@fougere/core 0.5.0-alpha.1 → 0.7.0-alpha.0

package/dist/boot/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/boot/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,0FAA0F;IAC1F,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7D;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACvC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,iFAAiF;IACjF,EAAE,EAAE,OAAO,CAAC;IACZ,4EAA4E;IAC5E,UAAU,EAAE,UAAU,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChC,4DAA4D;IAC5D,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/boot/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7D,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IACzB,0FAA0F;IAC1F,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7D;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACvC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,iFAAiF;IACjF,EAAE,EAAE,OAAO,CAAC;IACZ,gFAAgF;IAChF,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,4DAA4D;IAC5D,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/boot/boot.d.ts

@@ -19,24 +19,16 @@ interface BootOptions {
     remotes?: Record<string, string>;
     /** Builds the transport to reach `remotes`. Supplied by a layer-2 package. */
     remoteTransport?: (url: string) => Transport;
-    /**
-     * Carries an announced fact out of this process. Forwarded rather than dropped: a
-     * caller handing one in has no other way to reach the emitter, and this path silently
-     * kept it to itself.
-     */
+    /** Carries an announced fact out of this process. */
     onEmit?: CreateAppOptions['onEmit'];
     /**
-     * ORM setup — returns the storage handle (db), an ormFactory, and its two halves.
+     * storage setup — returns the storage handle (db), an storageFactory, and its two halves.
      * The `db` value is forwarded to the auth provider via AuthContext when `auth` is set.
      */
     db?: (config: FougereConfig) => {
         db?: unknown;
-        ormFactory: CreateAppOptions['ormFactory'];
-        /**
-         * Bring the schema up to date — an extension's `up`, because it runs after the
-         * container. It used to be called `afterBoot`, a word that also meant the host's
-         * post-boot and was read in four places under two senses.
-         */
+        storageFactory: CreateAppOptions['storageFactory'];
+        /** Bring the schema up to date — an extension's `up`, because it runs after the container. */
         migrate?: (app: App) => Promise<void> | void;
         /** Closes what the factory opened — `boot()` called it, so `boot()` releases it. */
         close?: () => Promise<void>;
@@ -47,12 +39,7 @@ interface BootOptions {
      */
     extensions?: readonly (Extension | undefined)[];
 }
-/**
- * Boot a Fougere app from fougere.config.ts.
- *
- * Handles: config loading, container creation, DB setup, seeding.
- * Works for any surface (Nuxt, GraphQL standalone, CLI, tests).
- */
+/** Boot a Fougere app from fougere.config.ts. */
 export declare function boot(options: BootOptions): Promise<App>;
 export {};
 //# sourceMappingURL=boot.d.ts.map

package/dist/boot/boot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../src/boot/boot.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGrE,OAAO,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,UAAU,WAAW;IACnB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,mCAAmC;IACnC,eAAe,EAAE,MAAM,SAAS,CAAC;IACjC,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,8EAA8E;IAC9E,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;IAC7C;;;;OAIG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpC;;;OAGG;IACH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK;QAC9B,EAAE,CAAC,EAAE,OAAO,CAAC;QACb,UAAU,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC3C;;;;WAIG;QACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC7C,oFAAoF;QACpF,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7B,CAAC;IACF;;;OAGG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;CACjD;AAED;;;;;GAKG;AACH,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CA8D7D"}
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../src/boot/boot.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGrE,OAAO,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,UAAU,WAAW;IACnB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,mCAAmC;IACnC,eAAe,EAAE,MAAM,SAAS,CAAC;IACjC,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,8EAA8E;IAC9E,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;IAC7C,qDAAqD;IACrD,MAAM,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpC;;;OAGG;IACH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK;QAC9B,EAAE,CAAC,EAAE,OAAO,CAAC;QACb,cAAc,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACnD,8FAA8F;QAC9F,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC7C,oFAAoF;QACpF,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KAC7B,CAAC;IACF;;;OAGG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC;CACjD;AAED,iDAAiD;AACjD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CA4D7D"}

package/dist/boot/boot.js

@@ -2,15 +2,10 @@ import { createApp } from './bootstrap.js';
 import { seeding } from './seed.js';
 import { scanProject } from '../scan/scanner.js';
 import { loadConfig } from '../config-loader.js';
-import { Logger } from '../builtins/logger.js';
+import { Logger } from '../builtin/logger.js';
 import { applyConfig } from './apply.js';
 import { migrating } from './AppLifecycle.js';
-/**
- * Boot a Fougere app from fougere.config.ts.
- *
- * Handles: config loading, container creation, DB setup, seeding.
- * Works for any surface (Nuxt, GraphQL standalone, CLI, tests).
- */
+/** Boot a Fougere app from fougere.config.ts. */
 export async function boot(options) {
     const bootStart = performance.now();
     const log = new Logger('boot');
@@ -35,7 +30,7 @@ export async function boot(options) {
         // handed the answer and reaches for nothing.
         scan: await scanProject(root, options.fronds, config.conventions),
         createContainer: options.createContainer,
-        ormFactory: dbSetup?.ormFactory,
+        storageFactory: dbSetup?.storageFactory,
         db: dbSetup?.db,
         auth: config.auth,
         remotes: options.remotes,
@@ -50,9 +45,7 @@ export async function boot(options) {
         // it was opened before the container existed, so it closes after the container goes.
         onDispose: dbSetup?.close,
         /**
-         * The whole ascent, in one ordered list — tables, then rows, then whatever the host
-         * takes on. It was four call sites under the name `afterBoot`, two of which meant
-         * different things and one of which was generated into a Nitro plugin.
+         * The whole ascent, in one ordered list — tables, then rows, then whatever the host takes on.
          */
         extensions: [
             migrating(dbSetup?.migrate),

package/dist/boot/boot.js.map

@@ -1 +1 @@
-{"version":3,"file":"boot.js","sourceRoot":"","sources":["../../src/boot/boot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAsB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAkB,MAAM,mBAAmB,CAAC;AAiD9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAoB;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3C,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAE1B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAkB,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACnE,qFAAqF;IACrF,kFAAkF;IAClF,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE1B,IAAI,OAA+D,CAAC;IACpE,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnC,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC;QAC1B,mFAAmF;QACnF,6CAA6C;QAC7C,IAAI,EAAE,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;QACjE,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,UAAU,EAAE,OAAO,EAAE,UAAU;QAC/B,EAAE,EAAE,OAAO,EAAE,EAAE;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,qFAAqF;QACrF,0EAA0E;QAC1E,iFAAiF;QACjF,iFAAiF;QACjF,8CAA8C;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,sFAAsF;QACtF,qFAAqF;QACrF,SAAS,EAAE,OAAO,EAAE,KAAK;QACzB;;;;WAIG;QACH,UAAU,EAAE;YACV,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;YAC3B,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;SAC9B;QACD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,eAAe,EAAE,OAAO,CAAC,eAAe;KACzC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAE1E,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IAE7D,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"boot.js","sourceRoot":"","sources":["../../src/boot/boot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAsB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAkB,MAAM,mBAAmB,CAAC;AAyC9D,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAoB;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3C,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAE1B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAkB,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACnE,qFAAqF;IACrF,kFAAkF;IAClF,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE1B,IAAI,OAA+D,CAAC;IACpE,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnC,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC;QAC1B,mFAAmF;QACnF,6CAA6C;QAC7C,IAAI,EAAE,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;QACjE,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,cAAc,EAAE,OAAO,EAAE,cAAc;QACvC,EAAE,EAAE,OAAO,EAAE,EAAE;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,qFAAqF;QACrF,0EAA0E;QAC1E,iFAAiF;QACjF,iFAAiF;QACjF,8CAA8C;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,sFAAsF;QACtF,qFAAqF;QACrF,SAAS,EAAE,OAAO,EAAE,KAAK;QACzB;;WAEG;QACH,UAAU,EAAE;YACV,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;YAC3B,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;SAC9B;QACD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,eAAe,EAAE,OAAO,CAAC,eAAe;KACzC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAE1E,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IAE7D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/boot/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/boot/bootstrap.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAyFxD,uCAAuC;AACvC,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CA+uBvE"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/boot/bootstrap.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAsExD,uCAAuC;AACvC,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CA0sBvE"}

package/dist/boot/bootstrap.js

@@ -1,64 +1,45 @@
 import { lowerFirst } from '@fougere/schema';
 import { hostedBy } from './hosted.js';
-import { Logger } from '../builtins/logger.js';
-import { Config } from '../builtins/config.js';
+import { Logger } from '../builtin/logger.js';
+import { Config } from '../builtin/config.js';
 import { createRemoteRouter, createRemoteFacade } from './remote.js';
 import { registerFrames } from './together.js';
 import { Emissions } from './Emissions.js';
-import { HandlerFacade } from './HandlerFacade.js';
+import { HandlerFacade } from '../dispatch/HandlerFacade.js';
 import { targetOf } from '../prefab/prefab.js';
-import { ownersOf, refuseOrmInUserCode, refuseCrudOnOwned } from './ownership.js';
+import { ownersOf, refuseStorageInUserCode, refuseCrudOnOwned } from './ownership.js';
 import { resolveEffectiveOperations, } from '../effective-operation.js';
 import { StorageGuard } from '../dispatch/StorageGuard.js';
 import { portBindings } from './ports.js';
 import { InFlight } from '../dispatch/InFlight.js';
 // The keys, each read from where its concept is declared — never respelled here.
-import { facadeKeyOf, contractsKeyOf, identityCardOf } from '../wire/call.js';
+import { facadeKeyOf, contractsKeyOf } from '../wire/call.js';
+import { identityCardOf } from './card.js';
 import { AppLifecycle } from './AppLifecycle.js';
+import { inheritsCrud, subjectOf } from '../prefab/crud.js';
 import { repositoryKeyOf } from '../prefab/repository.js';
-import { ormKeyOf } from '../orm.js';
+import { storageKeyOf } from '../storage.js';
 import { presenterKeyOf } from '../prefab/presenter.js';
 import { collectorKeyOf } from '../prefab/collector.js';
-import { RouteAddress } from '../contract/RouteAddress.js';
+import { RouteAddress } from '../wire/RouteAddress.js';
 import { DispatchLifecycle } from '../dispatch/DispatchLifecycle.js';
 import { Dispatcher } from '../dispatch/Dispatcher.js';
 import { LocalRoutePolicy } from '../dispatch/LocalRoutePolicy.js';
 import { OperationRoute } from '../dispatch/OperationRoute.js';
-import { RemoteRouteResolver } from '../dispatch/RemoteRouteResolver.js';
+import { remoteRoutes } from '../dispatch/remoteRoutes.js';
 import { RouteRegistry } from '../dispatch/RouteRegistry.js';
-import { FacadeEntry } from '../entry/FacadeEntry.js';
-/**
- * The one wording for "nobody hosts this here", with both ways out. Said twice, and the
- * second copy (`schemaFor`) had lost the two remedies — the same dead end, strictly less
- * useful, for no reason.
- */
+import { facadeOperations } from '../entry/facade.js';
+/** The one wording for "nobody hosts this here", with both ways out. */
 const notLoaded = (entity) => `Frond for '${entity}' is not loaded.\n` +
     `  - Add '${entity}' to --fronds flag\n` +
     `  - Or declare a remote: remotes: { ${entity}: 'http://...' }`;
-/**
- * Two fronds cannot claim one name — said at boot, because nothing else says it.
- *
- * A door lands on the ROOT container under `facadeKeyOf(address)`, and that key carries
- * no frond; a presenter lands there too. `registerValue` is a `Map.set`, so the second
- * frond loaded simply replaced the first and every call meant for one went to the other.
- * Silent in-process, and worse than silent under a split: `createRemoteRouter` guards its
- * index with `if (!byEntity.has(...))`, so THERE the first frond discovered wins. The same
- * application answered differently depending on how it was deployed.
- *
- * Refusing is the honest answer while a key cannot say which frond owns it. It is not the
- * last word: qualify the key and this boot can accept both. ORMs and repositories are not
- * checked because they are registered in the frond's own scope, where two fronds do not meet.
- *
- * A frond declared remote registers nothing locally, so it cannot collide here. Two REMOTE
- * fronds publishing one entity still shadow each other inside the router — a hole this
- * check does not reach.
- */
+/** Two fronds cannot claim one name — said at boot, because nothing else says it. */
 function assertOneOwnerPerKey(fronds, remotes) {
     const owner = new Map();
     const claim = (key, frond, what) => {
-        const held = owner.get(key);
-        if (held !== undefined && held !== frond) {
-            throw new Error(`Two fronds claim the key '${key}': '${held}' and '${frond}'.\n`
+        const first = owner.get(key);
+        if (first !== undefined && first !== frond) {
+            throw new Error(`Two fronds claim the key '${key}': '${first}' and '${frond}'.\n`
                 + `  A ${what} is registered under a key that names no frond, so one would silently replace the other.\n`
                 + `  - Rename one of the two classes, or\n`
                 + `  - keep one of the two fronds out of this process (--fronds), or declare it in remotes:`);
@@ -92,6 +73,14 @@ export async function createApp(options) {
     // no builtin and a Worker can run what it builds.
     const scanStart = performance.now();
     const { fronds, diagnostics } = await hostedBy(options);
+    // An app that states nothing AND scans nothing is a mistake — unless something else it
+    // declares brings its own entities, which an auth provider does. Refused here and not in
+    // `hostedBy`, which is handed the frond sources and cannot see the rest of the app. The
+    // condition is the KEYS, not the count: a scan that found nothing is an ordinary answer.
+    if (!options.fronds && !options.scan && !options.auth) {
+        throw new Error('createApp needs `fronds:` (what this app states) or `scan:` (what a scanner found). '
+            + 'Neither was given, and nothing else declares entities of its own.');
+    }
     const operationModel = resolveEffectiveOperations(fronds, {
         diagnostics,
         remotes: options.remotes,
@@ -101,24 +90,13 @@ export async function createApp(options) {
     const blocking = diagnostics.filter((d) => d.severity === 'blocking');
     log.info(`read ${fronds.length} frond(s) in ${scanMs}ms`
         + (diagnostics.length ? ` — ${diagnostics.length} thing(s) the scan could not do` : ''));
-    /**
-     * Say what could not be read, at the one line everyone already watches.
-     *
-     * Not a refusal: an app whose `presenters/` is unreadable still serves its
-     * entities, and stopping the boot would trade a partial app for none. But it is
-     * an ERROR, not a debug line — the app now serves less than its source declares,
-     * and nothing downstream can tell that from a source that declares less.
-     */
+    /** Say what could not be read, at the one line everyone already watches. */
     for (const d of blocking)
         log.error(`[${d.code}] ${d.message}`, d.cause);
     for (const d of diagnostics)
         if (d.severity === 'warning')
             log.warn(`[${d.code}] ${d.message}`);
-    /**
-     * An ambiguous convention is not a partial scan. Every relevant declaration was read,
-     * but more than one executable contract can be built from it. Refuse before auth,
-     * storage, migrations or seeds make the boot observable.
-     */
+    /** An ambiguous convention is not a partial scan. */
     const invalidOperations = operationModel.resolutionDiagnostics
         .filter((diagnostic) => diagnostic.severity === 'blocking');
     if (invalidOperations.length > 0) {
@@ -128,11 +106,11 @@ export async function createApp(options) {
     }
     // Auth runtime — built once from the lazy AuthConfig produced by a provider factory
     // (e.g. betterAuth({...})) in fougere.config.ts. The provider receives our db +
-    // ormFactory so all auth writes flow through EntityOrm.
+    // storageFactory so all auth writes flow through Storage.
     let authRuntime;
     if (options.auth) {
-        if (!options.ormFactory) {
-            throw new Error('createApp: `auth` is set but `ormFactory` is missing — auth providers need it to back their adapter.');
+        if (!options.storageFactory) {
+            throw new Error('createApp: `auth` is set but `storageFactory` is missing — auth providers need it to back their adapter.');
         }
         if (options.db === undefined) {
             throw new Error('createApp: `auth` is set but `db` is missing — pass the storage handle through CreateAppOptions.db.');
@@ -140,11 +118,11 @@ export async function createApp(options) {
         log.info('initializing auth runtime');
         authRuntime = await options.auth.create({
             db: options.db,
-            ormFactory: options.ormFactory,
+            storageFactory: options.storageFactory,
         });
         log.info(`auth ready — mounted at ${authRuntime.basePath}`);
     }
-    // Remote routing — judged at boot: declaring remotes without a transport is a config error.
+    // Remote routing — validated at boot: declaring remotes without a transport is a config error.
     // A remote declaration wins over local presence: `remotes: { blog: url }` IS
     // the topology statement — the frond's code may sit in fronds/**, it runs elsewhere.
     const declaredRemotes = Object.entries(options.remotes ?? {});
@@ -171,7 +149,7 @@ export async function createApp(options) {
         return [...globalMiddlewares, ...scoped];
     }
     assertOneOwnerPerKey(fronds, options.remotes);
-    // Every entity of every frond, by name — so a fact can be judged where it LANDS, and
+    // Every entity of every frond, by name — so a fact can be validated where it LANDS, and
     // so a `reads:` clause can name a neighbour's.
     const entityByName = fronds.schemas();
     // Which frond holds an entity — what turns "a member is remote" into a refusal that
@@ -204,13 +182,13 @@ export async function createApp(options) {
         // `reads:` is what makes a cross-source reader exist here, and the list IS its
         // environment — a source holding none of these is never opened. Registered under
         // the type's own name, which is the key `depKeyOf` already derives for a plain
-        // parameter: `constructor(private sources: Sources)` and nothing else to say.
+        // parameter: `constructor(private reads: Reads)` and nothing else to say.
         // Declaring `reads:` with nothing to build the reader is a boot that ignores a
-        // clause: the handler asking for `Sources` then dies at its first call, on a
+        // clause: the handler asking for `Reads` then dies at its first call, on a
         // container message that names neither the clause nor what is missing.
         if (frond.reads?.length && !options.sourcesFactory) {
             frondLog.warn(`[reads] ${frond.reads.join(', ')} — declared in frond.config.ts, but this boot passes no `
-                + '`sourcesFactory`, so no reader is registered and a handler asking for `Sources` will fail '
+                + '`sourcesFactory`, so no reader is registered and a handler asking for `Reads` will fail '
                 + 'at its first call. Pass one (`@fougere/adapter-duckdb`), or drop the clause.');
         }
         if (frond.reads?.length && options.sourcesFactory) {
@@ -226,13 +204,13 @@ export async function createApp(options) {
                 frondLog.warn(`[reads] ${missing.join(', ')} — named in frond.config.ts but scanned nowhere in this app, `
                     + 'so a query naming one would find no table. Check the spelling, or the entity file.');
             }
-            scope.registerValue('Sources', await options.sourcesFactory(named, frond.name));
+            scope.registerValue('Reads', await options.sourcesFactory(named, frond.name));
             frondLog.debug(`cross-source reader over ${named.length} entit(ies)`);
         }
         // Who owns what, and the rule that makes owning mean something. Before anything is
         // registered, so a bad line is named by this refusal rather than by the container's.
         const owners = ownersOf(frond.providers);
-        refuseOrmInUserCode(frond, owners);
+        refuseStorageInUserCode(frond, owners, (entity) => entityByName.has(entity));
         refuseCrudOnOwned(frond, owners);
         for (const provider of frond.providers) {
             scope.register(provider.ctor.name, provider.ctor, { deps: provider.deps });
@@ -249,25 +227,25 @@ export async function createApp(options) {
         if (frond.providers.length > 0) {
             frondLog.debug(`${frond.providers.length} provider(s): ${frond.providers.map((p) => p.ctor.name).join(', ')}`);
         }
-        // Register EntityOrm for each entity — PascalCase type name (e.g. 'PostOrm')
-        // When a handler declares Crud(Entity, Output), scope the ORM via .output(Output)
-        if (options.ormFactory) {
+        // Register Storage for each entity — PascalCase type name (e.g. 'PostStorage')
+        // When a handler declares Crud(Entity, Output), scope the storage via .output(Output)
+        if (options.storageFactory) {
             for (const entity of frond.entities) {
-                const ormName = ormKeyOf(entity.name);
-                const baseOrm = options.ormFactory(entity.entityClass, entity.name);
+                const key = storageKeyOf(entity.name);
+                const baseStorage = options.storageFactory(entity.entityClass, entity.name);
                 // Check if the default handler (no surface) declares an output override
                 const defaultHandler = frond.handlers.find((h) => h.address === entity.name && !h.surface);
                 const outputSchema = defaultHandler?.outputOverride ?? defaultHandler?.ctor?.__output;
                 const scoped = outputSchema && outputSchema !== entity.entityClass
-                    ? baseOrm.output(outputSchema)
-                    : baseOrm;
+                    ? baseStorage.output(outputSchema)
+                    : baseStorage;
                 // Storage is a way out like the client surface — see `StorageGuard`.
                 const guarded = new StorageGuard(entity.entityClass.getFields(), entity.name).guard(scoped);
-                scope.registerValue(ormName, guarded);
+                scope.registerValue(key, guarded);
                 // The default repository IS the guarded port — it already answers every gesture a
                 // declared one forwards, so the two forms have the same shape and a handler reads
-                // `repo.list()` either way. The wrapper that used to sit here (`{ orm: guarded }`)
-                // existed to make `repo.orm` true in both, back when `.orm` was the way in.
+                // `repo.list()` either way. The wrapper that used to sit here (`{ storage: guarded }`)
+                // existed to make `repo.storage` true in both, back when `.storage` was the way in.
                 //
                 // Not registered for an OWNED entity: an aggregate's members are reached through it
                 // and nowhere else, and the default would be a second door under a name a handler
@@ -283,7 +261,7 @@ export async function createApp(options) {
                 }
             }
             if (frond.entities.length > 0) {
-                frondLog.debug(`${frond.entities.length} entity ORM(s): ${frond.entities.map((e) => e.name).join(', ')}`);
+                frondLog.debug(`${frond.entities.length} entity storage(s): ${frond.entities.map((e) => e.name).join(', ')}`);
             }
         }
         // Frames, after the ORMs and before anything that may ask for one. A frame is read
@@ -293,8 +271,9 @@ export async function createApp(options) {
             entityByName,
             frondOf,
             hostedHere: (name) => !(options.remotes && name in options.remotes),
-            ormFactory: options.ormFactory,
+            storageFactory: options.storageFactory,
             sourceOf: options.sourceOf,
+            transacts: options.transacts,
             transacted: options.transacted,
             log: frondLog,
         });
@@ -321,22 +300,24 @@ export async function createApp(options) {
         const defaultHandlerMap = new Map(defaultHandlers.map((h) => [h.address, h]));
         /** Build the door of a handler and register it under the audience it serves. */
         const buildFacade = (entity, handler, targetScope, facadeKey) => {
-            const facade = new HandlerFacade({
-                handler,
-                handlers: frond.handlers,
-                entity,
-                scope: targetScope,
+            if (inheritsCrud(handler.ctor) && !entity) {
+                // An installed Crud subject may be absent from the local scan.
+                frondLog.debug(`${handler.ctor.name} extends Crud() and no scanned entity is named `
+                    + `'${subjectOf(handler.ctor, handler.address)}' — installed entity, or a missing `
+                    + `one: no storage will be injected`);
+            }
+            const facade = new HandlerFacade(handler, targetScope, {
                 key: facadeKey,
-                operations: operationModel.forHandler(handler),
-            }, {
                 frond: frond.name,
-                frondScope: scope,
-                log: frondLog,
+                handlers: frond.handlers,
+                operations: operationModel.forHandler(handler),
                 collectors: collectorTypeNames,
-                presenters: presenterMap,
-                middlewaresFor: getMiddlewares,
-                emissions,
+                presenter: presenterMap.get(handler.address),
+                presenterScope: scope,
+                middlewares: () => getMiddlewares(handler.address),
             });
+            // Emissions use the same contracts and execution path as direct calls.
+            emissions.note(facade.contracts, facadeKey);
             // The terms alongside the door, under the same audience — a surface that serves
             // fewer ops describes fewer ops.
             container.registerValue(contractsKeyOf(handler.address, handler.surface), facade.contracts);
@@ -357,11 +338,11 @@ export async function createApp(options) {
                         operation,
                         ...(surface !== undefined ? { surface } : {}),
                     });
-                    routeRegistry.register(new OperationRoute('local', address, (call) => facade.ops[operation](call.invocation)));
+                    routeRegistry.register(new OperationRoute('local', address, (call) => facade.execute(operation, call.invocation)));
                 }
             }
-            const entry = new FacadeEntry(handler.surface ? localDispatcher : dispatcher, handler.address, routeRegistry.operationNames(handler.address, handler.surface), handler.surface);
-            container.registerValue(facadeKey, entry.operations);
+            const operations = facadeOperations(handler.surface ? localDispatcher : dispatcher, handler.address, routeRegistry.operationNames(handler.address, handler.surface), handler.surface);
+            container.registerValue(facadeKey, operations);
         };
         // A presenter is about an entity — computed fields sit on a shape — so this walks
         // entities. Exposing the instance lazily; the bridge resolves it on first access.
@@ -395,7 +376,7 @@ export async function createApp(options) {
             const facadeKey = facadeKeyOf(handler.address);
             buildFacade(entity, handler, scope, facadeKey);
             frondLog.debug(`${facadeKey} [${Object.keys(container.resolve(facadeKey)).join(', ')}]`
-                + (entity ? '' : ' — no entity of that name: no ORM, no projection, no presenter'));
+                + (entity ? '' : ' — no entity of that name: no storage, no projection, no presenter'));
         }
         // The dual, and it stays: a shape that declares no operation answers nothing. Said
         // once per entity rather than deduced from a silence.
@@ -404,7 +385,7 @@ export async function createApp(options) {
                 frondLog.debug(`${entity.name} — entity only, no handler: exposes nothing`);
             }
         }
-        // Surface handlers — create sub-scope per surface handler with scoped ORM
+        // Surface handlers — create sub-scope per surface handler with scoped storage
         //
         // Pointing at nothing is legal HERE TOO. This loop used to `continue` when no entity
         // carried the handler's name, so `handlers/public/SearchHandler.ts` with no `Search`
@@ -413,24 +394,24 @@ export async function createApp(options) {
         for (const handler of surfaceHandlers) {
             const entity = frond.entities.find((e) => e.name === handler.address);
             const surfaceScope = scope.createScope();
-            // Register scoped ORM if output override differs from entity — under the REPOSITORY
+            // Register scoped storage if output override differs from entity — under the REPOSITORY
             // key, which is what a Crud handler asks for, and under the port's own for a holder
             // that legitimately names it. Registering only the latter left a named surface with
             // no door at all once the façade stopped spelling the storage.
-            if (entity && options.ormFactory) {
-                const baseOrm = options.ormFactory(entity.entityClass, entity.name);
+            if (entity && options.storageFactory) {
+                const baseStorage = options.storageFactory(entity.entityClass, entity.name);
                 const outputSchema = handler.outputOverride ?? handler.ctor.__output;
                 const scoped = outputSchema && outputSchema !== entity.entityClass
-                    ? baseOrm.output(outputSchema)
-                    : baseOrm;
+                    ? baseStorage.output(outputSchema)
+                    : baseStorage;
                 const guarded = new StorageGuard(entity.entityClass.getFields(), entity.name).guard(scoped);
-                surfaceScope.registerValue(ormKeyOf(entity.name), guarded);
+                surfaceScope.registerValue(storageKeyOf(entity.name), guarded);
                 surfaceScope.registerValue(repositoryKeyOf(entity.name), guarded);
             }
             const facadeKey = facadeKeyOf(handler.address, handler.surface);
             buildFacade(entity, handler, surfaceScope, facadeKey);
             frondLog.debug(`${facadeKey} [${Object.keys(container.resolve(facadeKey)).join(', ')}]`
-                + (entity ? '' : ' — no entity of that name: no ORM, no projection, no presenter'));
+                + (entity ? '' : ' — no entity of that name: no storage, no projection, no presenter'));
         }
         // A named surface is closed, so what it contains is a fact worth stating.
         // Saying it at boot is the difference between a rule and a rule you can
@@ -459,17 +440,7 @@ export async function createApp(options) {
     }
     // Once every door exists: what is announced here and what is listened to are both known.
     emissions.register();
-    /**
-     * The last resort, held by the container so every resolution path shares it.
-     *
-     * It used to live on `app.resolve` alone, which meant the runner found a remote façade
-     * and dependency injection did not — a handler asking for a neighbour that had moved
-     * got `is not registered` while the very same call over the wire worked. One door now.
-     *
-     * Surface-scoped keys ('admin:productHandler') stay local: a named surface resolves in
-     * this container only, so fabricating one for a remote frond would answer NOT_FOUND on
-     * everything (see Known issues).
-     */
+    /** The last resort, held by the container so every resolution path shares it. */
     container.setFallback?.((name) => {
         if (!remoteRouter)
             return undefined;
@@ -479,15 +450,11 @@ export async function createApp(options) {
         // `lowerFirst` because a DEPENDENCY names the type as written — `ProductHandler`,
         // PascalCase — while a card declares `product`, so the raw strip asked the router for
         // 'Product' and every by-type dependency on a remote handler answered NOT_FOUND.
-        return new FacadeEntry(dispatcher, lowerFirst(name.replace(/Handler$/, ''))).operations;
+        return facadeOperations(dispatcher, lowerFirst(name.replace(/Handler$/, '')));
     });
     /**
-     * Everything this app holds, let go in reverse of how it was taken: what an extension
-     * took on last, then the container's own, then whoever handed a resource in.
-     *
-     * It does NOT wait for running calls — `drain()` is that, and it is a separate gesture
-     * because waiting and releasing do not have the same owner: a test releases at once, a
-     * host turning the ring wants the work finished first.
+     * Everything this app holds, let go in reverse of how it was taken: what an extension took on
+     * last, then the container's own, then whoever handed a resource in.
      */
     const release = async () => {
         // Every level is told to close even when one refuses, and the refusals leave together —
@@ -512,13 +479,7 @@ export async function createApp(options) {
             throw new AggregateError(refused, `${refused.length} refusal(s) while releasing the app`);
         }
     };
-    /**
-     * Stop taking calls, and resolve once the ones already running are done.
-     *
-     * Refuses on `timeoutMs` rather than resolving anyway: a drain that gives up quietly
-     * reads exactly like a drain that succeeded, and the caller — who is about to release
-     * a storage connection under whatever is left — is the one who must decide.
-     */
+    /** Stop taking calls, and resolve once the ones already running are done. */
     const drain = async (timeoutMs) => {
         inflight.close();
         if (timeoutMs === undefined)
@@ -568,28 +529,7 @@ export async function createApp(options) {
             return undefined;
         }
     };
-    /**
-     * THE membership rule, stated once — every projection reads this and nothing
-     * else. It used to live twice, verbatim, in the REST and GraphQL adapters,
-     * and two other readers invented their own answer.
-     *
-     * Naming an audience closes it. Two ways to name an entity into a surface,
-     * in precedence order:
-     *   - `surfaces:` in frond.config.ts — when the list exists, it IS the list;
-     *   - a handler under `handlers/<surface>/` — which also restricts the façade.
-     * `@expose` is a THIRD way and this rule does not read it: the scan sets a
-     * boolean, read by the two adapters and by `exposedAdapters` — never here.
-     * What neither of the two names is not served. It used to be the reverse: no
-     * `public:categoryHandler` meant the FULL CategoryHandler rode the public
-     * door, create/update/delete included (measured on demos/nuxt-blog).
-     *
-     * A named entity with no façade of its own falls back to the default one —
-     * that is not the old widening, it is the author saying "this one, as it is".
-     * The leak was exposure with no statement behind it.
-     *
-     * A surface key stays local: a doublure serves whatever the remote's own door
-     * serves, which is the remote's business and not ours to re-audience.
-     */
+    /** THE membership rule, stated once — every projection reads this and nothing else. */
     const facadeFor = (entity, surface) => {
         if (!surface)
             return facadeAt(facadeKeyOf(entity), true);
@@ -603,12 +543,12 @@ export async function createApp(options) {
             return own;
         const fallback = facadeAt(facadeKeyOf(entity), false);
         return fallback
-            ? new FacadeEntry(localDispatcher, entity, routeRegistry.operationNames(entity, surface), surface).operations
+            ? facadeOperations(localDispatcher, entity, routeRegistry.operationNames(entity, surface), surface)
             : undefined;
     };
     if (remoteRouter) {
         const remoteFacades = new Map();
-        routeRegistry.addResolver(new RemoteRouteResolver((entity) => {
+        routeRegistry.addResolver(remoteRoutes((entity) => {
             const known = remoteFacades.get(entity);
             if (known)
                 return known;
@@ -630,19 +570,14 @@ export async function createApp(options) {
             : undefined;
     };
     /**
-     * The storage an entity is backed by — the dual of `facadeFor`, which serves its
-     * client-facing door. Both are ways in; an entity that opens none of them still has rows.
-     *
-     * It resolves through the owning frond's scope, because that is where entity ORMs live:
-     * `resolve('UserOrm')` reads the ROOT container and never finds one, so callers outside
-     * the frond concluded there was no storage. The seed loop did exactly that, and skipped
-     * every entity with no façade — the one case its own fallback existed for.
+     * The storage an entity is backed by — the dual of `facadeFor`, which serves its client-facing
+     * door.
      */
-    const ormFor = (entity) => {
+    const storageFor = (entity) => {
         const owner = fronds.owner(entity);
         if (!owner)
             return undefined;
-        const key = ormKeyOf(entity);
+        const key = storageKeyOf(entity);
         try {
             return container.resolve(`frond:${owner.name}`).resolve(key);
         }
@@ -650,14 +585,7 @@ export async function createApp(options) {
             return undefined;
         }
     };
-    /**
-     * The presenter of an entity, resolved through its owning frond's scope.
-     *
-     * Same shape as `ormFor`, and it exists for the same reason: without it an adapter
-     * has to spell the container key itself. `schema-graphql` did — a hand-written
-     * `${Name}Presenter` — and a key respelled elsewhere finds nothing and says nothing
-     * the day the convention moves, which is exactly the failure `verify.ts` refuses.
-     */
+    /** The presenter of an entity, resolved through its owning frond's scope. */
     const presenterFor = (entity) => {
         const owner = fronds.owner(entity);
         if (!owner)
@@ -687,7 +615,7 @@ export async function createApp(options) {
         operationsFor,
         listensTo: () => emissions.listensTo(),
         deliver: (fact, payload) => emissions.deliver(fact, payload),
-        ormFor,
+        storageFor,
         presenterFor,
         dispose: release,
         drain,
@@ -724,7 +652,22 @@ export async function createApp(options) {
     app.serveRpc('discover', (_invocation, surface) => identityCardOf(app, surface));
     // The last thing the boot does, and the first thing a release undoes. An extension may
     // await here — which is what a provider needing to OPEN something could never do.
-    await appLifecycle.up(app);
+    //
+    // A refusal here has to release what the boot took, because the caller cannot: it handed
+    // `onDispose` over BEFORE this line and never receives the app that would carry it back.
+    // Whoever opened a connection to give it to us would otherwise leak it on every failed boot.
+    try {
+        await appLifecycle.up(app);
+    }
+    catch (cause) {
+        try {
+            await release();
+        }
+        catch (refused) {
+            throw new AggregateError([cause, ...(refused instanceof AggregateError ? refused.errors : [refused])], `The boot failed and could not release everything it had taken: ${cause?.message ?? String(cause)}`);
+        }
+        throw cause;
+    }
     return app;
 }
 //# sourceMappingURL=bootstrap.js.map