@mapples/request 1.6.0-beta.20260921105308 → 1.6.0-beta.20260929074057

package/CHANGELOG.md

@@ -1,17 +1,23 @@
 # @mapples/request
 
-## 1.6.0-beta.20260921105308
+## 1.6.0-beta.20260929074057
 
 ### Minor Changes
 
+- 517b1d4: API responses move to their own `@mapples/state` context (`ApiStateContextProvider`, `useApiState`), so `api.*` bindings resolve inside a nested `StateProvider` — a list row, a scoped data state — the way `vars.*` does; `validateApiDocument` now rejects a state key outside the `api.` namespace (`STATE_KEY_NAMESPACE`, `API_NAMESPACE`) and no longer reads an environment variable's `{{name}}` as the path token `{name`; it also rejects a request name that can't be a binding-path segment (`REQUEST_NAME_INVALID`, `API_REQUEST_NAME_PATTERN`) and an empty path (`PATH_EMPTY`). `@mapples/request` performs calls through a pluggable `RequestTransport` (`transport` prop, `createFetchTransport`), which receives `auth` unresolved so a forwarding transport never holds a secret. The runtime no longer fails silently: an unknown `requestId`, a path token that resolves to nothing, an undefined `{{variable}}`, a relative path without a base URL and an unconfigured secret all throw (`onRequestError` receives the resolution errors), an unresolved `state` source is no longer sent as the string `N/A`, and `event` sources read the event's first argument instead of the `staticData`-merged payload. `RequestProvider` drops its `state` prop.
+- 4a8f1d8: `RequestProvider` takes `previewSamples` and `autoRun`. With `previewSamples`, every request that has a `responseSample` publishes it as a settled response (`status: 200`) until a real one arrives, so an editor preview shows bound data before anything has run. With `autoRun`, entering `fetch` mode emits a `mapples:request` for every GET that needs nothing from a trigger — `isAutoRunnable` (new export): params are literals or app state, never `event` / `data` / `route.*` — once per switch, through the action bus like a pressed element. Responses now belong to the mode that produced them: changing `mode` clears them, so leaving `fetch` returns to the samples. Both props default to off; a shipped app behaves as before.
+- 132e4a8: Routes carry a flow of their own: a `path` with `:token` params (`/product/:id`), an `onEnter` action emitted on every focus, and an access `guard` with a fallback route. Params travel on the navigate action as literals or value sources (`data` reads the pressed list row, `state` any binding), land in a new `route.*` state namespace the screen binds, and reach root-mounted handlers through `ActiveRouteProvider` — so a request bound to `route.id` loads the product page. `resolveValueSource` is shared by the request and navigation runtimes, and the new `data` source kind reads an action's resolved data. The navigate action form gets one source field per route param, the AI catalog `set_route_path` / `set_route_guard` / `set_route_on_enter` and `add_connection` params.
 - a6c5872: All `@mapples/*` runtime packages now share one version and are versioned and published together from `mapplesorg/mapples-kit`; `mapples-open-kit` is a read-only mirror of the source.
 
 ### Patch Changes
 
+- Updated dependencies [132e4a8]
+- Updated dependencies [517b1d4]
+- Updated dependencies [132e4a8]
 - Updated dependencies [a6c5872]
-  - @mapples/action@1.6.0-beta.20260921105308
-  - @mapples/state@1.6.0-beta.20260921105308
-  - @mapples/types@1.6.0-beta.20260921105308
+  - @mapples/types@1.6.0-beta.20260929074057
+  - @mapples/state@1.6.0-beta.20260929074057
+  - @mapples/action@1.6.0-beta.20260929074057
 
 ## 0.1.0
 

package/README.md

@@ -0,0 +1,96 @@
+# @mapples/request
+
+Runtime for the Mapples `ApiDocument`: executes `mapples:request` actions, publishes each response as bindable state, and chains follow-up actions on the action bus.
+
+## Installation
+
+```bash
+npm install @mapples/request
+# or
+yarn add @mapples/request
+```
+
+Peer dependencies: `@mapples/action`, `@mapples/state`, `@mapples/types`, `lodash`, `react`, `rxjs`.
+
+## Usage
+
+Mount the provider inside an `ActionProvider`, with the handler as a child:
+
+```tsx
+import ActionProvider from '@mapples/action';
+import { RequestActionHandler, RequestProvider } from '@mapples/request';
+
+const App = () => (
+  <ActionProvider>
+    <RequestProvider document={apiDocument} mode="fetch" secrets={secrets}>
+      <RequestActionHandler />
+      {/* Your app components */}
+    </RequestProvider>
+  </ActionProvider>
+);
+```
+
+An element runs a request by emitting a `mapples:request` action:
+
+```ts
+{
+  type: 'mapples:request',
+  staticData: {
+    requestId: '<id from the ApiDocument>',
+    onSuccess: { type: 'mapples:navigate', data: { routeName: 'Home' } },
+    onError: { type: 'mapples:navigate', data: { routeName: 'Error' } },
+  },
+}
+```
+
+## Response state
+
+A request's response lands under its state key — `api.<name>` by default, always inside the `api.` namespace:
+
+| Binding              | Value                                       |
+| -------------------- | ------------------------------------------- |
+| `api.<name>.loading` | `true` while the request is in flight       |
+| `api.<name>.data`    | The parsed JSON body (`null` when not JSON) |
+| `api.<name>.error`   | `HTTP <status>` or the failure message      |
+| `api.<name>.status`  | The HTTP status                             |
+
+Response state lives in its own context, so `api.*` bindings resolve the same anywhere in the tree — a nested `StateProvider` (a list row, a scoped data state) doesn't shadow them.
+
+## Value sources
+
+Path tokens, query parameters and JSON body leaves take an `ApiValueSource`:
+
+- `{ kind: 'static', value }` — a literal.
+- `{ kind: 'state', dataProp }` — a `@mapples/state` path, resolved where the handler is mounted (`vars.*`, `api.*`, root data state).
+- `{ kind: 'event', path? }` — the triggering event's first argument (form values, input text); `path` narrows into it.
+- `{ kind: 'data', path? }` — the action's resolved data (`Action.payload.data`): the pressed list row when the element's action binds `(this)`, or the route's params when a screen's `onEnter` runs the request; `path` narrows into it. The way a row-scoped value reaches a request — a `state` source resolves where the handler is mounted, above the list.
+
+A request a screen runs on enter (`RouteNode.onEnter`) binds its path token to the route param: `{ kind: 'state', dataProp: 'route.id' }` for `/product/:id` → `GET /products/{id}`. The resolver is `resolveValueSource` from `@mapples/state`, shared with the navigation runtime's route params.
+
+## Modes
+
+- `sample` (default) resolves the request's `responseSample` after a short delay. No call is made and the url is not resolved.
+- `fetch` performs the call through the transport.
+
+## Transport
+
+`fetch` mode calls a `RequestTransport`. The default is a direct `fetch` that resolves `auth.secretRef` against the `secrets` prop. Supply your own to route calls elsewhere — a backend proxy, for example — without the runtime knowing about it:
+
+```tsx
+const transport: RequestTransport = async (request) => {
+  // request: { requestId, method, url, headers, body?, auth? }
+  return { status, ok, headers, data };
+};
+
+<RequestProvider document={apiDocument} mode="fetch" transport={transport} />;
+```
+
+`auth` reaches the transport unresolved (it carries the secret's name), so a forwarding transport never holds the secret's value.
+
+## Errors
+
+Nothing fails silently:
+
+- A `mapples:request` action with an unknown `requestId`, a path token that resolves to nothing, an undefined `{{variable}}`, or a relative path with no environment base URL throws. Pass `onRequestError` to receive those; without it they surface as uncaught errors.
+- A secret that isn't configured rejects the call — the request never goes out unauthenticated.
+- A rejected transport sets `api.<name>.error`, emits `onError`, and never emits `onSuccess`.

package/dist/RequestActionHandler.d.ts

@@ -1,7 +1,7 @@
 /**
  * Bridges the `@mapples/action` store to request execution: subscribes to
  * emitted actions, resolves `mapples:request` actions into commands, executes
- * them (sample or real fetch), stores responses via the surrounding
+ * them (sample, or the runtime's transport), stores responses via the surrounding
  * `RequestProvider`, and re-emits `onSuccess`/`onError` follow-up actions
  * (e.g. `mapples:navigate`) onto the same bus. Renders nothing.
  *

package/dist/RequestActionHandler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RequestActionHandler.d.ts","sourceRoot":"","sources":["../src/RequestActionHandler.tsx"],"names":[],"mappings":"AAWA;;;;;;;;GAQG;AACH,QAAA,MAAM,oBAAoB,YAuFzB,CAAC;AAEF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"RequestActionHandler.d.ts","sourceRoot":"","sources":["../src/RequestActionHandler.tsx"],"names":[],"mappings":"AAiBA;;;;;;;;GAQG;AACH,QAAA,MAAM,oBAAoB,YA8GzB,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/RequestActionHandler.js

@@ -1,14 +1,15 @@
-import { useEffect } from 'react';
+import { useEffect, useRef } from 'react';
 import { useActionStore } from '@mapples/action';
 import { useDataState } from '@mapples/state';
-import { toRequestCommand } from './actionCommands';
+import { isAutoRunnable, toRequestCommand, toTransportRequest, } from './actionCommands';
+import { RequestActionType } from './constants';
 import { useRequestRuntime } from './RequestProvider';
 /** Artificial latency for sample mode so loading states are visible. */
 const SAMPLE_DELAY_MS = 500;
 /**
  * Bridges the `@mapples/action` store to request execution: subscribes to
  * emitted actions, resolves `mapples:request` actions into commands, executes
- * them (sample or real fetch), stores responses via the surrounding
+ * them (sample, or the runtime's transport), stores responses via the surrounding
  * `RequestProvider`, and re-emits `onSuccess`/`onError` follow-up actions
  * (e.g. `mapples:navigate`) onto the same bus. Renders nothing.
  *
@@ -21,7 +22,7 @@ const RequestActionHandler = () => {
     useEffect(() => {
         if (!runtime?.document)
             return;
-        const { document, mode, secrets, setResponse } = runtime;
+        const { document, mode, transport, onRequestError, setResponse } = runtime;
         const emitFollowUp = (followUp) => {
             if (!followUp?.type)
                 return;
@@ -45,33 +46,21 @@ const RequestActionHandler = () => {
                 return;
             }
             try {
-                const response = await fetch(command.url, {
-                    method: command.method,
-                    headers: command.headers,
-                    body: command.body !== undefined
-                        ? JSON.stringify(command.body)
-                        : undefined,
-                });
-                // Only bodies that declare JSON are parsed. A body that claims JSON and
-                // fails to parse is a broken server contract, so the parse error is left
-                // to reach the handler below instead of quietly becoming `null` data.
-                const contentType = response.headers.get('content-type') ?? '';
-                const data = contentType.includes('json')
-                    ? await response.json()
-                    : null;
+                const response = await transport(toTransportRequest(command));
                 setResponse(command.stateKey, {
                     loading: false,
-                    data,
+                    data: response.data,
                     status: response.status,
                     error: response.ok ? undefined : `HTTP ${response.status}`,
                 });
                 emitFollowUp(response.ok ? command.onSuccess : command.onError);
             }
             catch (error) {
-                // A network/CORS/parse failure is a failed request. It is reported as
-                // one: no sample data is substituted for the real response, and only
-                // the configured error follow-up runs — never `onSuccess`, which would
-                // advance the flow as if the request had worked.
+                // A rejected transport (network, CORS, parse, an unconfigured secret)
+                // is a failed request. It is reported as one: no sample data is
+                // substituted for the real response, and only the configured error
+                // follow-up runs — never `onSuccess`, which would advance the flow as
+                // if the request had worked.
                 setResponse(command.stateKey, {
                     loading: false,
                     data: null,
@@ -81,16 +70,56 @@ const RequestActionHandler = () => {
             }
         };
         const subscription = actionStore.subscribe((action) => {
-            const command = toRequestCommand(action, document, {
-                getStateValue: (path) => getValue({ key: path, active: true }),
-                secrets,
-            });
+            let command;
+            try {
+                command = toRequestCommand(action, document, {
+                    // `null`, not `getValue`'s display default: an unresolved source
+                    // must not go out as the literal string "N/A".
+                    getStateValue: (path) => getValue({ key: path, active: true }, null),
+                    sample: mode === 'sample',
+                });
+            }
+            catch (error) {
+                // The action named a request that can't be built. The host surfaces
+                // it; with no host handler it stays an uncaught error.
+                if (!onRequestError)
+                    throw error;
+                onRequestError(error, action);
+                return;
+            }
             if (!command)
                 return;
             void execute(command);
         });
         return () => subscription.unsubscribe();
     }, [actionStore, getValue, runtime]);
+    // Entering `fetch` mode runs the auto-runnable GETs once, through the bus
+    // so they take the same path as a pressed element. Declared after the
+    // subscription so it is in place when these are emitted; the ref keeps a
+    // document edit (a new runtime value) from running them again.
+    const mode = runtime?.mode;
+    const autoRun = !!runtime?.autoRun && !!runtime.document;
+    const ranForMode = useRef(null);
+    useEffect(() => {
+        if (!autoRun || mode !== 'fetch') {
+            ranForMode.current = null;
+            return;
+        }
+        if (ranForMode.current === mode)
+            return;
+        ranForMode.current = mode;
+        for (const request of Object.values(runtime.document.requests)) {
+            if (!isAutoRunnable(request))
+                continue;
+            actionStore.next({
+                time: Date.now(),
+                type: RequestActionType.Execute,
+                payload: { data: { requestId: request.id } },
+            });
+        }
+        // Only a mode change (or the runtime becoming able to run) re-runs them.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [actionStore, autoRun, mode]);
     return null;
 };
 export default RequestActionHandler;

package/dist/RequestActionHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"RequestActionHandler.js","sourceRoot":"","sources":["../src/RequestActionHandler.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAkB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,wEAAwE;AACxE,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAAG,GAAG,EAAE;IAChC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;IAEpC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,EAAE,QAAQ;YAAE,OAAO;QAE/B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QAEzD,MAAM,YAAY,GAAG,CAAC,QAA2C,EAAE,EAAE;YACnE,IAAI,CAAC,QAAQ,EAAE,IAAI;gBAAE,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;gBAChB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;aACjC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,EAAE,OAAuB,EAAE,EAAE;YAChD,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAEjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,UAAU,CAAC,GAAG,EAAE;oBACd,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE;wBAC5B,OAAO,EAAE,KAAK;wBACd,IAAI,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;wBACpC,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;oBACH,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClC,CAAC,EAAE,eAAe,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;oBACxC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS;wBACxB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;wBAC9B,CAAC,CAAC,SAAS;iBAChB,CAAC,CAAC;gBAEH,wEAAwE;gBACxE,yEAAyE;gBACzE,sEAAsE;gBACtE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACvC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE;oBACvB,CAAC,CAAC,IAAI,CAAC;gBAET,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC5B,OAAO,EAAE,KAAK;oBACd,IAAI;oBACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE;iBAC3D,CAAC,CAAC;gBAEH,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,qEAAqE;gBACrE,uEAAuE;gBACvE,iDAAiD;gBACjD,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC5B,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;iBACjE,CAAC,CAAC;gBACH,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE;gBACjD,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBAC9D,OAAO;aACR,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAErC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"RequestActionHandler.js","sourceRoot":"","sources":["../src/RequestActionHandler.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EACL,cAAc,EAEd,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,wEAAwE;AACxE,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAAG,GAAG,EAAE;IAChC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;IAEpC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,EAAE,QAAQ;YAAE,OAAO;QAE/B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QAE3E,MAAM,YAAY,GAAG,CAAC,QAA2C,EAAE,EAAE;YACnE,IAAI,CAAC,QAAQ,EAAE,IAAI;gBAAE,OAAO;YAC5B,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;gBAChB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;aACjC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,EAAE,OAAuB,EAAE,EAAE;YAChD,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAEjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,UAAU,CAAC,GAAG,EAAE;oBACd,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE;wBAC5B,OAAO,EAAE,KAAK;wBACd,IAAI,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;wBACpC,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;oBACH,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClC,CAAC,EAAE,eAAe,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;gBAE9D,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC5B,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE;iBAC3D,CAAC,CAAC;gBAEH,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,gEAAgE;gBAChE,mEAAmE;gBACnE,sEAAsE;gBACtE,6BAA6B;gBAC7B,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC5B,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;iBACjE,CAAC,CAAC;gBACH,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;YACpD,IAAI,OAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE;oBAC3C,iEAAiE;oBACjE,+CAA+C;oBAC/C,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC;oBACpE,MAAM,EAAE,IAAI,KAAK,QAAQ;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,oEAAoE;gBACpE,uDAAuD;gBACvD,IAAI,CAAC,cAAc;oBAAE,MAAM,KAAK,CAAC;gBACjC,cAAc,CAAC,KAAc,EAAE,MAAM,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAErC,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,CAAgB,IAAI,CAAC,CAAC;IAC/C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACjC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO;QACxC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC;QAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAQ,CAAC,QAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;gBAChB,IAAI,EAAE,iBAAiB,CAAC,OAAO;gBAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,yEAAyE;QACzE,uDAAuD;IACzD,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAEjC,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/RequestProvider.d.ts

@@ -1,5 +1,6 @@
 import { FC, PropsWithChildren } from 'react';
-import { ApiDocument } from '@mapples/types';
+import { Action, ApiDocument } from '@mapples/types';
+import { RequestTransport } from './transport';
 /** Per-request response state, exposed to bindings under the state key. */
 export interface ResponseState {
     loading: boolean;
@@ -11,23 +12,51 @@ export type RequestExecutionMode = 'sample' | 'fetch';
 export interface RequestRuntimeContextType {
     document: ApiDocument | null;
     mode: RequestExecutionMode;
-    secrets?: Record<string, string>;
+    transport: RequestTransport;
+    onRequestError?: (error: Error, action: Action) => void;
+    /** See {@link RequestProviderProps.autoRun}. */
+    autoRun: boolean;
     setResponse: (stateKey: string, state: ResponseState) => void;
 }
 export declare const useRequestRuntime: () => RequestRuntimeContextType | null;
 export interface RequestProviderProps {
     document?: ApiDocument | null;
-    /** Base state the responses are merged over. */
-    state?: object;
     /** `sample` resolves `responseSample`s; `fetch` performs real requests. */
     mode?: RequestExecutionMode;
+    /**
+     * Performs the call in `fetch` mode. Defaults to a direct `fetch` resolving
+     * auth against {@link secrets}; a host that must not call third parties
+     * itself (a browser editor behind CORS) routes through its own backend here.
+     */
+    transport?: RequestTransport;
+    /** Secrets by `secretRef` for the default transport — never stored. */
     secrets?: Record<string, string>;
+    /**
+     * Receives a `mapples:request` action that could not become a request (an
+     * unknown request id, an unbound path token). Without it the error is
+     * thrown from the action subscription.
+     */
+    onRequestError?: (error: Error, action: Action) => void;
+    /**
+     * Seed every request that has a `responseSample` with it, as a settled
+     * response, until a real one arrives — so an editor preview shows bound
+     * data before any request has run. Off in a shipped app: a sample is
+     * design-time data, not a response.
+     */
+    previewSamples?: boolean;
+    /**
+     * In `fetch` mode, run every GET request that needs nothing from a
+     * triggering action once when the runtime enters `fetch` mode (see
+     * `isAutoRunnable`) — the editor's "Live data" switch.
+     */
+    autoRun?: boolean;
 }
 /**
- * Holds API response state and republishes it through `@mapples/state`, so
- * bindings like `api.login.data.user.name` and conditions like
- * `api.login.loading::eq::true` resolve with zero changes to the state
- * package. Pair with `RequestActionHandler` (rendered as a child) to execute
+ * Holds API response state and publishes it through the `@mapples/state` API
+ * context, so bindings like `api.login.data.user.name` and conditions like
+ * `api.login.loading::eq::true` resolve anywhere in the tree — a nested
+ * `StateProvider` (a frame's data state, a list row) doesn't shadow them.
+ * Pair with `RequestActionHandler` (rendered as a child) to execute
  * `mapples:request` actions.
  */
 declare const RequestProvider: FC<PropsWithChildren<RequestProviderProps>>;

package/dist/RequestProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RequestProvider.d.ts","sourceRoot":"","sources":["../src/RequestProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAEL,EAAE,EACF,iBAAiB,EAKlB,MAAM,OAAO,CAAC;AAGf,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEtD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;CAC/D;AAMD,eAAO,MAAM,iBAAiB,wCAA0C,CAAC;AAEzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC9B,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAoChE,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"RequestProvider.d.ts","sourceRoot":"","sources":["../src/RequestProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAEL,EAAE,EACF,iBAAiB,EAKlB,MAAM,OAAO,CAAC;AAGf,OAAO,EACL,MAAM,EAEN,WAAW,EAEZ,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAwB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAErE,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEtD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;CAC/D;AAMD,eAAO,MAAM,iBAAiB,wCAA0C,CAAC;AAEzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC9B,2EAA2E;IAC3E,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID;;;;;;;GAOG;AACH,QAAA,MAAM,eAAe,EAAE,EAAE,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAgFhE,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/RequestProvider.js

@@ -1,32 +1,71 @@
 import { createContext, useCallback, useContext, useMemo, useState, } from 'react';
-import StateProvider from '@mapples/state';
-import { cloneDeep, set } from 'lodash';
+import { ApiStateContextProvider } from '@mapples/state';
+import { API_NAMESPACE, apiRequestStateKey, } from '@mapples/types';
+import { set } from 'lodash';
+import { createFetchTransport } from './transport';
 const RequestRuntimeContext = createContext(null);
 export const useRequestRuntime = () => useContext(RequestRuntimeContext);
+const STATE_KEY_PREFIX = `${API_NAMESPACE}.`;
 /**
- * Holds API response state and republishes it through `@mapples/state`, so
- * bindings like `api.login.data.user.name` and conditions like
- * `api.login.loading::eq::true` resolve with zero changes to the state
- * package. Pair with `RequestActionHandler` (rendered as a child) to execute
+ * Holds API response state and publishes it through the `@mapples/state` API
+ * context, so bindings like `api.login.data.user.name` and conditions like
+ * `api.login.loading::eq::true` resolve anywhere in the tree — a nested
+ * `StateProvider` (a frame's data state, a list row) doesn't shadow them.
+ * Pair with `RequestActionHandler` (rendered as a child) to execute
  * `mapples:request` actions.
  */
-const RequestProvider = ({ children, document = null, state, mode = 'sample', secrets, }) => {
+const RequestProvider = ({ children, document = null, mode = 'sample', transport, secrets, onRequestError, previewSamples = false, autoRun = false, }) => {
     const [responses, setResponses] = useState({});
+    // Responses belong to the mode that produced them: leaving `fetch` must not
+    // keep showing live data as if it were the preview, nor the reverse.
+    const [responsesMode, setResponsesMode] = useState(mode);
+    if (mode !== responsesMode) {
+        setResponsesMode(mode);
+        setResponses({});
+    }
     const setResponse = useCallback((stateKey, response) => {
         setResponses((prev) => ({ ...prev, [stateKey]: response }));
     }, []);
-    // State keys are dot paths (`api.login`) — expand them into the nested
-    // object shape @mapples/state resolves against.
-    const mergedState = useMemo(() => {
-        const result = cloneDeep(state ?? {});
-        for (const [stateKey, response] of Object.entries(responses)) {
-            set(result, stateKey, response);
+    // State keys are dot paths under the namespace (`api.login`) — expand the
+    // remainder into the nested object shape bindings resolve against.
+    const apiState = useMemo(() => {
+        const samples = {};
+        if (previewSamples && document) {
+            for (const request of Object.values(document.requests)) {
+                if (request.responseSample === undefined)
+                    continue;
+                samples[apiRequestStateKey(request)] = {
+                    loading: false,
+                    data: request.responseSample,
+                    status: 200,
+                };
+            }
+        }
+        const result = {};
+        for (const [stateKey, response] of Object.entries({
+            ...samples,
+            ...responses,
+        })) {
+            if (!stateKey.startsWith(STATE_KEY_PREFIX)) {
+                throw new Error(`State key "${stateKey}" is outside the "${API_NAMESPACE}" namespace`);
+            }
+            set(result, stateKey.slice(STATE_KEY_PREFIX.length), response);
         }
         return result;
-    }, [responses, state]);
-    const contextValue = useMemo(() => ({ document, mode, secrets, setResponse }), [document, mode, secrets, setResponse]);
+    }, [document, previewSamples, responses]);
+    const resolvedTransport = useMemo(() => transport ?? createFetchTransport(secrets), [transport, secrets]);
+    const contextValue = useMemo(() => ({
+        document,
+        mode,
+        transport: resolvedTransport,
+        onRequestError,
+        autoRun,
+        setResponse,
+    }), [document, mode, resolvedTransport, onRequestError, autoRun, setResponse]);
     return (<RequestRuntimeContext value={contextValue}>
-      <StateProvider state={mergedState}>{children}</StateProvider>
+      <ApiStateContextProvider value={apiState}>
+        {children}
+      </ApiStateContextProvider>
     </RequestRuntimeContext>);
 };
 export default RequestProvider;

package/dist/RequestProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"RequestProvider.js","sourceRoot":"","sources":["../src/RequestProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAGb,WAAW,EACX,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,OAAO,CAAC;AAEf,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAmBxC,MAAM,qBAAqB,GAAG,aAAa,CACzC,IAAI,CACL,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAWzE;;;;;;GAMG;AACH,MAAM,eAAe,GAAgD,CAAC,EACpE,QAAQ,EACR,QAAQ,GAAG,IAAI,EACf,KAAK,EACL,IAAI,GAAG,QAAQ,EACf,OAAO,GACR,EAAE,EAAE;IACH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgC,EAAE,CAAC,CAAC;IAE9E,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,QAAgB,EAAE,QAAuB,EAAE,EAAE;QAC5C,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,EACD,EAAE,CACH,CAAC;IAEF,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;QAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAEvB,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAChD,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CACvC,CAAC;IAEF,OAAO,CACL,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CACzC;MAAA,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,aAAa,CAC9D;IAAA,EAAE,qBAAqB,CAAC,CACzB,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"RequestProvider.js","sourceRoot":"","sources":["../src/RequestProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAGb,WAAW,EACX,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,OAAO,CAAC;AAEf,OAAO,EAAY,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAEL,aAAa,EAEb,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAE7B,OAAO,EAAE,oBAAoB,EAAoB,MAAM,aAAa,CAAC;AAsBrE,MAAM,qBAAqB,GAAG,aAAa,CACzC,IAAI,CACL,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAmCzE,MAAM,gBAAgB,GAAG,GAAG,aAAa,GAAG,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,eAAe,GAAgD,CAAC,EACpE,QAAQ,EACR,QAAQ,GAAG,IAAI,EACf,IAAI,GAAG,QAAQ,EACf,SAAS,EACT,OAAO,EACP,cAAc,EACd,cAAc,GAAG,KAAK,EACtB,OAAO,GAAG,KAAK,GAChB,EAAE,EAAE;IACH,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAgC,EAAE,CAAC,CAAC;IAC9E,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAC7B,CAAC,QAAgB,EAAE,QAAuB,EAAE,EAAE;QAC5C,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,EACD,EAAE,CACH,CAAC;IAEF,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;QAC5B,MAAM,OAAO,GAAkC,EAAE,CAAC;QAClD,IAAI,cAAc,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;oBAAE,SAAS;gBACnD,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,GAAG;oBACrC,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,OAAO,CAAC,cAAc;oBAC5B,MAAM,EAAE,GAAG;iBACZ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;YAChD,GAAG,OAAO;YACV,GAAG,SAAS;SACb,CAAC,EAAE,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,cAAc,QAAQ,qBAAqB,aAAa,aAAa,CACtE,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IAE1C,MAAM,iBAAiB,GAAG,OAAO,CAC/B,GAAG,EAAE,CAAC,SAAS,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAChD,CAAC,SAAS,EAAE,OAAO,CAAC,CACrB,CAAC;IAEF,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,CAAC;QACL,QAAQ;QACR,IAAI;QACJ,SAAS,EAAE,iBAAiB;QAC5B,cAAc;QACd,OAAO;QACP,WAAW;KACZ,CAAC,EACF,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,CAAC,CAC1E,CAAC;IAEF,OAAO,CACL,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CACzC;MAAA,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CACvC;QAAA,CAAC,QAAQ,CACX;MAAA,EAAE,uBAAuB,CAC3B;IAAA,EAAE,qBAAqB,CAAC,CACzB,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/actionCommands.d.ts

@@ -1,4 +1,5 @@
-import { Action, ApiDocument, HttpMethod } from '@mapples/types';
+import { Action, ApiDocument, ApiRequest, HttpMethod } from '@mapples/types';
+import { TransportAuth, TransportRequest } from './transport';
 /** A follow-up action re-emitted after the request settles. */
 export interface FollowUpAction {
     type: string;
@@ -12,6 +13,8 @@ export interface RequestCommand {
     method: HttpMethod;
     headers: Record<string, string>;
     body?: unknown;
+    /** Left unresolved: the transport that performs the call owns the secret. */
+    auth?: TransportAuth;
     responseSample?: unknown;
     onSuccess?: FollowUpAction;
     onError?: FollowUpAction;
@@ -20,13 +23,27 @@ export interface RequestCommand {
 export interface RequestResolutionContext {
     /** Resolves `state`-kind value sources (a `@mapples/state` lookup). */
     getStateValue?: (path: string) => unknown;
-    /** Secrets by `secretRef`, resolved by the host — never stored. */
-    secrets?: Record<string, string>;
+    /**
+     * Sample execution never performs the call, so the url is left as the
+     * request's unresolved path: a preview must not fail on a value that only
+     * exists at runtime (a path token bound to a list row, say).
+     */
+    sample?: boolean;
 }
 /**
- * Maps a `mapples:request` action to an executable {@link RequestCommand} —
- * pure and unit-testable; returns null for anything else or when the request
- * id doesn't resolve.
+ * Maps a `mapples:request` action to an executable {@link RequestCommand}.
+ * Pure. Returns null for any other action type; a `mapples:request` action
+ * that names no request, or one the document doesn't hold, throws — a press
+ * that silently does nothing is a wiring defect nobody can see.
  */
 export declare const toRequestCommand: (action: Action, document: ApiDocument, context?: RequestResolutionContext) => RequestCommand | null;
+/** The part of a {@link RequestCommand} a transport performs. */
+export declare const toTransportRequest: (command: RequestCommand) => TransportRequest;
+/**
+ * Whether a request can run with no triggering action: a GET whose params
+ * are all literals or app state. An `event` / `data` source only exists when
+ * an element fires the request, and `route.*` only once a screen is entered,
+ * so those wait for their trigger.
+ */
+export declare const isAutoRunnable: (request: ApiRequest) => boolean;
 //# sourceMappingURL=actionCommands.d.ts.map

package/dist/actionCommands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actionCommands.d.ts","sourceRoot":"","sources":["../src/actionCommands.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,WAAW,EAIX,UAAU,EACX,MAAM,gBAAgB,CAAC;AAKxB,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1C,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AA2FD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,MAAM,EACd,UAAU,WAAW,EACrB,UAAS,wBAA6B,KACrC,cAAc,GAAG,IAiEnB,CAAC"}
+{"version":3,"file":"actionCommands.d.ts","sourceRoot":"","sources":["../src/actionCommands.ts"],"names":[],"mappings":"AACA,OAAO,EACL,MAAM,EACN,WAAW,EACX,UAAU,EAGV,UAAU,EACX,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE9D,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,6EAA6E;IAC7E,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,yDAAyD;AACzD,MAAM,WAAW,wBAAwB;IACvC,uEAAuE;IACvE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1C;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAsGD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,MAAM,EACd,UAAU,WAAW,EACrB,UAAS,wBAA6B,KACrC,cAAc,GAAG,IA2EnB,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,kBAAkB,GAC7B,SAAS,cAAc,KACtB,gBAOD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GAAI,SAAS,UAAU,KAAG,OAMlD,CAAC"}

package/dist/actionCommands.js

@@ -1,20 +1,8 @@
+import { isValueSource, resolveValueSource } from '@mapples/state';
 import { apiRequestStateKey, } from '@mapples/types';
-import { get, isPlainObject } from 'lodash';
+import { isPlainObject } from 'lodash';
 import { RequestActionType } from './constants';
-const isValueSource = (value) => isPlainObject(value) &&
-    ['static', 'state', 'event'].includes(value.kind ?? '');
-const resolveSource = (source, action, context) => {
-    switch (source.kind) {
-        case 'static':
-            return source.value;
-        case 'state':
-            return context.getStateValue?.(source.dataProp);
-        case 'event': {
-            const payload = action.payload?.data;
-            return source.path ? get(payload, source.path) : payload;
-        }
-    }
-};
+const resolveSource = (source, action, context) => resolveValueSource(source, action, context.getStateValue);
 const resolveTemplate = (template, action, context) => {
     if (isValueSource(template)) {
         return resolveSource(template, action, context);
@@ -31,25 +19,46 @@ const resolveTemplate = (template, action, context) => {
     }
     return template;
 };
-/** Interpolates `{{variable}}` templates from environment variables. */
-const interpolate = (input, variables) => input.replace(/\{\{([^}]+)\}\}/g, (match, name) => {
+/**
+ * Interpolates `{{variable}}` templates from environment variables. A
+ * variable the environment doesn't define throws: left in place it would go
+ * out as a literal `{{name}}` in the url or a header.
+ */
+const interpolate = (input, variables) => input.replace(/\{\{([^}]+)\}\}/g, (_match, name) => {
     const value = variables?.[name.trim()];
-    return value !== undefined ? value : match;
+    if (value === undefined) {
+        throw new Error(`Environment variable "${name.trim()}" is not defined`);
+    }
+    return value;
 });
 const buildUrl = (request, baseUrl, variables, action, context) => {
     let path = interpolate(request.path, variables);
     const query = [];
     for (const [key, source] of Object.entries(request.params ?? {})) {
         const value = resolveSource(source, action, context);
-        const encoded = encodeURIComponent(String(value ?? ''));
-        if (path.includes(`{${key}}`)) {
+        const isPathToken = path.includes(`{${key}}`);
+        if (value === undefined || value === null) {
+            // `/users/` is a different endpoint from `/users/{id}`: a path token
+            // that resolves to nothing fails the request. A query parameter with no
+            // value is simply left out.
+            if (isPathToken) {
+                throw new Error(`Path token "{${key}}" of API request "${request.name}" resolved to nothing`);
+            }
+            continue;
+        }
+        const encoded = encodeURIComponent(String(value));
+        if (isPathToken) {
             path = path.replaceAll(`{${key}}`, encoded);
         }
         else {
             query.push(`${encodeURIComponent(key)}=${encoded}`);
         }
     }
-    const absolute = /^https?:\/\//i.test(path)
+    const isAbsolute = /^https?:\/\//i.test(path);
+    if (!isAbsolute && !baseUrl) {
+        throw new Error(`API request "${request.name}" has a relative path and no environment base URL`);
+    }
+    const absolute = isAbsolute
         ? path
         : `${interpolate(baseUrl, variables).replace(/\/$/, '')}${path.startsWith('/') ? '' : '/'}${path}`;
     return query.length > 0
@@ -57,19 +66,22 @@ const buildUrl = (request, baseUrl, variables, action, context) => {
         : absolute;
 };
 /**
- * Maps a `mapples:request` action to an executable {@link RequestCommand} —
- * pure and unit-testable; returns null for anything else or when the request
- * id doesn't resolve.
+ * Maps a `mapples:request` action to an executable {@link RequestCommand}.
+ * Pure. Returns null for any other action type; a `mapples:request` action
+ * that names no request, or one the document doesn't hold, throws — a press
+ * that silently does nothing is a wiring defect nobody can see.
  */
 export const toRequestCommand = (action, document, context = {}) => {
     if (action.type !== RequestActionType.Execute)
         return null;
     const data = (action.payload?.data ?? {});
-    if (!data.requestId)
-        return null;
+    if (!data.requestId) {
+        throw new Error(`A "${RequestActionType.Execute}" action has no requestId`);
+    }
     const request = document.requests[data.requestId];
-    if (!request)
-        return null;
+    if (!request) {
+        throw new Error(`API request "${data.requestId}" is not in the document`);
+    }
     const environment = (document.activeEnvironmentId
         ? document.environments[document.activeEnvironmentId]
         : undefined) ?? Object.values(document.environments)[0];
@@ -78,19 +90,21 @@ export const toRequestCommand = (action, document, context = {}) => {
         ...environment?.headers,
         ...request.headers,
     };
-    for (const [key, value] of Object.entries(headers)) {
-        headers[key] = interpolate(value, variables);
+    if (!context.sample) {
+        for (const [key, value] of Object.entries(headers)) {
+            headers[key] = interpolate(value, variables);
+        }
     }
-    if (request.auth && request.auth.kind !== 'none' && request.auth.secretRef) {
-        const secret = context.secrets?.[request.auth.secretRef];
-        if (secret !== undefined) {
-            if (request.auth.kind === 'bearer') {
-                headers.Authorization = `Bearer ${secret}`;
-            }
-            else {
-                headers[request.auth.header ?? 'Authorization'] = secret;
-            }
+    let auth;
+    if (request.auth && request.auth.kind !== 'none') {
+        if (!request.auth.secretRef) {
+            throw new Error(`API request "${request.name}" auth has no secretRef`);
         }
+        auth = {
+            kind: request.auth.kind,
+            header: request.auth.header,
+            secretRef: request.auth.secretRef,
+        };
     }
     const body = request.body
         ? resolveTemplate(request.body.template, action, context)
@@ -101,13 +115,34 @@ export const toRequestCommand = (action, document, context = {}) => {
     return {
         requestId: request.id,
         stateKey: apiRequestStateKey(request),
-        url: buildUrl(request, environment?.baseUrl ?? '', variables, action, context),
+        url: context.sample
+            ? request.path
+            : buildUrl(request, environment?.baseUrl ?? '', variables, action, context),
         method: request.method,
         headers,
         body,
+        auth,
         responseSample: request.responseSample,
         onSuccess: data.onSuccess,
         onError: data.onError,
     };
 };
+/** The part of a {@link RequestCommand} a transport performs. */
+export const toTransportRequest = (command) => ({
+    requestId: command.requestId,
+    method: command.method,
+    url: command.url,
+    headers: command.headers,
+    body: command.body,
+    auth: command.auth,
+});
+/**
+ * Whether a request can run with no triggering action: a GET whose params
+ * are all literals or app state. An `event` / `data` source only exists when
+ * an element fires the request, and `route.*` only once a screen is entered,
+ * so those wait for their trigger.
+ */
+export const isAutoRunnable = (request) => request.method === 'GET' &&
+    Object.values(request.params ?? {}).every((source) => source.kind === 'static' ||
+        (source.kind === 'state' && !source.dataProp.startsWith('route.')));
 //# sourceMappingURL=actionCommands.js.map

package/dist/actionCommands.js.map

@@ -1 +1 @@
-{"version":3,"file":"actionCommands.js","sourceRoot":"","sources":["../src/actionCommands.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AA6BhD,MAAM,aAAa,GAAG,CAAC,KAAc,EAA2B,EAAE,CAChE,aAAa,CAAC,KAAK,CAAC;IACpB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAClC,KAA2B,CAAC,IAAI,IAAI,EAAE,CACxC,CAAC;AAEJ,MAAM,aAAa,GAAG,CACpB,MAAsB,EACtB,MAAc,EACd,OAAiC,EACxB,EAAE;IACX,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;YACrC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,QAAiB,EACjB,MAAc,EACd,OAAiC,EACxB,EAAE;IACX,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,QAAmC,CACpC,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,wEAAwE;AACxE,MAAM,WAAW,GAAG,CAClB,KAAa,EACb,SAA6C,EACrC,EAAE,CACV,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IACxD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,CACf,OAAmB,EACnB,OAAe,EACf,SAA6C,EAC7C,MAAc,EACd,OAAiC,EACzB,EAAE;IACV,IAAI,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAExD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;IAErG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACtE,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,EACd,QAAqB,EACrB,UAAoC,EAAE,EACf,EAAE;IACzB,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE3D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAIvC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,WAAW,GACf,CAAC,QAAQ,CAAC,mBAAmB;QAC3B,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,MAAM,SAAS,GAAG,WAAW,EAAE,SAAS,CAAC;IACzC,MAAM,OAAO,GAA2B;QACtC,GAAG,WAAW,EAAE,OAAO;QACvB,GAAG,OAAO,CAAC,OAAO;KACnB,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,MAAM,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;QACvB,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;QACzD,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACrC,GAAG,EAAE,QAAQ,CACX,OAAO,EACP,WAAW,EAAE,OAAO,IAAI,EAAE,EAC1B,SAAS,EACT,MAAM,EACN,OAAO,CACR;QACD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI;QACJ,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"actionCommands.js","sourceRoot":"","sources":["../src/actionCommands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAKL,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAoChD,MAAM,aAAa,GAAG,CACpB,MAAsB,EACtB,MAAc,EACd,OAAiC,EACxB,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;AAExE,MAAM,eAAe,GAAG,CACtB,QAAiB,EACjB,MAAc,EACd,OAAiC,EACxB,EAAE;IACX,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,QAAmC,CACpC,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAClB,KAAa,EACb,SAA6C,EACrC,EAAE,CACV,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;IACzD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,CACf,OAAmB,EACnB,OAAe,EACf,SAA6C,EAC7C,MAAc,EACd,OAAiC,EACzB,EAAE;IACV,IAAI,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QAE9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,qEAAqE;YACrE,wEAAwE;YACxE,4BAA4B;YAC5B,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,gBAAgB,GAAG,sBAAsB,OAAO,CAAC,IAAI,uBAAuB,CAC7E,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAElD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,gBAAgB,OAAO,CAAC,IAAI,mDAAmD,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;IAErG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,GAAG,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACtE,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,EACd,QAAqB,EACrB,UAAoC,EAAE,EACf,EAAE;IACzB,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE3D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAIvC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,iBAAiB,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,0BAA0B,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,WAAW,GACf,CAAC,QAAQ,CAAC,mBAAmB;QAC3B,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrD,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5D,MAAM,SAAS,GAAG,WAAW,EAAE,SAAS,CAAC;IACzC,MAAM,OAAO,GAA2B;QACtC,GAAG,WAAW,EAAE,OAAO;QACvB,GAAG,OAAO,CAAC,OAAO;KACnB,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,IAA+B,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,GAAG;YACL,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YACvB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;YAC3B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;SAClC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;QACvB,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;QACzD,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACrC,GAAG,EAAE,OAAO,CAAC,MAAM;YACjB,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,QAAQ,CACN,OAAO,EACP,WAAW,EAAE,OAAO,IAAI,EAAE,EAC1B,SAAS,EACT,MAAM,EACN,OAAO,CACR;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI;QACJ,IAAI;QACJ,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC,CAAC;AAEF,iEAAiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAAuB,EACL,EAAE,CAAC,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,IAAI,EAAE,OAAO,CAAC,IAAI;CACnB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAmB,EAAW,EAAE,CAC7D,OAAO,CAAC,MAAM,KAAK,KAAK;IACxB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CACvC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,KAAK,QAAQ;QACxB,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CACrE,CAAC"}

package/dist/index.d.ts

@@ -1,12 +1,15 @@
 /**
  * @fileoverview Runtime for the Mapples `ApiDocument`: executes
- * `mapples:request` actions (sample or real fetch), publishes responses into
- * `@mapples/state`, and chains follow-up actions on the action bus.
+ * `mapples:request` actions (sample, or a real call through a pluggable
+ * transport), publishes responses into the `@mapples/state` API context, and
+ * chains follow-up actions on the action bus.
  */
 export { default as RequestProvider } from './RequestProvider';
 export { useRequestRuntime } from './RequestProvider';
 export type { RequestExecutionMode, RequestProviderProps, RequestRuntimeContextType, ResponseState, } from './RequestProvider';
 export { default as RequestActionHandler } from './RequestActionHandler';
+export { createFetchTransport } from './transport';
+export type { RequestTransport, TransportAuth, TransportRequest, TransportResponse, } from './transport';
 export * from './actionCommands';
 export * from './constants';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEzE,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -1,11 +1,13 @@
 /**
  * @fileoverview Runtime for the Mapples `ApiDocument`: executes
- * `mapples:request` actions (sample or real fetch), publishes responses into
- * `@mapples/state`, and chains follow-up actions on the action bus.
+ * `mapples:request` actions (sample, or a real call through a pluggable
+ * transport), publishes responses into the `@mapples/state` API context, and
+ * chains follow-up actions on the action bus.
  */
 export { default as RequestProvider } from './RequestProvider';
 export { useRequestRuntime } from './RequestProvider';
 export { default as RequestActionHandler } from './RequestActionHandler';
+export { createFetchTransport } from './transport';
 export * from './actionCommands';
 export * from './constants';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAOtD,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEzE,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAOtD,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAQnD,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,43 @@
+import { HttpMethod } from '@mapples/types';
+/** Auth a transport applies to the outgoing request. */
+export interface TransportAuth {
+    kind: 'bearer' | 'header';
+    /** Header name for `kind: 'header'` (defaults to `Authorization`). */
+    header?: string;
+    /** Name of the secret; the transport owns the lookup. */
+    secretRef: string;
+}
+/**
+ * A resolved request as a transport receives it. `auth` still carries the
+ * secret's *name*: whoever performs the call resolves it, so a transport that
+ * forwards to a server never holds the secret's value.
+ */
+export interface TransportRequest {
+    requestId: string;
+    method: HttpMethod;
+    url: string;
+    headers: Record<string, string>;
+    body?: unknown;
+    auth?: TransportAuth;
+}
+export interface TransportResponse {
+    status: number;
+    /** Whether the status is in the 2xx range. */
+    ok: boolean;
+    headers: Record<string, string>;
+    /** The parsed body; `null` when the response declares no JSON. */
+    data: unknown;
+}
+/**
+ * Performs one request. A rejection is a failed request (network, CORS, an
+ * unconfigured secret, an unparsable JSON body) — an HTTP error status is
+ * not: it resolves with `ok: false`.
+ */
+export type RequestTransport = (request: TransportRequest) => Promise<TransportResponse>;
+/**
+ * The default transport: a direct `fetch`, with `auth` resolved against the
+ * host-supplied `secrets`. A request whose secret is not configured throws
+ * rather than going out unauthenticated.
+ */
+export declare const createFetchTransport: (secrets?: Record<string, string>) => RequestTransport;
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,kEAAkE;IAClE,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEhC;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAC9B,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,gBAwCnC,CAAC"}

package/dist/transport.js

@@ -0,0 +1,41 @@
+/**
+ * The default transport: a direct `fetch`, with `auth` resolved against the
+ * host-supplied `secrets`. A request whose secret is not configured throws
+ * rather than going out unauthenticated.
+ */
+export const createFetchTransport = (secrets) => async (request) => {
+    const headers = { ...request.headers };
+    if (request.auth) {
+        const secret = secrets?.[request.auth.secretRef];
+        if (secret === undefined) {
+            throw new Error(`Secret "${request.auth.secretRef}" is not configured`);
+        }
+        if (request.auth.kind === 'bearer') {
+            headers.Authorization = `Bearer ${secret}`;
+        }
+        else {
+            headers[request.auth.header ?? 'Authorization'] = secret;
+        }
+    }
+    const response = await fetch(request.url, {
+        method: request.method,
+        headers,
+        body: request.body !== undefined ? JSON.stringify(request.body) : undefined,
+    });
+    // Only bodies that declare JSON are parsed. A body that claims JSON and
+    // fails to parse is a broken server contract, so the parse error is left
+    // to reject instead of quietly becoming `null` data.
+    const contentType = response.headers.get('content-type') ?? '';
+    const data = contentType.includes('json') ? await response.json() : null;
+    const responseHeaders = {};
+    response.headers.forEach((value, key) => {
+        responseHeaders[key] = value;
+    });
+    return {
+        status: response.status,
+        ok: response.ok,
+        headers: responseHeaders,
+        data,
+    };
+};
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AA2CA;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,CAAC,OAAgC,EAAoB,EAAE,CACvD,KAAK,EAAE,OAAO,EAAE,EAAE;IAChB,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAEvC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,IAAI,CAAC,SAAS,qBAAqB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,MAAM,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KACxE,CAAC,CAAC;IAEH,wEAAwE;IACxE,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAEzE,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,eAAe;QACxB,IAAI;KACL,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mapples/request",
-  "version": "1.6.0-beta.20260921105308",
+  "version": "1.6.0-beta.20260929074057",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {