@fougere/app 0.2.0-alpha.0

package/dist/express.js

@@ -0,0 +1,180 @@
+/**
+ * The doors as Express middlewares — the form an Express app expects.
+ *
+ * ```ts
+ * const app = express();
+ * app.use(express.json());
+ * app.use(fougere());          // ← one line, like cors() or express.json()
+ * ```
+ *
+ * This replaces an earlier `mountDoors(createExpressRouter(app))`, which was wrong in
+ * two ways at once. It handed the app INTO a function instead of adding something to
+ * the app, and it made the caller name Express 5's wildcard syntax (`/api/*splat`) —
+ * a detail that belongs to the framework, not to its user. Worse, it mounted all
+ * three doors together with no way to take two of them.
+ *
+ * A middleware fixes both by construction, because Express already says WHERE:
+ *
+ * ```ts
+ * app.use(fougere());                 // the three doors, at the paths the client knows
+ * app.use('/admin', fougereRest());   // REST only, wherever you want it
+ * ```
+ *
+ * And `next()` is the passthrough these doors were already imitating: `serveRest`
+ * answers `{ kind: 'pass' }` for a path it does not serve, which is exactly what
+ * Express means by calling the next handler. The middleware stops inventing it.
+ *
+ * The names mirror `@fougere/app/web` on purpose — same doors, host-shaped. `/web`
+ * gives you `Request` → `Response` handlers; this gives you middlewares.
+ *
+ * Nothing here imports express: the shapes are structural, so the package keeps its
+ * dependency list and a test can hand it a plain object.
+ */
+import { readExpressBody } from '@fougere/http';
+import { serveRest, serveRpc, rpcParseError } from './serve.js';
+import { serveGraphQL } from './graphql.js';
+import { sessionViewOf } from './session.js';
+import { useFougereApp } from './boot.js';
+/**
+ * Who the caller is, from what ran before.
+ *
+ * Express has no ambient request, so an app that resolves its own session says so by
+ * putting it on the request — `req.fougereState`, or a bare `req.user`, which is what
+ * passport and most middlewares already set. Nothing is taken from the payload: the
+ * browser sits outside the topology.
+ */
+function stateOf(req) {
+    if (req.fougereState)
+        return req.fougereState;
+    return req.user ? { user: req.user } : {};
+}
+function pathOf(req) {
+    return req.path ?? String(req.originalUrl ?? req.url ?? '').split('?')[0];
+}
+function queryOf(req) {
+    return Object.fromEntries(Object.entries(req.query ?? {}).map(([key, value]) => [
+        key,
+        String(Array.isArray(value) ? value[0] : value),
+    ]));
+}
+/** Turn a thrown failure into Express's own error pipeline, unless it is a refusal we own. */
+function fail(res, next, err) {
+    const code = err?.name === 'MalformedJsonError' ? 400 : 0;
+    if (code === 400) {
+        res.status(400).json({ code: 'BAD_REQUEST', message: 'Malformed JSON body' });
+        return;
+    }
+    next(err);
+}
+/**
+ * The call envelope, at `/_fougere/call` — the door the browser primitives use.
+ *
+ * Mounted with `app.use()`, Express strips nothing, so the path still carries the
+ * audience segment (`/_fougere/call/public`) that `surfaceOf` reads.
+ */
+export function fougereCall(mountPath = '/_fougere/call') {
+    return (req, res, next) => {
+        const path = pathOf(req);
+        if (req.method !== 'POST' || !path.startsWith(mountPath))
+            return next();
+        void (async () => {
+            try {
+                const app = await useFougereApp();
+                let body;
+                try {
+                    body = await readExpressBody(req);
+                }
+                catch {
+                    res.status(200).json(rpcParseError());
+                    return;
+                }
+                res.status(200).json(await serveRpc(app, { path, body, state: stateOf(req) }));
+            }
+            catch (err) {
+                fail(res, next, err);
+            }
+        })();
+    };
+}
+/** The session view, at `/_fougere/session`. */
+export function fougereSession(mountPath = '/_fougere/session') {
+    return (req, res, next) => {
+        if (req.method !== 'GET' || pathOf(req) !== mountPath)
+            return next();
+        res.status(200).json(sessionViewOf(stateOf(req)));
+    };
+}
+/**
+ * The REST projection, under `/api` by default.
+ *
+ * A path this app does not serve calls `next()` — so an app's own `/api/health` keeps
+ * answering whether it was registered before or after this middleware.
+ */
+export function fougereRest(mountPath = '/api') {
+    return (req, res, next) => {
+        const path = pathOf(req);
+        if (!path.startsWith(`${mountPath}/`))
+            return next();
+        void (async () => {
+            try {
+                const app = await useFougereApp();
+                const outcome = await serveRest(app, {
+                    method: req.method,
+                    path: path.slice(mountPath.length + 1),
+                    query: queryOf(req),
+                    body: await readExpressBody(req),
+                    state: stateOf(req),
+                });
+                // Not ours — Express's own passthrough, which is what `pass` always meant.
+                if (outcome.kind === 'pass')
+                    return next();
+                if (outcome.kind === 'error' && outcome.headers) {
+                    for (const [key, value] of Object.entries(outcome.headers))
+                        res.set(key, value);
+                }
+                res.status(outcome.status).json(outcome.body);
+            }
+            catch (err) {
+                fail(res, next, err);
+            }
+        })();
+    };
+}
+/** GraphQL, at `/graphql` by default. Declines when the app declares no such adapter. */
+export function fougereGraphQL(mountPath = '/graphql') {
+    return (req, res, next) => {
+        if (req.method !== 'POST' || pathOf(req) !== mountPath)
+            return next();
+        void (async () => {
+            try {
+                const app = await useFougereApp();
+                const body = ((await readExpressBody(req)) ?? {});
+                const outcome = await serveGraphQL(app, { ...body, state: stateOf(req) });
+                if (outcome.kind === 'pass')
+                    return next();
+                res.status(outcome.status).json(outcome.body);
+            }
+            catch (err) {
+                fail(res, next, err);
+            }
+        })();
+    };
+}
+/** Every door, for an app that wants all of them. What each one SERVES is still the
+ *  app's declaration — mounting is not publishing. */
+export function fougere() {
+    const doors = [fougereCall(), fougereSession(), fougereRest(), fougereGraphQL()];
+    return (req, res, next) => {
+        let index = 0;
+        const step = (err) => {
+            if (err)
+                return next(err);
+            const door = doors[index++];
+            if (!door)
+                return next();
+            door(req, res, step);
+        };
+        step();
+    };
+}
+//# sourceMappingURL=express.js.map

package/dist/express.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.js","sourceRoot":"","sources":["../src/express.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAyB1C;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,GAAmB;IAClC,IAAI,GAAG,CAAC,YAAY;QAAE,OAAO,GAAG,CAAC,YAAY,CAAC;IAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,GAAmB;IACjC,OAAO,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;AAC7E,CAAC;AAED,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACpD,GAAG;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;KAChD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,IAAI,CAAC,GAAoB,EAAE,IAAU,EAAE,GAAY;IAC1D,MAAM,IAAI,GAAI,GAAyB,EAAE,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,SAAS,GAAG,gBAAgB;IACtD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAExE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;gBAClC,IAAI,IAAa,CAAC;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,cAAc,CAAC,SAAS,GAAG,mBAAmB;IAC5D,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,SAAS,GAAG,MAAM;IAC5C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAErD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;oBACnC,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;oBACtC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;oBACnB,IAAI,EAAE,MAAM,eAAe,CAAC,GAAG,CAAC;oBAChC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;iBACpB,CAAC,CAAC;gBAEH,2EAA2E;gBAC3E,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO,IAAI,EAAE,CAAC;gBAE3C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;wBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClF,CAAC;gBACD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,SAAS,GAAG,UAAU;IACnD,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QAEtE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAI/C,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;oBAAE,OAAO,IAAI,EAAE,CAAC;gBAC3C,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;AACJ,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,OAAO;IACrB,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,CAAC,GAAa,EAAE,EAAE;YAC7B,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/form.d.ts

@@ -0,0 +1,102 @@
+import type { ValidationError } from '@fougere/schema';
+/** What an entity class exposes to a form — the schema statics it already has. */
+export interface FormEntity {
+    name: string;
+    getFields(): Record<string, FieldLike>;
+    validate(input: unknown): {
+        success: true;
+        data: unknown;
+    } | {
+        success: false;
+        errors: ValidationError[];
+    };
+}
+interface FieldLike {
+    shape?: {
+        type?: unknown;
+        enum?: readonly unknown[];
+        format?: string;
+        properties?: unknown;
+        minLength?: number;
+        maxLength?: number;
+        minimum?: number;
+        maximum?: number;
+        pattern?: string;
+    };
+    lifecycle?: {
+        create?: unknown;
+    };
+    role?: {
+        primary?: boolean;
+        relation?: {
+            kind: string;
+        };
+    };
+}
+export interface FormField {
+    name: string;
+    /** Rendering hint derived from the shape — the page maps it to widgets. */
+    control: 'text' | 'email' | 'url' | 'number' | 'boolean' | 'date' | 'select';
+    required: boolean;
+    /** i18n key by convention: `entity.field`. The schema never carries display text. */
+    labelKey: string;
+    /** Fallback label when no i18n message fills the key. */
+    label: string;
+    /** Enum values, when control is 'select'. */
+    options?: string[];
+    /**
+     * What the browser enforces, under the names it already knows — spread this on the
+     * input and the page states no rule of its own.
+     *
+     * The shape holds `minLength`/`maximum`/`pattern`; a browser holds `minlength`/
+     * `max`/`pattern` and enforces them with no JavaScript at all. Carrying them here
+     * is a projection, not a second rule: the judge reads the same shape, and a form
+     * that ignores these still gets the same verdict — it just gets it later, and a
+     * screen reader never gets it at all.
+     *
+     * `type` is part of the contract, not decoration: `email` and `url` are formats the
+     * shape states and the browser checks live, per field, as one types. A page writing
+     * `type="email"` by hand is spelling a second time what the card already said.
+     *
+     * Three deliberate absences, each one a place where the attribute would mean
+     * something the shape does not say:
+     * - a `date` field gets no `type` — neither `date` nor `datetime-local` produces the
+     *   RFC 3339 string a `date-time` shape judges, so the browser would accept what the
+     *   judge refuses;
+     * - `select` and `boolean` are not inputs — the page picks the widget, `control` says
+     *   which;
+     * - a required `boolean` gets no `required` — on a checkbox that attribute means
+     *   "must be CHECKED", where the shape only says the value must be supplied.
+     */
+    attrs?: {
+        type?: 'text' | 'email' | 'url' | 'number';
+        required?: boolean;
+        minlength?: number;
+        maxlength?: number;
+        min?: number;
+        max?: number;
+        pattern?: string;
+    };
+    /**
+     * The value the field is born with — the literal its `lifecycle.create` rule names.
+     * Present so the form can SHOW what is about to be written; the storage realizes it
+     * either way, so a form that ignores this still produces the same row.
+     */
+    default?: unknown;
+}
+/**
+ * The fields a create form is made of: membership from the io projection
+ * (`inputFields` — what a client may supply), requiredness from the
+ * lifecycle axis (any create rule makes absence legal).
+ */
+export declare function formFieldsOf(entity: FormEntity, entityKey: string): FormField[];
+/**
+ * The wire body of the form's values — an empty control is an absent value
+ * at the create boundary (absence is judged by the lifecycle axis, an empty
+ * string would be judged as a present bad value).
+ */
+export declare function payloadOf(values: Record<string, unknown>): Record<string, unknown>;
+/** Index judge errors by field — local judge and remote judge share this shape. */
+export declare function errorsByField(errors: ValidationError[]): Record<string, string>;
+export {};
+//# sourceMappingURL=form.d.ts.map

package/dist/form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../src/form.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG;QAAE,OAAO,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,eAAe,EAAE,CAAA;KAAE,CAAC;CAC5G;AAED,UAAU,SAAS;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAC3D;AAiBD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,OAAO,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC7E,QAAQ,EAAE,OAAO,CAAC;IAClB,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;QAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AA2CD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,CAmB/E;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIlF;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO/E"}

package/dist/form.js

@@ -0,0 +1,104 @@
+/**
+ * Form contract, pure part — derives what a create/edit form is made of
+ * from the entity's field axes. No Vue, no Nuxt: testable headless,
+ * usable by any renderer (the page owns the widgets).
+ */
+import { inputFields } from '@fougere/schema';
+/**
+ * The literal a field is born with, when it declares one.
+ *
+ * `text({ default: 'x' })` and `oneOf('a', 'b', { default: 'a' })` both compile to
+ * `lifecycle.create = { value }` — the create rule that answers the field's absence.
+ * The other create rules ('now', { generate }, 'optional') name no literal: their value
+ * is decided at write time, so a form has nothing to show for them.
+ */
+function defaultOf(field) {
+    const create = field.lifecycle?.create;
+    return create !== null && typeof create === 'object' && 'value' in create
+        ? create.value
+        : undefined;
+}
+/** The base JSON type of a shape — unwraps the `[T,'null']` union. */
+function baseType(type) {
+    if (Array.isArray(type))
+        return type.find((t) => t !== 'null') ?? 'string';
+    return type ?? 'string';
+}
+/** The formats a browser has an input type for — the rest stay `text`, judged later. */
+const CONTROL_BY_FORMAT = {
+    'date-time': 'date',
+    email: 'email',
+    uri: 'url',
+};
+function controlOf(field) {
+    const shape = field.shape ?? {};
+    if (Array.isArray(shape.enum) && shape.enum.length)
+        return 'select';
+    const base = baseType(shape.type);
+    if (base === 'number' || base === 'integer')
+        return 'number';
+    if (base === 'boolean')
+        return 'boolean';
+    if (base === 'string' && shape.format)
+        return CONTROL_BY_FORMAT[shape.format] ?? 'text';
+    return 'text';
+}
+/** Controls that ARE an `<input type>` — see the two absences on {@link FormField.attrs}. */
+const INPUT_TYPES = new Set(['text', 'email', 'url', 'number']);
+/** The shape's bounds, under the names a browser already enforces. */
+function attrsOf(field, control, required) {
+    const s = field.shape ?? {};
+    const attrs = {
+        type: INPUT_TYPES.has(control) ? control : undefined,
+        required: (required && control !== 'boolean') || undefined,
+        minlength: s.minLength,
+        maxlength: s.maxLength,
+        min: s.minimum,
+        max: s.maximum,
+        pattern: s.pattern,
+    };
+    return Object.fromEntries(Object.entries(attrs).filter(([, v]) => v !== undefined));
+}
+/**
+ * The fields a create form is made of: membership from the io projection
+ * (`inputFields` — what a client may supply), requiredness from the
+ * lifecycle axis (any create rule makes absence legal).
+ */
+export function formFieldsOf(entity, entityKey) {
+    return Object.entries(inputFields(entity.getFields())).map(([name, field]) => {
+        const f = field;
+        const control = controlOf(f);
+        const required = f.lifecycle?.create === undefined;
+        const attrs = attrsOf(f, control, required);
+        return {
+            name,
+            control,
+            required,
+            labelKey: `${entityKey}.${name}`,
+            label: name.charAt(0).toUpperCase() + name.slice(1),
+            ...(Array.isArray(f.shape?.enum)
+                ? { options: f.shape.enum.filter((value) => typeof value === 'string') }
+                : {}),
+            ...(Object.keys(attrs).length ? { attrs } : {}),
+            ...(defaultOf(f) !== undefined ? { default: defaultOf(f) } : {}),
+        };
+    });
+}
+/**
+ * The wire body of the form's values — an empty control is an absent value
+ * at the create boundary (absence is judged by the lifecycle axis, an empty
+ * string would be judged as a present bad value).
+ */
+export function payloadOf(values) {
+    return Object.fromEntries(Object.entries(values).filter(([, v]) => v !== undefined && v !== ''));
+}
+/** Index judge errors by field — local judge and remote judge share this shape. */
+export function errorsByField(errors) {
+    const byField = {};
+    for (const err of errors) {
+        const field = err.path.split('.')[0] || err.path;
+        byField[field] ??= err.message;
+    }
+    return byField;
+}
+//# sourceMappingURL=form.js.map

package/dist/form.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.js","sourceRoot":"","sources":["../src/form.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA0B9C;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,KAAgB;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;IACvC,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM;QACvE,CAAC,CAAE,MAA6B,CAAC,KAAK;QACtC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAsDD,sEAAsE;AACtE,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAY,IAAI,QAAQ,CAAC;IACvF,OAAQ,IAAe,IAAI,QAAQ,CAAC;AACtC,CAAC;AAED,wFAAwF;AACxF,MAAM,iBAAiB,GAAyC;IAC9D,WAAW,EAAE,MAAM;IACnB,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,SAAS,SAAS,CAAC,KAAgB;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC7D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;IACxF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6FAA6F;AAC7F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhE,sEAAsE;AACtE,SAAS,OAAO,CAAC,KAAgB,EAAE,OAA6B,EAAE,QAAiB;IACjF,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG;QACZ,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACpD,QAAQ,EAAE,CAAC,QAAQ,IAAI,OAAO,KAAK,SAAS,CAAC,IAAI,SAAS;QAC1D,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,EAAE,CAAC,CAAC,OAAO;QACd,GAAG,EAAE,CAAC,CAAC,OAAO;QACd,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,SAAiB;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,EAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACpF,MAAM,CAAC,GAAG,KAAkB,CAAC;QAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5C,OAAO;YACL,IAAI;YACJ,OAAO;YACP,QAAQ;YACR,QAAQ,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE;YAChC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;gBAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE;gBACzF,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAA+B;IACvD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,MAAyB;IACrD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/graphql.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The GraphQL door — declared like the others, mounted like the others.
+ *
+ * Until now GraphQL was the odd one out: `adapters: { graphql: true }` was
+ * declarable and nothing read it, while an app that wanted a schema wrote fifteen
+ * lines of its own (a Pothos builder, a query type, a mutation type, `registerAll`,
+ * then `registerGraphQL` on a router). Every one of those lines is convention —
+ * there is no decision in them — so the app declaring the adapter is enough.
+ *
+ * The packages are imported LAZILY, and that is the same shape `db: 'sqlite'` uses
+ * (`resolveStorage` pulls `@fougere/schema-sql` only when a database is declared).
+ * `graphql` and `@pothos/core` are heavy and most apps serve none, so a host must not
+ * carry them to find out. Declaring the adapter without installing them is refused by
+ * name, the way an unresolvable dialect is.
+ */
+import type { App } from '@fougere/core';
+import type { Outcome } from './serve.js';
+/** What a GraphQL request carries, whatever host read it. */
+export interface GraphQLRequest {
+    query?: string;
+    variables?: Record<string, unknown>;
+    operationName?: string;
+    /** The audience, when the door was mounted per surface. */
+    surface?: string;
+    state: Record<string, unknown>;
+}
+/**
+ * Execute a GraphQL request against the app's own operations.
+ *
+ * `pass` when the app declares no GraphQL adapter — the same answer `serveRest` gives,
+ * so a host that mounted the door takes nothing away from an app that did not ask for it.
+ */
+export declare function serveGraphQL(app: App, request: GraphQLRequest): Promise<Outcome>;
+//# sourceMappingURL=graphql.d.ts.map

package/dist/graphql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.d.ts","sourceRoot":"","sources":["../src/graphql.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,6DAA6D;AAC7D,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAyCD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBtF"}

package/dist/graphql.js

@@ -0,0 +1,58 @@
+/** One executable schema per (app, audience) — building it walks every entity. */
+const schemas = new WeakMap();
+async function schemaFor(app, surface) {
+    const perApp = schemas.get(app) ?? new Map();
+    schemas.set(app, perApp);
+    const key = surface ?? '';
+    const built = perApp.get(key);
+    if (built)
+        return built;
+    let SchemaBuilder;
+    let registerAll;
+    try {
+        ({ default: SchemaBuilder } = await import('@pothos/core'));
+        ({ registerAll } = await import('@fougere/schema-graphql'));
+    }
+    catch (cause) {
+        throw new Error("adapters: { graphql: true } is declared, but the packages that serve it are not " +
+            "installed. Add `@fougere/schema-graphql` and `@pothos/core` — they are not " +
+            'dependencies of the host, because an app that serves no GraphQL should not carry ' +
+            'a schema builder to find that out.', { cause });
+    }
+    // Every line here is convention: a builder, the two root types, and the entities
+    // the app already scanned. Nothing an app could usefully say differently — which is
+    // why declaring the adapter is the whole configuration.
+    const builder = new SchemaBuilder({});
+    builder.queryType({});
+    builder.mutationType({});
+    registerAll(builder, app, surface ? { surface } : undefined);
+    const schema = builder.toSchema();
+    perApp.set(key, schema);
+    return schema;
+}
+/**
+ * Execute a GraphQL request against the app's own operations.
+ *
+ * `pass` when the app declares no GraphQL adapter — the same answer `serveRest` gives,
+ * so a host that mounted the door takes nothing away from an app that did not ask for it.
+ */
+export async function serveGraphQL(app, request) {
+    if (!app.adapters?.graphql)
+        return { kind: 'pass' };
+    if (!request.query) {
+        return { kind: 'error', status: 400, body: { message: 'Missing query' } };
+    }
+    const { graphql } = await import('graphql');
+    const result = await graphql({
+        schema: (await schemaFor(app, request.surface)),
+        source: request.query,
+        variableValues: request.variables,
+        operationName: request.operationName,
+        // The same state every other door stamps: what the server resolved, never the wire.
+        contextValue: { state: request.state },
+    });
+    // A GraphQL error is not an HTTP error: the transport succeeded, and the errors ride
+    // in the body where a client is required to look for them.
+    return { kind: 'ok', status: 200, body: result };
+}
+//# sourceMappingURL=graphql.js.map

package/dist/graphql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.js","sourceRoot":"","sources":["../src/graphql.ts"],"names":[],"mappings":"AA4BA,kFAAkF;AAClF,MAAM,OAAO,GAAG,IAAI,OAAO,EAA6B,CAAC;AAEzD,KAAK,UAAU,SAAS,CAAC,GAAQ,EAAE,OAAgB;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAmB,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAEzB,MAAM,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,IAAI,aAAkB,CAAC;IACvB,IAAI,WAAgB,CAAC;IACrB,IAAI,CAAC;QACH,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5D,CAAC,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kFAAkF;YAClF,6EAA6E;YAC7E,mFAAmF;YACnF,oCAAoC,EACpC,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,oFAAoF;IACpF,wDAAwD;IACxD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACtB,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACzB,WAAW,CAAC,OAAO,EAAE,GAAY,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAQ,EAAE,OAAuB;IAClE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEpD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAC3B,MAAM,EAAE,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAU;QACxD,MAAM,EAAE,OAAO,CAAC,KAAK;QACrB,cAAc,EAAE,OAAO,CAAC,SAAS;QACjC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,oFAAoF;QACpF,YAAY,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;KACvC,CAAC,CAAC;IAEH,qFAAqF;IACrF,2DAA2D;IAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `@fougere/app` — what an app host needs and what no host owns.
+ *
+ * Two adapters read this package: `@fougere/nuxt` and `@fougere/next`. Between
+ * them they share the boot, the three doors' decisions, the REST table, the form
+ * contract and the session view; what they do NOT share is how a request arrives,
+ * how routes are mounted, and how a value becomes reactive.
+ *
+ * The root entry pulls in the boot, which reads the filesystem — client code wants
+ * `@fougere/app/client`.
+ */
+export { configureFougere, useFougereApp, createMemoryOrm, type FougereServerConfig, } from './boot.js';
+export { useFougereAuth } from './auth.js';
+export { tableOf, matchRoute, type Matchable, type RouteMatch, } from './rest.js';
+export { serveRest, shapeRest, serveRpc, surfaceOf, rpcParseError, invokeOn, type DoorRequest, type Outcome, } from './serve.js';
+export { formFieldsOf, payloadOf, errorsByField, type FormEntity, type FormField, } from './form.js';
+export { sessionViewOf, type SessionView } from './session.js';
+export { stateFor } from './state.js';
+export { serveGraphQL, type GraphQLRequest } from './graphql.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,KAAK,mBAAmB,GACzB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACL,OAAO,EACP,UAAU,EACV,KAAK,SAAS,EACd,KAAK,UAAU,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,aAAa,EACb,QAAQ,EACR,KAAK,WAAW,EAChB,KAAK,OAAO,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,aAAa,EACb,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,20 @@
+/**
+ * `@fougere/app` — what an app host needs and what no host owns.
+ *
+ * Two adapters read this package: `@fougere/nuxt` and `@fougere/next`. Between
+ * them they share the boot, the three doors' decisions, the REST table, the form
+ * contract and the session view; what they do NOT share is how a request arrives,
+ * how routes are mounted, and how a value becomes reactive.
+ *
+ * The root entry pulls in the boot, which reads the filesystem — client code wants
+ * `@fougere/app/client`.
+ */
+export { configureFougere, useFougereApp, createMemoryOrm, } from './boot.js';
+export { useFougereAuth } from './auth.js';
+export { tableOf, matchRoute, } from './rest.js';
+export { serveRest, shapeRest, serveRpc, surfaceOf, rpcParseError, invokeOn, } from './serve.js';
+export { formFieldsOf, payloadOf, errorsByField, } from './form.js';
+export { sessionViewOf } from './session.js';
+export { stateFor } from './state.js';
+export { serveGraphQL } from './graphql.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,eAAe,GAEhB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACL,OAAO,EACP,UAAU,GAGX,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,SAAS,EACT,aAAa,EACb,QAAQ,GAGT,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,SAAS,EACT,aAAa,GAGd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,aAAa,EAAoB,MAAM,cAAc,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAuB,MAAM,cAAc,CAAC"}

package/dist/rest.d.ts

@@ -0,0 +1,41 @@
+import type { App } from '@fougere/core';
+/** One row of the canonical table, in the form this door matches against. */
+export interface Matchable {
+    method: string;
+    /** `route.path` split once: a literal segment, or `:name` to capture. */
+    segments: string[];
+    path: string;
+    entityName: string;
+    operationName: string;
+}
+export type RouteMatch = {
+    kind: 'match';
+    route: Matchable;
+    params: Record<string, string>;
+}
+/** The path is served, the verb is not — the answer that used to be a mutation. */
+ | {
+    kind: 'method-not-allowed';
+    allow: string[];
+}
+/** Not a Fougère path at all: the app's own `/api/*` handlers must still see it. */
+ | null;
+/**
+ * The table, per frond.
+ *
+ * `generateRoutes` prefixes every path the same way, while this door addresses a frond by
+ * name (`/api/{frond}/{plural}`) — so it runs once per frond, each with its own prefix and
+ * a filter naming it. That frond loop is the only thing this file knows that `schema-rest`
+ * does not; the verbs, the paths and the membership rule all come from there.
+ */
+export declare function tableOf(app: App): Matchable[];
+/**
+ * Path first, method second — a router's order, and what makes a 405 possible at all.
+ *
+ * The order matters where the two overlap: `/posts/publish` and `/posts/:id` both accept
+ * `GET /posts/publish`. Taking the most specific path first means the answer is "that verb
+ * is refused here", not `findById('publish')` — and never `publish()`, which is what this
+ * door used to do with the caller's session cookie attached.
+ */
+export declare function matchRoute(table: Matchable[], method: string, segments: string[]): RouteMatch;
+//# sourceMappingURL=rest.d.ts.map

package/dist/rest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../src/rest.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEzC,6EAA6E;AAC7E,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE;AACrE,mFAAmF;GACjF;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE;AACjD,oFAAoF;GAClF,IAAI,CAAC;AAMT;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,EAAE,CAmB7C;AA+BD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,UAAU,CAkB7F"}