@fougere/transport-http 0.1.0-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fougere contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,17 @@
+# @fougere/transport-http
+> The call contract, on the wire
+JSON-RPC 2.0, one route: `POST /_fougere/call`. `serve()` hosts a frond in its own
+process; `createHttpTransport()` calls it from another.
+
+No RPC without travel: in-process, a call stays a direct memory execution.
+
+## Installation
+```bash
+pnpm add @fougere/transport-http
+```
+
+---
+
+Part of [Fougere](https://github.com/chok/fougere) — one schema, a gradient from
+monolith to distributed, the same user code.
+Reference documentation: [the site](https://chok.github.io/fougere/) (en/fr).

package/dist/client.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Sending half — frame the call, POST it, unframe the result.
+ *
+ * Failure vocabulary is FougereError only: a transport failure becomes a
+ * typed error (SERVICE_UNAVAILABLE, GATEWAY_TIMEOUT, BAD_GATEWAY), an
+ * application failure comes back as the FougereError the façade threw.
+ */
+import { type Transport, type FrondCall, type InvocationContext } from '@fougere/core/contract';
+import type { RpcRequest, RpcResponse } from './jsonrpc.js';
+export type { RpcRequest, RpcResponse } from './jsonrpc.js';
+/** Frame a call as a JSON-RPC request. */
+export declare function frameCall(call: FrondCall, invocation: InvocationContext, id: number): RpcRequest;
+/** Unframe a JSON-RPC response — the result, or the revived FougereError thrown. */
+export declare function unframeResponse(response: RpcResponse, call: FrondCall): unknown;
+export interface HttpTransportOptions {
+    /** Abort a call after this long. A timed-out call may have executed — it is never retried. */
+    timeoutMs?: number;
+    /** Extra attempts on connection failures only — the request provably never left. */
+    retries?: number;
+}
+export declare function createHttpTransport(baseUrl: string, options?: HttpTransportOptions): Transport;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAA2B,KAAK,SAAS,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC5D,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE5D,0CAA0C;AAC1C,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU,CAEhG;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAW/E;AAED,MAAM,WAAW,oBAAoB;IACnC,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,SAAS,CA6DlG"}

package/dist/client.js

@@ -0,0 +1,96 @@
+/**
+ * Sending half — frame the call, POST it, unframe the result.
+ *
+ * Failure vocabulary is FougereError only: a transport failure becomes a
+ * typed error (SERVICE_UNAVAILABLE, GATEWAY_TIMEOUT, BAD_GATEWAY), an
+ * application failure comes back as the FougereError the façade threw.
+ */
+import { FougereError, ErrorCode } from '@fougere/core/contract';
+/** Frame a call as a JSON-RPC request. */
+export function frameCall(call, invocation, id) {
+    return { jsonrpc: '2.0', id, method: `${call.entity}.${call.op}`, params: invocation };
+}
+/** Unframe a JSON-RPC response — the result, or the revived FougereError thrown. */
+export function unframeResponse(response, call) {
+    if ('error' in response) {
+        if (response.error.data !== undefined)
+            throw FougereError.fromJSON(response.error.data);
+        throw new FougereError({
+            code: ErrorCode.INTERNAL_ERROR,
+            message: `${response.error.message} (rpc ${response.error.code})`,
+            entity: call.entity,
+            operation: call.op,
+        });
+    }
+    return response.result;
+}
+/** Failures where the request never reached the other side — safe to retry. */
+const CONNECTION_FAILURES = new Set(['ECONNREFUSED', 'ENOTFOUND', 'EAI_AGAIN']);
+export function createHttpTransport(baseUrl, options = {}) {
+    const url = `${baseUrl.replace(/\/$/, '')}/_fougere/call`;
+    const timeoutMs = options.timeoutMs ?? 10_000;
+    const retries = options.retries ?? 1;
+    let nextId = 1;
+    return async (call, invocation) => {
+        const request = frameCall(call, invocation, nextId++);
+        for (let attempt = 0;; attempt++) {
+            let res;
+            try {
+                res = await fetch(url, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: JSON.stringify(request),
+                    signal: AbortSignal.timeout(timeoutMs),
+                });
+            }
+            catch (err) {
+                if (isTimeout(err)) {
+                    throw new FougereError({
+                        code: ErrorCode.GATEWAY_TIMEOUT,
+                        message: `${call.entity}.${call.op} timed out after ${timeoutMs}ms (${baseUrl})`,
+                        entity: call.entity,
+                        operation: call.op,
+                    });
+                }
+                if (attempt < retries && isConnectionFailure(err))
+                    continue;
+                throw new FougereError({
+                    code: ErrorCode.SERVICE_UNAVAILABLE,
+                    message: `${baseUrl} unreachable: ${err?.message ?? err}`,
+                    entity: call.entity,
+                    operation: call.op,
+                    cause: err,
+                });
+            }
+            if (!res.ok) {
+                throw new FougereError({
+                    code: ErrorCode.BAD_GATEWAY,
+                    message: `${baseUrl} answered HTTP ${res.status} — not a Fougere receiver?`,
+                    entity: call.entity,
+                    operation: call.op,
+                });
+            }
+            let response;
+            try {
+                response = (await res.json());
+            }
+            catch {
+                throw new FougereError({
+                    code: ErrorCode.BAD_GATEWAY,
+                    message: `${baseUrl} answered non-JSON`,
+                    entity: call.entity,
+                    operation: call.op,
+                });
+            }
+            return unframeResponse(response, call);
+        }
+    };
+}
+function isTimeout(err) {
+    return err instanceof DOMException && (err.name === 'TimeoutError' || err.name === 'AbortError');
+}
+function isConnectionFailure(err) {
+    const code = err?.cause?.code;
+    return typeof code === 'string' && CONNECTION_FAILURES.has(code);
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,SAAS,EAA0D,MAAM,wBAAwB,CAAC;AAIzH,0CAA0C;AAC1C,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,UAA6B,EAAE,EAAU;IAClF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACzF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,QAAqB,EAAE,IAAe;IACpE,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,SAAS,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG;YACjE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AASD,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAEhF,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,OAAO,GAAyB,EAAE;IACrF,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QAEtD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBACrB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;iBACvC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,YAAY,CAAC;wBACrB,IAAI,EAAE,SAAS,CAAC,eAAe;wBAC/B,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,oBAAoB,SAAS,OAAO,OAAO,GAAG;wBAChF,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,SAAS,EAAE,IAAI,CAAC,EAAE;qBACnB,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,GAAG,OAAO,IAAI,mBAAmB,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5D,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,mBAAmB;oBACnC,OAAO,EAAE,GAAG,OAAO,iBAAkB,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE;oBACpE,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,EAAE;oBAClB,KAAK,EAAE,GAAG;iBACX,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,GAAG,OAAO,kBAAkB,GAAG,CAAC,MAAM,4BAA4B;oBAC3E,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,GAAG,OAAO,oBAAoB;oBACvC,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,IAAI,GAAI,GAAqC,EAAE,KAAK,EAAE,IAAI,CAAC;IACjE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { createHttpTransport, frameCall, unframeResponse, type HttpTransportOptions } from './client.js';
+export { handleRpc } from './server.js';
+export { serve, type ServeOptions, type RunningReceiver } from './serve.js';
+export { APP_ERROR, PARSE_ERROR, INVALID_REQUEST } from './jsonrpc.js';
+export type { RpcRequest, RpcResponse, RpcErrorShape } from './jsonrpc.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACzG,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { createHttpTransport, frameCall, unframeResponse } from './client.js';
+export { handleRpc } from './server.js';
+export { serve } from './serve.js';
+export { APP_ERROR, PARSE_ERROR, INVALID_REQUEST } from './jsonrpc.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,eAAe,EAA6B,MAAM,aAAa,CAAC;AACzG,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,KAAK,EAA2C,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}

package/dist/jsonrpc.d.ts

@@ -0,0 +1,35 @@
+/**
+ * JSON-RPC 2.0 framing — the standard written form of a call.
+ *
+ * The spec is the reuse: these few lines follow it, no lib adds anything.
+ * `method` is `entity.op`; `params` is the InvocationContext untouched.
+ * A FougereError travels whole in `error.data` (spec keeps `error.code`
+ * for integers — the semantic code lives in the data).
+ */
+export interface RpcRequest {
+    jsonrpc: '2.0';
+    id: number | string;
+    method: string;
+    params?: unknown;
+}
+export interface RpcErrorShape {
+    code: number;
+    message: string;
+    data?: unknown;
+}
+export type RpcResponse = {
+    jsonrpc: '2.0';
+    id: number | string | null;
+    result: unknown;
+} | {
+    jsonrpc: '2.0';
+    id: number | string | null;
+    error: RpcErrorShape;
+};
+/** Application failure — a FougereError, carried in error.data. */
+export declare const APP_ERROR = -32000;
+/** Body wasn't JSON (spec-reserved). */
+export declare const PARSE_ERROR = -32700;
+/** Not a valid JSON-RPC 2.0 call (spec-reserved). */
+export declare const INVALID_REQUEST = -32600;
+//# sourceMappingURL=jsonrpc.d.ts.map

package/dist/jsonrpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../src/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC/D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC;AAEzE,mEAAmE;AACnE,eAAO,MAAM,SAAS,SAAS,CAAC;AAChC,wCAAwC;AACxC,eAAO,MAAM,WAAW,SAAS,CAAC;AAClC,qDAAqD;AACrD,eAAO,MAAM,eAAe,SAAS,CAAC"}

package/dist/jsonrpc.js

@@ -0,0 +1,15 @@
+/**
+ * JSON-RPC 2.0 framing — the standard written form of a call.
+ *
+ * The spec is the reuse: these few lines follow it, no lib adds anything.
+ * `method` is `entity.op`; `params` is the InvocationContext untouched.
+ * A FougereError travels whole in `error.data` (spec keeps `error.code`
+ * for integers — the semantic code lives in the data).
+ */
+/** Application failure — a FougereError, carried in error.data. */
+export const APP_ERROR = -32000;
+/** Body wasn't JSON (spec-reserved). */
+export const PARSE_ERROR = -32700;
+/** Not a valid JSON-RPC 2.0 call (spec-reserved). */
+export const INVALID_REQUEST = -32600;
+//# sourceMappingURL=jsonrpc.js.map

package/dist/jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.js","sourceRoot":"","sources":["../src/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,mEAAmE;AACnE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC;AAChC,wCAAwC;AACxC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC;AAClC,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC"}

package/dist/serve.d.ts

@@ -0,0 +1,28 @@
+import type { Transport } from '@fougere/core';
+export interface ServeOptions {
+    /** Port to listen on. 0 (default) picks a free one. */
+    port?: number;
+    /**
+     * The addresses this receiver may bind. Default: loopback only.
+     *
+     * A receiver reads the caller's identity off the wire and re-establishes
+     * nothing, so reaching beyond the machine is a decision its operator takes
+     * — stating it here IS taking it. The default is what a frond on a laptop
+     * wants; a container wants `hosts: ['0.0.0.0']` and says so.
+     */
+    hosts?: string[];
+    /** Which address to bind. Must be one of `hosts`. Defaults to its first. */
+    host?: string;
+    /** Maximum JSON-RPC body size. Default: 1 MiB. */
+    maxBodyBytes?: number;
+    /** Time allowed to receive a request. Default: 15 seconds. */
+    requestTimeoutMs?: number;
+}
+export interface RunningReceiver {
+    port: number;
+    close(): Promise<void>;
+}
+/** What a frond binds when nobody says otherwise. */
+export declare const LOOPBACK_HOSTS: string[];
+export declare function serve(runner: Transport, options?: ServeOptions): Promise<RunningReceiver>;
+//# sourceMappingURL=serve.d.ts.map

package/dist/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAI/C,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,qDAAqD;AACrD,eAAO,MAAM,cAAc,UAAoC,CAAC;AAEhE,wBAAgB,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyD7F"}

package/dist/serve.js

@@ -0,0 +1,66 @@
+/**
+ * Standalone receiver — enough to host a Frond in its own process.
+ *
+ * Plain node:http, one route: POST /_fougere/call. Mounting the receiving
+ * half inside an existing server (@fougere/http, Nitro) is layer-2 work.
+ */
+import { createServer } from 'node:http';
+import { PARSE_ERROR } from './jsonrpc.js';
+import { handleRpc } from './server.js';
+/** What a frond binds when nobody says otherwise. */
+export const LOOPBACK_HOSTS = ['127.0.0.1', 'localhost', '::1'];
+export function serve(runner, options = {}) {
+    const allowed = options.hosts ?? LOOPBACK_HOSTS;
+    if (allowed.length === 0) {
+        return Promise.reject(new Error('A Fougere receiver needs at least one host to bind, `hosts` is empty'));
+    }
+    const host = options.host ?? allowed[0];
+    // A receiver trusts the `state` it is handed — the caller's identity arrives on
+    // the wire and nothing here re-establishes it. `hosts` is where that fact meets a
+    // deployment: the default keeps it on the machine, and widening it is written down
+    // rather than inferred. A shared link secret would not help — whoever holds it can
+    // claim any user — so the answer stays identity at the Frond.
+    if (!allowed.includes(host)) {
+        return Promise.reject(new Error(`A Fougere receiver binds one of [${allowed.join(', ')}], got '${host}' — add it to \`hosts\` to allow it`));
+    }
+    const maxBodyBytes = options.maxBodyBytes ?? 1024 * 1024;
+    const server = createServer(async (req, res) => {
+        if (req.method !== 'POST' || req.url !== '/_fougere/call') {
+            res.writeHead(404).end();
+            return;
+        }
+        const chunks = [];
+        let size = 0;
+        for await (const value of req) {
+            const chunk = Buffer.from(value);
+            size += chunk.length;
+            if (size > maxBodyBytes) {
+                res.writeHead(413, { 'content-type': 'application/json' }).end(JSON.stringify({ error: 'Payload too large' }));
+                return;
+            }
+            chunks.push(chunk);
+        }
+        let response;
+        try {
+            const raw = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+            response = await handleRpc(runner, raw);
+        }
+        catch {
+            response = { jsonrpc: '2.0', id: null, error: { code: PARSE_ERROR, message: 'Parse error' } };
+        }
+        res.writeHead(200, { 'content-type': 'application/json' }).end(JSON.stringify(response));
+    });
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.requestTimeout = options.requestTimeoutMs ?? 15_000;
+        server.listen(options.port ?? 0, host, () => {
+            const address = server.address();
+            const port = typeof address === 'object' && address !== null ? address.port : 0;
+            resolve({
+                port,
+                close: () => new Promise((done, fail) => server.close((err) => (err ? fail(err) : done()))),
+            });
+        });
+    });
+}
+//# sourceMappingURL=serve.js.map

package/dist/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAoB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA2BxC,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AAEhE,MAAM,UAAU,KAAK,CAAC,MAAiB,EAAE,OAAO,GAAiB,EAAE;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACxC,gFAAgF;IAChF,kFAAkF;IAClF,mFAAmF;IACnF,mFAAmF;IACnF,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CAAC,oCAAoC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,qCAAqC,CAAC,CACtH,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,GAAG,IAAI,CAAC;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBACxB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBAC/G,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/D,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,OAAO,CAAC;gBACN,IAAI;gBACJ,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;aAClG,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Receiving half — unframe the call, run it, frame what comes out.
+ *
+ * Judges nothing: validation and middlewares live with the handler, inside
+ * the runner. The error a façade throws is framed whole, never flattened.
+ */
+import { type Transport } from '@fougere/core';
+import { type RpcResponse } from './jsonrpc.js';
+export declare function handleRpc(runner: Transport, raw: unknown): Promise<RpcResponse>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAkE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/G,OAAO,EAA+C,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAE7F,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CA2CrF"}

package/dist/server.js

@@ -0,0 +1,50 @@
+/**
+ * Receiving half — unframe the call, run it, frame what comes out.
+ *
+ * Judges nothing: validation and middlewares live with the handler, inside
+ * the runner. The error a façade throws is framed whole, never flattened.
+ */
+import { FougereError, ErrorCode, toPublicError } from '@fougere/core';
+import { APP_ERROR, INVALID_REQUEST } from './jsonrpc.js';
+export async function handleRpc(runner, raw) {
+    const req = raw;
+    const id = typeof req?.id === 'number' || typeof req?.id === 'string' ? req.id : null;
+    if (!req || req.jsonrpc !== '2.0' || typeof req.method !== 'string' || id === null) {
+        return { jsonrpc: '2.0', id, error: { code: INVALID_REQUEST, message: 'Invalid JSON-RPC 2.0 request' } };
+    }
+    const dot = req.method.indexOf('.');
+    if (dot <= 0 || dot === req.method.length - 1) {
+        return {
+            jsonrpc: '2.0',
+            id,
+            error: { code: INVALID_REQUEST, message: `Invalid method '${req.method}' — expected 'entity.op'` },
+        };
+    }
+    const entity = req.method.slice(0, dot);
+    const op = req.method.slice(dot + 1);
+    // Fresh objects — middlewares deposit into state, nothing may be shared.
+    const sent = (req.params ?? {});
+    const invocation = {
+        params: sent.params ?? {},
+        query: sent.query ?? {},
+        body: sent.body,
+        state: sent.state ?? {},
+    };
+    try {
+        return { jsonrpc: '2.0', id, result: await runner({ entity, op }, invocation) };
+    }
+    catch (err) {
+        const failure = err instanceof FougereError
+            ? err
+            : new FougereError({
+                code: ErrorCode.INTERNAL_ERROR,
+                message: err?.message ?? 'Internal error',
+                entity,
+                operation: op,
+                cause: err,
+            });
+        const data = toPublicError(failure);
+        return { jsonrpc: '2.0', id, error: { code: APP_ERROR, message: data.message, data } };
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAA0C,MAAM,eAAe,CAAC;AAC/G,OAAO,EAAE,SAAS,EAAE,eAAe,EAAqC,MAAM,cAAc,CAAC;AAE7F,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAiB,EAAE,GAAY;IAC7D,MAAM,GAAG,GAAG,GAAiC,CAAC;IAC9C,MAAM,EAAE,GAAG,OAAO,GAAG,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACnF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,CAAC;IAC3G,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE;YACF,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,MAAM,0BAA0B,EAAE;SACnG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAErC,yEAAyE;IACzE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA+B,CAAC;IAC9D,MAAM,UAAU,GAAsB;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;KACxB,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,YAAY;YACzC,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,IAAI,YAAY,CAAC;gBACf,IAAI,EAAE,SAAS,CAAC,cAAc;gBAC9B,OAAO,EAAG,GAAa,EAAE,OAAO,IAAI,gBAAgB;gBACpD,MAAM;gBACN,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACP,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@fougere/transport-http",
+  "version": "0.1.0-alpha.0",
+  "description": "The call contract on the wire, in JSON-RPC 2.0 (server + client).",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/chok/fougere.git",
+    "directory": "packages/transport/http"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@fougere/core": "0.1.0-alpha.0"
+  },
+  "devDependencies": {
+    "jiti": "^2.6.1",
+    "@fougere/schema": "0.1.0-alpha.0",
+    "@fougere/container-fougere": "0.1.0-alpha.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit -p tsconfig.test.json"
+  }
+}