@fougere/core 0.9.3-alpha.0 → 0.10.0-alpha.0

package/dist/wire/http-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-error.d.ts","sourceRoot":"","sources":["../../src/wire/http-error.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,YAAY,EAAa,MAAM,aAAa,CAAC;AAmCtD,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAUnF;AAED,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;CAAE,CAYtG"}
+{"version":3,"file":"http-error.d.ts","sourceRoot":"","sources":["../../src/wire/http-error.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAmCjD,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAUnF;AAED,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;CAAE,CAYtG"}

package/dist/wire/http-error.js

@@ -1,6 +1,7 @@
 /** HTTP reading of an error — used by HTTP bridges (REST, Next, Inertia). */
-import { FougereError, ErrorCode } from './errors.js';
-import { Logger } from '../builtin/logger.js';
+import { ErrorCode } from './ErrorCode.js';
+import { FougereError } from './FougereError.js';
+import { Logger } from '../builtin/Logger.js';
 /**
  * An INTERNAL_ERROR is the one class of error whose message never leaves: it was not written for a
  * caller and may quote a path, a query or a row.
@@ -50,7 +51,7 @@ export function toHttpError(err) {
         return { status: httpStatusFor(err.code), body: toPublicError(err) };
     }
     // A throw that never became a FougereError is masked by the same rule, so it goes
-    // through the same door rather than growing a second, quieter one here.
+    // through the same facade rather than growing a second, quieter one here.
     const framed = new FougereError({
         code: ErrorCode.INTERNAL_ERROR,
         message: err?.message ?? 'Internal error',

package/dist/wire/http-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-error.js","sourceRoot":"","sources":["../../src/wire/http-error.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C;;;GAGG;AACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;AAEhC,MAAM,WAAW,GAA8B;IAC7C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG;IAC5B,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,GAAG;IAC7B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG;IAC1B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG;IAC1B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG;IACrB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG;IACzB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG;IACvB,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,GAAG;IACnC,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACpC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,GAAG;IACrC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;IAChC,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,GAAG;IAC/B,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;IAChC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG;IAC5B,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACpC,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;CACjC,CAAC;AAEF,kDAAkD;AAClD,SAAS,aAAa,CAAC,IAAe;IACpC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAClC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,GAAiB;IAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,OAAO,EAAE,gBAAgB;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,kFAAkF;IAClF,wEAAwE;IACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,OAAO,EAAG,GAA4B,EAAE,OAAO,IAAI,gBAAgB;QACnE,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC"}
+{"version":3,"file":"http-error.js","sourceRoot":"","sources":["../../src/wire/http-error.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C;;;GAGG;AACH,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;AAEhC,MAAM,WAAW,GAA8B;IAC7C,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG;IAC5B,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,GAAG;IAC7B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG;IAC1B,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG;IAC1B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG;IACrB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG;IACzB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG;IACvB,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,GAAG;IACnC,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACpC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,GAAG;IACrC,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG;IAClC,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;IAChC,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,GAAG;IAC/B,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;IAChC,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG;IAC5B,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,GAAG;IACpC,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG;CACjC,CAAC;AAEF,kDAAkD;AAClD,SAAS,aAAa,CAAC,IAAe;IACpC,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAClC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,GAAiB;IAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,cAAc;QAAE,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,OAAO,EAAE,gBAAgB;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,kFAAkF;IAClF,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,IAAI,EAAE,SAAS,CAAC,cAAc;QAC9B,OAAO,EAAG,GAA4B,EAAE,OAAO,IAAI,gBAAgB;QACnE,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/wire/loggerMiddleware.d.ts

@@ -1,8 +1,8 @@
 /**
  * Logger middleware — logs every operation with timing.
  */
-import type { AppMiddleware } from './middleware.js';
-import type { Logger } from '../builtin/logger.js';
+import type { AppMiddleware } from './AppMiddleware.js';
+import type { Logger } from '../builtin/Logger.js';
 /** Create a logger middleware that logs operation entry, exit, and errors. */
 export declare function loggerMiddleware(logger: Logger): AppMiddleware;
 //# sourceMappingURL=loggerMiddleware.d.ts.map

package/dist/wire/loggerMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loggerMiddleware.d.ts","sourceRoot":"","sources":["../../src/wire/loggerMiddleware.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAGnD,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAoB9D"}
+{"version":3,"file":"loggerMiddleware.d.ts","sourceRoot":"","sources":["../../src/wire/loggerMiddleware.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAGnD,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAoB9D"}

package/dist/wire/refusals.d.ts

@@ -0,0 +1,33 @@
+/**
+ * What a call to one operation can come back refusing — both halves, put together where they
+ * are read rather than where they are published.
+ *
+ * The half the FRAMEWORK owns is not on the wire, because it follows from facts that already
+ * are: an op with an `input` is judged at the facade, an op that is dispatched at all can meet a
+ * draining app, an op that crosses a process can meet the wire. Writing those beside every
+ * operation would be one fact in two places — and the card would grow by three entries per op
+ * that a reader can work out from `kind` and `input`.
+ *
+ * The half the FROND owns travels, because nothing else implies it: that `publish` answers
+ * `CONFLICT` is a domain decision, and it is read off the code by the scan's walk.
+ *
+ * Documented: [observability](https://fougere.dev/docs/infra/observability).
+ */
+import { ErrorCode } from './ErrorCode.js';
+/** The little of an operation this reads — so a card op and an effective one both fit. */
+export interface Refusable {
+    kind?: 'query' | 'command';
+    input?: unknown;
+    errors?: readonly string[];
+    /** Absent on a card op read from a frond that answers in this process. */
+    remote?: boolean;
+}
+/**
+ * Every code one operation can answer with, sorted — the declared ones and the implied ones.
+ *
+ * `INTERNAL_ERROR` is in neither: its message never leaves (`toPublicError` replaces it), so it
+ * is a bug rather than a refusal, and a contract that named it would tell a caller nothing it
+ * could act on.
+ */
+export declare function refusalsOf(op: Refusable): ErrorCode[];
+//# sourceMappingURL=refusals.d.ts.map

package/dist/wire/refusals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusals.d.ts","sourceRoot":"","sources":["../../src/wire/refusals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,0FAA0F;AAC1F,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAmBD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,SAAS,EAAE,CAIrD"}

package/dist/wire/refusals.js

@@ -0,0 +1,44 @@
+/**
+ * What a call to one operation can come back refusing — both halves, put together where they
+ * are read rather than where they are published.
+ *
+ * The half the FRAMEWORK owns is not on the wire, because it follows from facts that already
+ * are: an op with an `input` is judged at the facade, an op that is dispatched at all can meet a
+ * draining app, an op that crosses a process can meet the wire. Writing those beside every
+ * operation would be one fact in two places — and the card would grow by three entries per op
+ * that a reader can work out from `kind` and `input`.
+ *
+ * The half the FROND owns travels, because nothing else implies it: that `publish` answers
+ * `CONFLICT` is a domain decision, and it is read off the code by the scan's walk.
+ *
+ * Documented: [observability](https://fougere.dev/docs/infra/observability).
+ */
+import { ErrorCode } from './ErrorCode.js';
+/**
+ * What the framework refuses, and the fact each one follows from. Every line is a claim about
+ * the core, held by a test rather than by memory: the day a facade stops judging, the claim fails
+ * before a contract starts lying.
+ */
+const IMPLIED = [
+    // `InFlight.enter` — a call arriving after the facade closed, which any op can meet.
+    { code: ErrorCode.SERVICE_UNAVAILABLE, when: () => true },
+    // `validateInput` — it returns the invocation untouched when the op declares no view.
+    { code: ErrorCode.VALIDATION_FAILED, when: (op) => op.input !== undefined },
+    // `StorageGuard` — it judges what a handler writes, so a reading op never meets it.
+    { code: ErrorCode.BAD_REQUEST, when: (op) => op.kind === 'command' },
+    // The transport, and `boot/remote` behind it. Only a call that leaves can fail to arrive.
+    { code: ErrorCode.GATEWAY_TIMEOUT, when: (op) => op.remote === true },
+    { code: ErrorCode.BAD_GATEWAY, when: (op) => op.remote === true },
+];
+/**
+ * Every code one operation can answer with, sorted — the declared ones and the implied ones.
+ *
+ * `INTERNAL_ERROR` is in neither: its message never leaves (`toPublicError` replaces it), so it
+ * is a bug rather than a refusal, and a contract that named it would tell a caller nothing it
+ * could act on.
+ */
+export function refusalsOf(op) {
+    const implied = IMPLIED.filter((one) => one.when(op)).map((one) => one.code);
+    return [...new Set([...(op.errors ?? []), ...implied])].sort();
+}
+//# sourceMappingURL=refusals.js.map

package/dist/wire/refusals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusals.js","sourceRoot":"","sources":["../../src/wire/refusals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAW3C;;;;GAIG;AACH,MAAM,OAAO,GAA4D;IACvE,qFAAqF;IACrF,EAAE,IAAI,EAAE,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;IACzD,sFAAsF;IACtF,EAAE,IAAI,EAAE,SAAS,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE;IAC3E,oFAAoF;IACpF,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE;IACpE,0FAA0F;IAC1F,EAAE,IAAI,EAAE,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE;IACrE,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE;CAClE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,EAAa;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE7E,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAgB,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAChF,CAAC"}

package/dist/wire/topology/DeclaredEdge.d.ts

@@ -0,0 +1,6 @@
+/** One frond reaching another, read from a handler's dependencies rather than from a call. */
+export interface DeclaredEdge {
+    from: string;
+    to: string;
+}
+//# sourceMappingURL=DeclaredEdge.d.ts.map

package/dist/wire/topology/DeclaredEdge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeclaredEdge.d.ts","sourceRoot":"","sources":["../../../src/wire/topology/DeclaredEdge.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ"}

package/dist/wire/topology/DeclaredEdge.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeclaredEdge.js.map

package/dist/wire/topology/DeclaredEdge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeclaredEdge.js","sourceRoot":"","sources":["../../../src/wire/topology/DeclaredEdge.ts"],"names":[],"mappings":""}

package/dist/wire/topology/DeclaredFrond.d.ts

@@ -0,0 +1,11 @@
+/** A frond the config knows of, and where it says to reach it. */
+export interface DeclaredFrond {
+    frond: string;
+    placement: 'local' | 'remote';
+    /**
+     * Host and port of the address `remotes:` names, absent when the frond runs here. Never the
+     * whole address: a declared one may carry credentials, and this answer leaves the process.
+     */
+    at?: string;
+}
+//# sourceMappingURL=DeclaredFrond.d.ts.map

package/dist/wire/topology/DeclaredFrond.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeclaredFrond.d.ts","sourceRoot":"","sources":["../../../src/wire/topology/DeclaredFrond.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;CACb"}

package/dist/wire/topology/DeclaredFrond.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeclaredFrond.js.map

package/dist/wire/topology/DeclaredFrond.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeclaredFrond.js","sourceRoot":"","sources":["../../../src/wire/topology/DeclaredFrond.ts"],"names":[],"mappings":""}

package/dist/wire/topology/DeclaredTopology.d.ts

@@ -0,0 +1,12 @@
+import type { DeclaredFrond } from './DeclaredFrond.js';
+import type { DeclaredEdge } from './DeclaredEdge.js';
+/**
+ * What the config SAYS, beside what the runtime SAW. The two disagree exactly when something
+ * is misconfigured, and a frond that never answered is absent from the observed half — so
+ * without this one, nothing tells a silent dependency from an absent one.
+ */
+export interface DeclaredTopology {
+    fronds: DeclaredFrond[];
+    edges: DeclaredEdge[];
+}
+//# sourceMappingURL=DeclaredTopology.d.ts.map

package/dist/wire/topology/DeclaredTopology.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeclaredTopology.d.ts","sourceRoot":"","sources":["../../../src/wire/topology/DeclaredTopology.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB"}

package/dist/wire/topology/DeclaredTopology.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DeclaredTopology.js.map

package/dist/wire/topology/DeclaredTopology.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeclaredTopology.js","sourceRoot":"","sources":["../../../src/wire/topology/DeclaredTopology.ts"],"names":[],"mappings":""}

package/dist/wire/topology/Edge.d.ts

@@ -0,0 +1,8 @@
+/** One frond calling another — an edge of the graph, counted where the call was made. */
+export interface Edge {
+    from: string;
+    to: string;
+    count: number;
+    errors: number;
+}
+//# sourceMappingURL=Edge.d.ts.map

package/dist/wire/topology/Edge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Edge.d.ts","sourceRoot":"","sources":["../../../src/wire/topology/Edge.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/wire/topology/Edge.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Edge.js.map

package/dist/wire/topology/Edge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Edge.js","sourceRoot":"","sources":["../../../src/wire/topology/Edge.ts"],"names":[],"mappings":""}

package/dist/wire/topology/FrondPlacement.d.ts

@@ -0,0 +1,8 @@
+/** A frond this process knows about, and whether it runs here. */
+export interface FrondPlacement {
+    frond: string;
+    placement: 'local' | 'remote';
+    entities: number;
+    facades: number;
+}
+//# sourceMappingURL=FrondPlacement.d.ts.map

package/dist/wire/topology/FrondPlacement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FrondPlacement.d.ts","sourceRoot":"","sources":["../../../src/wire/topology/FrondPlacement.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/wire/topology/FrondPlacement.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=FrondPlacement.js.map

package/dist/wire/topology/FrondPlacement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FrondPlacement.js","sourceRoot":"","sources":["../../../src/wire/topology/FrondPlacement.ts"],"names":[],"mappings":""}

package/dist/wire/topology/TopologyReport.d.ts

@@ -0,0 +1,14 @@
+import type { FrondPlacement } from './FrondPlacement.js';
+import type { Edge } from './Edge.js';
+import type { DeclaredTopology } from './DeclaredTopology.js';
+/** The shape of the system as ONE process discovered it — the answer to `rpc.topology`. */
+export interface TopologyReport {
+    /** When this process started counting — an edge count is read against it. */
+    since: number;
+    /** Calls running right now: the one signal a static shape cannot carry. */
+    active: number;
+    fronds: FrondPlacement[];
+    edges: Edge[];
+    declared: DeclaredTopology;
+}
+//# sourceMappingURL=TopologyReport.d.ts.map

package/dist/wire/topology/TopologyReport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TopologyReport.d.ts","sourceRoot":"","sources":["../../../src/wire/topology/TopologyReport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,2FAA2F;AAC3F,MAAM,WAAW,cAAc;IAC7B,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,EAAE,gBAAgB,CAAC;CAC5B"}

package/dist/wire/topology/TopologyReport.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=TopologyReport.js.map

package/dist/wire/topology/TopologyReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TopologyReport.js","sourceRoot":"","sources":["../../../src/wire/topology/TopologyReport.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fougere/core",
-  "version": "0.9.3-alpha.0",
+  "version": "0.10.0-alpha.0",
   "description": "The core — scan, call contract, façades, remote stand-ins.",
   "keywords": [
     "fougere",
@@ -61,12 +61,12 @@
   "dependencies": {
     "@typescript/typescript6": "^6.0.2",
     "dequal": "^2.0.3",
-    "@fougere/container": "0.9.3-alpha.0",
-    "@fougere/schema": "0.9.3-alpha.0"
+    "@fougere/container": "0.10.0-alpha.0",
+    "@fougere/schema": "0.10.0-alpha.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "@fougere/compiler": "0.9.3-alpha.0"
+    "@fougere/compiler": "0.10.0-alpha.0"
   },
   "publishConfig": {
     "access": "public"

package/src/AdapterConfig.ts

@@ -0,0 +1,11 @@
+/** Protocol adapters, by the name of the package that provides them. */
+export interface AdapterConfig {
+  /** `@fougere/adapter-rest` — REST under `/api/{frond}/{plural}`. */
+  rest?: boolean;
+  /** `@fougere/adapter-graphql` — a GraphQL schema over the same operations. */
+  graphql?: boolean;
+  /** A surface of your own; the framework only records that you declared it. */
+  [adapter: string]: boolean | undefined;
+}
+
+// ── Loading ──────────────────────────────────────

package/src/AnswerFor.ts

@@ -0,0 +1,7 @@
+import type { FougerePorts } from './FougerePorts.js';
+import type { NameOf } from './NameOf.js';
+
+/** What may answer a port — its own realizations, or any class name where nothing was generated. */
+export type AnswerFor<Port extends string> = FougerePorts extends Record<Port, infer Answers extends string>
+  ? Answers
+  : NameOf<'handler'>;

package/src/Binding.ts

@@ -0,0 +1,4 @@
+import type { BindingPlan } from './wire/binding.js';
+
+/** One argument's source, as the plan states it. */
+export type Binding = BindingPlan[number];

package/src/{identity.ts → CallIdentity.ts}

@@ -1,28 +1,18 @@
-/**
- * Who is calling — the proof, not the claim.
- *
- * Documented: [identity](https://fougere.dev/docs/infra/identity).
- */
 import { crypto } from '#crypto';
-import type { PublicJwk, Signer, Verifier } from './crypto/port.js';
+import type { PublicJwk } from './crypto/PublicJwk.js';
+import type { Signer } from './crypto/Signer.js';
+import type { Verifier } from './crypto/Verifier.js';
 import { b64url, unb64url, bytesOf, textOf, unb64 } from './crypto/encoding.js';
-import type { SignedCall } from './wire/call.js';
-
-export type { SignedCall } from './wire/call.js';
+import type { SignedCall } from './wire/SignedCall.js';
+import type { FrondIdentity } from './FrondIdentity.js';
+import type { VerifiedCall } from './VerifiedCall.js';
 
 /** How long a call envelope stays valid. A signed call is not a session. */
 const ENVELOPE_TTL_MS = 60_000;
+
 /** Clock skew tolerated on both sides of a validity window. */
 const SKEW_MS = 30_000;
 
-/** What a deployment hands a frond that CALLS: its own key, and the root's word for it. */
-export interface FrondIdentity {
-  /** The frond's private key, PEM (PKCS#8). */
-  privateKey: string;
-  /** The root's statement binding this frond's name to its public key. */
-  grant: string;
-}
-
 /** The input's fingerprint. Absence and explicit null are different signed calls. */
 async function digestOf(input: unknown): Promise<string> {
   // The tag is outside the caller value, so no user object can collide with it. JSON's
@@ -44,14 +34,6 @@ async function boundTo(call: SignedCall) {
   };
 }
 
-/** What `verifyEnvelope` establishes — never what the caller asked for. */
-export interface VerifiedCall {
-  /** The frond that signed, as the root named it. */
-  caller: string;
-  /** The state it asserted, now proven to come from `caller`. */
-  state: Record<string, unknown>;
-}
-
 /** A JWS compact serialization, signed with Ed25519. */
 async function signJws(header: object, payload: object, signer: Signer): Promise<string> {
   const signingInput = `${b64url(JSON.stringify(header))}.${b64url(JSON.stringify(payload))}`;

package/src/Constraint.ts

@@ -0,0 +1,2 @@
+/** A promise the judge at the facade cannot keep, because it is about rows it never sees. */
+export type Constraint = 'unique';

package/src/{conventions.ts → Conventions.ts}

@@ -1,4 +1,4 @@
-/** The names the scan READS instead of deriving them. */
+import type { ConventionsInput } from './ConventionsInput.js';
 
 export interface Conventions {
   /** The scope a frond's package name carries — `@fronds/blog`. */
@@ -28,6 +28,18 @@ export interface Conventions {
     rules: string;
     /** What its shapes used to be — written by `fougere freeze`, replayed by `migrate`. */
     versions: string;
+    /**
+     * The words this frond adds to the declaration — a generator, a format, a boundary codec.
+     * Read BEFORE `entities`, alone among the directories: an entity may write
+     * `generate: 'ulid'`, and a name a registry does not hold yet is a name it refuses.
+     */
+    vocabulary: string;
+    /**
+     * What rises and falls with the process, written beside the code it instruments.
+     * Recognized by its FORM — a module stating `up` or `down` — and it travels with its
+     * frond: moved behind `remotes:`, it mounts on the process that serves it there.
+     */
+    extensions: string;
   };
 }
 
@@ -46,16 +58,11 @@ export const DEFAULT_CONVENTIONS: Conventions = {
     middlewares: 'middlewares',
     rules: 'rules',
     versions: 'versions',
+    vocabulary: 'vocabulary',
+    extensions: 'extensions',
   },
 };
 
-/** What a `fougere.config.ts` may state: only the names that differ. */
-export type ConventionsInput = {
-  scope?: string;
-  fronds?: string;
-  dirs?: Partial<Conventions['dirs']>;
-};
-
 /** The convention, with a project's exceptions folded in. */
 export function resolveConventions(input?: ConventionsInput): Conventions {
   return {
@@ -78,8 +85,12 @@ export function providerDirsOf(conventions: Conventions): string[] {
 /** The frond vocabulary — every directory the scan reads. */
 export function frondDirsOf(conventions: Conventions): string[] {
   const { entities, handlers, presenters, collectors, seeds, middlewares, rules, versions } = conventions.dirs;
+  const { vocabulary, extensions } = conventions.dirs;
+
+  // `vocabulary` first, and the order is the point: an entity may name what it registers.
   return [...new Set([
-    entities, handlers, presenters, collectors, seeds, middlewares, rules, versions,
+    vocabulary,
+    entities, handlers, presenters, collectors, seeds, middlewares, rules, versions, extensions,
     ...providerDirsOf(conventions),
   ])];
 }

package/src/ConventionsInput.ts

@@ -0,0 +1,8 @@
+import type { Conventions } from './Conventions.js';
+
+/** What a `fougere.config.ts` may state: only the names that differ. */
+export type ConventionsInput = {
+  scope?: string;
+  fronds?: string;
+  dirs?: Partial<Conventions['dirs']>;
+};

package/src/Ctor.ts

@@ -0,0 +1,2 @@
+/** Any class, whatever it takes — what a declaration names when it names one. */
+export type Ctor = new (...args: never[]) => unknown;

package/src/Declared.ts

@@ -0,0 +1,8 @@
+import type { Ctor } from './Ctor.js';
+import type { DeclaredSubject } from './DeclaredSubject.js';
+
+/** A class on its own, or a class with what it asks for. */
+export type Declared = Ctor | (DeclaredSubject & {
+  /** The container key, when the class's own name cannot be trusted to survive a build. */
+  name?: string;
+});

package/src/DeclaredHandler.ts

@@ -0,0 +1,18 @@
+import type { OperationContract } from './wire/OperationContract.js';
+import type { DeclaredSubject } from './DeclaredSubject.js';
+
+/** A handler, and the surface it answers on when it is not the default one. */
+export interface DeclaredHandler extends DeclaredSubject {
+  /**
+   * The scan reads this from the directory (`handlers/public/`), so a statement has to say it: two
+   * handlers over one entity collide on their address otherwise, and the refusal names the same
+   * route twice.
+   */
+  surface?: string;
+  /**
+   * What each method takes and answers — read from SOURCE by the scan, and unreachable
+   * from a class at runtime. A prefab declares its own (`Crud.__ops`) and needs nothing
+   * here; a method someone wrote does, or the route it should serve does not exist.
+   */
+  operations?: ReadonlyMap<string, OperationContract> | Record<string, OperationContract>;
+}

package/src/DeclaredSubject.ts

@@ -0,0 +1,6 @@
+import type { Ctor } from './Ctor.js';
+/** What a subject needs beyond its class, when its constructor names a frame or a port. */
+export interface DeclaredSubject {
+  ctor: Ctor;
+  deps?: string[];
+}

package/src/{graph.ts → DomainCluster.ts}

@@ -1,16 +1,6 @@
 import { Role } from '@fougere/schema';
-/**
- * Entity dependency graph — analyzes ref() links between entities
- * to suggest domain boundaries for splitting fronds.
- */
-import type { FrondDescriptor } from './descriptor/frond.js';
-
-export interface EntityNode {
-  name: string;
-  frond: string;
-  refs: string[];       // entity names this entity references
-  referencedBy: string[]; // entity names that reference this entity
-}
+import type { FrondDescriptor } from './descriptor/FrondDescriptor.js';
+import type { EntityNode } from './EntityNode.js';
 
 export interface DomainCluster {
   name: string;

package/src/EffectiveCollector.ts

@@ -0,0 +1,7 @@
+export interface EffectiveCollector {
+  parameter: string;
+  typeName: string;
+  className: string;
+  frond: string;
+  filePath: string;
+}

package/src/EffectiveOperation.ts

@@ -0,0 +1,62 @@
+import { EFFECTIVE_OPERATION_SEMANTICS } from './EffectiveOperationSemantics.js';
+import { type BindingPlan } from './wire/binding.js';
+import { type OperationContract } from './wire/OperationContract.js';
+import { type OperationKind } from './wire/OperationKind.js';
+import type { EffectiveParameter } from './EffectiveParameter.js';
+import type { EffectiveCollector } from './EffectiveCollector.js';
+
+export interface EffectiveOperation extends OperationContract {
+  /** Stable qualified identity: `blog/public/Post.publish`. */
+  id: string;
+  /** Human-facing identity independent of placement: `Post.publish`. */
+  operation: string;
+  name: string;
+  kind: OperationKind;
+  kindSource: 'explicit' | 'convention';
+  handler: {
+    className: string;
+    address: string;
+    filePath: string;
+  };
+  /** The class and method that execute after an optional operation override. */
+  implementation: {
+    className: string;
+    address: string;
+    method: string;
+    filePath: string;
+  };
+  /** Every valid operation has a plan, including the empty plan. */
+  binding: BindingPlan;
+  parameters: EffectiveParameter[];
+  collectors: EffectiveCollector[];
+  contexts: string[];
+  placement: {
+    frond: string;
+    runtime: 'local' | 'remote';
+    remote?: string;
+  };
+  /**
+   * What running this op reaches, and how much of that crosses a process.
+   *
+   * `placement` says where the op ANSWERS; this says where it GOES. The pair is what every
+   * number a process hard-codes is really a function of — how often a trace is sampled, where
+   * a latency histogram's bounds should sit, what a load threshold may assume. An op that
+   * answers here and hops twice is not the same subject as one that answers here and hops none.
+   *
+   * Read from the handler, never from the op: a dependency is declared on the constructor, so
+   * the crossing belongs to the CLASS. Every op of one handler reaches the same fronds, and
+   * saying otherwise would dress a structural fact as a precise effect.
+   */
+  reach: {
+    fronds: { frond: string; runtime: 'local' | 'remote' }[];
+    /** How many of them are a process away — zero when everything it reaches runs here. */
+    hops: number;
+  };
+  exposure: {
+    surfaces: string[];
+    adapters: string[];
+  };
+  /** Whether output is an explicitly closed per-operation view. */
+  outputClosed: boolean;
+  semantics: typeof EFFECTIVE_OPERATION_SEMANTICS;
+}