@fougere/testing 0.3.0-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fougere contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,43 @@
+# @fougere/testing
+
+Tests derived from the declaration, and a gradient the test file never states.
+
+```bash
+pnpm add -D @fougere/testing
+```
+
+```ts
+// vitest.config.ts — the whole file
+import { fougereTest } from '@fougere/testing/vitest';
+export default fougereTest();
+```
+
+```ts
+// tests/contracts.test.ts — the whole file, and it produces one test per branch
+import { testApp, checkContract, checkOutput, checkDoors } from '@fougere/testing';
+import Product from '../fronds/catalog/entities/Product.js';
+
+const app = await testApp();
+
+checkContract(app, Product);   // every refusal the judge can state
+checkOutput(app, Product);     // no writeOnly field leaves
+checkDoors(app, Product);      // local · REST · GraphQL · RPC answer the same
+```
+
+`checkDoorContract(app, Product, cases)` runs handler-specific invocation cases through
+the same four-door harness. It is useful when the handler must observe a distinction such
+as omitted (`undefined`) versus explicitly supplied `null`.
+
+`testApp()` takes no argument: a file under `fronds/catalog/tests/` says its subject is
+`catalog`, the way `entities/` already says what a directory holds.
+
+Full documentation: **[Testing](https://fougere.dev/docs/infra/testing)** ·
+a worked example: `demos/test-gradient`.
+
+## What it does not do
+
+A test derived from `Post` can never say that `Post` is wrong — it proves the realizations
+agree. What must break when the declaration moves is `fougere migrate`. And business
+intent is always written by hand.
+
+MIT

package/dist/all.d.ts

@@ -0,0 +1,33 @@
+import type { App } from '@fougere/core';
+import type { SchemaView } from '@fougere/schema';
+import { type CheckOptions } from './doors.js';
+import { type DoorOptions } from './comparison.js';
+export interface CheckAllOptions extends DoorOptions, CheckOptions {
+    /** Entities to leave out, by name — one whose rows a test cannot seed, typically. */
+    except?: string[];
+    /** Skip the four-door comparison. The contract and the leak are still checked. */
+    doors?: boolean;
+}
+/**
+ * Every entity the app SERVES, with its handler.
+ *
+ * Not every entity it scanned: one with no handler has no façade, so there is no door to
+ * ask — the distinction the NOT_FOUND message used to miss. A relation is not followed
+ * either; the entity it points at is checked on its own turn if it has a door.
+ */
+export declare function servedEntities(app: App): {
+    name: string;
+    entity: SchemaView;
+}[];
+/**
+ * The whole suite, for every entity, from a file that names none of them.
+ *
+ * The list comes from the scan rather than from imports, and that is the point: a list of
+ * imports is a second copy of what the project already declares, and it goes stale the day
+ * an entity is added — silently, because a missing test cannot fail.
+ *
+ * An entity whose frond is declared in `remotes:` is not here at all: it is not this app's
+ * to serve, and `testApp` does not follow the topology in the first place.
+ */
+export declare function checkAll(app: App, options?: CheckAllOptions): void;
+//# sourceMappingURL=all.d.ts.map

package/dist/all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"all.d.ts","sourceRoot":"","sources":["../src/all.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,WAAW,eAAgB,SAAQ,WAAW,EAAE,YAAY;IAChE,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,EAAE,CAS/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,GAAE,eAAoB,GAAG,IAAI,CAetE"}

package/dist/all.js

@@ -0,0 +1,47 @@
+import { describe, it, expect } from 'vitest';
+import { checkContract, checkOutput } from './doors.js';
+import { checkDoors } from './comparison.js';
+/**
+ * Every entity the app SERVES, with its handler.
+ *
+ * Not every entity it scanned: one with no handler has no façade, so there is no door to
+ * ask — the distinction the NOT_FOUND message used to miss. A relation is not followed
+ * either; the entity it points at is checked on its own turn if it has a door.
+ */
+export function servedEntities(app) {
+    const served = [];
+    for (const frond of app.fronds) {
+        const addresses = new Set(frond.handlers.filter((handler) => !handler.surface).map((handler) => handler.address));
+        for (const entity of frond.entities) {
+            if (addresses.has(entity.name))
+                served.push({ name: entity.name, entity: entity.entityClass });
+        }
+    }
+    return served;
+}
+/**
+ * The whole suite, for every entity, from a file that names none of them.
+ *
+ * The list comes from the scan rather than from imports, and that is the point: a list of
+ * imports is a second copy of what the project already declares, and it goes stale the day
+ * an entity is added — silently, because a missing test cannot fail.
+ *
+ * An entity whose frond is declared in `remotes:` is not here at all: it is not this app's
+ * to serve, and `testApp` does not follow the topology in the first place.
+ */
+export function checkAll(app, options = {}) {
+    const except = new Set(options.except ?? []);
+    const served = servedEntities(app).filter((one) => !except.has(one.name));
+    describe('what this app serves', () => {
+        it('is not empty — an empty suite proves nothing and still passes', () => {
+            expect(served.length).toBeGreaterThan(0);
+        });
+    });
+    for (const { entity } of served) {
+        checkContract(app, entity, options);
+        checkOutput(app, entity, options);
+        if (options.doors !== false)
+            checkDoors(app, entity, options);
+    }
+}
+//# sourceMappingURL=all.js.map

package/dist/all.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"all.js","sourceRoot":"","sources":["../src/all.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAoB,MAAM,iBAAiB,CAAC;AAS/D;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,MAAM,MAAM,GAA2C,EAAE,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAClH,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAQ,EAAE,OAAO,GAAoB,EAAE;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QAChC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;YAAE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/dist/app.d.ts

@@ -0,0 +1,68 @@
+import { type App } from '@fougere/core';
+import { type Port, type Stub } from './stub.js';
+export interface TestAppOptions {
+    /**
+     * The project to scan. Read from the test file's own position when absent — a file
+     * under `fronds/blog/tests/` states that its subject is `blog` and that the project
+     * starts above `fronds/`.
+     */
+    root?: string;
+    /** Boot only these fronds, by name. Deduced from the position when absent. */
+    fronds?: string[];
+    /**
+     * The running test file, for hosts other than vitest. Vitest is read automatically
+     * through `expect.getState()`; anything else hands its own path in.
+     */
+    testPath?: string;
+    /**
+     * Where the rows go. `':memory:'` by default — a real SQLite engine, so the DDL, the
+     * `CHECK` constraints, `unique` and real transactions are all exercised, and nothing is
+     * written to disk.
+     *
+     * Not an in-memory ORM: `createMemoryOrm` realizes the axes but is not the engine
+     * production runs, and a tool whose thesis is *the realizations must agree* cannot pick
+     * the one that does not ship.
+     */
+    db?: string;
+    /**
+     * Follow `remotes:` from the config. False by default — a test that meant to exercise
+     * one frond should not silently reach for a process that is not running.
+     */
+    topology?: boolean;
+    /**
+     * Ports answered by a double instead of their realization. A double carries every
+     * method the port declares and returns nothing until the test says what it returns.
+     */
+    stub?: Port[];
+}
+/** An app, plus the doubles standing in front of its ports and the facts it announced. */
+export interface TestApp extends App {
+    /** The double installed for a port, to state a return or read what was called. */
+    stub<T>(port: abstract new (...args: never[]) => T): Stub<T>;
+    /**
+     * What was announced under a fact's name, in order.
+     *
+     * Read from the carrier's own seat: `Emissions.announce` hands EVERY announced fact to
+     * `onEmit`, whether or not anything in this process listens. So watching costs nothing
+     * and adds no second dispatcher — the one thing `Emissions` refuses to become.
+     *
+     * Its dual needs no help at all: `app.deliver(fact, payload)` is already the carrier's
+     * door, and it rejects when a subscriber refuses.
+     */
+    announced(fact: {
+        name: string;
+    } | string): unknown[];
+}
+/**
+ * An app to ask questions of, wired the conventional way.
+ *
+ * Wraps `boot()`, which already loads the config, creates the container, sets the storage
+ * up and seeds — its own comment names tests among the surfaces it serves. What this adds
+ * is the two decisions a test makes differently: the rows live in memory, and the
+ * topology is not followed.
+ *
+ * Storage still goes through `resolveStorage`, the single place that knows a storage
+ * package; calling `setupSqlite` here would be a second one.
+ */
+export declare function testApp(options?: TestAppOptions): Promise<TestApp>;
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,eAAe,CAAC;AAIzC,OAAO,EAAgB,KAAK,IAAI,EAAE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAI/D,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;CACf;AAED,0FAA0F;AAC1F,MAAM,WAAW,OAAQ,SAAQ,GAAG;IAClC,kFAAkF;IAClF,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7D;;;;;;;;;OASG;IACH,SAAS,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC;CACvD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyC5E"}

package/dist/app.js

@@ -0,0 +1,65 @@
+import { boot } from '@fougere/core/node';
+import { createContainer } from '@fougere/container';
+import { resolveStorage } from '@fougere/defaults';
+import { installStubs } from './stub.js';
+import { scopeOfRun } from './scope.js';
+import { registrationKeyOf } from '@fougere/schema';
+/**
+ * An app to ask questions of, wired the conventional way.
+ *
+ * Wraps `boot()`, which already loads the config, creates the container, sets the storage
+ * up and seeds — its own comment names tests among the surfaces it serves. What this adds
+ * is the two decisions a test makes differently: the rows live in memory, and the
+ * topology is not followed.
+ *
+ * Storage still goes through `resolveStorage`, the single place that knows a storage
+ * package; calling `setupSqlite` here would be a second one.
+ */
+export async function testApp(options = {}) {
+    const db = { dialect: 'sqlite', path: options.db ?? ':memory:' };
+    // The position is consulted only for what the caller did not state: an explicit `root`
+    // or `fronds` wins, the way a config key wins over a convention everywhere else.
+    const scope = (options.root && options.fronds) ? undefined
+        : await scopeOfRun(options.testPath ?? currentTestPath());
+    // One entry per announcement, in order. `Emissions.announce` calls the carrier for
+    // every fact, so this sees them all — including those nobody in this process listens to.
+    const heard = [];
+    const app = await boot({
+        onEmit: (fact, payload) => { heard.push({ fact, payload }); },
+        root: options.root ?? scope?.root,
+        createContainer,
+        fronds: options.fronds ?? (scope?.frond ? [scope.frond] : undefined),
+        // `boot` merges this over the file, so a project declaring a real database still
+        // gets the in-memory one here.
+        config: options.topology ? undefined : { remotes: {} },
+        db: () => resolveStorage(db),
+    });
+    const doubles = installStubs(app, options.stub ?? []);
+    return Object.assign(app, {
+        announced(fact) {
+            // A fact travels under its REGISTRATION key — `postPublished`, not `PostPublished`
+            // — the same lowering every entity gets. Both spellings are accepted here and
+            // lowered before comparing, so a caller may hand in the class or the name.
+            const wanted = registrationKeyOf(typeof fact === 'string' ? fact : fact.name);
+            return heard.filter((one) => registrationKeyOf(one.fact) === wanted).map((one) => one.payload);
+        },
+        stub(port) {
+            const found = doubles.get(port);
+            if (!found) {
+                throw new Error(`[stub] ${port.name} was not stubbed — name it: testApp({ stub: [${port.name}] }).`);
+            }
+            return found;
+        },
+    });
+}
+/**
+ * Vitest's own answer to "which file is running", or nothing.
+ *
+ * Imported dynamically: a package that imports vitest at the top level stops being
+ * loadable outside a test run, and `testApp` is meant to work under any host.
+ */
+function currentTestPath() {
+    const globals = globalThis;
+    return globals.__vitest_worker__?.filepath;
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAiB,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAwB,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAuDpD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAO,GAAmB,EAAE;IACxD,MAAM,EAAE,GAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;IAC3E,uFAAuF;IACvF,iFAAiF;IACjF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACxD,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,IAAI,eAAe,EAAE,CAAC,CAAC;IAE5D,mFAAmF;IACnF,yFAAyF;IACzF,MAAM,KAAK,GAAyC,EAAE,CAAC;IAEvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC;QACrB,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI;QACjC,eAAe;QACf,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,iFAAiF;QACjF,+BAA+B;QAC/B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACtD,EAAE,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;KAC7B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;QACxB,SAAS,CAAC,IAA+B;YACvC,mFAAmF;YACnF,8EAA8E;YAC9E,2EAA2E;YAC3E,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,CAAI,IAA0C;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAY,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CACb,UAAW,IAAa,CAAC,IAAI,gDAAiD,IAAa,CAAC,IAAI,OAAO,CACxG,CAAC;YACJ,CAAC;YACD,OAAO,KAAgB,CAAC;QAC1B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,UAA2D,CAAC;IAC5E,OAAO,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC;AAC7C,CAAC"}

package/dist/comparison.d.ts

@@ -0,0 +1,43 @@
+import { type App } from '@fougere/core';
+import { type SchemaView } from '@fougere/schema';
+import { type SampleOptions } from './sample.js';
+export interface DoorOptions extends SampleOptions {
+    given?: Record<string, unknown>;
+    /** The audience, when the app serves named surfaces. */
+    surface?: string;
+}
+export interface DoorInput {
+    id?: string;
+    body?: Record<string, unknown>;
+}
+export interface DoorContractCase {
+    /** What this case proves — becomes the test name. */
+    name: string;
+    /** Any declared operation, CRUD or custom. */
+    operation: string;
+    input?: DoorInput;
+    /** The protocol envelopes are removed before this value is compared. */
+    expected: unknown;
+}
+/**
+ * One entity, four doors, the same answers.
+ *
+ * The claim runs through the whole repo — a frond runs in-process or behind JSON-RPC with
+ * identical user code, and REST, GraphQL and RPC are three projections of one contract —
+ * and nothing compared REST to GraphQL until now. `transport-swap.test.ts` compares three
+ * TRANSPORTS, which is a different sentence.
+ *
+ * The five CRUD operations, reads and writes. A CUSTOM op is not compared: REST addresses
+ * it by a path the table states, GraphQL by a mutation whose input type is its own, and
+ * matching the two means guessing which is which — a guess this file exists to avoid.
+ */
+export declare function checkDoors(app: App, entity: SchemaView, options?: DoorOptions): void;
+/**
+ * Run one hand-written invocation contract through every door.
+ *
+ * `checkDoors` derives the generic CRUD gradient. This is its small explicit companion
+ * for semantics only the handler can observe — notably omitted versus null input. A new
+ * adapter joins the same harness instead of inventing its own interpretation.
+ */
+export declare function checkDoorContract(app: App, entity: SchemaView, cases: readonly DoorContractCase[], options?: Pick<DoorOptions, 'surface'>): void;
+//# sourceMappingURL=comparison.d.ts.map

package/dist/comparison.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comparison.d.ts","sourceRoot":"","sources":["../src/comparison.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,GAAG,EAAE,MAAM,eAAe,CAAC;AAG5D,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AA+B9D,MAAM,WAAW,WAAY,SAAQ,aAAa;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AASD,MAAM,WAAW,SAAS;IAAG,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,wEAAwE;IACxE,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,WAAgB,GAAG,IAAI,CA8ExF;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,SAAS,gBAAgB,EAAE,EAClC,OAAO,GAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAM,GACzC,IAAI,CAeN"}

package/dist/comparison.js

@@ -0,0 +1,182 @@
+import { describe, it, expect } from 'vitest';
+import { createLocalRunner } from '@fougere/core';
+import { EMPTY_INVOCATION } from '@fougere/core/contract';
+import { serveRest, serveRpc, tableOf } from '@fougere/app';
+import { registrationKeyOf } from '@fougere/schema';
+import { listQuery, findQuery, mutationFor, at } from './gql.js';
+import { sampleInput } from './sample.js';
+/**
+ * The rows a door hands back, with its own envelope taken off.
+ *
+ * Each door wraps differently by construction — REST answers a page, GraphQL nests under
+ * its field, RPC returns the value — and comparing the wrappers would compare the
+ * protocols. What must agree is what is inside.
+ */
+function rowsOf(value) {
+    if (Array.isArray(value))
+        return [...value];
+    const page = value;
+    return page && typeof page === 'object' && 'items' in page ? page.items : value;
+}
+/** Through the wire and back, so a `Date` and its ISO string are not read as a divergence. */
+const wire = (value) => JSON.parse(JSON.stringify(value ?? null));
+/**
+ * What is the SAME row seen twice, and what is merely a second row.
+ *
+ * A write creates a different row at each door — different id, different `createdAt` —
+ * so comparing values would compare clocks. The generated fields are dropped and what the
+ * caller sent is what remains, which is the part the doors must agree on.
+ */
+function written(value, sent) {
+    const row = value;
+    if (!row || typeof row !== 'object')
+        return wire(row);
+    return wire(Object.fromEntries(Object.keys(sent).map((key) => [key, row[key]])));
+}
+/**
+ * One entity, four doors, the same answers.
+ *
+ * The claim runs through the whole repo — a frond runs in-process or behind JSON-RPC with
+ * identical user code, and REST, GraphQL and RPC are three projections of one contract —
+ * and nothing compared REST to GraphQL until now. `transport-swap.test.ts` compares three
+ * TRANSPORTS, which is a different sentence.
+ *
+ * The five CRUD operations, reads and writes. A CUSTOM op is not compared: REST addresses
+ * it by a path the table states, GraphQL by a mutation whose input type is its own, and
+ * matching the two means guessing which is which — a guess this file exists to avoid.
+ */
+export function checkDoors(app, entity, options = {}) {
+    const name = registrationKeyOf(entity.name ?? '');
+    const doors = doorsOf(app, entity, name, options.surface);
+    const bodyOf = () => sampleInput(entity, options.given ?? {}, options);
+    describe(`${entity.name} — the doors agree`, () => {
+        it('on create, over what the caller sent', async () => {
+            const sent = bodyOf();
+            const answers = await Promise.all(['local', 'rpc', 'rest', 'graphql'].map((door) => doors[door]('create', { body: sent })));
+            const [local, ...others] = answers.map((answer) => written(answer, sent));
+            for (const [index, other] of others.entries()) {
+                expect(other, `${['rpc', 'rest', 'graphql'][index]} ≠ local`).toEqual(local);
+            }
+        });
+        it('on list', async () => {
+            await doors.local('create', { body: bodyOf() });
+            const local = wire(rowsOf(await doors.local('list')));
+            expect(Array.isArray(local) && local.length > 0, 'nothing to compare').toBe(true);
+            expect(wire(rowsOf(await doors.rpc('list'))), 'rpc ≠ local').toEqual(local);
+            expect(wire(rowsOf(await doors.rest('list'))), 'rest ≠ local').toEqual(local);
+            expect(wire(rowsOf(await doors.graphql('list'))), 'graphql ≠ local').toEqual(local);
+        });
+        it('on findById', async () => {
+            const row = await doors.local('create', { body: bodyOf() });
+            const local = wire(await doors.local('findById', { id: row.id }));
+            expect(wire(await doors.rpc('findById', { id: row.id })), 'rpc ≠ local').toEqual(local);
+            expect(wire(await doors.rest('findById', { id: row.id })), 'rest ≠ local').toEqual(local);
+            expect(wire(await doors.graphql('findById', { id: row.id })), 'graphql ≠ local').toEqual(local);
+        });
+        it('on update, over what the caller sent', async () => {
+            const rows = await Promise.all([1, 2, 3, 4].map(() => doors.local('create', { body: bodyOf() })));
+            const patch = bodyOf();
+            const answers = await Promise.all(['local', 'rpc', 'rest', 'graphql']
+                .map((door, index) => doors[door]('update', { id: rows[index].id, body: patch })));
+            const [local, ...others] = answers.map((answer) => written(answer, patch));
+            for (const [index, other] of others.entries()) {
+                expect(other, `${['rpc', 'rest', 'graphql'][index]} ≠ local`).toEqual(local);
+            }
+        });
+        it('on delete', async () => {
+            const rows = await Promise.all([1, 2, 3, 4].map(() => doors.local('create', { body: bodyOf() })));
+            const answers = await Promise.all(['local', 'rpc', 'rest', 'graphql'].map((door, index) => doors[door]('delete', { id: rows[index].id })));
+            // REST answers a deletion with no content at all, which is the protocol saying yes.
+            const said = answers.map((answer) => (answer === undefined || answer === null ? true : wire(answer)));
+            expect(new Set(said).size, `the doors disagree: ${JSON.stringify(said)}`).toBe(1);
+        });
+        it('on a refusal', async () => {
+            // A refusal is where the doors diverge most, and where each is most tempted to
+            // answer in its own words. What must match is that it WAS refused.
+            const bad = { ...bodyOf(), __unknown__: 'x' };
+            const refusals = await Promise.all(['local', 'rpc', 'rest', 'graphql'].map((door) => refused(() => doors[door]('create', { body: bad }))));
+            expect(refusals[0], 'local accepted a body outside the contract').toBe(true);
+            expect(refusals, `the doors disagree: ${JSON.stringify(refusals)}`).toEqual([true, true, true, true]);
+        });
+    });
+}
+/**
+ * Run one hand-written invocation contract through every door.
+ *
+ * `checkDoors` derives the generic CRUD gradient. This is its small explicit companion
+ * for semantics only the handler can observe — notably omitted versus null input. A new
+ * adapter joins the same harness instead of inventing its own interpretation.
+ */
+export function checkDoorContract(app, entity, cases, options = {}) {
+    const name = registrationKeyOf(entity.name ?? '');
+    const doors = doorsOf(app, entity, name, options.surface);
+    const names = ['local', 'rpc', 'rest', 'graphql'];
+    describe(`${entity.name} — its invocation contract crosses every door`, () => {
+        for (const one of cases) {
+            it(one.name, async () => {
+                const answers = await Promise.all(names.map((door) => doors[door](one.operation, one.input)));
+                for (const [index, answer] of answers.entries()) {
+                    expect(wire(answer), `${names[index]} disagrees with the canonical invocation`).toEqual(wire(one.expected));
+                }
+            });
+        }
+    });
+}
+async function refused(call) {
+    try {
+        await call();
+        return false;
+    }
+    catch {
+        return true;
+    }
+}
+/** The four doors, each reduced to `(op, input) => answer` so the tests above read alike. */
+function doorsOf(app, entity, name, surface) {
+    const run = createLocalRunner(app, surface);
+    const state = {};
+    const invocation = (input = {}) => ({
+        ...EMPTY_INVOCATION,
+        ...(input.id !== undefined ? { params: { id: input.id } } : {}),
+        ...(input.body !== undefined ? { body: input.body } : {}),
+    });
+    return {
+        local: (op, input) => run({ entity: name, op }, invocation(input)),
+        rpc: async (op, input) => {
+            const answer = await serveRpc(app, {
+                path: '',
+                body: { jsonrpc: '2.0', id: 1, method: `${name}.${op}`, params: invocation(input) },
+                state,
+            });
+            if (answer.error)
+                throw new Error(answer.error.message);
+            return answer.result;
+        },
+        rest: async (op, input) => {
+            // The route the REST door itself would match, read from its own table — rebuilding
+            // the path here would be a second opinion on where an entity lives.
+            const route = tableOf(app).find((one) => one.entityName === name && one.operationName === op);
+            if (!route)
+                throw new Error(`[checkDoors] REST serves no ${name}.${op}`);
+            const path = route.segments.map((segment) => (segment.startsWith(':') ? input?.id ?? '' : segment)).join('/');
+            const answer = await serveRest(app, { method: route.method, path, query: {}, body: input?.body, state });
+            if (answer.kind !== 'ok')
+                throw new Error(`[checkDoors] REST answered ${answer.kind} on ${name}.${op}`);
+            return answer.body;
+        },
+        graphql: async (op, input) => {
+            const { executeOn, schemaOf } = await import('@fougere/adapter-graphql');
+            const schema = schemaOf(app);
+            const built = op === 'list' ? listQuery(schema, entity)
+                : op === 'findById' ? findQuery(schema, entity, input?.id ?? '')
+                    : mutationFor(schema, entity, op, { id: input?.id, body: input?.body });
+            if (!built)
+                throw new Error(`[checkDoors] GraphQL serves no ${entity.name} ${op}`);
+            const answer = await executeOn(app, { query: built.query, state });
+            if (answer.errors?.length)
+                throw new Error(`[checkDoors] GraphQL: ${answer.errors[0].message}`);
+            return at(answer.data, built.at);
+        },
+    };
+}
+//# sourceMappingURL=comparison.js.map

package/dist/comparison.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comparison.js","sourceRoot":"","sources":["../src/comparison.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAY,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAmB,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AACjE,OAAO,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAE9D;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAmC,CAAC;IACjD,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAClF,CAAC;AAED,8FAA8F;AAC9F,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;AAEpF;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc,EAAE,IAA6B;IAC5D,MAAM,GAAG,GAAG,KAAuC,CAAC;IACpD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AA2BD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,GAAQ,EAAE,MAAkB,EAAE,OAAO,GAAgB,EAAE;IAChF,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAEvE,QAAQ,CAAC,GAAG,MAAM,CAAC,IAAI,oBAAoB,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CACpG,CAAC;YAEF,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,KAAK,EAAE,GAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAEhD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAElF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAmB,CAAC;YAE9E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAElE,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAqB,CAAC;YACtH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;YAEvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAW;iBAC3C,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CACpF,CAAC;YAEF,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3E,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC9C,MAAM,CAAC,KAAK,EAAE,GAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAqB,CAAC;YAEtH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CACnH,CAAC;YAEF,oFAAoF;YACpF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtG,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;YAC5B,+EAA+E;YAC/E,mEAAmE;YACnE,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAClH,CAAC;YAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,4CAA4C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,MAAM,CAAC,QAAQ,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAQ,EACR,MAAkB,EAClB,KAAkC,EAClC,OAAO,GAAiC,EAAE;IAE1C,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;IAE3D,QAAQ,CAAC,GAAG,MAAM,CAAC,IAAI,+CAA+C,EAAE,GAAG,EAAE;QAC3E,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;gBACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9F,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;oBAChD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAA4B;IACjD,IAAI,CAAC;QAAC,MAAM,IAAI,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC5D,CAAC;AAED,6FAA6F;AAC7F,SAAS,OAAO,CAAC,GAAQ,EAAE,MAAkB,EAAE,IAAY,EAAE,OAAgB;IAC3E,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAA4B,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAG,CAAC,KAAK,GAAc,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7C,GAAG,gBAAgB;QACnB,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAElE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE;gBACjC,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE;gBACnF,KAAK;aACN,CAAsD,CAAC;YACxD,IAAI,MAAM,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YACxB,mFAAmF;YACnF,oEAAoE;YACpE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE9G,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzG,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,OAAO,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YACxG,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE;YAC3B,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAY,CAAU,CAAC;YAC/C,MAAM,KAAK,GAAG,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;gBACrD,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC;oBAChE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAEnF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAY,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5E,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAChG,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/derive.d.ts

@@ -0,0 +1,12 @@
+import { type Case } from '@fougere/schema';
+import type { SchemaView } from '@fougere/schema';
+import { type SampleOptions } from './sample.js';
+/**
+ * The cases, with the valid body generated rather than handed in.
+ *
+ * `casesFor` lives in `@fougere/schema` because deriving them reads the four axes and
+ * nothing else. This is the half that needs a generator, which is why it is here: a
+ * 426 KB faker has no business in the package a browser loads.
+ */
+export declare function derivedCases(entity: SchemaView, given?: Record<string, unknown>, options?: SampleOptions): Case[];
+//# sourceMappingURL=derive.d.ts.map

package/dist/derive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../src/derive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAE9D;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACnC,OAAO,GAAE,aAAkB,GAC1B,IAAI,EAAE,CAER"}

package/dist/derive.js

@@ -0,0 +1,13 @@
+import { casesFor } from '@fougere/schema';
+import { sampleInput } from './sample.js';
+/**
+ * The cases, with the valid body generated rather than handed in.
+ *
+ * `casesFor` lives in `@fougere/schema` because deriving them reads the four axes and
+ * nothing else. This is the half that needs a generator, which is why it is here: a
+ * 426 KB faker has no business in the package a browser loads.
+ */
+export function derivedCases(entity, given = {}, options = {}) {
+    return casesFor(entity, sampleInput(entity, given, options));
+}
+//# sourceMappingURL=derive.js.map

package/dist/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../src/derive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAa,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAkB,EAClB,KAAK,GAA4B,EAAE,EACnC,OAAO,GAAkB,EAAE;IAE3B,OAAO,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/doors.d.ts

@@ -0,0 +1,37 @@
+import { type App } from '@fougere/core';
+import { type SchemaView, type ValidationError } from '@fougere/schema';
+import { type SampleOptions } from './sample.js';
+/** The one shape both the local judge and a door already speak. */
+export interface Verdict {
+    success: boolean;
+    errors?: ValidationError[];
+}
+/**
+ * What a door answers, in the shape a verdict is compared in.
+ *
+ * A refusal reaches a caller as a thrown `FougereError` carrying `details`, not as a
+ * returned value — so the translation happens once, here, and every reader below compares
+ * the same thing.
+ */
+export declare function verdictOf(call: () => Promise<unknown>): Promise<Verdict>;
+export interface CheckOptions extends SampleOptions {
+    /** Values the generator cannot invent — the id of a row a `ref()` points at. */
+    given?: Record<string, unknown>;
+}
+/**
+ * The declared contract, posed to the façade that will receive it.
+ *
+ * Declares one `it` per case rather than looping inside a single one: a failure names the
+ * case, and a suite that lists what it checked is the point — the list comes from the
+ * entity, not from what the author remembered.
+ */
+export declare function checkContract(app: App, entity: SchemaView, options?: CheckOptions): void;
+/**
+ * What may leave, checked against what the entity says may leave.
+ *
+ * Costs nothing to state: `outputFields` already answers it, and a field the boundary
+ * closes has no business in any response. A `password: text({ boundary: 'writeOnly' })`
+ * that reaches a caller is the one leak no reviewer catches by reading a handler.
+ */
+export declare function checkOutput(app: App, entity: SchemaView, options?: CheckOptions): void;
+//# sourceMappingURL=doors.d.ts.map

package/dist/doors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doors.d.ts","sourceRoot":"","sources":["../src/doors.ts"],"names":[],"mappings":"AACA,OAAO,EAAyC,KAAK,GAAG,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAmC,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGzG,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAE1E,mEAAmE;AACnE,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAS9E;AAOD,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,YAAiB,GAAG,IAAI,CAiB5F;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,YAAiB,GAAG,IAAI,CA2B1F"}