@fougere/core 0.2.0-alpha.2 → 0.3.0-alpha.0

package/dist/verify.d.ts

@@ -1,4 +1,4 @@
-import type { App } from './types.js';
+import type { FrondDescriptor } from './scan/frond.js';
 /**
  * What a rule found in an app.
  *
@@ -9,6 +9,15 @@ import type { App } from './types.js';
 export interface Violation {
     /** Rule name, stable — 'cross-frond-dependency'. */
     rule: string;
+    /**
+     * What it costs, decided by the rule that raises it — never by whoever renders it.
+     *
+     * The two rules here are not the same animal: a cross-frond dependency resolves
+     * today and stops resolving the day the other frond answers over the wire, while a
+     * collector declared elsewhere is already wrong in one process. A reader holding a
+     * table of rule names would be a second opinion on a fact the rule already has.
+     */
+    severity: 'blocking' | 'warning';
     /** The frond the subject lives in. */
     frond: string;
     /** What violates it — 'PostHandler'. */
@@ -48,10 +57,14 @@ export interface Violation {
  *
  * Pure over `app.fronds`: no mount, no process, no file. Call it from a test.
  */
-export declare function verify(app: Pick<App, 'fronds'>): Violation[];
+export declare function verify(app: {
+    fronds: readonly FrondDescriptor[];
+}): Violation[];
 /**
  * The same verdict, as an assertion. Throws naming every rule that failed, so a
  * test is one line and its output is the sentence — not a diff of two objects.
  */
-export declare function assertSplittable(app: Pick<App, 'fronds'>): void;
+export declare function assertSplittable(app: {
+    fronds: readonly FrondDescriptor[];
+}): void;
 //# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAmB,MAAM,YAAY,CAAC;AAMvD;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,SAAS,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;CACjB;AAwCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,SAAS,EAAE,CA+E5D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,CAK/D"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAOvD;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAC;IACjC,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;;;OAQG;IACH,SAAS,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;CACjB;AAwCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE;IAAE,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,GAAG,SAAS,EAAE,CAiF/E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE;IAAE,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,GAAG,IAAI,CAKlF"}

package/dist/verify.js

@@ -1,7 +1,8 @@
-import { repositoryKeyOf } from './repository.js';
+import { registrationKeyOf } from '@fougere/schema';
+import { repositoryKeyOf } from './prefab/repository.js';
 import { ormKeyOf } from './orm.js';
-import { presenterKeyOf } from './presenter.js';
-import { collectorKeyOf } from './collector.js';
+import { presenterKeyOf } from './prefab/presenter.js';
+import { collectorKeyOf } from './prefab/collector.js';
 /**
  * The container keys a frond registers in its own scope, keyed as a handler's
  * `deps` spell them — DI resolves by type name, so both sides are PascalCase.
@@ -18,7 +19,7 @@ function registrationsOf(frond) {
     for (const p of frond.presenters)
         put(presenterKeyOf(p.entityName), 'presenter');
     for (const c of frond.collectors)
-        put(collectorKeyOf(c.entityName), 'collector');
+        put(collectorKeyOf(c.typeName), 'collector');
     for (const e of frond.entities) {
         put(ormKeyOf(e.name), 'ORM');
         put(repositoryKeyOf(e.name), 'repository');
@@ -65,7 +66,7 @@ export function verify(app) {
     const collectorFronds = new Map();
     for (const frond of app.fronds) {
         for (const c of frond.collectors)
-            collectorFronds.set(c.entityName, frond.name);
+            collectorFronds.set(c.typeName, frond.name);
     }
     const violations = [];
     for (const frond of app.fronds) {
@@ -84,6 +85,7 @@ export function verify(app) {
                     continue;
                 violations.push({
                     rule: 'cross-frond-dependency',
+                    severity: 'warning',
                     frond: frond.name,
                     subject: subject.name,
                     filePath: subject.filePath,
@@ -96,35 +98,36 @@ export function verify(app) {
             }
         }
         // Rule 2 — an operation parameter that wanted a collector this frond has not
-        // got. `computeBindingPlan` gates the collector branch on the frond's OWN
-        // collector set (`collectorEntityNames`, bootstrap.ts), then falls through to
-        // branch 4, "Everything else — body" (`computeBindingPlan`, binding.ts). So the
-        // parameter does not go missing: it carries what the caller sent. Measured in
-        // tests/collector-frond.test.ts.
-        const own = new Set(frond.collectors.map((c) => c.entityName));
+        // got. The preliminary binding convention can only see this frond's collector
+        // set, so it produces body evidence. EffectiveOperation refuses that evidence
+        // before boot: another frond's collector proves the provenance is not a body.
+        const own = new Set(frond.collectors.map((c) => c.typeName));
         for (const handler of frond.handlers) {
             for (const [opName, op] of handler.operations) {
                 for (const param of op.signature?.params ?? []) {
-                    const wanted = param.type.name.toLowerCase();
+                    // Same key the scan writes and the binding plan looks up — `toLowerCase()`
+                    // here missed a two-word type in BOTH directions: neither confirmed the
+                    // collector was local nor found it elsewhere, so the rule reported nothing.
+                    const wanted = registrationKeyOf(param.type.name);
                     if (own.has(wanted))
                         continue;
                     const elsewhere = collectorFronds.get(wanted);
-                    // No collector anywhere for that type = an ordinary body parameter,
-                    // which is what branch 4 is FOR. Only a collector that exists in the
-                    // wrong place makes the fall-through a lie.
+                    // No collector anywhere for that type may be an ordinary body parameter.
+                    // Only a collector that exists in the wrong place makes that interpretation
+                    // provably false.
                     if (!elsewhere)
                         continue;
                     violations.push({
                         rule: 'collector-in-another-frond',
+                        severity: 'blocking',
                         frond: frond.name,
                         subject: `${handler.ctor.name}.${opName}(${param.name})`,
                         filePath: handler.filePath,
                         dependsOn: { key: collectorKeyOf(wanted), frond: elsewhere, kind: 'collector' },
                         message: `'${param.name}' is typed ${param.type.name}, and the collector that produces one ` +
                             `is declared in frond '${elsewhere}'. A binding plan only sees its own frond's ` +
-                            `collectors, so this parameter falls through to the request body — it receives ` +
-                            `what the CALLER sent. An op that judges it (\`if (${param.name}.role !== 'admin') throw\`) ` +
-                            `is judging the caller's own claim about themselves. ` +
+                            `collectors, so the preliminary body interpretation is invalid. Fougere refuses ` +
+                            `the operation before it can receive what the caller sent. ` +
                             `Move the collector into '${frond.name}'.`,
                     });
                 }

package/dist/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAmChD;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAErF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;QAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU;QAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU;QAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7B,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAsB;IAC3C,OAAO;QACL,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzF,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3F,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,MAAM,CAAC,GAAwB;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvE,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU;YAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,2DAA2D;QAC3D,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChC,0DAA0D;gBAC1D,sEAAsE;gBACtE,0EAA0E;gBAC1E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI;oBAAE,SAAS;gBACzD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;oBACnE,OAAO,EACL,GAAG,OAAO,CAAC,IAAI,eAAe,GAAG,SAAS,QAAQ,CAAC,IAAI,cAAc,QAAQ,CAAC,KAAK,KAAK;wBACxF,0EAA0E;wBAC1E,WAAW,GAAG,QAAQ,KAAK,CAAC,IAAI,gBAAgB,QAAQ,CAAC,KAAK,gBAAgB;wBAC9E,uCAAuC;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,0EAA0E;QAC1E,8EAA8E;QAC9E,gFAAgF;QAChF,8EAA8E;QAC9E,iCAAiC;QACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC9C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;oBAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC7C,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;wBAAE,SAAS;oBAC9B,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC9C,oEAAoE;oBACpE,qEAAqE;oBACrE,4CAA4C;oBAC5C,IAAI,CAAC,SAAS;wBAAE,SAAS;oBACzB,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,4BAA4B;wBAClC,KAAK,EAAE,KAAK,CAAC,IAAI;wBACjB,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG;wBACxD,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;wBAC/E,OAAO,EACL,IAAI,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,wCAAwC;4BACnF,yBAAyB,SAAS,8CAA8C;4BAChF,gFAAgF;4BAChF,qDAAqD,KAAK,CAAC,IAAI,8BAA8B;4BAC7F,sDAAsD;4BACtD,4BAA4B,KAAK,CAAC,IAAI,IAAI;qBAC7C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAwB;IACvD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClH,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,MAAM,uDAAuD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjH,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA4CvD;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAErF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;QAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU;QAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU;QAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7B,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAsB;IAC3C,OAAO;QACL,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzF,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3F,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,MAAM,CAAC,GAA2C;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvE,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU;YAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,2DAA2D;QAC3D,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAChC,0DAA0D;gBAC1D,sEAAsE;gBACtE,0EAA0E;gBAC1E,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI;oBAAE,SAAS;gBACzD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,wBAAwB;oBAC9B,QAAQ,EAAE,SAAS;oBACnB,KAAK,EAAE,KAAK,CAAC,IAAI;oBACjB,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;oBACnE,OAAO,EACL,GAAG,OAAO,CAAC,IAAI,eAAe,GAAG,SAAS,QAAQ,CAAC,IAAI,cAAc,QAAQ,CAAC,KAAK,KAAK;wBACxF,0EAA0E;wBAC1E,WAAW,GAAG,QAAQ,KAAK,CAAC,IAAI,gBAAgB,QAAQ,CAAC,KAAK,gBAAgB;wBAC9E,uCAAuC;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,8EAA8E;QAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC9C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;oBAC/C,2EAA2E;oBAC3E,wEAAwE;oBACxE,4EAA4E;oBAC5E,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClD,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;wBAAE,SAAS;oBAC9B,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC9C,yEAAyE;oBACzE,4EAA4E;oBAC5E,kBAAkB;oBAClB,IAAI,CAAC,SAAS;wBAAE,SAAS;oBACzB,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,4BAA4B;wBAClC,QAAQ,EAAE,UAAU;wBACpB,KAAK,EAAE,KAAK,CAAC,IAAI;wBACjB,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG;wBACxD,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;wBAC/E,OAAO,EACL,IAAI,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,wCAAwC;4BACnF,yBAAyB,SAAS,8CAA8C;4BAChF,iFAAiF;4BACjF,4DAA4D;4BAC5D,4BAA4B,KAAK,CAAC,IAAI,IAAI;qBAC7C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAA2C;IAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClH,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,MAAM,uDAAuD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjH,CAAC"}

package/dist/{call.d.ts → wire/call.d.ts}

@@ -8,7 +8,7 @@
  */
 import { type SchemaDescriptor } from '@fougere/schema';
 import type { InvocationContext } from './invocation.js';
-import type { App } from './types.js';
+import type { App } from '../boot/types.js';
 /** Target of a call — which façade operation, wherever it lives. */
 export interface FrondCall {
     /** Frond name, when the caller knows it. Routing hint only. */
@@ -22,6 +22,29 @@ export interface FrondCall {
 export type Transport = (call: FrondCall, invocation: InvocationContext) => Promise<unknown>;
 /** Reserved namespace — calls the runner answers itself, never a façade. */
 export declare const RPC_ENTITY = "rpc";
+/**
+ * What an `rpc` op answers — the door for what the app says about ITSELF, never about a row.
+ *
+ * `discover` is core's own, registered like any other (`bootstrap.ts`): a package declares
+ * its reading beside it, and an app that installed none serves none.
+ */
+export type RpcAnswer = (invocation: InvocationContext, surface?: string) => unknown;
+/**
+ * Everything a caller's envelope covers — the call as the sender meant it.
+ *
+ * Here and not beside the signing code because it is a CONTRACT: the sender binds it,
+ * the receiver re-presents what arrived, and a frond written in another language reads
+ * this shape without reading our crypto. `body` is bound by digest (arbitrary, possibly
+ * large), the rest by value — which is what keeps a canonical-JSON dependency out.
+ */
+export interface SignedCall {
+    entity: string;
+    op: string;
+    params?: Record<string, unknown>;
+    query?: Record<string, unknown>;
+    body?: unknown;
+    state?: Record<string, unknown>;
+}
 /**
  * One operation, as a stranger meets it — its name, what it is for, what it takes
  * and whether it reads or writes. Everything here already existed on the contract;
@@ -93,6 +116,52 @@ export interface IdentityCard {
         }>;
     }>;
 }
+/** A frond this process knows about, and whether it runs here. */
+export interface FrondPlacement {
+    frond: string;
+    placement: 'local' | 'remote';
+    entities: number;
+    doors: number;
+}
+/** One frond calling another — an edge of the graph, counted where the call was made. */
+export interface Edge {
+    from: string;
+    to: string;
+    count: number;
+    errors: number;
+}
+/**
+ * The shape of the system as ONE process discovered it — the answer to `rpc.topology`.
+ *
+ * Here and not in the package that produces it, for the reason `SignedCall` is here: it
+ * crosses a process boundary, so a reader consumes it without depending on the producer.
+ * `@fougere/observability` fills it; a panel reads it; neither imports the other.
+ *
+ * Nothing in it is declared — a frond is `local` because this process scanned it, `remote`
+ * because it answered a call nobody here hosts. `remotes:` states an intent, and the two
+ * disagree exactly when something is misconfigured.
+ */
+export interface TopologyReport {
+    /** When this process started counting — an edge count is read against it. */
+    since: number;
+    /** Calls running right now: the one signal a static shape cannot carry. */
+    active: number;
+    fronds: FrondPlacement[];
+    edges: Edge[];
+}
+/**
+ * The shape a card must have to be walked — `fronds`, and each frond's `doors`.
+ *
+ * A card crosses a process boundary, so it is judged like anything else that does.
+ * The check lives beside the type because two readers walk it: the boot indexes a
+ * remote's doors, and `fougere sync` writes classes from them. `TypeError:
+ * card.fronds is not iterable` was what a malformed card produced at the boot,
+ * naming neither the remote nor the address.
+ *
+ * The descriptor behind a door is NOT checked here — `reconstruct` refuses it, and
+ * only where one is consumed.
+ */
+export declare function assertIdentityCard(value: unknown, source: string): IdentityCard;
 /**
  * The door built in front of a handler — the framework's second port, after `EntityOrm`.
  *

package/dist/wire/call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.d.ts","sourceRoot":"","sources":["../../src/wire/call.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAA8B,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAG5C,oEAAoE;AACpE,MAAM,WAAW,SAAS;IACxB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,2FAA2F;AAC3F,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE7F,4EAA4E;AAC5E,eAAO,MAAM,UAAU,QAAQ,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;AAErF;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,iEAAiE;IACjE,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,mFAAmF;IACnF,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAC1D;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,KAAK,CAAC;YACX,IAAI,EAAE,MAAM,CAAC;YACb,GAAG,EAAE,MAAM,EAAE,CAAC;YACd;;;;;eAKG;YACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;SAC3B,CAAC,CAAC;QACH;;;;;;;;;;;;;;;;WAgBG;QACH,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;SAAE,CAAC,CAAC;KAC3D,CAAC,CAAC;CACJ;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yFAAyF;AACzF,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,KAAK,EAAE,IAAI,EAAE,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAS/E;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,MAAM,CAAC,CAAC,IAAI;KACrB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,MAAM,CAAC,GACtD,CAAC,UAAU,CAAC,EAAE,iBAAiB,KAAK,CAAC,GACrC,KAAK;CACV,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAExE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,CA6CvE;AAqCD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAEvE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAErE"}

package/dist/{call.js → wire/call.js}

@@ -7,11 +7,44 @@
  * they never reshape it.
  */
 import { describe as describeSchema } from '@fougere/schema';
-import { factsAnnouncedBy } from './emit.js';
-import { FougereError, ErrorCode } from './middleware.js';
-import { resolveIsReadOp } from './operation.js';
+import { factsAnnouncedBy } from '../emit.js';
+import { FougereError, ErrorCode } from './errors.js';
+import { createTransportEntry } from '../entry/TransportEntry.js';
 /** Reserved namespace — calls the runner answers itself, never a façade. */
 export const RPC_ENTITY = 'rpc';
+/**
+ * The shape a card must have to be walked — `fronds`, and each frond's `doors`.
+ *
+ * A card crosses a process boundary, so it is judged like anything else that does.
+ * The check lives beside the type because two readers walk it: the boot indexes a
+ * remote's doors, and `fougere sync` writes classes from them. `TypeError:
+ * card.fronds is not iterable` was what a malformed card produced at the boot,
+ * naming neither the remote nor the address.
+ *
+ * The descriptor behind a door is NOT checked here — `reconstruct` refuses it, and
+ * only where one is consumed.
+ */
+export function assertIdentityCard(value, source) {
+    const card = value;
+    const fronds = Array.isArray(card?.fronds) ? card.fronds : undefined;
+    if (!fronds)
+        throw cardRefusal(source, 'no fronds array');
+    for (const frond of fronds) {
+        if (!frond || typeof frond.name !== 'string')
+            throw cardRefusal(source, 'a frond with no name');
+        if (!Array.isArray(frond.doors))
+            throw cardRefusal(source, `frond '${frond.name}' has no valid doors array`);
+    }
+    return card;
+}
+function cardRefusal(source, what) {
+    return new FougereError({
+        code: ErrorCode.INTERNAL_ERROR,
+        message: `${source} answered an invalid identity card: ${what}.\n`
+            + `  A card is what tells this process what the other one hosts, so nothing can be routed from it.\n`
+            + `  - Check that the address serves a Fougere app, and that its version still speaks this card.`,
+    });
+}
 /**
  * The container key of a façade — THE one place that spells the format.
  *
@@ -55,11 +88,7 @@ export function contractsKeyOf(entityName, surface) {
  * named surface, an entity with no façade of its own is simply not there.
  */
 export function identityCardOf(app, surface) {
-    /**
-     * Every entity of every frond, by name — a fact is announced where it is USED, which is
-     * not always where it is declared. Same reason the boot builds this map to judge one.
-     */
-    const declared = new Map(app.fronds.flatMap((frond) => frond.entities.map((entity) => [entity.name, entity.entityClass])));
+    const declared = app.fronds.schemas();
     return {
         fronds: app.fronds.map((frond) => {
             // What the frond answers to, not what it stores. This walked `frond.entities`, so a
@@ -111,29 +140,23 @@ function facadeOps(app, entityName, surface) {
     catch {
         return [];
     }
-    // The façade is the list of names; the contracts are the terms. Registered
-    // together, so a door that serves fewer ops also describes fewer.
-    let contracts;
-    try {
-        contracts = app.container.resolve(contractsKeyOf(entityName, surface));
-    }
-    catch {
-        contracts = undefined;
+    // The façade is the list of names; the model is the resolved terms.
+    const effective = app.operationsFor(entityName, surface);
+    if (!effective) {
+        throw new Error(`Facade '${facadeKeyOf(entityName, surface)}' exists without an effective operation table.`);
     }
-    // `resolveIsReadOp` takes the overrides for a reason: `kind` is exactly the field
-    // frond.config.ts exists to state, for the op whose name the convention reads wrong.
-    // Called without them, the card announced `query` for an op its own author had
-    // declared a command — and the card is what a remote consumer builds its calls on.
-    const overrides = app.fronds.find((f) => f.entities.some((e) => e.name === entityName))?.operationsOverrides;
     return Object.keys(facade).map((name) => {
-        const contract = contracts?.get(name);
+        const contract = effective.get(name);
+        if (!contract) {
+            throw new Error(`Facade '${facadeKeyOf(entityName, surface)}' serves '${name}' without an effective contract.`);
+        }
         return {
             name,
             ...(contract?.description && { description: contract.description }),
             ...(contract?.input && { input: describeSchema(contract.input, name) }),
             ...(contract?.output && { output: describeSchema(contract.output, name) }),
             ...(contract?.cardinality && { cardinality: contract.cardinality }),
-            kind: resolveIsReadOp(name, overrides) ? 'query' : 'command',
+            kind: contract.kind,
         };
     });
 }
@@ -144,7 +167,7 @@ function facadeOps(app, entityName, surface) {
  * judged here. A miss is a typed NOT_FOUND, never a forward to another remote.
  */
 export function createLocalRunner(app, surface) {
-    return runnerFor(app, (key) => app.container.resolve(key), surface);
+    return createTransportEntry(app.local, surface);
 }
 /**
  * Build the app runner — same judgment, but resolution follows the app's
@@ -159,56 +182,6 @@ export function createLocalRunner(app, surface) {
  * is simply which URL `remotes:` points at.
  */
 export function createAppRunner(app, surface) {
-    return runnerFor(app, (key) => app.resolve(key), surface);
-}
-function runnerFor(app, resolveFacade, surface) {
-    return async (call, invocation) => {
-        if (call.entity === RPC_ENTITY) {
-            if (call.op === 'discover')
-                return identityCardOf(app, surface);
-            throw new FougereError({
-                code: ErrorCode.NOT_FOUND,
-                message: `Unknown rpc operation '${call.op}'`,
-                entity: RPC_ENTITY,
-                operation: call.op,
-            });
-        }
-        let facade;
-        try {
-            facade = resolveFacade(facadeKeyOf(call.entity, surface));
-        }
-        catch {
-            // What IS hosted, so a wrong entity name (or a missing frond) reads at a glance.
-            const hosted = app.fronds.flatMap((frond) => frond.entities.map((e) => e.name)).sort();
-            throw new FougereError({
-                code: ErrorCode.NOT_FOUND,
-                message: (surface
-                    ? `Entity '${call.entity}' is not served on surface '${surface}'`
-                    : `Entity '${call.entity}' is not hosted here`)
-                    + (hosted.length ? `. Hosted here: ${hosted.join(', ')}.` : '. This app hosts no entity.'),
-                entity: call.entity,
-                operation: call.op,
-            });
-        }
-        // Own properties only: a façade is a plain object, so a bare lookup reaches
-        // Object.prototype — `constructor` echoed the invocation back, `toString`
-        // answered. An op is what the façade declares, not what JS inherits.
-        const fn = Object.hasOwn(facade, call.op) ? facade[call.op] : undefined;
-        if (typeof fn !== 'function') {
-            // Name what IS served: the façade is right here, and `op` is a bare string all
-            // the way from `useQuery` — so a typo is the ordinary case, not the exotic one.
-            const served = Object.keys(facade).filter((key) => typeof facade[key] === 'function');
-            throw new FougereError({
-                code: ErrorCode.NOT_FOUND,
-                message: `Unknown operation '${call.op}' on '${call.entity}'. `
-                    + (served.length ? `It serves ${served.join(', ')}.` : 'It serves nothing.'),
-                entity: call.entity,
-                operation: call.op,
-            });
-        }
-        // A call's result is JSON-shaped: undefined has no wire form, it
-        // normalizes to null at the contract edge — identically on every transport.
-        return (await fn(invocation)) ?? null;
-    };
+    return createTransportEntry(app, surface);
 }
 //# sourceMappingURL=call.js.map

package/dist/wire/call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.js","sourceRoot":"","sources":["../../src/wire/call.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAyB,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAelE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC;AAqIhC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,KAAiC,CAAC;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,MAAM;QAAE,MAAM,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,IAAI,4BAA4B,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,IAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY;IAC/C,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,OAAO,EACL,GAAG,MAAM,uCAAuC,IAAI,KAAK;cACvD,mGAAmG;cACnG,+FAA+F;KACpG,CAAC,CAAC;AACL,CAAC;AAyBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,OAAgB;IAC9D,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,UAAU,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,SAAS,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,OAAgB;IACjE,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ,EAAE,OAAgB;IACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAEtC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/B,oFAAoF;YACpF,mFAAmF;YACnF,oFAAoF;YACpF,oFAAoF;YACpF,wEAAwE;YACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;oBAC5B,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC9C,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;iBACpD,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;oBACnC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,EAAE,CAAC;oBAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACrC,OAAO,CAAC;4BACN,IAAI,EAAE,OAAO;4BACb,GAAG;4BACH,sEAAsE;4BACtE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC3E,CAAC,CAAC;gBACL,CAAC,CAAC;gBACF;;;;;;;;mBAQG;gBACH,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACvC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzF,CAAC,CAAC;aACH,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAQ,EAAE,UAAkB,EAAE,OAAgB;IAC/D,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAY,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,WAAW,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,gDAAgD,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,WAAW,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,aAAa,IAAI,kCAAkC,CAC/F,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI;YACJ,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;YACnE,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAQ,EAAE,OAAgB;IAC1D,OAAO,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,GAAQ,EAAE,OAAgB;IACxD,OAAO,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/{middleware.d.ts → wire/errors.d.ts}

@@ -1,22 +1,12 @@
 /**
- * App-level middleware — intercepts handler facade operations.
+ * The error vocabulary — what a refusal IS, independently of who hears it.
  *
- * Works regardless of entry point (HTTP, Nitro, event bus, CLI, tests).
+ * It travels on the wire (`toJSON`/`fromJSON`) and through the browser-safe
+ * `@fougere/core/contract`, so nothing here may know about HTTP, a logger, or a
+ * middleware chain. Its HTTP reading is one file over, in `http-error.ts`; it used
+ * to live in `middleware.ts`, which named the one concept this is not.
  */
-export interface OperationContext {
-    /** Entity name (e.g. 'product'). */
-    entity: string;
-    /** Operation name (e.g. 'create', 'findById', 'searchByTitle'). */
-    operation: string;
-    /** Arguments passed to the operation. */
-    args: unknown[];
-    /** Extensible bag — middlewares deposit data here (user, permissions, etc.). */
-    state: Record<string, unknown>;
-    /** Transport-agnostic invocation context (params, query, body, state). */
-    invocation?: import('./invocation.js').InvocationContext;
-}
-export type AppNext = () => Promise<unknown>;
-export type AppMiddleware = (ctx: OperationContext, next: AppNext) => Promise<unknown>;
+import type { ValidationError } from '@fougere/schema';
 /** Semantic error codes — transport-agnostic. Each bridge maps them to its own format. */
 export declare enum ErrorCode {
     VALIDATION_FAILED = "VALIDATION_FAILED",
@@ -69,7 +59,16 @@ export declare class FougereError extends Error {
     static fromJSON(json: unknown): FougereError;
 }
 /**
- * Execute a middleware chain (onion model) then the handler.
+ * The refusals behind a VALIDATION_FAILED, or nothing — the ONE place that reads
+ * `details` under that code.
+ *
+ * `details` is `unknown` because it is genuinely polymorphic: `StorageGuard.judge` puts a
+ * `string[]` there under INTERNAL_ERROR, `fromJSON` puts `{ originalCode, details }`
+ * there for a code it does not know. So the shape is not the field's, it is a reading
+ * of the PAIR (code, details) — which is why this is a reader and not a narrower type.
+ *
+ * It judges rather than casts: five call sites asserted `{ path, message }[]` by hand,
+ * and a malformed VALIDATION_FAILED would have been accepted as structured refusals.
  */
-export declare function runMiddlewares(middlewares: AppMiddleware[], ctx: OperationContext, handler: AppNext): Promise<unknown>;
-//# sourceMappingURL=middleware.d.ts.map
+export declare function validationErrorsOf(error: unknown): ValidationError[] | undefined;
+//# sourceMappingURL=errors.d.ts.map

package/dist/wire/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/wire/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAIvD,0FAA0F;AAC1F,oBAAY,SAAS;IAEnB,iBAAiB,sBAAsB;IACvC,WAAW,gBAAgB;IAG3B,YAAY,iBAAiB;IAC7B,SAAS,cAAc;IAGvB,SAAS,cAAc;IACvB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,kBAAkB,uBAAuB;IAGzC,mBAAmB,wBAAwB;IAC3C,iBAAiB,sBAAsB;IACvC,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,eAAe,oBAAoB;IAGnC,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,WAAW,gBAAgB;IAC3B,mBAAmB,wBAAwB;IAC3C,eAAe,oBAAoB;CACpC;AAID,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,OAAO,EAAE,mBAAmB;IASxC,MAAM;;;;;;;IAUN;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY;CAW7C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,EAAE,GAAG,SAAS,CAWhF"}

package/dist/{middleware.js → wire/errors.js}

@@ -1,7 +1,10 @@
 /**
- * App-level middleware — intercepts handler facade operations.
+ * The error vocabulary — what a refusal IS, independently of who hears it.
  *
- * Works regardless of entry point (HTTP, Nitro, event bus, CLI, tests).
+ * It travels on the wire (`toJSON`/`fromJSON`) and through the browser-safe
+ * `@fougere/core/contract`, so nothing here may know about HTTP, a logger, or a
+ * middleware chain. Its HTTP reading is one file over, in `http-error.ts`; it used
+ * to live in `middleware.ts`, which named the one concept this is not.
  */
 // ── ErrorCode ──────────────────────────────────
 /** Semantic error codes — transport-agnostic. Each bridge maps them to its own format. */
@@ -72,18 +75,27 @@ export class FougereError extends Error {
         });
     }
 }
-// ── Runner ──────────────────────────────────────
 /**
- * Execute a middleware chain (onion model) then the handler.
+ * The refusals behind a VALIDATION_FAILED, or nothing — the ONE place that reads
+ * `details` under that code.
+ *
+ * `details` is `unknown` because it is genuinely polymorphic: `StorageGuard.judge` puts a
+ * `string[]` there under INTERNAL_ERROR, `fromJSON` puts `{ originalCode, details }`
+ * there for a code it does not know. So the shape is not the field's, it is a reading
+ * of the PAIR (code, details) — which is why this is a reader and not a narrower type.
+ *
+ * It judges rather than casts: five call sites asserted `{ path, message }[]` by hand,
+ * and a malformed VALIDATION_FAILED would have been accepted as structured refusals.
  */
-export function runMiddlewares(middlewares, ctx, handler) {
-    let index = 0;
-    const next = () => {
-        if (index < middlewares.length) {
-            return middlewares[index++](ctx, next);
-        }
-        return handler();
-    };
-    return next();
+export function validationErrorsOf(error) {
+    if (!(error instanceof FougereError) || error.code !== ErrorCode.VALIDATION_FAILED)
+        return undefined;
+    const { details } = error;
+    if (!Array.isArray(details))
+        return undefined;
+    const refusals = details.filter((entry) => typeof entry === 'object' && entry !== null
+        && typeof entry.path === 'string'
+        && typeof entry.message === 'string');
+    return refusals.length === details.length ? refusals : undefined;
 }
-//# sourceMappingURL=middleware.js.map
+//# sourceMappingURL=errors.js.map

package/dist/wire/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/wire/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,kDAAkD;AAElD,0FAA0F;AAC1F,MAAM,CAAN,IAAY,SA6BX;AA7BD,WAAY,SAAS;IACnB,QAAQ;IACR,oDAAuC,CAAA;IACvC,wCAA2B,CAAA;IAE3B,OAAO;IACP,0CAA6B,CAAA;IAC7B,oCAAuB,CAAA;IAEvB,YAAY;IACZ,oCAAuB,CAAA;IACvB,0BAAa,CAAA;IACb,kCAAqB,CAAA;IACrB,8BAAiB,CAAA;IACjB,sDAAyC,CAAA;IAEzC,SAAS;IACT,wDAA2C,CAAA;IAC3C,oDAAuC,CAAA;IACvC,0DAA6C,CAAA;IAC7C,oDAAuC,CAAA;IACvC,gDAAmC,CAAA;IAEnC,SAAS;IACT,8CAAiC,CAAA;IACjC,gDAAmC,CAAA;IACnC,wCAA2B,CAAA;IAC3B,wDAA2C,CAAA;IAC3C,gDAAmC,CAAA;AACrC,CAAC,EA7BW,SAAS,KAAT,SAAS,QA6BpB;AAaD,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAY;IAChB,MAAM,CAAU;IAChB,SAAS,CAAU;IACnB,OAAO,CAAW;IAE3B,YAAY,OAA4B;QACtC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAa;QAC3B,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;QAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAiB,CAAC,CAAC;QACvE,OAAO,IAAI,YAAY,CAAC;YACtB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,GAAG,CAAC,IAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc;YAChE,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;YACxE,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC/D,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACxE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;SAChF,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACrG,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,KAAK,EAA4B,EAAE,CAClC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;WACxC,OAAQ,KAAyB,CAAC,IAAI,KAAK,QAAQ;WACnD,OAAQ,KAAyB,CAAC,OAAO,KAAK,QAAQ,CAC5D,CAAC;IACF,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC"}

package/dist/{errors.d.ts → wire/http-error.d.ts}

@@ -1,11 +1,10 @@
 /**
- * HTTP error mapping — used by HTTP bridges (REST, Next, Inertia).
+ * HTTP reading of an error — used by HTTP bridges (REST, Next, Inertia).
  *
- * Not imported by GraphQL, CLI, or event bus bridges.
+ * Not imported by GraphQL, CLI, or event bus bridges. The vocabulary it projects
+ * is in `errors.ts` and knows nothing of this file.
  */
-import { FougereError, ErrorCode } from './middleware.js';
-/** Map a FougereError code to its HTTP status. */
-export declare function httpStatusFor(code: ErrorCode): number;
+import { FougereError } from './errors.js';
 /**
  * Serialize an application error for an untrusted caller.
  *
@@ -19,4 +18,4 @@ export declare function toHttpError(err: unknown): {
     status: number;
     body: ReturnType<FougereError['toJSON']>;
 };
-//# sourceMappingURL=errors.d.ts.map
+//# sourceMappingURL=http-error.d.ts.map

package/dist/wire/http-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-error.d.ts","sourceRoot":"","sources":["../../src/wire/http-error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAa,MAAM,aAAa,CAAC;AAsCtD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAUnF;AAED,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;CAAE,CAYtG"}

package/dist/{errors.js → wire/http-error.js}

@@ -1,10 +1,11 @@
 /**
- * HTTP error mapping — used by HTTP bridges (REST, Next, Inertia).
+ * HTTP reading of an error — used by HTTP bridges (REST, Next, Inertia).
  *
- * Not imported by GraphQL, CLI, or event bus bridges.
+ * Not imported by GraphQL, CLI, or event bus bridges. The vocabulary it projects
+ * is in `errors.ts` and knows nothing of this file.
  */
-import { FougereError, ErrorCode } from './middleware.js';
-import { Logger } from './builtins/logger.js';
+import { FougereError, ErrorCode } from './errors.js';
+import { Logger } from '../builtins/logger.js';
 /**
  * An INTERNAL_ERROR is the one class of error whose message never leaves: it was not
  * written for a caller and may quote a path, a query or a row. Masking it is right, and
@@ -35,7 +36,7 @@ const HTTP_STATUS = {
     [ErrorCode.GATEWAY_TIMEOUT]: 504,
 };
 /** Map a FougereError code to its HTTP status. */
-export function httpStatusFor(code) {
+function httpStatusFor(code) {
     return HTTP_STATUS[code] ?? 500;
 }
 /**
@@ -71,4 +72,4 @@ export function toHttpError(err) {
     });
     return { status: 500, body: toPublicError(framed) };
 }
-//# sourceMappingURL=errors.js.map
+//# sourceMappingURL=http-error.js.map

package/dist/wire/http-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-error.js","sourceRoot":"","sources":["../../src/wire/http-error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C;;;;;;GAMG;AACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;AAEhC,MAAM,WAAW,GAA8B;IAC7C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG;IAC5B,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,GAAG;IAC7B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG;IAC1B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG;IAC1B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG;IACrB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG;IACzB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG;IACvB,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,GAAG;IACnC,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACpC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,GAAG;IACrC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;IAChC,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,GAAG;IAC/B,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;IAChC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG;IAC5B,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACpC,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;CACjC,CAAC;AAEF,kDAAkD;AAClD,SAAS,aAAa,CAAC,IAAe;IACpC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAClC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAiB;IAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,OAAO,EAAE,gBAAgB;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,kFAAkF;IAClF,wEAAwE;IACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,OAAO,EAAG,GAA4B,EAAE,OAAO,IAAI,gBAAgB;QACnE,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/wire/invocation.d.ts

@@ -0,0 +1,4 @@
+/** Compatibility entry point. New code imports the invocation value from contract. */
+export { Invocation, EMPTY_INVOCATION, canonicalInvocation, } from '../contract/Invocation.js';
+export type { InvocationContext, InvocationInput, } from '../contract/Invocation.js';
+//# sourceMappingURL=invocation.d.ts.map

package/dist/wire/invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../src/wire/invocation.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,iBAAiB,EACjB,eAAe,GAChB,MAAM,2BAA2B,CAAC"}