@fougere/nuxt 0.3.0-alpha.0 → 0.5.0-alpha.0

package/dist/runtime/plugins/session.server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.server.js","sourceRoot":"","sources":["../../../src/runtime/plugins/session.server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AAEtE,eAAe,gBAAgB,CAAC,GAAG,EAAE;IACnC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,QAAQ,CAAc,iBAAiB,EAAE,GAAG,EAAE,CAC5C,aAAa,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAA4B,CAAC,CACjE,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/runtime/server/api/crud.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<unknown>>;
+export default _default;
+//# sourceMappingURL=crud.d.ts.map

package/dist/runtime/server/api/crud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud.d.ts","sourceRoot":"","sources":["../../../../src/runtime/server/api/crud.ts"],"names":[],"mappings":""}

package/dist/runtime/server/api/crud.js

@@ -0,0 +1,46 @@
+/**
+ * REST catch-all — the h3 half of a door whose decisions live in `@fougere/app`.
+ *
+ * It used to derive its own answers: its own `pluralize`, its own "segment = op or
+ * id", and its own method rule — which was no rule at all. A known operation name
+ * won whatever the verb, so `GET /api/blog/posts/delete?id=…` reached the mutating
+ * method with the session cookie a browser attaches to any navigation, and a
+ * body-less `DELETE /api/blog/posts` was read as `create`.
+ *
+ * `schema-rest` already answers all three in one place, `exposed === false`
+ * included — so the fix was not a guard added here, it was the removal of the
+ * second answer. `serveRest` is now the third: the same decision serves Next, and
+ * neither adapter restates it.
+ *
+ * What stays here is translation: read the h3 event, write the h3 answer. The state
+ * is stamped from `event.context` — what the server resolved, never the wire.
+ */
+import { defineEventHandler, readBody, getQuery, createError, setResponseStatus, setResponseHeaders } from 'h3';
+import { serveRest, useFougereApp } from '@fougere/app';
+export default defineEventHandler(async (event) => {
+    const app = await useFougereApp();
+    const method = event.method.toUpperCase();
+    const hasBody = method === 'POST' || method === 'PUT' || method === 'PATCH';
+    const outcome = await serveRest(app, {
+        method,
+        path: event.path.replace(/^\/api\//, '').replace(/\?.*$/, ''),
+        query: getQuery(event),
+        body: hasBody ? await readBody(event) : undefined,
+        state: (event.context ?? {}),
+    });
+    // Nothing here is ours — an app's own /api/* routes must still reach their handler.
+    if (outcome.kind === 'pass')
+        return;
+    if (outcome.kind === 'error') {
+        if (outcome.headers)
+            setResponseHeaders(event, outcome.headers);
+        throw createError({
+            statusCode: outcome.status,
+            message: outcome.body.message,
+            data: outcome.body,
+        });
+    }
+    setResponseStatus(event, outcome.status);
+    return outcome.body;
+});
+//# sourceMappingURL=crud.js.map

package/dist/runtime/server/api/crud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crud.js","sourceRoot":"","sources":["../../../../src/runtime/server/api/crud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAExD,eAAe,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;IAChD,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,CAAC;IAE5E,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACnC,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,KAAK,EAAE,QAAQ,CAAC,KAAK,CAA2B;QAChD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;QACjD,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAA4B;KACxD,CAAC,CAAC;IAEH,oFAAoF;IACpF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO;IAEpC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,OAAO;YAAE,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,WAAW,CAAC;YAChB,UAAU,EAAE,OAAO,CAAC,MAAM;YAC1B,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC,CAAC,CAAC"}

package/dist/runtime/server/auth/middleware/auth.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Resolves the current session/user from the request cookie and exposes them
+ * on event.context. Auth-related routes are skipped so the catch-all handles them.
+ */
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export default _default;
+//# sourceMappingURL=auth.d.ts.map

package/dist/runtime/server/auth/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/server/auth/middleware/auth.ts"],"names":[],"mappings":"AAGA;;;GAGG"}

package/dist/runtime/server/auth/middleware/auth.js

@@ -0,0 +1,32 @@
+import { defineEventHandler, getRequestHeader } from 'h3';
+import { useFougereAuth } from '@fougere/app';
+/**
+ * Resolves the current session/user from the request cookie and exposes them
+ * on event.context. Auth-related routes are skipped so the catch-all handles them.
+ */
+export default defineEventHandler(async (event) => {
+    if (event.path.startsWith('/auth/'))
+        return;
+    const cookie = getRequestHeader(event, 'cookie');
+    if (!cookie)
+        return;
+    let auth;
+    try {
+        auth = await useFougereAuth();
+    }
+    catch {
+        return; // no auth configured
+    }
+    try {
+        // event.headers, not toWebRequest(event).headers — the web request wraps
+        // the body stream, and a later readBody would hang on the captured stream
+        const result = await auth.api
+            .getSession({ headers: event.headers });
+        if (result?.session && result?.user) {
+            event.context.user = result.user;
+            event.context.session = result.session;
+        }
+    }
+    catch { }
+});
+//# sourceMappingURL=auth.js.map

package/dist/runtime/server/auth/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../../src/runtime/server/auth/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,IAAI,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C;;;GAGG;AACH,eAAe,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;IAChD,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,qBAAqB;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,MAAM,GAAG,MAAO,IAAI,CAAC,GAAsI;aAC9J,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC;YACpC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACjC,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC,CAAC,CAAC"}

package/dist/runtime/server/auth/routes/api/me.get.d.ts

@@ -0,0 +1,5 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, {
+    [x: string]: unknown;
+}>;
+export default _default;
+//# sourceMappingURL=me.get.d.ts.map

package/dist/runtime/server/auth/routes/api/me.get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.get.d.ts","sourceRoot":"","sources":["../../../../../../src/runtime/server/auth/routes/api/me.get.ts"],"names":[],"mappings":""}

package/dist/runtime/server/auth/routes/api/me.get.js

@@ -0,0 +1,10 @@
+import { defineEventHandler, createError } from 'h3';
+export default defineEventHandler((event) => {
+    const user = event.context.user;
+    if (!user) {
+        throw createError({ statusCode: 401, message: 'Not logged in' });
+    }
+    const { passwordHash, ...safe } = user;
+    return safe;
+});
+//# sourceMappingURL=me.get.js.map

package/dist/runtime/server/auth/routes/api/me.get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.get.js","sourceRoot":"","sources":["../../../../../../src/runtime/server/auth/routes/api/me.get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAErD,eAAe,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,IAA+B,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CAAC"}

package/dist/runtime/server/auth/routes/auth/[...].d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
+export default _default;
+//# sourceMappingURL=%5B...%5D.d.ts.map

package/dist/runtime/server/auth/routes/auth/[...].d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"[...].d.ts","sourceRoot":"","sources":["../../../../../../src/runtime/server/auth/routes/auth/[...].ts"],"names":[],"mappings":""}

package/dist/runtime/server/auth/routes/auth/[...].js

@@ -0,0 +1,8 @@
+import { defineEventHandler, toWebRequest, sendWebResponse } from 'h3';
+import { useFougereAuth } from '@fougere/app';
+export default defineEventHandler(async (event) => {
+    const auth = await useFougereAuth();
+    const webResponse = await auth.handler(toWebRequest(event));
+    return sendWebResponse(event, webResponse);
+});
+//# sourceMappingURL=%5B...%5D.js.map

package/dist/runtime/server/auth/routes/auth/[...].js.map

@@ -0,0 +1 @@
+{"version":3,"file":"[...].js","sourceRoot":"","sources":["../../../../../../src/runtime/server/auth/routes/auth/[...].ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,eAAe,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;IAChD,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC"}

package/dist/runtime/server/routes/call.post.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<unknown>>;
+export default _default;
+//# sourceMappingURL=call.post.d.ts.map

package/dist/runtime/server/routes/call.post.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.post.d.ts","sourceRoot":"","sources":["../../../../src/runtime/server/routes/call.post.ts"],"names":[],"mappings":""}

package/dist/runtime/server/routes/call.post.js

@@ -0,0 +1,125 @@
+/**
+ * Receiving end for the browser — the h3 half. The decision (which audience, which
+ * runner, what a parse failure answers) lives in `@fougere/app`; what stays here is
+ * getting a JSON payload out of an h3 event, which is the one thing that genuinely
+ * differs between hosts. Next reads `await request.json()` and needs none of this.
+ *
+ * Trust boundary, unchanged: the browser sits outside the topology, so `state` is
+ * stamped from the server-resolved session (event.context), never taken from the wire.
+ */
+import { defineEventHandler } from 'h3';
+import { serveRpc, rpcParseError, useFougereApp } from '@fougere/app';
+import { MAX_BODY_BYTES } from '@fougere/core';
+function payloadTooLarge() {
+    return Object.assign(new Error('Payload too large'), { statusCode: 413, statusMessage: 'Payload too large' });
+}
+function parseRawJson(raw) {
+    if (Buffer.byteLength(raw) > MAX_BODY_BYTES)
+        throw payloadTooLarge();
+    return raw ? JSON.parse(raw) : {};
+}
+async function readWebBody(req) {
+    const declaredLength = Number(req.headers?.get?.('content-length'));
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_BODY_BYTES)
+        throw payloadTooLarge();
+    const reader = req.body?.getReader?.();
+    if (reader) {
+        const chunks = [];
+        let size = 0;
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            const chunk = Buffer.from(value ?? []);
+            size += chunk.length;
+            if (size > MAX_BODY_BYTES) {
+                await reader.cancel?.();
+                throw payloadTooLarge();
+            }
+            chunks.push(chunk);
+        }
+        return parseRawJson(Buffer.concat(chunks).toString('utf8'));
+    }
+    if (typeof req.text === 'function')
+        return parseRawJson(await req.text());
+    // Legacy request-like implementations may expose only json(). The content-length
+    // check above still rejects declared oversized payloads; standard Request objects
+    // take the streamed branch and enforce the limit while reading.
+    if (typeof req.json === 'function')
+        return req.json();
+    return {};
+}
+/**
+ * Read the JSON-RPC payload from the h3 event, agnostic to h3 version AND trust
+ * boundary. We read the event's shape directly instead of calling `readBody`,
+ * whose static `from 'h3'` import can bind to a different h3 major than the one
+ * that shaped the event (nitro's runtime is v1 here; devtools drag in v2) —
+ * `readBody` v2 on a v1 event throws `event.req.text is not a function`.
+ *
+ * Two shapes occur, both verified:
+ *  - SSR internal `$fetch`: a synthetic event whose `node.req.body` is already
+ *    the raw JSON string — the mock stream is not readable, never drain it.
+ *  - Browser POST: a real IncomingMessage, drained via stream events (`for
+ *    await` fails: the SSR mock has no async iterator).
+ * The `event.req.json()` branch is the future once nitro is fully on h3 v2.
+ */
+async function readJsonBody(event) {
+    const rawNodeReq = event.node?.req;
+    const nodeReq = rawNodeReq && typeof rawNodeReq === 'object' ? rawNodeReq : undefined;
+    const preset = nodeReq?.body;
+    if (typeof preset === 'string') {
+        if (Buffer.byteLength(preset) > MAX_BODY_BYTES)
+            throw payloadTooLarge();
+        return parseRawJson(preset);
+    }
+    if (preset instanceof Uint8Array) {
+        if (preset.byteLength > MAX_BODY_BYTES)
+            throw payloadTooLarge();
+        const raw = Buffer.from(preset).toString('utf8');
+        return parseRawJson(raw);
+    }
+    const webReq = event.req && typeof event.req === 'object' ? event.req : undefined;
+    if (webReq
+        && (webReq.body?.getReader || typeof webReq.text === 'function' || typeof webReq.json === 'function'))
+        return readWebBody(webReq);
+    if (nodeReq && typeof nodeReq.on === 'function') {
+        const raw = await new Promise((resolve, reject) => {
+            const chunks = [];
+            let size = 0;
+            let exceeded = false;
+            nodeReq.on('data', (chunk) => {
+                if (exceeded)
+                    return;
+                const buffer = Buffer.from(chunk);
+                size += buffer.length;
+                if (size > MAX_BODY_BYTES) {
+                    exceeded = true;
+                    reject(payloadTooLarge());
+                    return;
+                }
+                chunks.push(buffer);
+            });
+            nodeReq.on('end', () => { if (!exceeded)
+                resolve(Buffer.concat(chunks).toString('utf8')); });
+            nodeReq.on('error', reject);
+        });
+        return parseRawJson(raw);
+    }
+    return {};
+}
+export default defineEventHandler(async (event) => {
+    const app = await useFougereApp();
+    try {
+        return await serveRpc(app, {
+            path: event.path,
+            body: await readJsonBody(event),
+            state: (event.context ?? {}),
+        });
+    }
+    catch (err) {
+        if (err?.statusCode === 413)
+            throw err;
+        return rpcParseError();
+    }
+});
+//# sourceMappingURL=call.post.js.map

package/dist/runtime/server/routes/call.post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.post.js","sourceRoot":"","sources":["../../../../src/runtime/server/routes/call.post.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAe/C,SAAS,eAAe;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,cAAc;QAAE,MAAM,eAAe,EAAE,CAAC;IACrE,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,cAAc;QAAE,MAAM,eAAe,EAAE,CAAC;IAEhG,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,eAAe,EAAE,CAAC;YAC1B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,iFAAiF;IACjF,kFAAkF;IAClF,gEAAgE;IAChE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACtD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,YAAY,CAAC,KAAkD;IAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;IACnC,MAAM,OAAO,GAAG,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,MAAM,MAAM,GAAG,OAAO,EAAE,IAAI,CAAC;IAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,cAAc;YAAE,MAAM,eAAe,EAAE,CAAC;QACxE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,MAAM,YAAY,UAAU,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,UAAU,GAAG,cAAc;YAAE,MAAM,eAAe,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IACE,MAAM;WACH,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;QACrG,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO,CAAC,EAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,IAAI,QAAQ;oBAAE,OAAO;gBACrB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;gBACtB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;oBAC1B,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;oBAC1B,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,EAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9F,OAAO,CAAC,EAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,eAAe,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;IAChD,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE;YACzB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,MAAM,YAAY,CAAC,KAAK,CAAC;YAC/B,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAA4B;SACxD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA+B,EAAE,UAAU,KAAK,GAAG;YAAE,MAAM,GAAG,CAAC;QACpE,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/runtime/server/routes/session.get.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, import("@fougere/app").SessionView>;
+export default _default;
+//# sourceMappingURL=session.get.d.ts.map

package/dist/runtime/server/routes/session.get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.get.d.ts","sourceRoot":"","sources":["../../../../src/runtime/server/routes/session.get.ts"],"names":[],"mappings":""}

package/dist/runtime/server/routes/session.get.js

@@ -0,0 +1,9 @@
+/**
+ * The session view over the wire — same resolution the hydration reads,
+ * for a client refreshing after login/logout. Internal route, same
+ * family as /_fougere/call.
+ */
+import { defineEventHandler } from 'h3';
+import { sessionViewOf } from '@fougere/app';
+export default defineEventHandler((event) => sessionViewOf((event.context ?? {})));
+//# sourceMappingURL=session.get.js.map

package/dist/runtime/server/routes/session.get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.get.js","sourceRoot":"","sources":["../../../../src/runtime/server/routes/session.get.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,eAAe,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,aAAa,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC,CAChE,CAAC"}

package/dist/runtime/server/utils/boot.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The boot, re-exported under a path inside this package.
+ *
+ * Every runtime file here reaches `@fougere/app` by name, because it is resolved
+ * from this package's own node_modules. The generated Nitro plugin cannot: it is
+ * written into the user's `.nuxt/`, so a bare `@fougere/app` would be resolved from
+ * the USER's project, where a transitive dependency is not visible under pnpm.
+ *
+ * So the codegen imports this file by absolute path, and this file — which does sit
+ * in `@fougere/nuxt` — does the resolving. One indirection, one reason.
+ */
+export { configureFougere, extendFougere, useFougereApp, type FougereServerConfig } from '@fougere/app';
+//# sourceMappingURL=boot.d.ts.map

package/dist/runtime/server/utils/boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../../../src/runtime/server/utils/boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/dist/runtime/server/utils/boot.js

@@ -0,0 +1,13 @@
+/**
+ * The boot, re-exported under a path inside this package.
+ *
+ * Every runtime file here reaches `@fougere/app` by name, because it is resolved
+ * from this package's own node_modules. The generated Nitro plugin cannot: it is
+ * written into the user's `.nuxt/`, so a bare `@fougere/app` would be resolved from
+ * the USER's project, where a transitive dependency is not visible under pnpm.
+ *
+ * So the codegen imports this file by absolute path, and this file — which does sit
+ * in `@fougere/nuxt` — does the resolving. One indirection, one reason.
+ */
+export { configureFougere, extendFougere, useFougereApp } from '@fougere/app';
+//# sourceMappingURL=boot.js.map

package/dist/runtime/server/utils/boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.js","sourceRoot":"","sources":["../../../../src/runtime/server/utils/boot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAC"}

package/dist/runtime/server/utils/invoke.d.ts

@@ -0,0 +1,9 @@
+import type { FrondCall, InvocationContext } from '@fougere/core';
+type EntityClass = {
+    name: string;
+};
+type CallInput = Partial<InvocationContext>;
+export declare function invoke<T = unknown>(entity: EntityClass, op: string, input?: CallInput): Promise<T>;
+export declare function invoke<T = unknown>(call: FrondCall, input?: CallInput): Promise<T>;
+export {};
+//# sourceMappingURL=invoke.d.ts.map

package/dist/runtime/server/utils/invoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../../src/runtime/server/utils/invoke.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElE,KAAK,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AACpC,KAAK,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE5C,wBAAsB,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1G,wBAAsB,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC"}

package/dist/runtime/server/utils/invoke.js

@@ -0,0 +1,24 @@
+/**
+ * The server dual of the couple — same designation (class + verb), same return,
+ * same errors. `invokeOn` places the call (local façade → direct in-memory
+ * execution, a frond in `remotes` → JSON-RPC on the wire); what this file owns is
+ * the one host-specific part: finding the current request.
+ *
+ * In request context the current session rides along (event.context →
+ * invocation.state); outside a request, state is empty or explicit.
+ */
+import { useEvent } from 'nitropack/runtime';
+import { invokeOn, useFougereApp } from '@fougere/app';
+export async function invoke(target, opOrInput, input) {
+    const app = await useFougereApp();
+    return invokeOn(app, target, opOrInput, input, requestState());
+}
+function requestState() {
+    try {
+        return (useEvent()?.context ?? {});
+    }
+    catch {
+        return {};
+    }
+}
+//# sourceMappingURL=invoke.js.map

package/dist/runtime/server/utils/invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../../../src/runtime/server/utils/invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAQvD,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,MAA+B,EAC/B,SAA8B,EAC9B,KAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;IAClC,OAAO,QAAQ,CAAI,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,IAAI,EAAE,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fougere/nuxt",
-  "version": "0.3.0-alpha.0",
+  "version": "0.5.0-alpha.0",
   "description": "The Nuxt module: Fougere's client primitives and server surface.",
   "keywords": [
     "fougere",
@@ -28,14 +28,14 @@
   },
   "files": [
     "dist",
-    "src/runtime"
+    "src"
   ],
   "dependencies": {
     "@nuxt/kit": "^4.5.1",
     "jiti": "^2.6.1",
-    "@fougere/core": "0.3.0-alpha.0",
-    "@fougere/app": "0.3.0-alpha.0",
-    "@fougere/defaults": "0.3.0-alpha.0"
+    "@fougere/app": "0.5.0-alpha.0",
+    "@fougere/defaults": "0.5.0-alpha.0",
+    "@fougere/core": "0.5.0-alpha.0"
   },
   "devDependencies": {
     "@nuxt/schema": "^4.5.1",
@@ -54,8 +54,8 @@
     "access": "public"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc",
+    "build": "rm -rf dist && tsc && tsc -p tsconfig.runtime.json",
     "test": "vitest run --passWithNoTests",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.runtime.json --noEmit"
   }
 }