@slopware/sloppy-darwin-arm64 0.1.0-alpha.0

package/examples/codec-base64-hex/README.md

@@ -0,0 +1,14 @@
+# Codec Base64 And Hex Example
+
+This example documents the `sloppy/codec`
+Base64, Base64Url, and Hex byte transform shape.
+
+```js
+import { Base64, Base64Url, Hex } from "sloppy/codec";
+
+const encoded = Base64.encode(bytes);
+const urlSafe = Base64Url.encode(bytes, { padding: false });
+const hex = Hex.encode(bytes);
+```
+
+These helpers preserve arbitrary bytes and embedded NUL values.

package/examples/codec-base64-hex/app.js

@@ -0,0 +1,15 @@
+import { Base64, Base64Url, Hex } from "sloppy/codec";
+
+const bytes = new Uint8Array([0, 15, 16, 255]);
+
+export const encoded = {
+    base64: Base64.encode(bytes),
+    base64Url: Base64Url.encode(bytes, { padding: false }),
+    hex: Hex.encode(bytes),
+};
+
+export const decoded = {
+    base64: Base64.decode(encoded.base64),
+    base64Url: Base64Url.decode(encoded.base64Url, { padding: "optional" }),
+    hex: Hex.decode(encoded.hex),
+};

package/examples/codec-checksums/README.md

@@ -0,0 +1,15 @@
+# Codec Checksums Example
+
+This example documents CRC32 as a non-security
+checksum helper for accidental-corruption checks and cache metadata.
+
+```js
+import { Checksums, Text } from "sloppy/codec";
+
+const bytes = Text.utf8.encode("example");
+const crc = Checksums.crc32(bytes);
+```
+
+CRC32 is not authentication, attacker-resistant integrity, a signature, HMAC, password
+utility, or cryptographic hash. Use the appropriate `sloppy/crypto` primitive for
+security-shaped code, including the password-hash API for passwords.

package/examples/codec-checksums/app.js

@@ -0,0 +1,8 @@
+import { Checksums, Text } from "sloppy/codec";
+
+const payload = Text.utf8.encode("cache record");
+
+export const record = {
+    bytes: payload.byteLength,
+    crc32: Checksums.crc32(payload),
+};

package/examples/codec-compression/README.md

@@ -0,0 +1,13 @@
+# Codec Compression Example
+
+This example documents zlib-backed gzip/gunzip
+helpers and the explicit decompression output limit.
+
+```js
+import { Compression } from "sloppy/codec";
+
+const gz = await Compression.gzip(bytes, { level: 6 });
+const raw = await Compression.gunzip(gz, { maxOutputBytes: 1024 * 1024 });
+```
+
+Compression uses vetted backend libraries only.

package/examples/codec-compression/app.js

@@ -0,0 +1,9 @@
+import { Compression, Text } from "sloppy/codec";
+
+const body = Text.utf8.encode("compress me");
+
+export async function roundtrip() {
+    const gz = await Compression.gzip(body, { level: 6 });
+    const raw = await Compression.gunzip(gz, { maxOutputBytes: 1024 * 1024 });
+    return Text.utf8.decode(raw, { fatal: true });
+}

package/examples/codec-streaming-compression/README.md

@@ -0,0 +1,19 @@
+# Codec Streaming Compression Example
+
+This example documents the async-iterable
+compression transform shape with Time deadline/cancellation options.
+
+```js
+import { Compression } from "sloppy/codec";
+import { Deadline } from "sloppy/time";
+
+const chunks = [new Uint8Array([1, 2, 3])];
+const controller = new AbortController();
+const signal = controller.signal;
+const stream = Compression.gzipStream(chunks, { signal, deadline: Deadline.after(1000) });
+```
+
+The stream helpers are Sloppy async-iterable transforms, not Web Streams. They keep bounded
+buffering and terminal-state behavior explicit. This example has no Node, Bun, or Deno
+compatibility promise. Use benchmark-specific docs and tests for compression
+measurements.

package/examples/codec-streaming-compression/app.js

@@ -0,0 +1,16 @@
+import { Compression, Text } from "sloppy/codec";
+import { Deadline } from "sloppy/time";
+
+async function* chunks() {
+    yield Text.utf8.encode("stream ");
+    yield Text.utf8.encode("payload");
+}
+
+export async function compressedChunks(signal) {
+    const deadline = Deadline.after(1000);
+    const output = [];
+    for await (const chunk of Compression.gzipStream(chunks(), { signal, deadline })) {
+        output.push(chunk);
+    }
+    return output;
+}

package/examples/codec-text-binary/README.md

@@ -0,0 +1,16 @@
+# Codec Text And Binary Example
+
+This example documents UTF-8 text helpers and the
+bounds-checked Binary reader/writer surface.
+
+```js
+import { Binary, Text } from "sloppy/codec";
+
+const payload = Text.utf8.encode("hello");
+writer.u32le(1);
+writer.u16be(payload.length);
+writer.bytes(payload);
+```
+
+Binary methods are endian-explicit and preserve embedded NUL bytes. UTF-8
+malformed input behavior is explicit through fatal or replacement modes.

package/examples/codec-text-binary/app.js

@@ -0,0 +1,17 @@
+import { Binary, Text } from "sloppy/codec";
+
+const payload = Text.utf8.encode("hello\0codec");
+
+const writer = Binary.writer();
+writer.u32le(1);
+writer.u16be(payload.length);
+writer.bytes(payload);
+
+const packet = writer.toBytes();
+const reader = Binary.reader(packet);
+
+export const decoded = {
+    version: reader.u32le(),
+    length: reader.u16be(),
+    text: Text.utf8.decode(reader.bytes(payload.length), { fatal: true }),
+};

package/examples/compiler-hello/README.md

@@ -0,0 +1,71 @@
+# Compiler Hello Example
+
+This is a supported compiler fixture input.
+This example is the first Sloppy source shape that `sloppyc build` can compile:
+
+From the repository root:
+
+```powershell
+cargo run --manifest-path compiler/Cargo.toml -- build examples/compiler-hello/app.js --out .sloppy
+```
+
+From this example directory:
+
+```powershell
+cargo run --manifest-path ..\..\compiler\Cargo.toml -- build app.js --out .sloppy
+```
+
+The command emits:
+
+- `.sloppy/app.plan.json`;
+- `.sloppy/app.js`;
+- `.sloppy/app.js.map`.
+
+With a V8-enabled Sloppy build, run the artifacts through the bounded development runtime:
+
+From repository root:
+
+```powershell
+.\build\windows-relwithdebinfo\sloppy.exe run --artifacts .sloppy --host 127.0.0.1 --port 5173
+```
+
+Expected URL:
+
+```text
+http://127.0.0.1:5173/
+```
+
+For deterministic smoke tests without opening a socket:
+
+```powershell
+.\build\windows-relwithdebinfo\sloppy.exe run --artifacts .sloppy --once GET /
+```
+
+Expected body:
+
+```text
+Hello from Sloppy
+```
+
+The source-input shortcut performs the compile step and then enters the same artifact
+runtime path:
+
+```powershell
+.\build\windows-relwithdebinfo\sloppy.exe run app.js --once GET /
+```
+
+From the repository root:
+
+```powershell
+.\build\windows-relwithdebinfo\sloppy.exe run examples/compiler-hello/app.js --once GET /
+```
+
+This writes generated artifacts under `.sloppy` for positional
+source input. The explicit `--artifacts` form remains useful when inspecting a known output
+directory or debugging generated files.
+
+## Limitations
+
+This run path is development-only and requires V8. It currently focuses on compile +
+bounded run flow; broader TypeScript checking, bundling, HTTPS, request-body parsing,
+streaming, middleware, and hot reload are planned separately.

package/examples/compiler-hello/app.js

@@ -0,0 +1,7 @@
+import { Sloppy, Results } from "sloppy";
+
+const app = Sloppy.create();
+
+app.mapGet("/", () => Results.text("Hello from Sloppy"));
+
+export default app;

package/examples/compiler-hello/expected/app.js

@@ -0,0 +1,8 @@
+const __sloppyRuntime = globalThis.__sloppy_runtime;
+if (__sloppyRuntime === undefined) {
+  throw new Error("Sloppy bootstrap runtime was not loaded");
+}
+const { Results } = __sloppyRuntime;
+
+globalThis.__sloppy_handler_1 = () => Results.text("Hello from Sloppy");
+globalThis.__sloppy_register_handler(1, globalThis.__sloppy_handler_1);

package/examples/compiler-hello/expected/app.js.map

@@ -0,0 +1,53 @@
+{
+  "file": "app.js",
+  "mappings": ";;;;;;gCAIgB",
+  "names": [],
+  "sources": [
+    "app.js"
+  ],
+  "sourcesContent": [
+    "import { Sloppy, Results } from \"sloppy\";\n\nconst app = Sloppy.create();\n\napp.mapGet(\"/\", () => Results.text(\"Hello from Sloppy\"));\n\nexport default app;\n"
+  ],
+  "version": 3,
+  "x_sloppy": {
+    "capabilities": [],
+    "effects": [],
+    "handlers": [
+      {
+        "generated": {
+          "column": 33,
+          "line": 7
+        },
+        "id": 1,
+        "source": {
+          "column": 17,
+          "line": 5,
+          "path": "app.js"
+        }
+      }
+    ],
+    "modules": [],
+    "providers": [],
+    "routes": [
+      {
+        "handlerId": 1,
+        "method": "GET",
+        "module": null,
+        "pattern": "/",
+        "source": {
+          "column": 1,
+          "line": 5,
+          "path": "app.js"
+        }
+      }
+    ],
+    "schemas": [],
+    "sourceFiles": [
+      {
+        "hash": "sha256:881ad698ba4ef863fb3fddc1166f26726ef5a0a86e1032510131e555d806d1e7",
+        "path": "app.js"
+      }
+    ],
+    "version": 1
+  }
+}

package/examples/compiler-hello/expected/app.plan.json

@@ -0,0 +1,229 @@
+{
+  "bundle": {
+    "hash": "sha256:8574ad670d955461e1189cf6d70c1fb82085635b33c927de6dbd1b18b1924232",
+    "id": "sloppyc-app-js",
+    "path": "app.js"
+  },
+  "capabilities": [],
+  "compilerVersion": "sloppyc-0.8.0",
+  "completeness": {
+    "reasons": [],
+    "status": "complete"
+  },
+  "configuration": {
+    "environment": "Development",
+    "keys": [
+      {
+        "key": "Sloppy:Runtime:V8MicrotaskDrainLimit",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": 64
+      },
+      {
+        "key": "Sloppy:Server:Host",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": "127.0.0.1"
+      },
+      {
+        "key": "Sloppy:Server:KeepAliveEnabled",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": true
+      },
+      {
+        "key": "Sloppy:Server:KeepAliveIdleTimeoutMs",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": 5000
+      },
+      {
+        "key": "Sloppy:Server:MaxConnections",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": 128
+      },
+      {
+        "key": "Sloppy:Server:MaxRequestBodyBytes",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": 8192
+      },
+      {
+        "key": "Sloppy:Server:MaxRequestsPerConnection",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": 0
+      },
+      {
+        "key": "Sloppy:Server:Port",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": 5173
+      },
+      {
+        "key": "Sloppy:Server:RequestTimeoutMs",
+        "sensitive": false,
+        "source": "built-in defaults",
+        "value": 30000
+      }
+    ],
+    "providers": []
+  },
+  "dataProviders": [],
+  "features": {
+    "asyncHandlers": false,
+    "capabilities": false,
+    "dataProviders": false,
+    "metadataInference": true,
+    "nativeEndpointDispatch": true,
+    "nativeJsonDispatch": true,
+    "sourceMaps": true,
+    "strongPlanMetadata": true
+  },
+  "handlers": [
+    {
+      "async": false,
+      "displayName": "GET /",
+      "exportName": "__sloppy_handler_1",
+      "id": 1,
+      "source": {
+        "column": 17,
+        "line": 5,
+        "path": "app.js"
+      }
+    }
+  ],
+  "kind": "web",
+  "modules": [],
+  "routeDispatch": {
+    "artifact": {
+      "hash": "sha256:70ed1f1dc181b6861679851506689cf63c74e8542a785491c373a435d171d264",
+      "kind": "slrt",
+      "path": "routes.slrt"
+    },
+    "catchAllRoutes": 0,
+    "dispatchStats": {
+      "constraints": [],
+      "exactStaticPaths": 1,
+      "parameterCandidateBuckets": 0,
+      "segmentTrieNodes": 0,
+      "staticEdgeStrategies": [
+        "open-addressed-exact-hash",
+        "segment-trie",
+        "first-static-segment-bucket-fallback"
+      ]
+    },
+    "endpointCount": 1,
+    "fallback": {
+      "classicAvailable": true,
+      "dynamicRoutes": 0,
+      "partialRoutes": 0
+    },
+    "json": {
+      "request": {
+        "fallback": 0,
+        "generic": 0,
+        "materialized": 0,
+        "native": 0
+      },
+      "response": {
+        "fallback": 0,
+        "generic": 0,
+        "native": 0
+      }
+    },
+    "mode": "native-compiled",
+    "nativeNoJsEndpoints": 1,
+    "parameterRoutes": 0,
+    "routeCount": 1,
+    "staticRoutes": 1,
+    "urlGeneration": true,
+    "urlWriters": 0,
+    "version": 1
+  },
+  "routes": [
+    {
+      "bindings": [],
+      "completeness": {
+        "reasons": [],
+        "status": "complete"
+      },
+      "dispatch": {
+        "endpointId": 1,
+        "executionKind": "native-static-text",
+        "mode": "native-compiled",
+        "specializable": true,
+        "strategy": "exact-static-hash"
+      },
+      "handlerId": 1,
+      "jsonRequest": {
+        "materialization": "none",
+        "mode": "none",
+        "unknownFields": "ignore"
+      },
+      "jsonResponse": {
+        "mode": "none",
+        "writer": "none"
+      },
+      "method": "GET",
+      "name": null,
+      "nativeResponse": {
+        "body": "Hello from Sloppy",
+        "contentType": "text/plain; charset=utf-8",
+        "kind": "text",
+        "status": 200
+      },
+      "pattern": "/",
+      "response": {
+        "helper": "text",
+        "kind": "text",
+        "nativeBody": "Hello from Sloppy",
+        "status": 200
+      },
+      "source": {
+        "column": 1,
+        "line": 5,
+        "path": "app.js"
+      }
+    }
+  ],
+  "runtimeMinimumVersion": "0.1.0",
+  "schemaVersion": 1,
+  "sourceFiles": [
+    {
+      "hash": "sha256:881ad698ba4ef863fb3fddc1166f26726ef5a0a86e1032510131e555d806d1e7",
+      "path": "app.js"
+    }
+  ],
+  "sourceMap": {
+    "hash": "sha256:f93dea5b1a9b93101d1b718e926ae96d9e57b5b976cdfd0d356e212a917085c6",
+    "id": "sloppyc-app-js-map",
+    "path": "app.js.map"
+  },
+  "stdlibVersion": "0.1.0",
+  "strongPlan": {
+    "compatibility": {
+      "schemaVersion": 1,
+      "unknownOptionalFields": "ignored",
+      "unknownRequiredFeatures": "rejected"
+    },
+    "evidence": {
+      "bindings": false,
+      "capabilities": false,
+      "effects": false,
+      "ffi": false,
+      "nativeJsonDispatch": true,
+      "providers": false,
+      "routeDispatch": true,
+      "routes": true,
+      "sourceGraph": true
+    },
+    "profile": "compiler-30-strong-plan",
+    "version": 1
+  },
+  "target": {
+    "engine": "v8",
+    "platform": "windows-x64"
+  }
+}

package/examples/config-basic/README.md

@@ -0,0 +1,13 @@
+# Config Basic Example
+
+This example demonstrates typed config binding, defaults, required values, and
+secret redaction.
+
+`AUTH_JWT_SECRET` is referenced as a placeholder and must not be committed as a literal
+secret. Doctor/package metadata should show the required key and redaction category, not
+the value.
+
+## Limitations
+
+This example focuses on local typed config and redaction metadata. Hot reload and external
+secret-vault integrations are separate work.

package/examples/config-basic/app.js

@@ -0,0 +1,13 @@
+import { Sloppy, Results } from "sloppy";
+
+const app = Sloppy.create();
+
+const auth = app.config.bind("Auth", {
+  jwtSecret: { type: "secret", required: false },
+  tokenTtlMinutes: { type: "number", default: 60, min: 1, max: 1440 },
+  issuer: { type: "string", required: true },
+});
+
+app.get("/config", () => Results.text("configuration metadata is Plan-visible"));
+
+export default app;

package/examples/config-basic/appsettings.json

@@ -0,0 +1,7 @@
+{
+  "Auth": {
+    "JwtSecret": "${AUTH_JWT_SECRET}",
+    "TokenTtlMinutes": 60,
+    "Issuer": "sloppy.local"
+  }
+}

package/examples/config-secrets-redaction/README.md

@@ -0,0 +1,9 @@
+# Config Secrets Redaction Example
+
+This example demonstrates `app.config.getSecret(...)`. The route returns only the redacted
+display form so source examples and goldens never carry a raw secret value.
+
+Build works without `AUTH_JWT_SECRET`. Set `AUTH_JWT_SECRET` before running
+`sloppy doctor` or handler execution if you want the required secret config to
+resolve. Do not replace the placeholder with a literal secret in
+source-controlled files.

package/examples/config-secrets-redaction/app.js

@@ -0,0 +1,9 @@
+import { Sloppy, Results } from "sloppy";
+
+const app = Sloppy.create();
+
+const jwtSecret = app.config.getSecret("Auth:JwtSecret");
+
+app.get("/redaction", () => Results.text("secret config value is redacted in metadata"));
+
+export default app;

package/examples/config-secrets-redaction/appsettings.json

@@ -0,0 +1,5 @@
+{
+  "Auth": {
+    "JwtSecret": "${AUTH_JWT_SECRET}"
+  }
+}

package/examples/config-strict-mode/README.md

@@ -0,0 +1,7 @@
+# Config Strict Mode Example
+
+This example keeps a required `Auth:Issuer` read visible to the compiler and doctor
+without providing a value. It is intended for missing-config diagnostics and package
+configuration checks.
+
+Dynamic config keys and reload-on-change are not implemented by this example.

package/examples/config-strict-mode/app.js

@@ -0,0 +1,10 @@
+import { Sloppy, Results } from "sloppy";
+
+const app = Sloppy.create();
+
+const issuer = app.config.getString("Auth:Issuer");
+const mode = app.config.getString("Sloppy:Config:Mode", "strict");
+
+app.get("/strict-config", () => Results.text("strict config metadata is Plan-visible"));
+
+export default app;

package/examples/config-strict-mode/appsettings.json

@@ -0,0 +1,7 @@
+{
+  "Sloppy": {
+    "Config": {
+      "Mode": "strict"
+    }
+  }
+}

package/examples/configured-api/README.md

@@ -0,0 +1,38 @@
+# Configured API Example
+
+This is a compile-time source-input/config example for the current Plan metadata subset.
+Run from this directory:
+
+```powershell
+..\..\build\windows-dev\sloppy.exe run
+```
+
+On a non-V8 build this still compiles and emits `.sloppy\app.plan.json`, then fails before
+serving with the normal V8-required diagnostic. With V8 enabled, it enters the same
+artifact runtime path.
+
+The example demonstrates `sloppy.json`, `appsettings.json`, `appsettings.Development.json`, and
+Plan-visible `app.config.getString(...)` reads. The `Development` overlay is present so
+tooling can inspect the selected environment's config requirements. The `/config` handler
+returns static supported-subset JSON because closed-over config values in route
+results are outside this example's current compiler metadata path.
+
+Route:
+
+- `GET /config`
+
+Expected tooling after building artifacts:
+
+```powershell
+..\..\build\windows-dev\sloppy.exe routes --plan .sloppy\app.plan.json
+..\..\build\windows-dev\sloppy.exe doctor --plan .sloppy\app.plan.json
+..\..\build\windows-dev\sloppy.exe capabilities --plan .sloppy\app.plan.json
+..\..\build\windows-dev\sloppy.exe audit --plan .sloppy\app.plan.json --format json
+..\..\build\windows-dev\sloppy.exe openapi --plan .sloppy\app.plan.json
+```
+
+## Limitations
+
+This example focuses on the current `--environment` flow and static config reads.
+Arbitrary environment providers and broader secret-management flows are outside
+this slice.

package/examples/configured-api/app.js

@@ -0,0 +1,12 @@
+import { Sloppy, Results } from "sloppy";
+
+const app = Sloppy.create();
+const serviceName = app.config.getString("App:Name", "configured-api");
+const greeting = app.config.getString("App:Greeting", "hello");
+
+// Keep the config reads Plan-visible; closed-over config result values are not in the
+// current route-result subset.
+app.get("/config", () => Results.json({ serviceName: "configured-api", greeting: "Plan-visible" }))
+    .withName("Config.Get");
+
+export default app;