@fougere/core 0.2.0-alpha.2 → 0.3.0-alpha.0

package/dist/config-loader.js

@@ -1,15 +1,18 @@
-import { resolve, join } from 'node:path';
+import { resolve } from 'node:path';
 import { existsSync } from 'node:fs';
-import { readdir } from 'node:fs/promises';
-import { getModuleLoader } from './scanner.js';
+import { getModuleLoader } from './loader.js';
 // ── Loading ──────────────────────────────────────
 const CONFIG_FILES = ['fougere.config.ts', 'fougere.config.js', 'fougere.config.mjs'];
-async function loadConfigFrom(dir) {
+async function loadConfigFrom(dir, fresh) {
     const loader = getModuleLoader();
     for (const file of CONFIG_FILES) {
         const path = resolve(dir, file);
         if (existsSync(path)) {
-            const mod = await loader(path);
+            // A module is cached by its specifier, so a second load of an EDITED file hands
+            // back what was read the first time — measured, and it made re-reading a config
+            // return the config already in force. The loader owns its own cache, so it is the
+            // one told; the old module stays in memory, re-reading being for a change.
+            const mod = await loader(path, fresh ? { fresh } : undefined);
             return (mod.default ?? mod);
         }
     }
@@ -17,28 +20,13 @@ async function loadConfigFrom(dir) {
 }
 /**
  * Load the root fougere.config.{ts,js,mjs} from the given directory.
+ *
+ * `fresh` re-reads a file that may have changed since the last load — what a host
+ * calls when it decides to reconsider its config, and the only way `applyConfig` has
+ * anything new to apply.
  */
-export async function loadConfig(root) {
-    return loadConfigFrom(root);
-}
-/**
- * Load per-frond config files from each frond's directory.
- */
-export async function loadFrondConfigs(root, frondsDir = 'fronds') {
-    const dir = join(root, frondsDir);
-    if (!existsSync(dir))
-        return {};
-    const entries = await readdir(dir, { withFileTypes: true });
-    const configs = {};
-    for (const entry of entries) {
-        if (!entry.isDirectory())
-            continue;
-        const frondConfig = await loadConfigFrom(join(dir, entry.name));
-        if (Object.keys(frondConfig).length > 0) {
-            configs[entry.name] = frondConfig;
-        }
-    }
-    return configs;
+export async function loadConfig(root, options) {
+    return loadConfigFrom(root, options?.fresh);
 }
 // ── Merging ──────────────────────────────────────
 /**
@@ -47,31 +35,13 @@ export async function loadFrondConfigs(root, frondsDir = 'fronds') {
  * or redirects a frond without erasing the others. Used for workspace→app and
  * for global→CLI alike.
  */
-export function mergeGlobal(base, override) {
+function mergeGlobal(base, override) {
     const merged = { ...base, ...override };
     if (base.remotes || override.remotes) {
         merged.remotes = { ...base.remotes, ...override.remotes };
     }
     return merged;
 }
-/**
- * Merge configs with cascade: global → frond → CLI overrides.
- *
- * Returns a ResolvedConfig with the merged global and per-frond overrides.
- */
-export function mergeConfig(global, frondConfigs, cliOverrides = {}) {
-    return { global: mergeGlobal(global, cliOverrides), fronds: frondConfigs };
-}
-/**
- * Get the effective config for a specific frond.
- * Cascade: global → frond override.
- */
-export function configForFrond(resolved, frondName) {
-    const frondOverride = resolved.fronds[frondName];
-    if (!frondOverride)
-        return resolved.global;
-    return { ...resolved.global, ...frondOverride };
-}
 /**
  * Load config along the workspace→app frontier. The workspace-root config is
  * the base (canonical topology: `remotes`, shared `db`); the app-root config
@@ -85,13 +55,4 @@ export async function loadCascadedConfig(workspaceRoot, appRoot) {
         return base;
     return mergeGlobal(base, await loadConfig(appRoot));
 }
-/**
- * Load everything: root config + frond configs + merge with CLI overrides.
- */
-export async function resolveConfig(root, cliOverrides = {}) {
-    const global = await loadConfig(root);
-    const frondsDir = cliOverrides.frondsDir ?? global.frondsDir ?? 'fronds';
-    const frondConfigs = await loadFrondConfigs(root, frondsDir);
-    return mergeConfig(global, frondConfigs, cliOverrides);
-}
 //# sourceMappingURL=config-loader.js.map

package/dist/config-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AA6D/C,oDAAoD;AAEpD,MAAM,YAAY,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;AAEtF,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,CAAE,GAAmC,CAAC,OAAO,IAAI,GAAG,CAAkB,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAS,GAAG,QAAQ;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAkC,EAAE,CAAC;IAElD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oDAAoD;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAmB,EAAE,QAAgC;IAC/E,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,MAAqB,EACrB,YAA2C,EAC3C,eAAuC,EAAE;IAEzC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,SAAiB;IACxE,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,aAAa;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,aAAqB,EAAE,OAAe;IAC7E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,eAAuC,EAAE;IAEzC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC;IACzE,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7D,OAAO,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../src/config-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAIrC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAkF9C,oDAAoD;AAEpD,MAAM,YAAY,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;AAEtF,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,KAAe;IACxD,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,gFAAgF;YAChF,gFAAgF;YAChF,kFAAkF;YAClF,2EAA2E;YAC3E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9D,OAAO,CAAE,GAAmC,CAAC,OAAO,IAAI,GAAG,CAAkB,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,OAA6B;IAC1E,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,oDAAoD;AAEpD;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAmB,EAAE,QAAgC;IACxE,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,aAAqB,EAAE,OAAe;IAC7E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/contract/Call.d.ts

@@ -0,0 +1,10 @@
+import { Invocation, type InvocationInput } from './Invocation.js';
+import type { RouteAddress } from './RouteAddress.js';
+/** One normalized request: where it goes and what the caller supplied. */
+export declare class Call {
+    readonly address: RouteAddress;
+    readonly invocation: Invocation;
+    constructor(address: RouteAddress, invocation?: InvocationInput);
+    withInvocation(invocation: Invocation): Call;
+}
+//# sourceMappingURL=Call.d.ts.map

package/dist/contract/Call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Call.d.ts","sourceRoot":"","sources":["../../src/contract/Call.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,0EAA0E;AAC1E,qBAAa,IAAI;IACf,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;gBAEpB,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,eAAe;IAM/D,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;CAG7C"}

package/dist/contract/Call.js

@@ -0,0 +1,15 @@
+import { Invocation } from './Invocation.js';
+/** One normalized request: where it goes and what the caller supplied. */
+export class Call {
+    address;
+    invocation;
+    constructor(address, invocation) {
+        this.address = address;
+        this.invocation = Invocation.from(invocation);
+        Object.freeze(this);
+    }
+    withInvocation(invocation) {
+        return new Call(this.address, invocation);
+    }
+}
+//# sourceMappingURL=Call.js.map

package/dist/contract/Call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Call.js","sourceRoot":"","sources":["../../src/contract/Call.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAwB,MAAM,iBAAiB,CAAC;AAGnE,0EAA0E;AAC1E,MAAM,OAAO,IAAI;IACN,OAAO,CAAe;IACtB,UAAU,CAAa;IAEhC,YAAY,OAAqB,EAAE,UAA4B;QAC7D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,cAAc,CAAC,UAAsB;QACnC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/contract/Invocation.d.ts

@@ -0,0 +1,27 @@
+export interface InvocationContext {
+    params: Record<string, unknown>;
+    query: Record<string, unknown>;
+    body: unknown;
+    state: Record<string, unknown>;
+    trace?: string;
+    identity?: string;
+    caller?: string;
+}
+export type InvocationInput = Partial<InvocationContext>;
+/** Canonical invocation shared by every entry and transport. */
+export declare class Invocation implements InvocationContext {
+    readonly params: Record<string, unknown>;
+    readonly query: Record<string, unknown>;
+    readonly body: unknown;
+    readonly state: Record<string, unknown>;
+    readonly trace?: string;
+    readonly identity?: string;
+    readonly caller?: string;
+    private constructor();
+    static from(input?: InvocationInput): Invocation;
+    withBody(body: unknown): Invocation;
+    withState(state: Record<string, unknown>): Invocation;
+}
+export declare const EMPTY_INVOCATION: Invocation;
+export declare function canonicalInvocation(input?: InvocationInput): Invocation;
+//# sourceMappingURL=Invocation.d.ts.map

package/dist/contract/Invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Invocation.d.ts","sourceRoot":"","sources":["../../src/contract/Invocation.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAqBzD,gEAAgE;AAChE,qBAAa,UAAW,YAAW,iBAAiB;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,OAAO;IAaP,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,UAAU;IAIhD,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU;IAInC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU;CAGtD;AAED,eAAO,MAAM,gBAAgB,YAAoB,CAAC;AAElD,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,UAAU,CAEvE"}

package/dist/contract/Invocation.js

@@ -0,0 +1,59 @@
+function canonicalValue(value) {
+    if (value === null || value === undefined || typeof value !== 'object')
+        return value;
+    if (Array.isArray(value))
+        return Object.freeze(value.map(canonicalValue));
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        return value;
+    return canonicalRecord(value);
+}
+function canonicalRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return Object.freeze({});
+    const result = {};
+    for (const [key, member] of Object.entries(value)) {
+        if (member !== undefined)
+            result[key] = canonicalValue(member);
+    }
+    return Object.freeze(result);
+}
+/** Canonical invocation shared by every entry and transport. */
+export class Invocation {
+    params;
+    query;
+    body;
+    state;
+    trace;
+    identity;
+    caller;
+    constructor(input) {
+        this.params = canonicalRecord(input.params);
+        this.query = canonicalRecord(input.query);
+        this.body = canonicalValue(input.body);
+        // State is host-owned and may still be enriched by existing middlewares. Moving it
+        // to immutable lifecycle context is a separate migration.
+        this.state = input.state ?? {};
+        if (input.trace !== undefined)
+            this.trace = input.trace;
+        if (input.identity !== undefined)
+            this.identity = input.identity;
+        if (input.caller !== undefined)
+            this.caller = input.caller;
+        Object.freeze(this);
+    }
+    static from(input) {
+        return input instanceof Invocation ? input : new Invocation(input ?? {});
+    }
+    withBody(body) {
+        return new Invocation({ ...this, body });
+    }
+    withState(state) {
+        return new Invocation({ ...this, state });
+    }
+}
+export const EMPTY_INVOCATION = Invocation.from();
+export function canonicalInvocation(input) {
+    return Invocation.from(input);
+}
+//# sourceMappingURL=Invocation.js.map

package/dist/contract/Invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Invocation.js","sourceRoot":"","sources":["../../src/contract/Invocation.ts"],"names":[],"mappings":"AAYA,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAE1E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE1F,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,gEAAgE;AAChE,MAAM,OAAO,UAAU;IACZ,MAAM,CAA0B;IAChC,KAAK,CAA0B;IAC/B,IAAI,CAAU;IACd,KAAK,CAA0B;IAC/B,KAAK,CAAU;IACf,QAAQ,CAAU;IAClB,MAAM,CAAU;IAEzB,YAAoB,KAAsB;QACxC,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,mFAAmF;QACnF,0DAA0D;QAC1D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACxD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAuB;QACjC,OAAO,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,QAAQ,CAAC,IAAa;QACpB,OAAO,IAAI,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,SAAS,CAAC,KAA8B;QACtC,OAAO,IAAI,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;AAElD,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/dist/contract/RouteAddress.d.ts

@@ -0,0 +1,17 @@
+export interface RouteAddressInput {
+    entity: string;
+    operation: string;
+    surface?: string;
+}
+/** Canonical identity of one callable operation. */
+export declare class RouteAddress {
+    readonly entity: string;
+    readonly operation: string;
+    readonly surface?: string;
+    constructor(input: RouteAddressInput);
+    key(): string;
+    equals(other: RouteAddress): boolean;
+    toString(): string;
+    toJSON(): RouteAddressInput;
+}
+//# sourceMappingURL=RouteAddress.d.ts.map

package/dist/contract/RouteAddress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteAddress.d.ts","sourceRoot":"","sources":["../../src/contract/RouteAddress.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAWD,oDAAoD;AACpD,qBAAa,YAAY;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBAEd,KAAK,EAAE,iBAAiB;IAOpC,GAAG,IAAI,MAAM;IAIb,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO;IAIpC,QAAQ,IAAI,MAAM;IAKlB,MAAM,IAAI,iBAAiB;CAO5B"}

package/dist/contract/RouteAddress.js

@@ -0,0 +1,38 @@
+function required(value, name) {
+    if (value.trim().length === 0)
+        throw new TypeError(`Route ${name} cannot be empty`);
+    return value;
+}
+function optional(value, name) {
+    return value === undefined ? undefined : required(value, name);
+}
+/** Canonical identity of one callable operation. */
+export class RouteAddress {
+    entity;
+    operation;
+    surface;
+    constructor(input) {
+        this.entity = required(input.entity, 'entity');
+        this.operation = required(input.operation, 'operation');
+        this.surface = optional(input.surface, 'surface');
+        Object.freeze(this);
+    }
+    key() {
+        return JSON.stringify([this.surface ?? null, this.entity, this.operation]);
+    }
+    equals(other) {
+        return this.key() === other.key();
+    }
+    toString() {
+        const audience = this.surface ? `${this.surface}/` : '';
+        return `${audience}${this.entity}.${this.operation}`;
+    }
+    toJSON() {
+        return {
+            entity: this.entity,
+            operation: this.operation,
+            ...(this.surface !== undefined ? { surface: this.surface } : {}),
+        };
+    }
+}
+//# sourceMappingURL=RouteAddress.js.map

package/dist/contract/RouteAddress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteAddress.js","sourceRoot":"","sources":["../../src/contract/RouteAddress.ts"],"names":[],"mappings":"AAMA,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,oDAAoD;AACpD,MAAM,OAAO,YAAY;IACd,MAAM,CAAS;IACf,SAAS,CAAS;IAClB,OAAO,CAAU;IAE1B,YAAY,KAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,KAAmB;QACxB,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;IACvD,CAAC;IAED,MAAM;QACJ,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;IACJ,CAAC;CACF"}

package/dist/contract.d.ts

@@ -1,19 +1,16 @@
-/**
- * Contract surface — what a sender needs to speak to a receiver, and
- * nothing that assumes a runtime: the error vocabulary, the invocation
- * shape, the call value, the naming convention.
- *
- * Browser-safe by design: no node builtin may enter this module's import
- * graph. Published as the `@fougere/core/contract` subpath so client
- * bundles never touch the full index (scanner, config loader).
- */
-import { type InvocationContext } from './invocation.js';
-import type { FrondCall } from './call.js';
-export { FougereError, ErrorCode } from './middleware.js';
-export type { FougereErrorOptions } from './middleware.js';
-export { EMPTY_INVOCATION } from './invocation.js';
-export type { InvocationContext } from './invocation.js';
-export type { FrondCall, Transport } from './call.js';
+import { type InvocationContext } from './wire/invocation.js';
+import type { FrondCall } from './wire/call.js';
+export { FougereError, ErrorCode, validationErrorsOf } from './wire/errors.js';
+export { toPublicError } from './wire/http-error.js';
+export type { FougereErrorOptions } from './wire/errors.js';
+export { canonicalInvocation, EMPTY_INVOCATION } from './wire/invocation.js';
+export type { InvocationContext } from './wire/invocation.js';
+export { Invocation } from './contract/Invocation.js';
+export type { InvocationInput } from './contract/Invocation.js';
+export { Call } from './contract/Call.js';
+export { RouteAddress } from './contract/RouteAddress.js';
+export type { RouteAddressInput } from './contract/RouteAddress.js';
+export type { FrondCall, Transport, SignedCall } from './wire/call.js';
 /**
  * What `rpc.discover` answers. It belongs here and not to the runtime: the
  * reserved op travels on the same wire as every other call, so a consumer that
@@ -23,9 +20,18 @@ export type { FrondCall, Transport } from './call.js';
  * Stated once, on purpose: two private copies of this interface have already gone
  * stale (the CLI's, then the Rust demo's) the day an op stopped being a bare name.
  */
-export type { IdentityCard, CardOp } from './call.js';
-/** Registration key of a class — 'Post' → 'post', 'PostHandler' → 'postHandler'. */
-export declare function toRegistrationName(name: string): string;
+export type { IdentityCard, CardOp, TopologyReport, FrondPlacement, Edge } from './wire/call.js';
+export { assertIdentityCard } from './wire/call.js';
+/**
+ * The key a class name is filed under — 'Post' → 'post'. Re-exported rather than
+ * respelled: a card writes it and a foreign key derives from it, so the convention
+ * belongs to the schema, and a second copy here is a second opinion. It travels
+ * through this subpath because a consumer of the wire (a browser bundle) may hold no
+ * schema dependency of its own — that audience only. Inside the package it is read from
+ * `@fougere/schema` directly: routing four modules through here bought nothing and put
+ * this file inside a cycle.
+ */
+export { registrationKeyOf } from '@fougere/schema';
 /** A call, fully fabricated: the designation and its completed invocation. */
 export interface CallValue {
     call: FrondCall;

package/dist/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtD;;;;;;;;GAQG;AACH,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEtD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACpC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAC/C,KAAK,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GACjC,SAAS,CAMX"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAWA,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG/E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,YAAY,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEvE;;;;;;;;GAQG;AACH,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACpC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,EAC/C,KAAK,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GACjC,SAAS,CAMX"}

package/dist/contract.js

@@ -5,15 +5,30 @@
  *
  * Browser-safe by design: no node builtin may enter this module's import
  * graph. Published as the `@fougere/core/contract` subpath so client
- * bundles never touch the full index (scanner, config loader).
+ * bundles never touch the full index (scanner, config loader). `@fougere/schema`
+ * is allowed in — measured, it imports no node builtin either.
  */
-import { EMPTY_INVOCATION } from './invocation.js';
-export { FougereError, ErrorCode } from './middleware.js';
-export { EMPTY_INVOCATION } from './invocation.js';
-/** Registration key of a class — 'Post' → 'post', 'PostHandler' → 'postHandler'. */
-export function toRegistrationName(name) {
-    return name[0].toLowerCase() + name.slice(1);
-}
+import { registrationKeyOf } from '@fougere/schema';
+import { canonicalInvocation } from './wire/invocation.js';
+export { FougereError, ErrorCode, validationErrorsOf } from './wire/errors.js';
+// A receiver turns a refusal into what may cross a process boundary, and it is not
+// core's boot — reaching it through the main entry dragged the scanner into a bundle.
+export { toPublicError } from './wire/http-error.js';
+export { canonicalInvocation, EMPTY_INVOCATION } from './wire/invocation.js';
+export { Invocation } from './contract/Invocation.js';
+export { Call } from './contract/Call.js';
+export { RouteAddress } from './contract/RouteAddress.js';
+export { assertIdentityCard } from './wire/call.js';
+/**
+ * The key a class name is filed under — 'Post' → 'post'. Re-exported rather than
+ * respelled: a card writes it and a foreign key derives from it, so the convention
+ * belongs to the schema, and a second copy here is a second opinion. It travels
+ * through this subpath because a consumer of the wire (a browser bundle) may hold no
+ * schema dependency of its own — that audience only. Inside the package it is read from
+ * `@fougere/schema` directly: routing four modules through here bought nothing and put
+ * this file inside a cycle.
+ */
+export { registrationKeyOf } from '@fougere/schema';
 /**
  * Fabricate the call value — one designation, two spellings:
  * `callValueOf(Post, 'list', { query })` (class + verb) or
@@ -22,8 +37,8 @@ export function toRegistrationName(name) {
  */
 export function callValueOf(target, opOrInput, input) {
     const [call, given] = typeof opOrInput === 'string'
-        ? [{ entity: toRegistrationName(target.name), op: opOrInput }, input]
+        ? [{ entity: registrationKeyOf(target.name), op: opOrInput }, input]
         : [target, opOrInput];
-    return { call, invocation: { ...EMPTY_INVOCATION, ...given } };
+    return { call, invocation: canonicalInvocation(given) };
 }
 //# sourceMappingURL=contract.js.map

package/dist/contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,gBAAgB,EAA0B,MAAM,iBAAiB,CAAC;AAG3E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAcnD,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,MAAoC,EACpC,SAA+C,EAC/C,KAAkC;IAElC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GACjB,OAAO,SAAS,KAAK,QAAQ;QAC3B,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAE,MAA2B,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC;QAC3F,CAAC,CAAC,CAAC,MAAmB,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,gBAAgB,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC;AACjE,CAAC"}
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,sBAAsB,CAAC;AAGnF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,mFAAmF;AACnF,sFAAsF;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAc1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAQpD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,MAAoC,EACpC,SAA+C,EAC/C,KAAkC;IAElC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GACjB,OAAO,SAAS,KAAK,QAAQ;QAC3B,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAE,MAA2B,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC;QAC1F,CAAC,CAAC,CAAC,MAAmB,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/crypto/encoding.d.ts

@@ -0,0 +1,25 @@
+/**
+ * What both realizations spell identically — bytes in, bytes out, no platform.
+ *
+ * `Buffer` did all of this and does not exist on a Worker; `atob`/`btoa` exist on both.
+ * Nothing here is a policy decision, which is why it sits beside the port rather than
+ * inside either half: two copies of a base64url would be two chances to disagree on the
+ * padding, and the disagreement would show up as a bad signature.
+ */
+export declare const bytesOf: (text: string) => Uint8Array;
+export declare const textOf: (bytes: Uint8Array) => string;
+/** Base64url, unpadded — what JWS puts between the dots. */
+export declare function b64url(input: Uint8Array | string): string;
+export declare function unb64url(input: string): Uint8Array;
+/** Plain base64, padded — what an environment variable carries a PEM as. */
+export declare function b64(input: Uint8Array | string): string;
+export declare const unb64: (input: string) => Uint8Array;
+/**
+ * The DER a PEM wraps. WebCrypto imports DER and knows nothing about the armour.
+ *
+ * The label is not checked: a caller asking for a private key and handed a public one
+ * fails at `importKey` with a message about the key, which is the truer error than one
+ * about a header line.
+ */
+export declare function derOf(pem: string): Uint8Array;
+//# sourceMappingURL=encoding.d.ts.map

package/dist/crypto/encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../src/crypto/encoding.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,eAAO,MAAM,OAAO,GAAI,MAAM,MAAM,KAAG,UAAkC,CAAC;AAC1E,eAAO,MAAM,MAAM,GAAI,OAAO,UAAU,KAAG,MAA+B,CAAC;AAE3E,4DAA4D;AAC5D,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAOzD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAKlD;AAED,4EAA4E;AAC5E,wBAAgB,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAKtD;AAED,eAAO,MAAM,KAAK,GAAI,OAAO,MAAM,KAAG,UAKrC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAI7C"}

package/dist/crypto/encoding.js

@@ -0,0 +1,58 @@
+/**
+ * What both realizations spell identically — bytes in, bytes out, no platform.
+ *
+ * `Buffer` did all of this and does not exist on a Worker; `atob`/`btoa` exist on both.
+ * Nothing here is a policy decision, which is why it sits beside the port rather than
+ * inside either half: two copies of a base64url would be two chances to disagree on the
+ * padding, and the disagreement would show up as a bad signature.
+ */
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+export const bytesOf = (text) => encoder.encode(text);
+export const textOf = (bytes) => decoder.decode(bytes);
+/** Base64url, unpadded — what JWS puts between the dots. */
+export function b64url(input) {
+    const bytes = typeof input === 'string' ? bytesOf(input) : input;
+    let binary = '';
+    // One character at a time: `String.fromCharCode(...bytes)` overflows the argument
+    // limit on a key, and a signature is small enough that the loop costs nothing.
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+export function unb64url(input) {
+    const binary = atob(input.replace(/-/g, '+').replace(/_/g, '/'));
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+/** Plain base64, padded — what an environment variable carries a PEM as. */
+export function b64(input) {
+    const bytes = typeof input === 'string' ? bytesOf(input) : input;
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+export const unb64 = (input) => {
+    const binary = atob(input);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+};
+/**
+ * The DER a PEM wraps. WebCrypto imports DER and knows nothing about the armour.
+ *
+ * The label is not checked: a caller asking for a private key and handed a public one
+ * fails at `importKey` with a message about the key, which is the truer error than one
+ * about a header line.
+ */
+export function derOf(pem) {
+    const body = pem.replace(/-----(BEGIN|END)[^-]+-----/g, '').replace(/\s+/g, '');
+    if (body.length === 0)
+        throw new Error('Not a PEM: no base64 body between the armour');
+    return unb64(body);
+}
+//# sourceMappingURL=encoding.js.map

package/dist/crypto/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../../src/crypto/encoding.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3E,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CAAC,KAA0B;IAC/C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,kFAAkF;IAClF,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,GAAG,CAAC,KAA0B;IAC5C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAAa,EAAc,EAAE;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/crypto/node.d.ts

@@ -0,0 +1,4 @@
+import type { CryptoPort, PublicJwk, Signer, Verifier } from './port.js';
+export declare const crypto: CryptoPort;
+export type { CryptoPort, PublicJwk, Signer, Verifier };
+//# sourceMappingURL=node.d.ts.map

package/dist/crypto/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/crypto/node.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEzE,eAAO,MAAM,MAAM,EAAE,UAiBpB,CAAC;AAEF,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC"}

package/dist/crypto/node.js

@@ -0,0 +1,25 @@
+/**
+ * Ed25519 through `node:crypto` — the default realization, and the fast one.
+ *
+ * `sign`/`verify` are synchronous here and stay synchronous: the promise is put around
+ * the answer, never around the work. That is the whole reason this file exists rather
+ * than everyone sharing the WebCrypto half.
+ */
+import { createHash, createPrivateKey, createPublicKey, sign, verify } from 'node:crypto';
+export const crypto = {
+    async sha256(data) {
+        return new Uint8Array(createHash('sha256').update(data).digest());
+    },
+    async signerOf(privateKeyPem) {
+        // Parsed here and captured, so a call signs against a KeyObject and never a string.
+        const key = createPrivateKey(privateKeyPem);
+        return { async sign(data) { return new Uint8Array(sign(null, data, key)); } };
+    },
+    async verifierOf(key) {
+        const parsed = typeof key === 'string'
+            ? createPublicKey(key)
+            : createPublicKey({ key: key, format: 'jwk' });
+        return { async verify(data, signature) { return verify(null, data, parsed, signature); } };
+    },
+};
+//# sourceMappingURL=node.js.map

package/dist/crypto/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../src/crypto/node.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1F,MAAM,CAAC,MAAM,MAAM,GAAe;IAChC,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,aAAa;QAC1B,oFAAoF;QACpF,MAAM,GAAG,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC5C,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAG;QAClB,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ;YACpC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC;YACtB,CAAC,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,CAAC;CACF,CAAC"}

package/dist/crypto/port.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The two Ed25519 gestures a signed call needs, and the one hash that binds it.
+ *
+ * Node signs 59% faster than WebCrypto on the same curve (measured 2026-08-23: 14.30 µs
+ * against 22.72 µs per signature, 34.42 against 41.81 to verify), so this is a PORT with
+ * two realizations and not one implementation at the lowest common denominator. `#crypto`
+ * resolves to `crypto/node.ts` everywhere except under the `workerd` condition — the
+ * bundler picks at build time, and neither half ever appears in the other's output.
+ *
+ * The shape is async because WebCrypto is. On Node that costs one microtask, which the
+ * same measurement puts inside the noise of the signature itself (14.30 sync against
+ * 14.28 awaited) — awaiting is free, converting is not.
+ *
+ * A KEY IS PARSED ONCE. `crypto.subtle.importKey` is async and per-key, so an interface
+ * shaped `sign(key, data)` would import on every call; `signerOf(pem)` hands back
+ * something that holds the parsed key, and a boot builds it once.
+ */
+/** A parsed private key. */
+export interface Signer {
+    sign(data: Uint8Array): Promise<Uint8Array>;
+}
+/** A parsed public key. */
+export interface Verifier {
+    /** False, never a throw: a bad signature is an answer, not a failure. */
+    verify(data: Uint8Array, signature: Uint8Array): Promise<boolean>;
+}
+/** A public key as a grant carries it — `{ kty: 'OKP', crv: 'Ed25519', x }`. */
+export interface PublicJwk {
+    kty: string;
+    crv?: string;
+    x?: string;
+    [key: string]: unknown;
+}
+export interface CryptoPort {
+    /** SHA-256. What binds a body to an envelope without carrying the body. */
+    sha256(data: Uint8Array): Promise<Uint8Array>;
+    /** From a PKCS#8 PEM — what `fougere keys` writes. */
+    signerOf(privateKeyPem: string): Promise<Signer>;
+    /** From an SPKI PEM (the root's) or a JWK (the one a grant embeds). */
+    verifierOf(key: string | PublicJwk): Promise<Verifier>;
+}
+//# sourceMappingURL=port.d.ts.map