@fougere/transport-http 0.24.0-alpha.0 → 0.26.0-alpha.0

package/dist/client.js

@@ -54,9 +54,9 @@ export function createHttpTransport(baseUrl, options = {}) {
         // receiver choosing between a proof and a claim about the same thing.
         // `caller` is dropped on every hop: it names who signed THIS call, so carrying the
         // one this process was handed would make `shop → catalog → billing` read `shop`.
-        // It travels outside the envelope anyway, so a stale one would be unsigned too. `crossed`
+        // It travels outside the envelope anyway, so a stale one would be unsigned too. `fromAnotherProcess`
         // is the next receiver's to write, for the same reason.
-        const { caller: _established, crossed: _received, ...forwarded } = invocation;
+        const { caller: _established, fromAnotherProcess: _received, ...forwarded } = invocation;
         const sent = options.sign
             ? { ...forwarded, state: {}, identity: await options.sign({ ...call, ...invocation }) }
             : forwarded;

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAA2E,MAAM,wBAAwB,CAAC;AAMvK,0CAA0C;AAC1C,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,UAA6B,EAAE,EAAU;IAClF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,QAAiB,EAAE,IAAe;IAChE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,IAAI,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC,WAAW;YAC3B,OAAO,EAAE,kEAAkE;YAC3E,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAsC,CAAC;QAC9D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;gBAC3B,OAAO,EAAE,uDAAuD;gBAChE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;aACnB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,SAAS,KAAK,CAAC,IAAI,GAAG;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAeD,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAEhF,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,OAAO,GAAyB,EAAE;IACrF,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC;IAC1D,wFAAwF;IACxF,qFAAqF;IACrF,kFAAkF;IAClF,uFAAuF;IACvF,sFAAsF;IACtF,sBAAsB;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAChC,6EAA6E;QAC7E,sEAAsE;QACtE,mFAAmF;QACnF,iFAAiF;QACjF,0FAA0F;QAC1F,wDAAwD;QACxD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC;QAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;YACvB,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC,EAAE;YACvF,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,aAAa,EAAE;YAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE/F,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE;oBACpB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;iBACvC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,YAAY,CAAC;wBACrB,IAAI,EAAE,SAAS,CAAC,eAAe;wBAC/B,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,oBAAoB,SAAS,IAAI;wBACpE,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,sBAAsB,SAAS,IAAI,CAAC;wBAC/D,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;qBACnB,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,GAAG,OAAO,IAAI,mBAAmB,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5D,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,mBAAmB;oBACnC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,yCAAyC;oBAC5E,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;oBAClB,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,iBAAkB,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;iBAC9F,CAAC,CAAC;YACL,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,gCAAgC,GAAG,CAAC,MAAM,4BAA4B;oBACzG,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC1D,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,kCAAkC;oBACrE,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,oBAAoB,CAAC;oBAChD,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,IAAe,EAAE,OAAe;IAChD,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,SAAS,CAAC,iBAAiB;QACjC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,0BAA0B,YAAY,EAAE,0CAA0C;QACrH,KAAK,EAAE,IAAI,KAAK,CAAC,eAAe,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,EAAE;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,IAAI,GAAI,GAAqC,EAAE,KAAK,EAAE,IAAI,CAAC;IAEjE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAA2E,MAAM,wBAAwB,CAAC;AAMvK,0CAA0C;AAC1C,MAAM,UAAU,SAAS,CAAC,IAAe,EAAE,UAA6B,EAAE,EAAU;IAClF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,QAAiB,EAAE,IAAe;IAChE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,IAAI,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC,WAAW;YAC3B,OAAO,EAAE,kEAAkE;YAC3E,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAsC,CAAC;QAC9D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;gBAC3B,OAAO,EAAE,uDAAuD;gBAChE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;aACnB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,SAAS,KAAK,CAAC,IAAI,GAAG;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,CAAC;AACzB,CAAC;AAeD,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAEhF,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,OAAO,GAAyB,EAAE;IACrF,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC;IAC1D,wFAAwF;IACxF,qFAAqF;IACrF,kFAAkF;IAClF,uFAAuF;IACvF,sFAAsF;IACtF,sBAAsB;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;QAChC,6EAA6E;QAC7E,sEAAsE;QACtE,mFAAmF;QACnF,iFAAiF;QACjF,qGAAqG;QACrG,wDAAwD;QACxD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC;QACzF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;YACvB,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC,EAAE;YACvF,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,aAAa,EAAE;YAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE/F,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE;oBACpB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI;oBACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;iBACvC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,YAAY,CAAC;wBACrB,IAAI,EAAE,SAAS,CAAC,eAAe;wBAC/B,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,oBAAoB,SAAS,IAAI;wBACpE,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,sBAAsB,SAAS,IAAI,CAAC;wBAC/D,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;qBACnB,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,GAAG,OAAO,IAAI,mBAAmB,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5D,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,mBAAmB;oBACnC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,yCAAyC;oBAC5E,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;oBAClB,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,iBAAkB,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;iBAC9F,CAAC,CAAC;YACL,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,gCAAgC,GAAG,CAAC,MAAM,4BAA4B;oBACzG,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC1D,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,kCAAkC;oBACrE,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,OAAO,oBAAoB,CAAC;oBAChD,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,SAAS,EAAE,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,IAAe,EAAE,OAAe;IAChD,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,SAAS,CAAC,iBAAiB;QACjC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,0BAA0B,YAAY,EAAE,0CAA0C;QACrH,KAAK,EAAE,IAAI,KAAK,CAAC,eAAe,OAAO,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,EAAE;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,IAAI,GAAI,GAAqC,EAAE,KAAK,EAAE,IAAI,CAAC;IAEjE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { createHttpTransport, frameCall, unframeResponse } from './client.js';
-export { handleRpc } from './server.js';
+export { handleRpc, pageDoor, peerDoor, type PageDoorOptions, type ReceiveOptions, type RpcCall } from './server.js';
 export { receive } from './receive.js';
 export { maxFrameBytes } from './policy.js';
 export { serve, type RunningReceiver } from './serve/RunningReceiver.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AACrH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 export { createHttpTransport, frameCall, unframeResponse } from './client.js';
-export { handleRpc } from './server.js';
+export { handleRpc, pageDoor, peerDoor } from './server.js';
 export { receive } from './receive.js';
 export { maxFrameBytes } from './policy.js';
 export { serve } from './serve/RunningReceiver.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAwB,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAA2D,MAAM,aAAa,CAAC;AACrH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAwB,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/receive.d.ts

@@ -6,7 +6,7 @@
  * baseline, measured 2026-08-22.
  */
 import { type ReceiveOptions } from './server.js';
-import type { Transport } from '@fougere/core/contract';
+import { type Transport } from '@fougere/core/contract';
 export interface ReceiveHttpOptions extends ReceiveOptions {
     /** The path this facade answers. Default: `/_fougere/call`. */
     path?: string;

package/dist/receive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"receive.d.ts","sourceRoot":"","sources":["../src/receive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AA+CD,wBAAgB,OAAO,CACrB,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,kBAAuB,GAC/B,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6BzC"}
+{"version":3,"file":"receive.d.ts","sourceRoot":"","sources":["../src/receive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAE7F,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAKD,wBAAgB,OAAO,CACrB,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,kBAAuB,GAC/B,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAmCzC"}

package/dist/receive.js

@@ -7,44 +7,8 @@
  */
 import { handleRpc } from './server.js';
 import { maxFrameBytes, CALL_PATH, parseError, tooLarge } from './policy.js';
+import { ErrorCode, FougereError, readWithin } from '@fougere/core/contract';
 const json = (body, status = 200) => new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json' } });
-/** Distinguishes "the body was too large" from any body a caller could actually send. */
-const TOO_LARGE = Symbol('too large');
-/**
- * The declared length is a cheap refusal; the count is the real one. A `content-length` may
- * be absent, and it may lie — the copy that trusted it alone had no cap at all in that case.
- */
-async function bodyWithin(request, max) {
-    const declared = Number(request.headers.get('content-length'));
-    if (Number.isFinite(declared) && declared > max)
-        return TOO_LARGE;
-    const reader = request.body?.getReader();
-    if (!reader)
-        return '';
-    const chunks = [];
-    let size = 0;
-    for (;;) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        size += value.byteLength;
-        if (size > max) {
-            await reader.cancel();
-            return TOO_LARGE;
-        }
-        chunks.push(value);
-    }
-    return new TextDecoder().decode(concat(chunks, size));
-}
-function concat(chunks, size) {
-    const all = new Uint8Array(size);
-    let at = 0;
-    for (const chunk of chunks) {
-        all.set(chunk, at);
-        at += chunk.byteLength;
-    }
-    return all;
-}
 export function receive(runner, options = {}) {
     // At CONSTRUCTION and not per call, for the reason `serve` refuses at bind: a receiver
     // that starts and then rejects everything is found in production.
@@ -57,9 +21,15 @@ export function receive(runner, options = {}) {
         if (request.method !== 'POST' || new URL(request.url).pathname !== path) {
             return new Response(null, { status: 404 });
         }
-        const raw = await bodyWithin(request, maxFrameBytes());
-        if (raw === TOO_LARGE)
+        let raw;
+        try {
+            raw = await readWithin(request.body, maxFrameBytes(), request.headers.get('content-length'));
+        }
+        catch (refused) {
+            if (!(refused instanceof FougereError && refused.code === ErrorCode.PAYLOAD_TOO_LARGE))
+                throw refused;
             return json(tooLarge(), 413);
+        }
         let parsed;
         try {
             parsed = JSON.parse(raw);

package/dist/receive.js.map

@@ -1 +1 @@
-{"version":3,"file":"receive.js","sourceRoot":"","sources":["../src/receive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAU7E,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,CAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAElG,yFAAyF;AACzF,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;AAEtC;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,GAAW;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IAElE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YAEtB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,MAAM,CAAC,MAA6B,EAAE,IAAY;IACzD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,MAAiB,EACjB,OAAO,GAAuB,EAAE;IAEhC,uFAAuF;IACvF,kEAAkE;IAClE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,gHAAgH;cAC9G,iGAAiG,CACpG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACvD,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"receive.js","sourceRoot":"","sources":["../src/receive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AAS7F,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,CAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAElG,MAAM,UAAU,OAAO,CACrB,MAAiB,EACjB,OAAO,GAAuB,EAAE;IAEhC,uFAAuF;IACvF,kEAAkE;IAClE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,gHAAgH;cAC9G,iGAAiG,CACpG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,CAAC,OAAO,YAAY,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,iBAAiB,CAAC;gBAAE,MAAM,OAAO,CAAC;YAEtG,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC;AACJ,CAAC"}

package/dist/serve/RunningReceiver.d.ts

@@ -1,4 +1,4 @@
-import type { Transport } from '@fougere/core';
+import { type Transport } from '@fougere/core';
 import type { ServeOptions } from './ServeOptions.js';
 export interface RunningReceiver {
     port: number;

package/dist/serve/RunningReceiver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RunningReceiver.d.ts","sourceRoot":"","sources":["../../src/serve/RunningReceiver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAI/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,qDAAqD;AACrD,eAAO,MAAM,cAAc,UAAoC,CAAC;AAEhE,wBAAgB,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAM7F"}
+{"version":3,"file":"RunningReceiver.d.ts","sourceRoot":"","sources":["../../src/serve/RunningReceiver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuC,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAIpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,qDAAqD;AACrD,eAAO,MAAM,cAAc,UAAoC,CAAC;AAEhE,wBAAgB,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAM7F"}

package/dist/serve/RunningReceiver.js

@@ -1,4 +1,6 @@
 import { createServer } from 'node:http';
+import { Readable } from 'node:stream';
+import { ErrorCode, FougereError, readWithin } from '@fougere/core';
 import { handleRpc } from '../server.js';
 import { maxFrameBytes, CALL_PATH, parseError, tooLarge } from '../policy.js';
 /** What a frond binds when nobody says otherwise. */
@@ -34,24 +36,27 @@ function whyNotHere(host, options) {
 function answering(runner, options) {
     return async (req, res) => {
         if (req.method !== 'POST' || req.url !== CALL_PATH) {
-            res.writeHead(404).end();
-            return;
-        }
-        const maxBodyBytes = maxFrameBytes();
-        const chunks = [];
-        let size = 0;
-        for await (const value of req) {
-            const chunk = Buffer.from(value);
-            size += chunk.length;
-            if (size > maxBodyBytes) {
-                res.writeHead(413, { 'content-type': 'application/json' }).end(JSON.stringify(tooLarge()));
+            const answered = options.beside && await options.beside(webRequestOf(req));
+            if (!answered) {
+                res.writeHead(404).end();
                 return;
             }
-            chunks.push(chunk);
+            res.writeHead(answered.status, Object.fromEntries(answered.headers)).end(Buffer.from(await answered.arrayBuffer()));
+            return;
+        }
+        let raw;
+        try {
+            raw = await readWithin(req, maxFrameBytes(), req.headers['content-length']);
+        }
+        catch (refused) {
+            if (!(refused instanceof FougereError && refused.code === ErrorCode.PAYLOAD_TOO_LARGE))
+                throw refused;
+            res.writeHead(413, { 'content-type': 'application/json' }).end(JSON.stringify(tooLarge()));
+            return;
         }
         let response;
         try {
-            response = await handleRpc(runner, JSON.parse(Buffer.concat(chunks).toString('utf8')), options);
+            response = await handleRpc(runner, JSON.parse(raw), options);
         }
         catch {
             response = parseError();
@@ -59,6 +64,21 @@ function answering(runner, options) {
         res.writeHead(200, { 'content-type': 'application/json' }).end(JSON.stringify(response));
     };
 }
+/** A Node request as a Web one, its body still a stream — built only for what is not a call. */
+function webRequestOf(req) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(req.headers)) {
+        if (value !== undefined)
+            headers.set(name, Array.isArray(value) ? value.join(', ') : value);
+    }
+    // A message carries a body when it says so — a length, or chunks — and a POST with neither has none.
+    const reads = Number(req.headers['content-length']) > 0 || req.headers['transfer-encoding'] !== undefined;
+    return new Request(`http://${req.headers.host ?? 'localhost'}${req.url ?? '/'}`, {
+        method: req.method,
+        headers,
+        ...(reads && { body: Readable.toWeb(req), duplex: 'half' }),
+    });
+}
 /** The port a receiver ended up on — asked of the server, since 0 means "whatever is free". */
 function listening(server, host, options) {
     return new Promise((resolve, reject) => {

package/dist/serve/RunningReceiver.js.map

@@ -1 +1 @@
-{"version":3,"file":"RunningReceiver.js","sourceRoot":"","sources":["../../src/serve/RunningReceiver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAGjG,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAQ9E,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AAEhE,MAAM,UAAU,KAAK,CAAC,MAAiB,EAAE,OAAO,GAAiB,EAAE;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5C,OAAO,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,IAAK,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAwB,EAAE,OAAqB;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,KAAK,CACd,kCAAkC,IAAI,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAC5G,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAE/F,OAAO,IAAI,KAAK,CACd,kBAAkB,IAAI,oEAAoE;UACxF,gHAAgH;UAChH,+BAA+B;UAC/B,0FAA0F,CAC7F,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,MAAiB,EAAE,OAAqB;IACzD,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QACxE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAEzB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,aAAa,EAAE,CAAC;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBACxB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAE3F,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC1B,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,OAAqB;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAEjC,OAAO,CAAC;gBACN,IAAI,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;aAClG,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"RunningReceiver.js","sourceRoot":"","sources":["../../src/serve/RunningReceiver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAkB,MAAM,eAAe,CAAC;AAEpF,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAQ9E,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AAEhE,MAAM,UAAU,KAAK,CAAC,MAAiB,EAAE,OAAO,GAAiB,EAAE;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5C,OAAO,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,IAAK,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAwB,EAAE,OAAqB;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,KAAK,CACd,kCAAkC,IAAI,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAC5G,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAE/F,OAAO,IAAI,KAAK,CACd,kBAAkB,IAAI,oEAAoE;UACxF,gHAAgH;UAChH,+BAA+B;UAC/B,0FAA0F,CAC7F,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,MAAiB,EAAE,OAAqB;IACzD,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QACxE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBAEzB,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAEpH,OAAO;QACT,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,CAAC,OAAO,YAAY,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,iBAAiB,CAAC;gBAAE,MAAM,OAAO,CAAC;YACtG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAE3F,OAAO;QACT,CAAC;QAED,IAAI,QAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC1B,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,YAAY,CAAC,GAAoB;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC;IACD,qGAAqG;IACrG,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,SAAS,CAAC;IAE1G,OAAO,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE;QAC/E,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO;QACP,GAAG,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA+B,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAC3E,CAAC,CAAC;AACpB,CAAC;AAED,+FAA+F;AAC/F,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,OAAqB;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAEjC,OAAO,CAAC;gBACN,IAAI,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;aAClG,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/serve/ServeOptions.d.ts

@@ -10,5 +10,10 @@ export interface ServeOptions extends ReceiveOptions {
     allowUnsigned?: boolean;
     /** Time allowed to receive a request. Default: 15 seconds. */
     requestTimeoutMs?: number;
+    /**
+     * What answers a request that is not a call — the REST door of the fronds this process hosts.
+     * `undefined` from it, or no `beside` at all, is a 404.
+     */
+    beside?: (request: Request) => Promise<Response | undefined>;
 }
 //# sourceMappingURL=ServeOptions.d.ts.map

package/dist/serve/ServeOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ServeOptions.d.ts","sourceRoot":"","sources":["../../src/serve/ServeOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B"}
+{"version":3,"file":"ServeOptions.d.ts","sourceRoot":"","sources":["../../src/serve/ServeOptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;CAC9D"}

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-/** Receiving half — unframe the call, run it, frame what comes out. */
-import { type SignedCall, type Transport } from '@fougere/core/contract';
+/** Receiving half — unframe the call, run it, frame what comes out: a door, in JSON-RPC terms. */
+import { type Answering, type Door, type InvocationContext, type SignedCall, type Transport } from '@fougere/core/contract';
 import { type RpcResponse } from './jsonrpc/RpcResponse.js';
 /** What a receiver does with the caller's envelope. */
 export interface ReceiveOptions {
@@ -12,6 +12,37 @@ export interface ReceiveOptions {
      * Refuse a call carrying no verifiable identity — the whole of "secure by default" at the wire.
      */
     requireIdentity?: boolean;
+    /** The app's cycle, which watches the request; a receiver holding only a runner runs it unwatched. */
+    answer?: Answering;
 }
+/** One call, unframed. */
+export interface RpcCall {
+    address: string;
+    op: string;
+    invocation: InvocationContext;
+}
+/**
+ * The door a process calls another through. The caller is a peer: its state is established by
+ * `verify` when it signed, and the call is marked `fromAnotherProcess` so the receiver does not judge again
+ * what the sender's own boundary already judged.
+ */
+export declare function peerDoor(runner: Transport, options?: ReceiveOptions): Door<unknown, RpcCall, RpcResponse>;
+/**
+ * The door a page calls through — the same wire, another trust boundary. The browser sits outside
+ * the topology: its state is what the host resolved server-side, never what the payload claims,
+ * and nothing it sends is taken as already judged. Nor does it write `args`, which are taken as
+ * written — a peer's right — and `[id, draft, { id: 'admin' }]` would hand the handler a user no
+ * collector read.
+ */
+export interface PageDoorOptions {
+    /** What the host resolved of the caller, server-side. */
+    state: Record<string, unknown>;
+    /** The page's own HTTP request — what a cookie-kept state arrives and leaves in, written back by the host. */
+    carrier?: unknown;
+    /** Whether an announcement calls this op — one a page may not name. */
+    listens?: (address: string, op: string) => boolean | Promise<boolean>;
+}
+export declare function pageDoor(runner: Transport, { state, carrier, listens }: PageDoorOptions): Door<unknown, RpcCall, RpcResponse>;
+/** A peer's call, through the app's cycle when the receiver holds one. */
 export declare function handleRpc(runner: Transport, raw: unknown, options?: ReceiveOptions): Promise<RpcResponse>;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAkE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGzI,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,uDAAuD;AACvD,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAClH;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CA4EnH"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,EAC8B,KAAK,SAAS,EAAE,KAAK,IAAI,EAAE,KAAK,iBAAiB,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EACtH,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,uDAAuD;AACvD,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAClH;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sGAAsG;IACtG,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,0BAA0B;AAC1B,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,cAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CA+C7G;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,8GAA8G;IAC9G,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAgC7H;AAED,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CAI7G"}

package/dist/server.js

@@ -1,20 +1,115 @@
-/** Receiving half — unframe the call, run it, frame what comes out. */
-import { FougereError, ErrorCode, toPublicError } from '@fougere/core/contract';
+/** Receiving half — unframe the call, run it, frame what comes out: a door, in JSON-RPC terms. */
+import { answerAt, FougereError, ErrorCode, } from '@fougere/core/contract';
 import { APP_ERROR, INVALID_REQUEST } from './jsonrpc/RpcErrorShape.js';
-export async function handleRpc(runner, raw, options = {}) {
+/**
+ * The door a process calls another through. The caller is a peer: its state is established by
+ * `verify` when it signed, and the call is marked `fromAnotherProcess` so the receiver does not judge again
+ * what the sender's own boundary already judged.
+ */
+export function peerDoor(runner, options = {}) {
+    return {
+        name: 'rpc',
+        decode: async (raw) => {
+            const { address, op, sent } = envelopeOf(raw);
+            /** State is ESTABLISHED here, or it is only claimed. */
+            let state = sent.state ?? {};
+            let caller;
+            if (options.verify && sent.identity) {
+                try {
+                    // What ARRIVED, never what we would rather it had been — the comparison is the point.
+                    ({ caller, state } = await options.verify(sent.identity, { address, op,
+                        params: sent.params ?? {},
+                        query: sent.query ?? {},
+                        input: sent.input,
+                        args: sent.args,
+                        runAt: sent.runAt,
+                    }));
+                }
+                catch (err) {
+                    throw unauthorized(err?.message ?? 'unverifiable identity', address, op);
+                }
+            }
+            else if (options.requireIdentity) {
+                throw unauthorized('this receiver takes signed calls only', address, op);
+            }
+            // Built field by field, never spread from `sent`: everything here is either validated
+            // above or carried deliberately, and `caller` is ours to write alone.
+            return {
+                address,
+                op,
+                invocation: {
+                    params: sent.params ?? {},
+                    query: sent.query ?? {},
+                    input: sent.input,
+                    ...(sent.args === undefined ? {} : { args: sent.args }),
+                    state,
+                    trace: sent.trace,
+                    ...(sent.runAt === undefined ? {} : { runAt: sent.runAt }),
+                    ...(caller ? { caller } : {}),
+                    fromAnotherProcess: true,
+                },
+            };
+        },
+        run: ({ address, op, invocation }) => called(runner, address, op, invocation),
+        encode: framed,
+    };
+}
+export function pageDoor(runner, { state, carrier, listens }) {
+    return {
+        name: 'rpc',
+        ...(carrier !== undefined && { carries: 'http', carrier: () => carrier }),
+        decode: async (raw) => {
+            const { address, op, sent } = envelopeOf(raw);
+            if (sent.args !== undefined) {
+                throw new FougereError({
+                    code: ErrorCode.BAD_REQUEST,
+                    message: `${address}.${op}: a page sends params, query and input, not \`args\` (only fronds send \`args\`).`,
+                    address,
+                    operation: op,
+                });
+            }
+            if (await listens?.(address, op)) {
+                throw new FougereError({
+                    code: ErrorCode.NOT_FOUND,
+                    message: `${address}.${op} is called by an announcement, never by a page: call the command that announces it.`,
+                    address,
+                    operation: op,
+                });
+            }
+            return {
+                address,
+                op,
+                invocation: { params: sent.params ?? {}, query: sent.query ?? {}, input: sent.input, state, trace: sent.trace },
+            };
+        },
+        run: ({ address, op, invocation }) => called(runner, address, op, invocation),
+        encode: framed,
+    };
+}
+/** A peer's call, through the app's cycle when the receiver holds one. */
+export function handleRpc(runner, raw, options = {}) {
+    const door = peerDoor(runner, options);
+    return options.answer ? options.answer(door, raw) : answerAt(door, raw);
+}
+/**
+ * The members a caller may send. `caller` and `fromAnotherProcess` are written by the receiver and never claimed, and
+ * a key outside the list is refused by name: `body` used to be dropped, and the call then ran
+ * with no input and no validation.
+ */
+const SENT = {
+    params: true, query: true, input: true, args: true, state: true, trace: true, identity: true, runAt: true, caller: false,
+    fromAnotherProcess: false,
+};
+/** Where a refusal of the envelope itself says which JSON-RPC code it is, rather than an app's. */
+const ENVELOPE = 'jsonrpc';
+function envelopeOf(raw) {
     const req = raw;
-    const id = typeof req?.id === 'number' || typeof req?.id === 'string' ? req.id : null;
-    if (!req || req.jsonrpc !== '2.0' || typeof req.method !== 'string' || id === null) {
-        return { jsonrpc: '2.0', id, error: { code: INVALID_REQUEST, message: 'Invalid JSON-RPC 2.0 request' } };
+    if (!req || req.jsonrpc !== '2.0' || typeof req.method !== 'string' || idOf(raw) === null) {
+        throw invalid('Invalid JSON-RPC 2.0 request');
     }
     const dot = req.method.indexOf('.');
-    if (dot <= 0 || dot === req.method.length - 1) {
-        return {
-            jsonrpc: '2.0',
-            id,
-            error: { code: INVALID_REQUEST, message: `Invalid method '${req.method}' — expected 'address.op'` },
-        };
-    }
+    if (dot <= 0 || dot === req.method.length - 1)
+        throw invalid(`Invalid method '${req.method}' — expected 'address.op'`);
     const address = req.method.slice(0, dot);
     const op = req.method.slice(dot + 1);
     // Fresh objects — middlewares deposit into state, nothing may be shared.
@@ -22,81 +117,50 @@ export async function handleRpc(runner, raw, options = {}) {
     const strangers = Object.entries(sent)
         .filter(([key, value]) => value !== undefined && !SENT[key])
         .map(([key]) => key);
-    if (strangers.length > 0)
-        return malformed(id, strangers, address, op);
-    /** State is ESTABLISHED here, or it is only claimed. */
-    let state = sent.state ?? {};
-    let caller;
-    if (options.verify && sent.identity) {
-        try {
-            // What ARRIVED, never what we would rather it had been — the comparison is the point.
-            ({ caller, state } = await options.verify(sent.identity, { address, op,
-                params: sent.params ?? {},
-                query: sent.query ?? {},
-                input: sent.input,
-                args: sent.args,
-                runAt: sent.runAt,
-            }));
-        }
-        catch (err) {
-            return refused(id, err?.message ?? 'unverifiable identity', address, op);
-        }
-    }
-    else if (options.requireIdentity) {
-        return refused(id, 'this receiver takes signed calls only', address, op);
+    if (strangers.length > 0) {
+        const admitted = Object.keys(SENT).filter((key) => SENT[key]);
+        throw new FougereError({
+            code: ErrorCode.BAD_REQUEST,
+            message: `Unknown invocation member ${strangers.map((key) => `'${key}'`).join(', ')} — one of ${admitted.join(', ')}.`,
+            address,
+            operation: op,
+        });
     }
-    // Built field by field, never spread from `sent`: everything here is either validated
-    // above or carried deliberately, and `caller` is ours to write alone.
-    const invocation = {
-        params: sent.params ?? {},
-        query: sent.query ?? {},
-        input: sent.input,
-        ...(sent.args === undefined ? {} : { args: sent.args }),
-        state,
-        trace: sent.trace,
-        ...(sent.runAt === undefined ? {} : { runAt: sent.runAt }),
-        ...(caller ? { caller } : {}),
-        crossed: true,
-    };
+    return { address, op, sent };
+}
+/** An accident names the op it happened in, so the receiver's log says where. */
+async function called(runner, address, op, invocation) {
     try {
-        return { jsonrpc: '2.0', id, result: await runner({ address, op }, invocation) };
+        return await runner({ address, op }, invocation);
     }
     catch (err) {
-        const failure = err instanceof FougereError
-            ? err
-            : new FougereError({
-                code: ErrorCode.INTERNAL_ERROR,
-                message: err?.message ?? 'Internal error',
-                address,
-                operation: op,
-                cause: err,
-            });
-        const data = toPublicError(failure);
-        return { jsonrpc: '2.0', id, error: { code: APP_ERROR, message: data.message, data } };
+        if (err instanceof FougereError)
+            throw err;
+        throw new FougereError({
+            code: ErrorCode.INTERNAL_ERROR, message: err?.message ?? 'Internal error', address, operation: op, cause: err,
+        });
     }
 }
-/**
- * The members a caller may send. `caller` and `crossed` are written by the receiver and never claimed, and
- * a key outside the list is refused by name: `body` used to be dropped, and the call then ran
- * with no input and no validation.
- */
-const SENT = {
-    params: true, query: true, input: true, args: true, state: true, trace: true, identity: true, runAt: true, caller: false,
-    crossed: false,
-};
-function malformed(id, strangers, address, op) {
-    const admitted = Object.keys(SENT).filter((key) => SENT[key]);
-    const data = toPublicError(new FougereError({
-        code: ErrorCode.BAD_REQUEST,
-        message: `Unknown invocation member ${strangers.map((key) => `'${key}'`).join(', ')} — one of ${admitted.join(', ')}.`,
-        address,
-        operation: op,
-    }));
+function framed(outcome, raw) {
+    const id = idOf(raw);
+    if ('answered' in outcome)
+        return { jsonrpc: '2.0', id: id, result: outcome.answered };
+    const { refused } = outcome;
+    const envelope = refused.details?.[ENVELOPE];
+    if (typeof envelope === 'number')
+        return { jsonrpc: '2.0', id, error: { code: envelope, message: refused.message } };
+    const data = refused.toJSON();
     return { jsonrpc: '2.0', id, error: { code: APP_ERROR, message: data.message, data } };
 }
+function idOf(raw) {
+    const id = raw?.id;
+    return typeof id === 'number' || typeof id === 'string' ? id : null;
+}
+function invalid(message) {
+    return new FougereError({ code: ErrorCode.BAD_REQUEST, message, details: { [ENVELOPE]: INVALID_REQUEST } });
+}
 /** An admission refusal, framed like any other failure so a caller reads one vocabulary. */
-function refused(id, why, address, op) {
-    const data = toPublicError(new FougereError({ code: ErrorCode.UNAUTHORIZED, message: `Refused: ${why}`, address, operation: op }));
-    return { jsonrpc: '2.0', id, error: { code: APP_ERROR, message: data.message, data } };
+function unauthorized(why, address, op) {
+    return new FougereError({ code: ErrorCode.UNAUTHORIZED, message: `Refused: ${why}`, address, operation: op });
 }
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAA2D,MAAM,wBAAwB,CAAC;AACzI,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAcxE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAiB,EAAE,GAAY,EAAE,OAAO,GAAmB,EAAE;IAC3F,MAAM,GAAG,GAAG,GAAiC,CAAC;IAC9C,MAAM,EAAE,GAAG,OAAO,GAAG,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACnF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,CAAC;IAC3G,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,EAAE;YACF,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,MAAM,2BAA2B,EAAE;SACpG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAErC,yEAAyE;IACzE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA+B,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC;SACtF,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAEvE,wDAAwD;IACxD,IAAI,KAAK,GAA4B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IACtD,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,sFAAsF;YACtF,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE;gBACpE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,EAAE,EAAG,GAAa,EAAE,OAAO,IAAI,uBAAuB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,EAAE,EAAE,uCAAuC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,sFAAsF;IACtF,sEAAsE;IACtE,MAAM,UAAU,GAAsB;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,KAAK;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,YAAY;YACzC,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,IAAI,YAAY,CAAC;gBACf,IAAI,EAAE,SAAS,CAAC,cAAc;gBAC9B,OAAO,EAAG,GAAa,EAAE,OAAO,IAAI,gBAAgB;gBACpD,OAAO;gBACP,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;QACP,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAEpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,IAAI,GAAG;IACX,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;IACxH,OAAO,EAAE,KAAK;CACoC,CAAC;AAErD,SAAS,SAAS,CAAC,EAAmB,EAAE,SAAmB,EAAE,OAAe,EAAE,EAAU;IACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,YAAY,CAAC;QAC1C,IAAI,EAAE,SAAS,CAAC,WAAW;QAC3B,OAAO,EAAE,6BAA6B,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACtH,OAAO;QACP,SAAS,EAAE,EAAE;KACd,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AACzF,CAAC;AAED,4FAA4F;AAC5F,SAAS,OAAO,CAAC,EAAmB,EAAE,GAAW,EAAE,OAAe,EAAE,EAAU;IAC5E,MAAM,IAAI,GAAG,aAAa,CACxB,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,YAAY,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CACvG,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AACzF,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,EACL,QAAQ,EAAE,YAAY,EAAE,SAAS,GAClC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAuBxE;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAiB,EAAE,OAAO,GAAmB,EAAE;IACtE,OAAO;QACL,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpB,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAE9C,wDAAwD;YACxD,IAAI,KAAK,GAA4B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,IAAI,MAA0B,CAAC;YAC/B,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,sFAAsF;oBACtF,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE;wBACpE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;wBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;wBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,KAAK,EAAE,IAAI,CAAC,KAAK;qBAClB,CAAC,CAAC,CAAC;gBACN,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,YAAY,CAAE,GAAa,EAAE,OAAO,IAAI,uBAAuB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBACnC,MAAM,YAAY,CAAC,uCAAuC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC;YAED,sFAAsF;YACtF,sEAAsE;YACtE,OAAO;gBACL,OAAO;gBACP,EAAE;gBACF,UAAU,EAAE;oBACV,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;oBACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;oBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACvD,KAAK;oBACL,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC1D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7B,kBAAkB,EAAE,IAAI;iBACzB;aACF,CAAC;QACJ,CAAC;QACD,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC;QAC7E,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAkBD,MAAM,UAAU,QAAQ,CAAC,MAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAmB;IACtF,OAAO;QACL,IAAI,EAAE,KAAK;QACX,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACzE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpB,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,WAAW;oBAC3B,OAAO,EAAE,GAAG,OAAO,IAAI,EAAE,mFAAmF;oBAC5G,OAAO;oBACP,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,SAAS,CAAC,SAAS;oBACzB,OAAO,EAAE,GAAG,OAAO,IAAI,EAAE,qFAAqF;oBAC9G,OAAO;oBACP,SAAS,EAAE,EAAE;iBACd,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,OAAO;gBACP,EAAE;gBACF,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;aAChH,CAAC;QACJ,CAAC;QACD,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC;QAC7E,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,MAAiB,EAAE,GAAY,EAAE,OAAO,GAAmB,EAAE;IACrF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,IAAI,GAAG;IACX,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;IACxH,kBAAkB,EAAE,KAAK;CACyB,CAAC;AAErD,mGAAmG;AACnG,MAAM,QAAQ,GAAG,SAAS,CAAC;AAE3B,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,GAAG,GAAG,GAAiC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1F,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,OAAO,CAAC,mBAAmB,GAAG,CAAC,MAAM,2BAA2B,CAAC,CAAC;IACvH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAErC,yEAAyE;IACzE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA+B,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC;SACtF,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC,CAAC;QACzF,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC,WAAW;YAC3B,OAAO,EAAE,6BAA6B,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACtH,OAAO;YACP,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,MAAM,CAAC,MAAiB,EAAE,OAAe,EAAE,EAAU,EAAE,UAA6B;IACjG,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY;YAAE,MAAM,GAAG,CAAC;QAC3C,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAG,GAAa,EAAE,OAAO,IAAI,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG;SACzH,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,OAA0D,EAAE,GAAY;IACtF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,UAAU,IAAI,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAG,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAExF,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAI,OAAO,CAAC,OAA+C,EAAE,CAAC,QAAQ,CAAC,CAAC;IACtF,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACrH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAE9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,IAAI,CAAC,GAAY;IACxB,MAAM,EAAE,GAAI,GAAkC,EAAE,EAAE,CAAC;IAEnD,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED,4FAA4F;AAC5F,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe,EAAE,EAAU;IAC5D,OAAO,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,YAAY,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AAChH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fougere/transport-http",
-  "version": "0.24.0-alpha.0",
+  "version": "0.26.0-alpha.0",
   "description": "The call contract on the wire, in JSON-RPC 2.0 (server + client).",
   "keywords": [
     "fougere",
@@ -38,13 +38,13 @@
     "src"
   ],
   "dependencies": {
-    "@fougere/core": "0.24.0-alpha.0"
+    "@fougere/core": "0.26.0-alpha.0"
   },
   "devDependencies": {
-    "@fougere/schema": "0.24.0-alpha.0",
+    "@fougere/schema": "0.26.0-alpha.0",
     "jiti": "^2.6.1",
-    "@fougere/container": "0.24.0-alpha.0",
-    "@fougere/compiler": "0.24.0-alpha.0"
+    "@fougere/container": "0.26.0-alpha.0",
+    "@fougere/compiler": "0.26.0-alpha.0"
   },
   "publishConfig": {
     "access": "public"

package/src/client.ts

@@ -76,9 +76,9 @@ export function createHttpTransport(baseUrl: string, options: HttpTransportOptio
     // receiver choosing between a proof and a claim about the same thing.
     // `caller` is dropped on every hop: it names who signed THIS call, so carrying the
     // one this process was handed would make `shop → catalog → billing` read `shop`.
-    // It travels outside the envelope anyway, so a stale one would be unsigned too. `crossed`
+    // It travels outside the envelope anyway, so a stale one would be unsigned too. `fromAnotherProcess`
     // is the next receiver's to write, for the same reason.
-    const { caller: _established, crossed: _received, ...forwarded } = invocation;
+    const { caller: _established, fromAnotherProcess: _received, ...forwarded } = invocation;
     const sent = options.sign
       ? { ...forwarded, state: {}, identity: await options.sign({ ...call, ...invocation }) }
       : forwarded;

package/src/index.ts

@@ -1,5 +1,5 @@
 export { createHttpTransport, frameCall, unframeResponse } from './client.js';
-export { handleRpc } from './server.js';
+export { handleRpc, pageDoor, peerDoor, type PageDoorOptions, type ReceiveOptions, type RpcCall } from './server.js';
 export { receive } from './receive.js';
 export { maxFrameBytes } from './policy.js';
 export { serve, type RunningReceiver } from './serve/RunningReceiver.js';

package/src/receive.ts

@@ -7,7 +7,7 @@
  */
 import { handleRpc, type ReceiveOptions } from './server.js';
 import { maxFrameBytes, CALL_PATH, parseError, tooLarge } from './policy.js';
-import type { Transport } from '@fougere/core/contract';
+import { ErrorCode, FougereError, readWithin, type Transport } from '@fougere/core/contract';
 
 export interface ReceiveHttpOptions extends ReceiveOptions {
   /** The path this facade answers. Default: `/_fougere/call`. */
@@ -19,48 +19,6 @@ export interface ReceiveHttpOptions extends ReceiveOptions {
 const json = (body: unknown, status = 200) =>
   new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json' } });
 
-/** Distinguishes "the body was too large" from any body a caller could actually send. */
-const TOO_LARGE = Symbol('too large');
-
-/**
- * The declared length is a cheap refusal; the count is the real one. A `content-length` may
- * be absent, and it may lie — the copy that trusted it alone had no cap at all in that case.
- */
-async function bodyWithin(request: Request, max: number): Promise<string | typeof TOO_LARGE> {
-  const declared = Number(request.headers.get('content-length'));
-  if (Number.isFinite(declared) && declared > max) return TOO_LARGE;
-
-  const reader = request.body?.getReader();
-  if (!reader) return '';
-
-  const chunks: Uint8Array[] = [];
-  let size = 0;
-  for (;;) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    size += value.byteLength;
-    if (size > max) {
-      await reader.cancel();
-
-      return TOO_LARGE;
-    }
-    chunks.push(value);
-  }
-
-  return new TextDecoder().decode(concat(chunks, size));
-}
-
-function concat(chunks: readonly Uint8Array[], size: number): Uint8Array {
-  const all = new Uint8Array(size);
-  let at = 0;
-  for (const chunk of chunks) {
-    all.set(chunk, at);
-    at += chunk.byteLength;
-  }
-
-  return all;
-}
-
 export function receive(
   runner: Transport,
   options: ReceiveHttpOptions = {},
@@ -81,8 +39,14 @@ export function receive(
       return new Response(null, { status: 404 });
     }
 
-    const raw = await bodyWithin(request, maxFrameBytes());
-    if (raw === TOO_LARGE) return json(tooLarge(), 413);
+    let raw: string;
+    try {
+      raw = await readWithin(request.body, maxFrameBytes(), request.headers.get('content-length'));
+    } catch (refused) {
+      if (!(refused instanceof FougereError && refused.code === ErrorCode.PAYLOAD_TOO_LARGE)) throw refused;
+
+      return json(tooLarge(), 413);
+    }
 
     let parsed: unknown;
     try {

package/src/serve/RunningReceiver.ts

@@ -1,5 +1,6 @@
 import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';
-import type { Transport } from '@fougere/core';
+import { Readable } from 'node:stream';
+import { ErrorCode, FougereError, readWithin, type Transport } from '@fougere/core';
 import type { RpcResponse } from '../jsonrpc/RpcResponse.js';
 import { handleRpc } from '../server.js';
 import { maxFrameBytes, CALL_PATH, parseError, tooLarge } from '../policy.js';
@@ -52,28 +53,30 @@ function whyNotHere(host: string | undefined, options: ServeOptions): Error | un
 function answering(runner: Transport, options: ServeOptions) {
   return async (req: IncomingMessage, res: ServerResponse): Promise<void> => {
     if (req.method !== 'POST' || req.url !== CALL_PATH) {
-      res.writeHead(404).end();
+      const answered = options.beside && await options.beside(webRequestOf(req));
+      if (!answered) {
+        res.writeHead(404).end();
+
+        return;
+      }
+      res.writeHead(answered.status, Object.fromEntries(answered.headers)).end(Buffer.from(await answered.arrayBuffer()));
 
       return;
     }
 
-    const maxBodyBytes = maxFrameBytes();
-    const chunks: Buffer[] = [];
-    let size = 0;
-    for await (const value of req) {
-      const chunk = Buffer.from(value as Uint8Array);
-      size += chunk.length;
-      if (size > maxBodyBytes) {
-        res.writeHead(413, { 'content-type': 'application/json' }).end(JSON.stringify(tooLarge()));
+    let raw: string;
+    try {
+      raw = await readWithin(req, maxFrameBytes(), req.headers['content-length']);
+    } catch (refused) {
+      if (!(refused instanceof FougereError && refused.code === ErrorCode.PAYLOAD_TOO_LARGE)) throw refused;
+      res.writeHead(413, { 'content-type': 'application/json' }).end(JSON.stringify(tooLarge()));
 
-        return;
-      }
-      chunks.push(chunk);
+      return;
     }
 
     let response: RpcResponse;
     try {
-      response = await handleRpc(runner, JSON.parse(Buffer.concat(chunks).toString('utf8')), options);
+      response = await handleRpc(runner, JSON.parse(raw), options);
     } catch {
       response = parseError();
     }
@@ -82,6 +85,22 @@ function answering(runner: Transport, options: ServeOptions) {
   };
 }
 
+/** A Node request as a Web one, its body still a stream — built only for what is not a call. */
+function webRequestOf(req: IncomingMessage): Request {
+  const headers = new Headers();
+  for (const [name, value] of Object.entries(req.headers)) {
+    if (value !== undefined) headers.set(name, Array.isArray(value) ? value.join(', ') : value);
+  }
+  // A message carries a body when it says so — a length, or chunks — and a POST with neither has none.
+  const reads = Number(req.headers['content-length']) > 0 || req.headers['transfer-encoding'] !== undefined;
+
+  return new Request(`http://${req.headers.host ?? 'localhost'}${req.url ?? '/'}`, {
+    method: req.method,
+    headers,
+    ...(reads && { body: Readable.toWeb(req) as ReadableStream<Uint8Array>, duplex: 'half' }),
+  } as RequestInit);
+}
+
 /** The port a receiver ended up on — asked of the server, since 0 means "whatever is free". */
 function listening(server: Server, host: string, options: ServeOptions): Promise<RunningReceiver> {
   return new Promise((resolve, reject) => {

package/src/serve/ServeOptions.ts

@@ -11,4 +11,9 @@ export interface ServeOptions extends ReceiveOptions {
   allowUnsigned?: boolean;
   /** Time allowed to receive a request. Default: 15 seconds. */
   requestTimeoutMs?: number;
+  /**
+   * What answers a request that is not a call — the REST door of the fronds this process hosts.
+   * `undefined` from it, or no `beside` at all, is a 404.
+   */
+  beside?: (request: Request) => Promise<Response | undefined>;
 }

package/src/server.ts

@@ -1,5 +1,7 @@
-/** Receiving half — unframe the call, run it, frame what comes out. */
-import { FougereError, ErrorCode, toPublicError, type InvocationContext, type SignedCall, type Transport } from '@fougere/core/contract';
+/** Receiving half — unframe the call, run it, frame what comes out: a door, in JSON-RPC terms. */
+import {
+  answerAt, FougereError, ErrorCode, type Answering, type Door, type InvocationContext, type SignedCall, type Transport,
+} from '@fougere/core/contract';
 import { APP_ERROR, INVALID_REQUEST } from './jsonrpc/RpcErrorShape.js';
 import { type RpcRequest } from './jsonrpc/RpcRequest.js';
 import { type RpcResponse } from './jsonrpc/RpcResponse.js';
@@ -12,24 +14,149 @@ export interface ReceiveOptions {
    * Refuse a call carrying no verifiable identity — the whole of "secure by default" at the wire.
    */
   requireIdentity?: boolean;
+  /** The app's cycle, which watches the request; a receiver holding only a runner runs it unwatched. */
+  answer?: Answering;
 }
 
-export async function handleRpc(runner: Transport, raw: unknown, options: ReceiveOptions = {}): Promise<RpcResponse> {
-  const req = raw as Partial<RpcRequest> | null;
-  const id = typeof req?.id === 'number' || typeof req?.id === 'string' ? req.id : null;
+/** One call, unframed. */
+export interface RpcCall {
+  address: string;
+  op: string;
+  invocation: InvocationContext;
+}
+
+/**
+ * The door a process calls another through. The caller is a peer: its state is established by
+ * `verify` when it signed, and the call is marked `fromAnotherProcess` so the receiver does not judge again
+ * what the sender's own boundary already judged.
+ */
+export function peerDoor(runner: Transport, options: ReceiveOptions = {}): Door<unknown, RpcCall, RpcResponse> {
+  return {
+    name: 'rpc',
+    decode: async (raw) => {
+      const { address, op, sent } = envelopeOf(raw);
+
+      /** State is ESTABLISHED here, or it is only claimed. */
+      let state: Record<string, unknown> = sent.state ?? {};
+      let caller: string | undefined;
+      if (options.verify && sent.identity) {
+        try {
+          // What ARRIVED, never what we would rather it had been — the comparison is the point.
+          ({ caller, state } = await options.verify(sent.identity, { address, op,
+            params: sent.params ?? {},
+            query: sent.query ?? {},
+            input: sent.input,
+            args: sent.args,
+            runAt: sent.runAt,
+          }));
+        } catch (err) {
+          throw unauthorized((err as Error)?.message ?? 'unverifiable identity', address, op);
+        }
+      } else if (options.requireIdentity) {
+        throw unauthorized('this receiver takes signed calls only', address, op);
+      }
 
-  if (!req || req.jsonrpc !== '2.0' || typeof req.method !== 'string' || id === null) {
-    return { jsonrpc: '2.0', id, error: { code: INVALID_REQUEST, message: 'Invalid JSON-RPC 2.0 request' } };
+      // Built field by field, never spread from `sent`: everything here is either validated
+      // above or carried deliberately, and `caller` is ours to write alone.
+      return {
+        address,
+        op,
+        invocation: {
+          params: sent.params ?? {},
+          query: sent.query ?? {},
+          input: sent.input,
+          ...(sent.args === undefined ? {} : { args: sent.args }),
+          state,
+          trace: sent.trace,
+          ...(sent.runAt === undefined ? {} : { runAt: sent.runAt }),
+          ...(caller ? { caller } : {}),
+          fromAnotherProcess: true,
+        },
+      };
+    },
+    run: ({ address, op, invocation }) => called(runner, address, op, invocation),
+    encode: framed,
+  };
+}
+
+/**
+ * The door a page calls through — the same wire, another trust boundary. The browser sits outside
+ * the topology: its state is what the host resolved server-side, never what the payload claims,
+ * and nothing it sends is taken as already judged. Nor does it write `args`, which are taken as
+ * written — a peer's right — and `[id, draft, { id: 'admin' }]` would hand the handler a user no
+ * collector read.
+ */
+export interface PageDoorOptions {
+  /** What the host resolved of the caller, server-side. */
+  state: Record<string, unknown>;
+  /** The page's own HTTP request — what a cookie-kept state arrives and leaves in, written back by the host. */
+  carrier?: unknown;
+  /** Whether an announcement calls this op — one a page may not name. */
+  listens?: (address: string, op: string) => boolean | Promise<boolean>;
+}
+
+export function pageDoor(runner: Transport, { state, carrier, listens }: PageDoorOptions): Door<unknown, RpcCall, RpcResponse> {
+  return {
+    name: 'rpc',
+    ...(carrier !== undefined && { carries: 'http', carrier: () => carrier }),
+    decode: async (raw) => {
+      const { address, op, sent } = envelopeOf(raw);
+      if (sent.args !== undefined) {
+        throw new FougereError({
+          code: ErrorCode.BAD_REQUEST,
+          message: `${address}.${op}: a page sends params, query and input, not \`args\` (only fronds send \`args\`).`,
+          address,
+          operation: op,
+        });
+      }
+      if (await listens?.(address, op)) {
+        throw new FougereError({
+          code: ErrorCode.NOT_FOUND,
+          message: `${address}.${op} is called by an announcement, never by a page: call the command that announces it.`,
+          address,
+          operation: op,
+        });
+      }
+
+      return {
+        address,
+        op,
+        invocation: { params: sent.params ?? {}, query: sent.query ?? {}, input: sent.input, state, trace: sent.trace },
+      };
+    },
+    run: ({ address, op, invocation }) => called(runner, address, op, invocation),
+    encode: framed,
+  };
+}
+
+/** A peer's call, through the app's cycle when the receiver holds one. */
+export function handleRpc(runner: Transport, raw: unknown, options: ReceiveOptions = {}): Promise<RpcResponse> {
+  const door = peerDoor(runner, options);
+
+  return options.answer ? options.answer(door, raw) : answerAt(door, raw);
+}
+
+/**
+ * The members a caller may send. `caller` and `fromAnotherProcess` are written by the receiver and never claimed, and
+ * a key outside the list is refused by name: `body` used to be dropped, and the call then ran
+ * with no input and no validation.
+ */
+const SENT = {
+  params: true, query: true, input: true, args: true, state: true, trace: true, identity: true, runAt: true, caller: false,
+  fromAnotherProcess: false,
+} satisfies Record<keyof InvocationContext, boolean>;
+
+/** Where a refusal of the envelope itself says which JSON-RPC code it is, rather than an app's. */
+const ENVELOPE = 'jsonrpc';
+
+function envelopeOf(raw: unknown): { address: string; op: string; sent: Partial<InvocationContext> } {
+  const req = raw as Partial<RpcRequest> | null;
+  if (!req || req.jsonrpc !== '2.0' || typeof req.method !== 'string' || idOf(raw) === null) {
+    throw invalid('Invalid JSON-RPC 2.0 request');
   }
 
   const dot = req.method.indexOf('.');
-  if (dot <= 0 || dot === req.method.length - 1) {
-    return {
-      jsonrpc: '2.0',
-      id,
-      error: { code: INVALID_REQUEST, message: `Invalid method '${req.method}' — expected 'address.op'` },
-    };
-  }
+  if (dot <= 0 || dot === req.method.length - 1) throw invalid(`Invalid method '${req.method}' — expected 'address.op'`);
   const address = req.method.slice(0, dot);
   const op = req.method.slice(dot + 1);
 
@@ -38,87 +165,54 @@ export async function handleRpc(runner: Transport, raw: unknown, options: Receiv
   const strangers = Object.entries(sent)
     .filter(([key, value]) => value !== undefined && !SENT[key as keyof InvocationContext])
     .map(([key]) => key);
-  if (strangers.length > 0) return malformed(id, strangers, address, op);
-
-  /** State is ESTABLISHED here, or it is only claimed. */
-  let state: Record<string, unknown> = sent.state ?? {};
-  let caller: string | undefined;
-  if (options.verify && sent.identity) {
-    try {
-      // What ARRIVED, never what we would rather it had been — the comparison is the point.
-      ({ caller, state } = await options.verify(sent.identity, { address, op,
-        params: sent.params ?? {},
-        query: sent.query ?? {},
-        input: sent.input,
-        args: sent.args,
-        runAt: sent.runAt,
-      }));
-    } catch (err) {
-      return refused(id, (err as Error)?.message ?? 'unverifiable identity', address, op);
-    }
-  } else if (options.requireIdentity) {
-    return refused(id, 'this receiver takes signed calls only', address, op);
+  if (strangers.length > 0) {
+    const admitted = Object.keys(SENT).filter((key) => SENT[key as keyof InvocationContext]);
+    throw new FougereError({
+      code: ErrorCode.BAD_REQUEST,
+      message: `Unknown invocation member ${strangers.map((key) => `'${key}'`).join(', ')} — one of ${admitted.join(', ')}.`,
+      address,
+      operation: op,
+    });
   }
 
-  // Built field by field, never spread from `sent`: everything here is either validated
-  // above or carried deliberately, and `caller` is ours to write alone.
-  const invocation: InvocationContext = {
-    params: sent.params ?? {},
-    query: sent.query ?? {},
-    input: sent.input,
-    ...(sent.args === undefined ? {} : { args: sent.args }),
-    state,
-    trace: sent.trace,
-    ...(sent.runAt === undefined ? {} : { runAt: sent.runAt }),
-    ...(caller ? { caller } : {}),
-    crossed: true,
-  };
+  return { address, op, sent };
+}
 
+/** An accident names the op it happened in, so the receiver's log says where. */
+async function called(runner: Transport, address: string, op: string, invocation: InvocationContext): Promise<unknown> {
   try {
-    return { jsonrpc: '2.0', id, result: await runner({ address, op }, invocation) };
+    return await runner({ address, op }, invocation);
   } catch (err) {
-    const failure = err instanceof FougereError
-      ? err
-      : new FougereError({
-          code: ErrorCode.INTERNAL_ERROR,
-          message: (err as Error)?.message ?? 'Internal error',
-          address,
-          operation: op,
-          cause: err,
-        });
-    const data = toPublicError(failure);
-
-    return { jsonrpc: '2.0', id, error: { code: APP_ERROR, message: data.message, data } };
+    if (err instanceof FougereError) throw err;
+    throw new FougereError({
+      code: ErrorCode.INTERNAL_ERROR, message: (err as Error)?.message ?? 'Internal error', address, operation: op, cause: err,
+    });
   }
 }
 
-/**
- * The members a caller may send. `caller` and `crossed` are written by the receiver and never claimed, and
- * a key outside the list is refused by name: `body` used to be dropped, and the call then ran
- * with no input and no validation.
- */
-const SENT = {
-  params: true, query: true, input: true, args: true, state: true, trace: true, identity: true, runAt: true, caller: false,
-  crossed: false,
-} satisfies Record<keyof InvocationContext, boolean>;
+function framed(outcome: { answered: unknown } | { refused: FougereError }, raw: unknown): RpcResponse {
+  const id = idOf(raw);
+  if ('answered' in outcome) return { jsonrpc: '2.0', id: id!, result: outcome.answered };
 
-function malformed(id: string | number, strangers: string[], address: string, op: string): RpcResponse {
-  const admitted = Object.keys(SENT).filter((key) => SENT[key as keyof InvocationContext]);
-  const data = toPublicError(new FougereError({
-    code: ErrorCode.BAD_REQUEST,
-    message: `Unknown invocation member ${strangers.map((key) => `'${key}'`).join(', ')} — one of ${admitted.join(', ')}.`,
-    address,
-    operation: op,
-  }));
+  const { refused } = outcome;
+  const envelope = (refused.details as Record<string, unknown> | undefined)?.[ENVELOPE];
+  if (typeof envelope === 'number') return { jsonrpc: '2.0', id, error: { code: envelope, message: refused.message } };
+  const data = refused.toJSON();
 
   return { jsonrpc: '2.0', id, error: { code: APP_ERROR, message: data.message, data } };
 }
 
-/** An admission refusal, framed like any other failure so a caller reads one vocabulary. */
-function refused(id: string | number, why: string, address: string, op: string): RpcResponse {
-  const data = toPublicError(
-    new FougereError({ code: ErrorCode.UNAUTHORIZED, message: `Refused: ${why}`, address, operation: op }),
-  );
+function idOf(raw: unknown): string | number | null {
+  const id = (raw as Partial<RpcRequest> | null)?.id;
 
-  return { jsonrpc: '2.0', id, error: { code: APP_ERROR, message: data.message, data } };
+  return typeof id === 'number' || typeof id === 'string' ? id : null;
+}
+
+function invalid(message: string): FougereError {
+  return new FougereError({ code: ErrorCode.BAD_REQUEST, message, details: { [ENVELOPE]: INVALID_REQUEST } });
+}
+
+/** An admission refusal, framed like any other failure so a caller reads one vocabulary. */
+function unauthorized(why: string, address: string, op: string): FougereError {
+  return new FougereError({ code: ErrorCode.UNAUTHORIZED, message: `Refused: ${why}`, address, operation: op });
 }