string {
-  const required = binding.flatMap(({ source, optional }) => source.kind === 'param' && !optional ? [source] : []);
+function derivePath(address: string, opName: string, binding: BindingPlan = [], inBody: string[] = []): string {
+  const required = binding.flatMap(({ source, optional }) =>
+    source.kind === 'param' && !optional && !inBody.includes(source.name) ? [source] : []);
   const designating = required.filter((param) => param.identifies);
   const following = required.filter((param) => !param.identifies);
   const named = CRUD.has(opName) ? [] : [opName.replace(/[A-Z]/g, (letter) => '-' + letter.toLowerCase())];
@@ -110,12 +149,6 @@ function segmentOf({ name }: { name: string }): string {
   return `:${name}`;
 }
 
-// ─── Route generation helpers ───────────────────
-
-// Update routes carry the SAME fields: input omissibility is a projection of the
-// route's MODE (operationName 'update' → patch), never forged per-field flags.
-// Membership is the axes-derived `Visibility.input` projection from @fougere/schema.
-
 // ─── Public API ─────────────────────────────────
 
 /** Generate REST route definitions from a fougere App — one route per operation, per address served. */
@@ -125,6 +158,13 @@ export function generateRoutes(app: AppLike, options: GenerateRoutesOptions = {}
       .flatMap((address) => routesOf(app, frond, address, options)));
 }
 
+/** `/api/blog` — where the app mounts REST, then the segment the frond answers under. */
+function baseOf(app: AppLike, frond: FrondLike): string {
+  const segment = frond.protocols?.rest?.path ?? `/${frond.name}`;
+
+  return prefixOf(app.protocols) + segment;
+}
+
 /** What one address answers on REST — nothing, when this surface does not serve it. */
 function routesOf(
   app: AppLike,
@@ -152,38 +192,35 @@ function routesOf(
   // facades, which intentionally cannot enumerate their keys before discovery.
   return [...effectiveOperations.keys()].map((opName) => routeFor({
     address,
-    frond,
+    base: baseOf(app, frond),
     facade,
     opName,
     meta: effectiveOperations.get(opName),
-    options,
+    thirdParty: app.protocols?.rest?.overrides?.[new RouteAddress({ address, operation: opName }).toString()],
   }));
 }
 
 /** One operation at one address, and everything that decides how it is addressed. */
 interface Projecting {
   address: string;
-  frond: FrondLike;
+  /** `/api/blog` — what every path of this frond starts with. */
+  base: string;
   facade: HandlerFacade;
   opName: string;
   meta: OperationMeta | undefined;
-  options: GenerateRoutesOptions;
+  /** What `fougere.config.ts` says of this op — only ever a frond the project cannot edit. */
+  thirdParty: RestRoute | undefined;
 }
 
-function routeFor({ address, frond, facade, opName, meta, options }: Projecting): RouteDefinition {
+function routeFor({ address, base, facade, opName, meta, thirdParty }: Projecting): RouteDefinition {
   if (!meta) {
     throw new Error(
       `REST facade '${address}' exposes '${opName}' but its EffectiveOperation table does not.`,
     );
   }
 
-  // What the FROND said, then what this call said, then the convention. The frond comes first
-  // because it names the operation; a host that overrides is deciding for someone else's,
-  // which is what `overrides:` is for and why it wins.
-  const stated = frond.operationsOverrides?.[opName]?.rest as
-    { method?: HttpMethod; path?: string; status?: number } | undefined;
-  const override = { ...stated, ...(options.overrides?.[address] ?? {})[opName] } as
-    { method?: HttpMethod; path?: string; status?: number };
+  // What the app said of a frond it cannot edit, then what the frond said, then the contract.
+  const override: RestRoute = { ...meta.protocols?.rest, ...thirdParty };
 
   // Handler and method overrides are already executed by the facade, from the same
   // EffectiveOperation local and RPC use. The adapter never resolves DI itself.
@@ -193,8 +230,8 @@ function routeFor({ address, frond, facade, opName, meta, options }: Projecting)
   }
 
   return {
-    method: override.method ?? deriveMethod(opName, meta.kind),
-    path: (options.prefix ?? '') + (override.path ?? derivePath(address, opName, meta.binding)),
+    method: override.method ?? deriveMethod(opName, meta),
+    path: base + (override.path ?? derivePath(address, opName, meta.binding, changeOf(meta)?.fields)),
     operationName: opName,
     address,
     handler: (invocation) => op(invocation),