@motujs/runtime 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Scorbutics
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/direct-transport.d.ts

@@ -0,0 +1,30 @@
+import type { Transport } from './index.js';
+/**
+ * A Transport that dispatches to functions in this process instead of over the wire.
+ *
+ * HttpTransport exists because the Jakarta ocean keeps its data access on the server, where the
+ * browser cannot reach it without a request. That is not universal. An app built on row-level
+ * security does its reads from the browser already, holding the user's session — there is no server
+ * tier to call, and routing an island's query through one would add a hop, a second client, and a
+ * place for authorization to be reimplemented differently.
+ *
+ * What motu actually needs is not a network boundary but a SINGLE SEAM: one choke point every island
+ * call passes through, so the lagoon can put MockTransport in its place and replay fixtures with no
+ * backend. This gives that seam without inventing a server tier — the same island, calling the same
+ * contract, is offline in the lagoon and live in the host.
+ *
+ * Authorization is untouched and stays exactly where the app already put it: these functions are the
+ * app's own, and whatever they use (a session-bound client, row-level security) decides what the
+ * caller may see. motu adds no credential and can widen nothing.
+ *
+ * ```ts
+ * configure(new DirectTransport(services))   // host composition root
+ * configure(new MockTransport(fixtures))     // lagoon — same components, no backend
+ * ```
+ */
+export declare class DirectTransport implements Transport {
+    private readonly services;
+    constructor(services: Record<string, Record<string, (...args: never[]) => Promise<unknown>>>);
+    call<T>(service: string, method: string, args: unknown[]): Promise<T>;
+}
+//# sourceMappingURL=direct-transport.d.ts.map

package/dist/direct-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-transport.d.ts","sourceRoot":"","sources":["../src/direct-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,eAAgB,YAAW,SAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvG,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;CAgB5E"}

package/dist/direct-transport.js

@@ -0,0 +1,46 @@
+import { MotuError } from './index.js';
+/**
+ * A Transport that dispatches to functions in this process instead of over the wire.
+ *
+ * HttpTransport exists because the Jakarta ocean keeps its data access on the server, where the
+ * browser cannot reach it without a request. That is not universal. An app built on row-level
+ * security does its reads from the browser already, holding the user's session — there is no server
+ * tier to call, and routing an island's query through one would add a hop, a second client, and a
+ * place for authorization to be reimplemented differently.
+ *
+ * What motu actually needs is not a network boundary but a SINGLE SEAM: one choke point every island
+ * call passes through, so the lagoon can put MockTransport in its place and replay fixtures with no
+ * backend. This gives that seam without inventing a server tier — the same island, calling the same
+ * contract, is offline in the lagoon and live in the host.
+ *
+ * Authorization is untouched and stays exactly where the app already put it: these functions are the
+ * app's own, and whatever they use (a session-bound client, row-level security) decides what the
+ * caller may see. motu adds no credential and can widen nothing.
+ *
+ * ```ts
+ * configure(new DirectTransport(services))   // host composition root
+ * configure(new MockTransport(fixtures))     // lagoon — same components, no backend
+ * ```
+ */
+export class DirectTransport {
+    constructor(services) {
+        this.services = services;
+    }
+    async call(service, method, args) {
+        // Own-property lookups only: a plain index would resolve 'constructor' or '__proto__' and hand
+        // back something that was never an exposed method. Deny-by-default has to mean the map, exactly.
+        if (!Object.prototype.hasOwnProperty.call(this.services, service)) {
+            throw new MotuError(404, `motu: no such service '${service}'`);
+        }
+        const impl = this.services[service];
+        if (!impl || !Object.prototype.hasOwnProperty.call(impl, method)) {
+            throw new MotuError(404, `motu: no such method '${service}.${method}'`);
+        }
+        const fn = impl[method];
+        if (typeof fn !== 'function') {
+            throw new MotuError(404, `motu: no such method '${service}.${method}'`);
+        }
+        return (await fn(...args));
+    }
+}
+//# sourceMappingURL=direct-transport.js.map

package/dist/direct-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-transport.js","sourceRoot":"","sources":["../src/direct-transport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,eAAe;IAC1B,YAA6B,QAAgF;QAAhF,aAAQ,GAAR,QAAQ,CAAwE;IAAG,CAAC;IAEjH,KAAK,CAAC,IAAI,CAAI,OAAe,EAAE,MAAc,EAAE,IAAe;QAC5D,+FAA+F;QAC/F,iGAAiG;QACjG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,0BAA0B,OAAO,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,yBAAyB,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,yBAAyB,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,MAAO,EAA4C,CAAC,GAAG,IAAI,CAAC,CAAM,CAAC;IAC7E,CAAC;CACF"}

package/dist/http-transport.d.ts

@@ -0,0 +1,30 @@
+import { type Transport } from './index.js';
+/**
+ * Talks to the motu dispatcher mounted inside the legacy app's existing JAX-RS `/rest` stack.
+ *
+ * It inherits that stack's XSRF protection: AngularJS promotes an XSRF cookie into a matching
+ * header, and the app's `XsrfFilter` validates it. The names are module-specific (web-console uses
+ * cookie `M-XSRF-TOKEN` -> header `X-M-XSRF-TOKEN`), so they are configurable here.
+ *
+ * Auth failures come back as HTTP 401 (the app deliberately avoids 403 to sidestep an IP-ban
+ * heuristic), and an expired session may surface as a legacy 302 -> HTML redirect that `fetch`
+ * follows transparently; both are handled below.
+ */
+export interface HttpTransportOptions {
+    /** Name of the XSRF cookie the host module sets (e.g. 'M-XSRF-TOKEN' for web-console). */
+    xsrfCookieName?: string;
+    /** Name of the header the host's XsrfFilter validates (e.g. 'X-M-XSRF-TOKEN'). */
+    xsrfHeaderName?: string;
+    onSessionLost?: () => void;
+}
+export declare class HttpTransport implements Transport {
+    private readonly base;
+    private readonly xsrfCookieName;
+    private readonly xsrfHeaderName;
+    private readonly onSessionLost;
+    constructor(base?: string, opts?: HttpTransportOptions);
+    /** The dispatcher path this call goes to — what the dock shows when one lands. */
+    endpoint(service: string, method: string): string;
+    call<T>(service: string, method: string, args: unknown[]): Promise<T>;
+}
+//# sourceMappingURL=http-transport.d.ts.map

package/dist/http-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.d.ts","sourceRoot":"","sources":["../src/http-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAQzE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACnC,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,qBAAa,aAAc,YAAW,SAAS;IAM3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IALvB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAa;gBAGxB,IAAI,GAAE,MAAqB,EAC5C,IAAI,GAAE,oBAAyB;IAYjC,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAI3C,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;CAgC5E"}

package/dist/http-transport.js

@@ -0,0 +1,51 @@
+import { MotuError, SessionExpiredError } from './index.js';
+function readCookie(name) {
+    const match = document.cookie.match(new RegExp('(?:^|; )' + name + '=([^;]*)'));
+    // Group 1 exists whenever the match does — the pattern has exactly one capture.
+    return match ? decodeURIComponent(match[1]) : undefined;
+}
+export class HttpTransport {
+    constructor(base = '/rest/motu', opts = {}) {
+        this.base = base;
+        this.xsrfCookieName = opts.xsrfCookieName ?? 'XSRF-TOKEN';
+        this.xsrfHeaderName = opts.xsrfHeaderName ?? 'X-XSRF-TOKEN';
+        this.onSessionLost =
+            opts.onSessionLost ??
+                (() => {
+                    const returnUrl = encodeURIComponent(location.pathname + location.search);
+                    location.href = '/login?returnUrl=' + returnUrl;
+                });
+    }
+    /** The dispatcher path this call goes to — what the dock shows when one lands. */
+    endpoint(service, method) {
+        return `${this.base}/${service}/${method}`;
+    }
+    async call(service, method, args) {
+        const xsrf = readCookie(this.xsrfCookieName);
+        const res = await fetch(this.endpoint(service, method), {
+            method: 'POST',
+            credentials: 'same-origin',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Requested-With': 'XMLHttpRequest',
+                ...(xsrf ? { [this.xsrfHeaderName]: xsrf } : {}),
+            },
+            body: JSON.stringify(args),
+        });
+        if (res.status === 401) {
+            this.onSessionLost();
+            throw new SessionExpiredError();
+        }
+        // Backstop for a legacy 302 -> login HTML that fetch followed and returned as 200 text/html.
+        const contentType = res.headers.get('content-type') ?? '';
+        if (!contentType.includes('application/json')) {
+            this.onSessionLost();
+            throw new SessionExpiredError();
+        }
+        if (!res.ok) {
+            throw new MotuError(res.status, await res.text());
+        }
+        return (await res.json());
+    }
+}
+//# sourceMappingURL=http-transport.js.map

package/dist/http-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.js","sourceRoot":"","sources":["../src/http-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAkB,MAAM,SAAS,CAAC;AAEzE,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC;IAChF,gFAAgF;IAChF,OAAO,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAqBD,MAAM,OAAO,aAAa;IAKxB,YACmB,OAAe,YAAY,EAC5C,OAA6B,EAAE;QADd,SAAI,GAAJ,IAAI,CAAuB;QAG5C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC;QAC1D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC;QAC5D,IAAI,CAAC,aAAa;YAChB,IAAI,CAAC,aAAa;gBAClB,CAAC,GAAG,EAAE;oBACJ,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAC1E,QAAQ,CAAC,IAAI,GAAG,mBAAmB,GAAG,SAAS,CAAC;gBAClD,CAAC,CAAC,CAAC;IACP,CAAC;IAED,kFAAkF;IAClF,QAAQ,CAAC,OAAe,EAAE,MAAc;QACtC,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,OAAe,EAAE,MAAc,EAAE,IAAe;QAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,gBAAgB;gBACpC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,6FAA6F;QAC7F,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,72 @@
+/**
+ * The injection seam. A component calls `call(...)` and never knows which Transport backs it —
+ * that decision lives only in a composition root (bridge / standalone / sandbox).
+ */
+export interface Transport {
+    call<T>(service: string, method: string, args: unknown[]): Promise<T>;
+    /**
+     * WHERE a call to `service.method` goes, for chrome that shows a person what just left.
+     *
+     * Optional, and it has to be: a transport is an injection seam, and the two that ship here are a
+     * fetch to a dispatcher (which has a URL) and a direct in-process dispatch (which has none). A
+     * readout that invented an address for the second would be a lie in the surface built to end
+     * guessing about where data came from, so the absence is reported as an absence.
+     */
+    endpoint?(service: string, method: string): string;
+}
+/** Called once, at a composition root, to choose the transport for this runtime. */
+export declare function configure(t: Transport): void;
+/** A single lifecycle event for one contract call, emitted at start and again at completion. */
+export interface CallEvent {
+    id: number;
+    service: string;
+    method: string;
+    args: unknown[];
+    /** The island the call was attributed to (its custom-element tag), or null if outside any window. */
+    island: string | null;
+    /** Where it went, when the transport can say — see `Transport.endpoint`. */
+    url?: string;
+    phase: 'start' | 'success' | 'error';
+    status?: number;
+    durationMs?: number;
+    error?: string;
+}
+type CallObserver = (e: CallEvent) => void;
+/** Subscribe to every contract call's lifecycle (dev overlay). Returns an unsubscribe. */
+export declare function observeCalls(observer: CallObserver): () => void;
+/**
+ * Runs `fn` with `id` as the ambient island, so any `call()` that fires synchronously inside is
+ * attributed to it. The framework opens this window around an island's render/update; islands never
+ * touch it (zero per-island cost).
+ */
+export declare function runWithIsland<T>(id: string | null, fn: () => T): T;
+/** One captured call: its request (service/method/args) and the backend's response (or error status). */
+export interface RecordedCall {
+    service: string;
+    method: string;
+    args: unknown[];
+    response?: unknown;
+    status?: number;
+}
+/** Begin capturing contract calls (dev tooling). Replaces any in-progress recording. */
+export declare function startRecording(): void;
+/** Stop capturing and return everything recorded since startRecording(). */
+export declare function stopRecording(): RecordedCall[];
+/** The single entry point the generated contract uses. Fails loudly if not configured. */
+export declare function call<T>(service: string, method: string, args: unknown[]): Promise<T>;
+export declare class MotuError extends Error {
+    readonly status: number;
+    readonly declared: boolean;
+    /**
+     * `declared` is true when a fixture ASKED for this failure. The application never reads it -- it
+     * takes the same path either way, which is the point of throwing the real error -- but the lagoon's
+     * call feed does, so a failure the state declares is not shown as one nobody expected.
+     */
+    constructor(status: number, message: string, declared?: boolean);
+}
+export declare class SessionExpiredError extends MotuError {
+    constructor();
+}
+export { HttpTransport } from './http-transport.js';
+export { DirectTransport } from './direct-transport.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtE;;;;;;;OAOG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACpD;AAID,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAE5C;AAQD,gGAAgG;AAChG,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,qGAAqG;IACrG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,KAAK,YAAY,GAAG,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;AAQ3C,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,IAAI,CAG/D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAElE;AAWD,yGAAyG;AACzG,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,wFAAwF;AACxF,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED,4EAA4E;AAC5E,wBAAgB,aAAa,IAAI,YAAY,EAAE,CAI9C;AAED,0FAA0F;AAC1F,wBAAgB,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAsDpF;AAWD,qBAAa,SAAU,SAAQ,KAAK;aAMN,MAAM,EAAE,MAAM;aAAmC,QAAQ;IALrF;;;;OAIG;gBACyB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAkB,QAAQ,UAAQ;CAI9F;AAED,qBAAa,mBAAoB,SAAQ,SAAS;;CAKjD;AAED,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,128 @@
+// Stripped in production: the debug overlay's instrumentation is gated on this build-time constant,
+// so the whole block below dead-code-eliminates when it is false (and is safely `undefined` under
+// bare Node/tsc, where the typeof guard evaluates to false rather than throwing).
+import { runWithIsland as coreRunWithIsland, ambientIsland, recordOutbound, beginCall } from '@motujs/core';
+const DEBUG = typeof __MOTU_DEBUG__ !== 'undefined' && __MOTU_DEBUG__;
+let current = null;
+/** Called once, at a composition root, to choose the transport for this runtime. */
+export function configure(t) {
+    current = t;
+}
+const callObservers = new Set();
+let callSeq = 0;
+// The window itself lives in @motujs/core, so a traced host-module call and a contract call are
+// attributed by the SAME open window. Two copies meant `runWithIsland` from here left `traced` blind:
+// the react adapter opens one window, and only the transport's calls carried a tag.
+const currentIsland = () => ambientIsland();
+/** Subscribe to every contract call's lifecycle (dev overlay). Returns an unsubscribe. */
+export function observeCalls(observer) {
+    callObservers.add(observer);
+    return () => callObservers.delete(observer);
+}
+/**
+ * Runs `fn` with `id` as the ambient island, so any `call()` that fires synchronously inside is
+ * attributed to it. The framework opens this window around an island's render/update; islands never
+ * touch it (zero per-island cost).
+ */
+export function runWithIsland(id, fn) {
+    return coreRunWithIsland(id, fn);
+}
+function emitCall(e) {
+    callObservers.forEach((o) => o(e));
+}
+let recordingSink = null;
+/** Begin capturing contract calls (dev tooling). Replaces any in-progress recording. */
+export function startRecording() {
+    recordingSink = [];
+}
+/** Stop capturing and return everything recorded since startRecording(). */
+export function stopRecording() {
+    const out = recordingSink ?? [];
+    recordingSink = null;
+    return out;
+}
+/** The single entry point the generated contract uses. Fails loudly if not configured. */
+export function call(service, method, args) {
+    if (!current) {
+        throw new Error('motu: configure() was not called before a service call');
+    }
+    if (!DEBUG)
+        return current.call(service, method, args);
+    const id = ++callSeq;
+    const island = currentIsland();
+    const t0 = performance.now();
+    // WHERE it goes, asked of the transport rather than assumed: only the transport knows, and one of
+    // the two that ship here has no answer. `''` reads as "no address", which the dock shows as the
+    // method name — never as a URL somebody could go looking for.
+    const url = current.endpoint?.(service, method) ?? '';
+    // THE LIVE FEED, which is the other half of the ledger below: `recordOutbound` says an ask LEFT
+    // (that is when the owner window is open), this says how it came back.
+    const landed = beginCall({ via: 'contract', url, method: 'POST', label: `${service}.${method}` });
+    // THE THIRD DOOR, in the same ledger as the other two. A contract call was observable only through
+    // `observeCalls` — the debug overlay — so no check ever printed it, and a region whose islands talk
+    // exclusively through the contract read as one that fetched nothing.
+    recordOutbound('contract', `${service}.${method}`, args.map((a) => (typeof a === 'object' && a !== null ? '…' : String(a))).join(', '));
+    emitCall({ id, service, method, args, island, url, phase: 'start' });
+    return current.call(service, method, args).then((result) => {
+        landed({ status: 200, ok: true });
+        emitCall({ id, service, method, args, island, url, phase: 'success', durationMs: performance.now() - t0 });
+        if (recordingSink)
+            recordingSink.push({ service, method, args, response: result });
+        return result;
+    }, (err) => {
+        const status = err instanceof MotuError ? err.status : undefined;
+        // A THROW THAT IS NOT A STATUS still landed, and 0 is how the feed spells "never got one" —
+        // dropping it would make a transport that rejected look like a call that is still in flight.
+        landed({
+            status: status ?? 0,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+            ...(err instanceof MotuError && err.declared ? { declared: true } : {}),
+        });
+        emitCall({
+            id,
+            service,
+            method,
+            args,
+            island,
+            url,
+            phase: 'error',
+            status,
+            durationMs: performance.now() - t0,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        if (recordingSink)
+            recordingSink.push({ service, method, args, status });
+        throw err;
+    });
+}
+// In debug builds (the lagoon), expose the recorder to the page so `motu fixtures record` can drive
+// it via the browser. Stripped in production along with the rest of the DEBUG block.
+if (DEBUG && typeof globalThis !== 'undefined') {
+    globalThis.__motuRecorder = {
+        start: startRecording,
+        stop: stopRecording,
+    };
+}
+export class MotuError extends Error {
+    /**
+     * `declared` is true when a fixture ASKED for this failure. The application never reads it -- it
+     * takes the same path either way, which is the point of throwing the real error -- but the lagoon's
+     * call feed does, so a failure the state declares is not shown as one nobody expected.
+     */
+    constructor(status, message, declared = false) {
+        super(message);
+        this.status = status;
+        this.declared = declared;
+        this.name = 'MotuError';
+    }
+}
+export class SessionExpiredError extends MotuError {
+    constructor() {
+        super(401, 'motu: session expired');
+        this.name = 'SessionExpiredError';
+    }
+}
+export { HttpTransport } from './http-transport.js';
+export { DirectTransport } from './direct-transport.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,kGAAkG;AAClG,kFAAkF;AAClF,OAAO,EAAE,aAAa,IAAI,iBAAiB,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG5G,MAAM,KAAK,GAAG,OAAO,cAAc,KAAK,WAAW,IAAI,cAAc,CAAC;AAmBtE,IAAI,OAAO,GAAqB,IAAI,CAAC;AAErC,oFAAoF;AACpF,MAAM,UAAU,SAAS,CAAC,CAAY;IACpC,OAAO,GAAG,CAAC,CAAC;AACd,CAAC;AAyBD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAgB,CAAC;AAC9C,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,gGAAgG;AAChG,sGAAsG;AACtG,oFAAoF;AACpF,MAAM,aAAa,GAAG,GAAkB,EAAE,CAAC,aAAa,EAAE,CAAC;AAE3D,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,QAAsB;IACjD,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAI,EAAiB,EAAE,EAAW;IAC7D,OAAO,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAY;IAC5B,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAgBD,IAAI,aAAa,GAA0B,IAAI,CAAC;AAEhD,wFAAwF;AACxF,MAAM,UAAU,cAAc;IAC5B,aAAa,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,aAAa,IAAI,EAAE,CAAC;IAChC,aAAa,GAAG,IAAI,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,IAAI,CAAI,OAAe,EAAE,MAAc,EAAE,IAAe;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,IAAI,CAAI,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAE1D,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;IACrB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,kGAAkG;IAClG,gGAAgG;IAChG,8DAA8D;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACtD,gGAAgG;IAChG,uEAAuE;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAClG,mGAAmG;IACnG,oGAAoG;IACpG,qEAAqE;IACrE,cAAc,CAAC,UAAU,EAAE,GAAG,OAAO,IAAI,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxI,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,IAAI,CAAI,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAChD,CAAC,MAAM,EAAE,EAAE;QACT,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3G,IAAI,aAAa;YAAE,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,4FAA4F;QAC5F,6FAA6F;QAC7F,MAAM,CAAC;YACL,MAAM,EAAE,MAAM,IAAI,CAAC;YACnB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvD,GAAG,CAAC,GAAG,YAAY,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC,CAAC;QACH,QAAQ,CAAC;YACP,EAAE;YACF,OAAO;YACP,MAAM;YACN,IAAI;YACJ,MAAM;YACN,GAAG;YACH,KAAK,EAAE,OAAO;YACd,MAAM;YACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;YAClC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,aAAa;YAAE,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,CAAC;IACZ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,qFAAqF;AACrF,IAAI,KAAK,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;IAC9C,UAAsD,CAAC,cAAc,GAAG;QACvE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,aAAa;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC;;;;OAIG;IACH,YAA4B,MAAc,EAAE,OAAe,EAAkB,WAAW,KAAK;QAC3F,KAAK,CAAC,OAAO,CAAC,CAAC;QADW,WAAM,GAAN,MAAM,CAAQ;QAAmC,aAAQ,GAAR,QAAQ,CAAQ;QAE3F,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IAChD;QACE,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}