@swarm.ing/pieui 2.1.7 → 2.2.0

package/dist/server/card.d.ts

@@ -0,0 +1,28 @@
+import type { SocketIOEvent } from './types';
+/**
+ * Base card. A server card mirrors its frontend counterpart 1:1: parameterise
+ * it with the component's `*Data` interface and pass those fields (plus any
+ * child `Card`s) to the constructor — no per-card constructor needed.
+ *
+ * `generate()` splits own properties into `data` (scalars) vs children (values
+ * that are `instanceof Card`). Field names are used verbatim — TS fields are
+ * already camelCase, so no key transformation is applied.
+ */
+export declare class Card<D extends object = Record<string, never>> {
+    /** Registered frontend component name; defaults to the class name. */
+    card: string;
+    constructor(props?: Partial<D>);
+    /** Serialise to the PieUI `{ ...children, card, data }` wire format. */
+    generate(): Record<string, unknown>;
+    /** Recursively collect named InputCard descendants (incl. self). */
+    inputChildLoc(): Record<string, InputCard>;
+    /** Assign values to named input children by name, then generate. */
+    fill(data: Record<string, unknown>): Record<string, unknown>;
+    /** Build a realtime event named `pie{method}_{name}`. */
+    createEvent(method: string, data?: Record<string, unknown>): SocketIOEvent;
+}
+/** Input-bearing card (form field). `parse` validates a raw submitted value. */
+export declare class InputCard<D extends object = Record<string, never>> extends Card<D> {
+    parse(raw: unknown): unknown;
+}
+//# sourceMappingURL=card.d.ts.map

package/dist/server/card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card.d.ts","sourceRoot":"","sources":["../../src/server/card.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAQ5C;;;;;;;;GAQG;AACH,qBAAa,IAAI,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;IACtD,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAwB;gBAExB,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAI9B,wEAAwE;IACxE,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IA4BnC,oEAAoE;IACpE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC;IAsB1C,oEAAoE;IACpE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAU5D,yDAAyD;IACzD,WAAW,CACP,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,aAAa;CAiBnB;AAED,gFAAgF;AAChF,qBAAa,SAAS,CAClB,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAC1C,SAAQ,IAAI,CAAC,CAAC,CAAC;IACb,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO;CAG/B"}

package/dist/server/cards/AjaxGroupCard.d.ts

@@ -0,0 +1,8 @@
+import { Card } from '../card';
+import type { AjaxGroupCardData } from '../../components/Containers/AjaxGroupCard/types';
+/** AJAX-enabled container (single child) — 1:1 with the frontend AjaxGroupCard. */
+export declare class AjaxGroupCard extends Card<AjaxGroupCardData & {
+    content: Card;
+}> {
+}
+//# sourceMappingURL=AjaxGroupCard.d.ts.map

package/dist/server/cards/AjaxGroupCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AjaxGroupCard.d.ts","sourceRoot":"","sources":["../../../src/server/cards/AjaxGroupCard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAC9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAA;AAExF,mFAAmF;AACnF,qBAAa,aAAc,SAAQ,IAAI,CAAC,iBAAiB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC;CAAG"}

package/dist/server/cards/HTMLEmbedCard.d.ts

@@ -0,0 +1,6 @@
+import { Card } from '../card';
+import type { HTMLEmbedCardData } from '../../components/Common/HTMLEmbedCard/types';
+/** Raw HTML injection — 1:1 with the frontend HTMLEmbedCard. */
+export declare class HTMLEmbedCard extends Card<HTMLEmbedCardData> {
+}
+//# sourceMappingURL=HTMLEmbedCard.d.ts.map

package/dist/server/cards/HTMLEmbedCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HTMLEmbedCard.d.ts","sourceRoot":"","sources":["../../../src/server/cards/HTMLEmbedCard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAC9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAA;AAEpF,gEAAgE;AAChE,qBAAa,aAAc,SAAQ,IAAI,CAAC,iBAAiB,CAAC;CAAG"}

package/dist/server/cards/HiddenCard.d.ts

@@ -0,0 +1,6 @@
+import { InputCard } from '../card';
+import type { HiddenCardData } from '../../components/Common/HiddenCard/types';
+/** Hidden input field — 1:1 with the frontend HiddenCard. */
+export declare class HiddenCard extends InputCard<HiddenCardData> {
+}
+//# sourceMappingURL=HiddenCard.d.ts.map

package/dist/server/cards/HiddenCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HiddenCard.d.ts","sourceRoot":"","sources":["../../../src/server/cards/HiddenCard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAA;AAE9E,6DAA6D;AAC7D,qBAAa,UAAW,SAAQ,SAAS,CAAC,cAAc,CAAC;CAAG"}

package/dist/server/cards/OneOfCard.d.ts

@@ -0,0 +1,8 @@
+import { Card } from '../card';
+import type { OneOfCardData } from '../../components/Containers/OneOfCard/types';
+/** One-of-N alternative container — 1:1 with the frontend OneOfCard. */
+export declare class OneOfCard extends Card<OneOfCardData & {
+    content: Card[];
+}> {
+}
+//# sourceMappingURL=OneOfCard.d.ts.map

package/dist/server/cards/OneOfCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OneOfCard.d.ts","sourceRoot":"","sources":["../../../src/server/cards/OneOfCard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAC9B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAEhF,wEAAwE;AACxE,qBAAa,SAAU,SAAQ,IAAI,CAAC,aAAa,GAAG;IAAE,OAAO,EAAE,IAAI,EAAE,CAAA;CAAE,CAAC;CAAG"}

package/dist/server/cards/UnionCard.d.ts

@@ -0,0 +1,8 @@
+import { Card } from '../card';
+import type { UnionCardData } from '../../components/Containers/UnionCard/types';
+/** Container of child cards — 1:1 with the frontend UnionCard. */
+export declare class UnionCard extends Card<UnionCardData & {
+    content: Card[];
+}> {
+}
+//# sourceMappingURL=UnionCard.d.ts.map

package/dist/server/cards/UnionCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnionCard.d.ts","sourceRoot":"","sources":["../../../src/server/cards/UnionCard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAA;AAC9B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAEhF,kEAAkE;AAClE,qBAAa,SAAU,SAAQ,IAAI,CAAC,aAAa,GAAG;IAAE,OAAO,EAAE,IAAI,EAAE,CAAA;CAAE,CAAC;CAAG"}

package/dist/server/cards/index.d.ts

@@ -0,0 +1,6 @@
+export { HiddenCard } from './HiddenCard';
+export { UnionCard } from './UnionCard';
+export { AjaxGroupCard } from './AjaxGroupCard';
+export { OneOfCard } from './OneOfCard';
+export { HTMLEmbedCard } from './HTMLEmbedCard';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/cards/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/cards/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/server/form.d.ts

@@ -0,0 +1,5 @@
+/** Normalise a parsed form body: a single-element array collapses to a scalar. */
+export declare function form2dict(body: Record<string, unknown>): Record<string, unknown>;
+/** Optional `by_underscore` nesting: `addr__city` → `addr.city`. Mirrors pie aggregate. */
+export declare function aggregate(data: Record<string, unknown>, rule?: 'by_underscore'): Record<string, unknown>;
+//# sourceMappingURL=form.d.ts.map

package/dist/server/form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.d.ts","sourceRoot":"","sources":["../../src/server/form.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,wBAAgB,SAAS,CACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED,2FAA2F;AAC3F,wBAAgB,SAAS,CACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,eAAe,GACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAezB"}

package/dist/server/index.d.ts

@@ -0,0 +1,9 @@
+export { Card, InputCard } from './card';
+export { AsyncPage } from './page';
+export { Web } from './web';
+export { publishToCentrifuge } from './realtime';
+export * from './cards';
+export { form2dict, aggregate } from './form';
+export type { Publisher } from './realtime';
+export type { SocketIOEvent, WebOptions, PageContext, UIConfigType, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,cAAc,SAAS,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAC7C,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,YAAY,EACR,aAAa,EACb,UAAU,EACV,WAAW,EACX,YAAY,GACf,MAAM,SAAS,CAAA"}

package/dist/server/index.esm.js

@@ -0,0 +1,382 @@
+// src/server/card.ts
+function isCardRecord(v) {
+  if (typeof v !== "object" || v === null || Array.isArray(v))
+    return false;
+  const vals = Object.values(v);
+  return vals.length > 0 && vals.every((x) => x instanceof Card);
+}
+
+class Card {
+  card = this.constructor.name;
+  constructor(props) {
+    if (props)
+      Object.assign(this, props);
+  }
+  generate() {
+    const data = {};
+    const children = {};
+    for (const key of Object.keys(this)) {
+      if (key === "card")
+        continue;
+      const value = this[key];
+      if (value instanceof Card) {
+        children[key] = value.generate();
+      } else if (Array.isArray(value) && value.length > 0 && value.every((v) => v instanceof Card)) {
+        children[key] = value.map((v) => v.generate());
+      } else if (isCardRecord(value)) {
+        children[key] = Object.fromEntries(Object.entries(value).map(([k, v]) => [
+          k,
+          v.generate()
+        ]));
+      } else {
+        data[key] = value;
+      }
+    }
+    return { ...children, card: this.card, data };
+  }
+  inputChildLoc() {
+    const acc = {};
+    const visit = (card) => {
+      const name = card.name;
+      if (card instanceof InputCard && typeof name === "string") {
+        acc[name] = card;
+      }
+      for (const key of Object.keys(card)) {
+        const v = card[key];
+        if (v instanceof Card)
+          visit(v);
+        else if (Array.isArray(v))
+          v.forEach((x) => x instanceof Card && visit(x));
+        else if (v && typeof v === "object")
+          Object.values(v).forEach((x) => x instanceof Card && visit(x));
+      }
+    };
+    visit(this);
+    return acc;
+  }
+  fill(data) {
+    const loc = this.inputChildLoc();
+    for (const [name, card] of Object.entries(loc)) {
+      if (name in data) {
+        card.value = data[name];
+      }
+    }
+    return this.generate();
+  }
+  createEvent(method, data = {}) {
+    const name = this.name;
+    if (typeof name !== "string") {
+      throw new Error("Card.createEvent requires a string `name`");
+    }
+    const self = this;
+    const io = self.useSocketioSupport || self.useCentrifugeSupport || self.useMittSupport;
+    if (!io) {
+      throw new Error("Card.createEvent requires an IO support flag enabled");
+    }
+    return { name: `pie${method}_${name}`, data };
+  }
+}
+
+class InputCard extends Card {
+  parse(raw) {
+    return raw;
+  }
+}
+// src/server/page.ts
+class AsyncPage {
+  fields;
+  isTyped;
+  ajaxPost = {};
+  ajaxGet = {};
+  publisher;
+  constructor(isTyped = false) {
+    this.isTyped = isTyped;
+  }
+  async getContent(_ctx = {}) {
+    if (this.fields)
+      return this.fields.fill({});
+    throw new Error("getContent not implemented and no `fields` set");
+  }
+  async process(_data) {
+    throw new Error("process not implemented");
+  }
+  registerAjax(pathname, fn, method = "POST") {
+    if (method === "POST")
+      this.ajaxPost[pathname] = fn;
+    else
+      this.ajaxGet[pathname] = fn;
+  }
+  setPublisher(p) {
+    this.publisher = p;
+  }
+  async emit(event, to) {
+    if (!this.publisher) {
+      throw new Error("no publisher configured (Web must call setPublisher)");
+    }
+    const events = Array.isArray(event) ? event : [event];
+    for (const ev of events)
+      await this.publisher(ev, to);
+  }
+}
+// src/server/web.ts
+import express from "express";
+import cookieParser from "cookie-parser";
+import jwt from "jsonwebtoken";
+import { createHash } from "node:crypto";
+
+// src/server/form.ts
+function form2dict(body) {
+  const out = {};
+  for (const [k, v] of Object.entries(body ?? {})) {
+    out[k] = Array.isArray(v) && v.length === 1 ? v[0] : v;
+  }
+  return out;
+}
+function aggregate(data, rule) {
+  if (rule !== "by_underscore")
+    return data;
+  const out = {};
+  for (const [k, v] of Object.entries(data)) {
+    const idx = k.indexOf("__");
+    if (idx === -1) {
+      out[k] = v;
+    } else {
+      const parent = k.slice(0, idx);
+      const child = k.slice(idx + 2);
+      const bucket = out[parent] ??= {};
+      bucket[child] = v;
+    }
+  }
+  return out;
+}
+
+// src/server/realtime.ts
+async function publishToCentrifuge(opts, fetchFn = fetch) {
+  const res = await fetchFn(`${opts.url.replace(/\/$/, "")}/api/publish`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "X-API-Key": opts.apiKey
+    },
+    body: JSON.stringify({ channel: opts.channel, data: opts.data })
+  });
+  if (!res.ok) {
+    throw new Error(`centrifuge publish failed: ${res.status}`);
+  }
+}
+
+// src/server/web.ts
+function escapeRegExp(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+class Web {
+  pages;
+  opts;
+  constructor(pages, opts = {}) {
+    this.pages = pages;
+    const adminSubdomain = opts.adminSubdomain ?? "/";
+    if (!adminSubdomain.startsWith("/") || !adminSubdomain.endsWith("/")) {
+      throw new Error('adminSubdomain must start and end with "/"');
+    }
+    this.opts = { ...opts, adminSubdomain };
+    this.wirePublishers();
+  }
+  wirePublishers() {
+    if (!this.opts.useCentrifugeSupport || !this.opts.centrifugeUrl || !this.opts.centrifugeApiKey) {
+      return;
+    }
+    for (const entry of Object.values(this.pages)) {
+      if (typeof entry === "string")
+        continue;
+      entry.setPublisher(async (ev, to) => {
+        const channel = to ? `${ev.name}_${to}` : ev.name;
+        await publishToCentrifuge({
+          url: this.opts.centrifugeUrl,
+          apiKey: this.opts.centrifugeApiKey,
+          channel,
+          data: ev.data
+        });
+      });
+    }
+  }
+  resolvePage(pathname) {
+    let key = pathname.replace(/^\/+/, "");
+    let hops = 0;
+    while (hops++ < 10) {
+      const entry = this.pages[key];
+      if (entry === undefined)
+        return null;
+      if (typeof entry === "string") {
+        key = entry;
+        continue;
+      }
+      return entry;
+    }
+    return null;
+  }
+  contextFromRequest(req) {
+    const ctx = {};
+    for (const k of this.opts.cookieKeys ?? []) {
+      const c = req.cookies?.[k];
+      if (c !== undefined)
+        ctx[k] = c;
+    }
+    Object.assign(ctx, req.query);
+    return ctx;
+  }
+  collectAjax(kind) {
+    const map = {};
+    for (const entry of Object.values(this.pages)) {
+      if (typeof entry === "string")
+        continue;
+      Object.assign(map, entry[kind]);
+    }
+    return map;
+  }
+  getApp() {
+    const app = express();
+    app.use(express.urlencoded({ extended: true }));
+    app.use(express.json());
+    app.use(cookieParser());
+    if (this.opts.enableCors)
+      app.use(this.corsMiddleware());
+    const sub = this.opts.adminSubdomain;
+    const contentPrefix = `${sub}api/content/`;
+    const processPrefix = `${sub}api/process/`;
+    const ajaxPrefix = `${sub}api/ajax_content/`;
+    app.get(new RegExp("^" + escapeRegExp(contentPrefix)), async (req, res) => {
+      const pathname = decodeURIComponent(req.path.slice(contentPrefix.length));
+      const page = this.resolvePage(pathname);
+      if (!page) {
+        res.status(404).json({ error: "page not found" });
+        return;
+      }
+      try {
+        res.json(await page.getContent(this.contextFromRequest(req)));
+      } catch (e) {
+        res.status(500).json({ error: String(e) });
+      }
+    });
+    app.post(new RegExp("^" + escapeRegExp(processPrefix)), async (req, res) => {
+      const pathname = decodeURIComponent(req.path.slice(processPrefix.length));
+      const page = this.resolvePage(pathname);
+      if (!page) {
+        res.status(404).json({ error: "page not found" });
+        return;
+      }
+      const data = aggregate(form2dict(req.body), this.opts.aggregationRule);
+      try {
+        const result = await page.process(data);
+        if (typeof result !== "string") {
+          if (!res.headersSent)
+            res.status(204).end();
+          return;
+        }
+        let url = result;
+        if (url.startsWith("/")) {
+          url = sub + url.slice(1);
+          if (this.opts.disableServing && this.opts.servingUrl) {
+            url = this.opts.servingUrl + url;
+          }
+        }
+        res.redirect(303, url);
+      } catch (e) {
+        res.status(500).json({ error: String(e) });
+      }
+    });
+    const postAjax = this.collectAjax("ajaxPost");
+    const getAjax = this.collectAjax("ajaxGet");
+    app.post(new RegExp("^" + escapeRegExp(ajaxPrefix)), async (req, res) => {
+      const pathname = "/" + req.path.slice(ajaxPrefix.length);
+      const fn = postAjax[pathname];
+      if (!fn) {
+        res.status(404).json({ error: "ajax handler not found" });
+        return;
+      }
+      const data = aggregate(form2dict(req.body), this.opts.aggregationRule);
+      res.json(await fn(data));
+    });
+    app.get(new RegExp("^" + escapeRegExp(ajaxPrefix)), async (req, res) => {
+      const pathname = "/" + req.path.slice(ajaxPrefix.length);
+      const fn = getAjax[pathname];
+      if (!fn) {
+        res.status(404).json({ error: "ajax handler not found" });
+        return;
+      }
+      const data = aggregate({ ...req.query }, this.opts.aggregationRule);
+      res.json(await fn(data));
+    });
+    app.get(`${sub}api/support/:name`, (req, res) => {
+      const name = req.params.name;
+      const supported = name === "socketio" ? !!this.opts.useSocketioSupport : name === "centrifuge" ? !!this.opts.useCentrifugeSupport : false;
+      res.json(supported);
+    });
+    app.get("/api/centrifuge/gen_token", (req, res) => {
+      const secret = this.opts.centrifugeHmacSecret;
+      if (!secret) {
+        res.status(403).json({ error: "no centrifuge secret" });
+        return;
+      }
+      const cookies = {};
+      for (const k of this.opts.cookieKeys ?? []) {
+        const v = req.cookies?.[k];
+        if (typeof v === "string")
+          cookies[k] = v;
+      }
+      const subId = this.opts.centrifugeSubFn?.(cookies) ?? createHash("sha256").update(JSON.stringify(cookies)).digest("hex");
+      const now = Math.floor(Date.now() / 1000);
+      const token = jwt.sign({ sub: subId, iat: now, exp: now + 3600 }, secret, { algorithm: "HS256" });
+      res.json({ token });
+    });
+    return app;
+  }
+  corsMiddleware() {
+    const origins = this.opts.corsOrigins;
+    return (req, res, next) => {
+      const origin = req.headers.origin;
+      if (!origins || origin && origins.includes(origin)) {
+        res.setHeader("Access-Control-Allow-Origin", origin ?? "*");
+      }
+      res.setHeader("Access-Control-Allow-Credentials", "true");
+      res.setHeader("Access-Control-Allow-Methods", "GET,POST,OPTIONS");
+      res.setHeader("Vary", "Origin");
+      const reqHeaders = req.headers["access-control-request-headers"];
+      res.setHeader("Access-Control-Allow-Headers", (Array.isArray(reqHeaders) ? reqHeaders.join(",") : reqHeaders) || "Content-Type");
+      if (req.method === "OPTIONS") {
+        res.sendStatus(204);
+        return;
+      }
+      next();
+    };
+  }
+}
+// src/server/cards/HiddenCard.ts
+class HiddenCard extends InputCard {
+}
+// src/server/cards/UnionCard.ts
+class UnionCard extends Card {
+}
+// src/server/cards/AjaxGroupCard.ts
+class AjaxGroupCard extends Card {
+}
+// src/server/cards/OneOfCard.ts
+class OneOfCard extends Card {
+}
+// src/server/cards/HTMLEmbedCard.ts
+class HTMLEmbedCard extends Card {
+}
+export {
+  publishToCentrifuge,
+  form2dict,
+  aggregate,
+  Web,
+  UnionCard,
+  OneOfCard,
+  InputCard,
+  HiddenCard,
+  HTMLEmbedCard,
+  Card,
+  AsyncPage,
+  AjaxGroupCard
+};

package/dist/server/index.js

@@ -0,0 +1,427 @@
+var __create = Object.create;
+var __getProtoOf = Object.getPrototypeOf;
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __toESM = (mod, isNodeMode, target) => {
+  target = mod != null ? __create(__getProtoOf(mod)) : {};
+  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  for (let key of __getOwnPropNames(mod))
+    if (!__hasOwnProp.call(to, key))
+      __defProp(to, key, {
+        get: () => mod[key],
+        enumerable: true
+      });
+  return to;
+};
+var __moduleCache = /* @__PURE__ */ new WeakMap;
+var __toCommonJS = (from) => {
+  var entry = __moduleCache.get(from), desc;
+  if (entry)
+    return entry;
+  entry = __defProp({}, "__esModule", { value: true });
+  if (from && typeof from === "object" || typeof from === "function")
+    __getOwnPropNames(from).map((key) => !__hasOwnProp.call(entry, key) && __defProp(entry, key, {
+      get: () => from[key],
+      enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+    }));
+  __moduleCache.set(from, entry);
+  return entry;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: (newValue) => all[name] = () => newValue
+    });
+};
+
+// src/server/index.ts
+var exports_server = {};
+__export(exports_server, {
+  publishToCentrifuge: () => publishToCentrifuge,
+  form2dict: () => form2dict,
+  aggregate: () => aggregate,
+  Web: () => Web,
+  UnionCard: () => UnionCard,
+  OneOfCard: () => OneOfCard,
+  InputCard: () => InputCard,
+  HiddenCard: () => HiddenCard,
+  HTMLEmbedCard: () => HTMLEmbedCard,
+  Card: () => Card,
+  AsyncPage: () => AsyncPage,
+  AjaxGroupCard: () => AjaxGroupCard
+});
+module.exports = __toCommonJS(exports_server);
+
+// src/server/card.ts
+function isCardRecord(v) {
+  if (typeof v !== "object" || v === null || Array.isArray(v))
+    return false;
+  const vals = Object.values(v);
+  return vals.length > 0 && vals.every((x) => x instanceof Card);
+}
+
+class Card {
+  card = this.constructor.name;
+  constructor(props) {
+    if (props)
+      Object.assign(this, props);
+  }
+  generate() {
+    const data = {};
+    const children = {};
+    for (const key of Object.keys(this)) {
+      if (key === "card")
+        continue;
+      const value = this[key];
+      if (value instanceof Card) {
+        children[key] = value.generate();
+      } else if (Array.isArray(value) && value.length > 0 && value.every((v) => v instanceof Card)) {
+        children[key] = value.map((v) => v.generate());
+      } else if (isCardRecord(value)) {
+        children[key] = Object.fromEntries(Object.entries(value).map(([k, v]) => [
+          k,
+          v.generate()
+        ]));
+      } else {
+        data[key] = value;
+      }
+    }
+    return { ...children, card: this.card, data };
+  }
+  inputChildLoc() {
+    const acc = {};
+    const visit = (card) => {
+      const name = card.name;
+      if (card instanceof InputCard && typeof name === "string") {
+        acc[name] = card;
+      }
+      for (const key of Object.keys(card)) {
+        const v = card[key];
+        if (v instanceof Card)
+          visit(v);
+        else if (Array.isArray(v))
+          v.forEach((x) => x instanceof Card && visit(x));
+        else if (v && typeof v === "object")
+          Object.values(v).forEach((x) => x instanceof Card && visit(x));
+      }
+    };
+    visit(this);
+    return acc;
+  }
+  fill(data) {
+    const loc = this.inputChildLoc();
+    for (const [name, card] of Object.entries(loc)) {
+      if (name in data) {
+        card.value = data[name];
+      }
+    }
+    return this.generate();
+  }
+  createEvent(method, data = {}) {
+    const name = this.name;
+    if (typeof name !== "string") {
+      throw new Error("Card.createEvent requires a string `name`");
+    }
+    const self = this;
+    const io = self.useSocketioSupport || self.useCentrifugeSupport || self.useMittSupport;
+    if (!io) {
+      throw new Error("Card.createEvent requires an IO support flag enabled");
+    }
+    return { name: `pie${method}_${name}`, data };
+  }
+}
+
+class InputCard extends Card {
+  parse(raw) {
+    return raw;
+  }
+}
+// src/server/page.ts
+class AsyncPage {
+  fields;
+  isTyped;
+  ajaxPost = {};
+  ajaxGet = {};
+  publisher;
+  constructor(isTyped = false) {
+    this.isTyped = isTyped;
+  }
+  async getContent(_ctx = {}) {
+    if (this.fields)
+      return this.fields.fill({});
+    throw new Error("getContent not implemented and no `fields` set");
+  }
+  async process(_data) {
+    throw new Error("process not implemented");
+  }
+  registerAjax(pathname, fn, method = "POST") {
+    if (method === "POST")
+      this.ajaxPost[pathname] = fn;
+    else
+      this.ajaxGet[pathname] = fn;
+  }
+  setPublisher(p) {
+    this.publisher = p;
+  }
+  async emit(event, to) {
+    if (!this.publisher) {
+      throw new Error("no publisher configured (Web must call setPublisher)");
+    }
+    const events = Array.isArray(event) ? event : [event];
+    for (const ev of events)
+      await this.publisher(ev, to);
+  }
+}
+// src/server/web.ts
+var import_express = __toESM(require("express"));
+var import_cookie_parser = __toESM(require("cookie-parser"));
+var import_jsonwebtoken = __toESM(require("jsonwebtoken"));
+var import_node_crypto = require("node:crypto");
+
+// src/server/form.ts
+function form2dict(body) {
+  const out = {};
+  for (const [k, v] of Object.entries(body ?? {})) {
+    out[k] = Array.isArray(v) && v.length === 1 ? v[0] : v;
+  }
+  return out;
+}
+function aggregate(data, rule) {
+  if (rule !== "by_underscore")
+    return data;
+  const out = {};
+  for (const [k, v] of Object.entries(data)) {
+    const idx = k.indexOf("__");
+    if (idx === -1) {
+      out[k] = v;
+    } else {
+      const parent = k.slice(0, idx);
+      const child = k.slice(idx + 2);
+      const bucket = out[parent] ??= {};
+      bucket[child] = v;
+    }
+  }
+  return out;
+}
+
+// src/server/realtime.ts
+async function publishToCentrifuge(opts, fetchFn = fetch) {
+  const res = await fetchFn(`${opts.url.replace(/\/$/, "")}/api/publish`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "X-API-Key": opts.apiKey
+    },
+    body: JSON.stringify({ channel: opts.channel, data: opts.data })
+  });
+  if (!res.ok) {
+    throw new Error(`centrifuge publish failed: ${res.status}`);
+  }
+}
+
+// src/server/web.ts
+function escapeRegExp(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+class Web {
+  pages;
+  opts;
+  constructor(pages, opts = {}) {
+    this.pages = pages;
+    const adminSubdomain = opts.adminSubdomain ?? "/";
+    if (!adminSubdomain.startsWith("/") || !adminSubdomain.endsWith("/")) {
+      throw new Error('adminSubdomain must start and end with "/"');
+    }
+    this.opts = { ...opts, adminSubdomain };
+    this.wirePublishers();
+  }
+  wirePublishers() {
+    if (!this.opts.useCentrifugeSupport || !this.opts.centrifugeUrl || !this.opts.centrifugeApiKey) {
+      return;
+    }
+    for (const entry of Object.values(this.pages)) {
+      if (typeof entry === "string")
+        continue;
+      entry.setPublisher(async (ev, to) => {
+        const channel = to ? `${ev.name}_${to}` : ev.name;
+        await publishToCentrifuge({
+          url: this.opts.centrifugeUrl,
+          apiKey: this.opts.centrifugeApiKey,
+          channel,
+          data: ev.data
+        });
+      });
+    }
+  }
+  resolvePage(pathname) {
+    let key = pathname.replace(/^\/+/, "");
+    let hops = 0;
+    while (hops++ < 10) {
+      const entry = this.pages[key];
+      if (entry === undefined)
+        return null;
+      if (typeof entry === "string") {
+        key = entry;
+        continue;
+      }
+      return entry;
+    }
+    return null;
+  }
+  contextFromRequest(req) {
+    const ctx = {};
+    for (const k of this.opts.cookieKeys ?? []) {
+      const c = req.cookies?.[k];
+      if (c !== undefined)
+        ctx[k] = c;
+    }
+    Object.assign(ctx, req.query);
+    return ctx;
+  }
+  collectAjax(kind) {
+    const map = {};
+    for (const entry of Object.values(this.pages)) {
+      if (typeof entry === "string")
+        continue;
+      Object.assign(map, entry[kind]);
+    }
+    return map;
+  }
+  getApp() {
+    const app = import_express.default();
+    app.use(import_express.default.urlencoded({ extended: true }));
+    app.use(import_express.default.json());
+    app.use(import_cookie_parser.default());
+    if (this.opts.enableCors)
+      app.use(this.corsMiddleware());
+    const sub = this.opts.adminSubdomain;
+    const contentPrefix = `${sub}api/content/`;
+    const processPrefix = `${sub}api/process/`;
+    const ajaxPrefix = `${sub}api/ajax_content/`;
+    app.get(new RegExp("^" + escapeRegExp(contentPrefix)), async (req, res) => {
+      const pathname = decodeURIComponent(req.path.slice(contentPrefix.length));
+      const page = this.resolvePage(pathname);
+      if (!page) {
+        res.status(404).json({ error: "page not found" });
+        return;
+      }
+      try {
+        res.json(await page.getContent(this.contextFromRequest(req)));
+      } catch (e) {
+        res.status(500).json({ error: String(e) });
+      }
+    });
+    app.post(new RegExp("^" + escapeRegExp(processPrefix)), async (req, res) => {
+      const pathname = decodeURIComponent(req.path.slice(processPrefix.length));
+      const page = this.resolvePage(pathname);
+      if (!page) {
+        res.status(404).json({ error: "page not found" });
+        return;
+      }
+      const data = aggregate(form2dict(req.body), this.opts.aggregationRule);
+      try {
+        const result = await page.process(data);
+        if (typeof result !== "string") {
+          if (!res.headersSent)
+            res.status(204).end();
+          return;
+        }
+        let url = result;
+        if (url.startsWith("/")) {
+          url = sub + url.slice(1);
+          if (this.opts.disableServing && this.opts.servingUrl) {
+            url = this.opts.servingUrl + url;
+          }
+        }
+        res.redirect(303, url);
+      } catch (e) {
+        res.status(500).json({ error: String(e) });
+      }
+    });
+    const postAjax = this.collectAjax("ajaxPost");
+    const getAjax = this.collectAjax("ajaxGet");
+    app.post(new RegExp("^" + escapeRegExp(ajaxPrefix)), async (req, res) => {
+      const pathname = "/" + req.path.slice(ajaxPrefix.length);
+      const fn = postAjax[pathname];
+      if (!fn) {
+        res.status(404).json({ error: "ajax handler not found" });
+        return;
+      }
+      const data = aggregate(form2dict(req.body), this.opts.aggregationRule);
+      res.json(await fn(data));
+    });
+    app.get(new RegExp("^" + escapeRegExp(ajaxPrefix)), async (req, res) => {
+      const pathname = "/" + req.path.slice(ajaxPrefix.length);
+      const fn = getAjax[pathname];
+      if (!fn) {
+        res.status(404).json({ error: "ajax handler not found" });
+        return;
+      }
+      const data = aggregate({ ...req.query }, this.opts.aggregationRule);
+      res.json(await fn(data));
+    });
+    app.get(`${sub}api/support/:name`, (req, res) => {
+      const name = req.params.name;
+      const supported = name === "socketio" ? !!this.opts.useSocketioSupport : name === "centrifuge" ? !!this.opts.useCentrifugeSupport : false;
+      res.json(supported);
+    });
+    app.get("/api/centrifuge/gen_token", (req, res) => {
+      const secret = this.opts.centrifugeHmacSecret;
+      if (!secret) {
+        res.status(403).json({ error: "no centrifuge secret" });
+        return;
+      }
+      const cookies = {};
+      for (const k of this.opts.cookieKeys ?? []) {
+        const v = req.cookies?.[k];
+        if (typeof v === "string")
+          cookies[k] = v;
+      }
+      const subId = this.opts.centrifugeSubFn?.(cookies) ?? import_node_crypto.createHash("sha256").update(JSON.stringify(cookies)).digest("hex");
+      const now = Math.floor(Date.now() / 1000);
+      const token = import_jsonwebtoken.default.sign({ sub: subId, iat: now, exp: now + 3600 }, secret, { algorithm: "HS256" });
+      res.json({ token });
+    });
+    return app;
+  }
+  corsMiddleware() {
+    const origins = this.opts.corsOrigins;
+    return (req, res, next) => {
+      const origin = req.headers.origin;
+      if (!origins || origin && origins.includes(origin)) {
+        res.setHeader("Access-Control-Allow-Origin", origin ?? "*");
+      }
+      res.setHeader("Access-Control-Allow-Credentials", "true");
+      res.setHeader("Access-Control-Allow-Methods", "GET,POST,OPTIONS");
+      res.setHeader("Vary", "Origin");
+      const reqHeaders = req.headers["access-control-request-headers"];
+      res.setHeader("Access-Control-Allow-Headers", (Array.isArray(reqHeaders) ? reqHeaders.join(",") : reqHeaders) || "Content-Type");
+      if (req.method === "OPTIONS") {
+        res.sendStatus(204);
+        return;
+      }
+      next();
+    };
+  }
+}
+// src/server/cards/HiddenCard.ts
+class HiddenCard extends InputCard {
+}
+// src/server/cards/UnionCard.ts
+class UnionCard extends Card {
+}
+// src/server/cards/AjaxGroupCard.ts
+class AjaxGroupCard extends Card {
+}
+// src/server/cards/OneOfCard.ts
+class OneOfCard extends Card {
+}
+// src/server/cards/HTMLEmbedCard.ts
+class HTMLEmbedCard extends Card {
+}

package/dist/server/page.d.ts

@@ -0,0 +1,26 @@
+import { Card } from './card';
+import type { SocketIOEvent } from './types';
+import type { Publisher } from './realtime';
+type AjaxFn = (data: Record<string, unknown>) => Promise<unknown>;
+/**
+ * Base page. Mirrors pie's AsyncPage: holds a `fields` card tree and exposes
+ * `getContent`/`process`/`registerAjax`/`emit`.
+ */
+export declare class AsyncPage {
+    fields?: Card;
+    isTyped: boolean;
+    ajaxPost: Record<string, AjaxFn>;
+    ajaxGet: Record<string, AjaxFn>;
+    private publisher?;
+    constructor(isTyped?: boolean);
+    /** Return the filled UIConfig. Default fills `fields` with `{}`; override to use ctx. */
+    getContent(_ctx?: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /** Handle a form submission. Return a string URL (→303 redirect). */
+    process(_data: Record<string, unknown>): Promise<string | unknown>;
+    registerAjax(pathname: string, fn: AjaxFn, method?: 'POST' | 'GET'): void;
+    /** Injected by Web to route emitted events to the configured transport. */
+    setPublisher(p: Publisher): void;
+    emit(event: SocketIOEvent | SocketIOEvent[], to?: string): Promise<void>;
+}
+export {};
+//# sourceMappingURL=page.d.ts.map

package/dist/server/page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../src/server/page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;AAEjE;;;GAGG;AACH,qBAAa,SAAS;IAClB,MAAM,CAAC,EAAE,IAAI,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAK;IACrC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAK;IACpC,OAAO,CAAC,SAAS,CAAC,CAAW;gBAEjB,OAAO,UAAQ;IAI3B,yFAAyF;IACnF,UAAU,CACZ,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAKnC,qEAAqE;IAC/D,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;IAIxE,YAAY,CACR,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,MAAM,GAAE,MAAM,GAAG,KAAc,GAChC,IAAI;IAKP,2EAA2E;IAC3E,YAAY,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI;IAI1B,IAAI,CACN,KAAK,EAAE,aAAa,GAAG,aAAa,EAAE,EACtC,EAAE,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;CAOnB"}

package/dist/server/realtime.d.ts

@@ -0,0 +1,13 @@
+import type { SocketIOEvent } from './types';
+type FetchFn = typeof fetch;
+/** Publish a payload to a Centrifugo channel via its HTTP API. Mirrors pie publish. */
+export declare function publishToCentrifuge(opts: {
+    url: string;
+    apiKey: string;
+    channel: string;
+    data: unknown;
+}, fetchFn?: FetchFn): Promise<void>;
+/** Publishes a single event, optionally scoped to a subscriber id `to`. */
+export type Publisher = (event: SocketIOEvent, to?: string) => Promise<void>;
+export {};
+//# sourceMappingURL=realtime.d.ts.map

package/dist/server/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../src/server/realtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAE5C,KAAK,OAAO,GAAG,OAAO,KAAK,CAAA;AAE3B,uFAAuF;AACvF,wBAAsB,mBAAmB,CACrC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,EACrE,OAAO,GAAE,OAAe,GACzB,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,2EAA2E;AAC3E,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA"}

package/dist/server/types.d.ts

@@ -0,0 +1,28 @@
+import type { UIConfigType } from '../types';
+export type { UIConfigType };
+/** A realtime event: name `pie{method}_{cardName}` + payload. Mirrors pie's SocketIOEvent. */
+export interface SocketIOEvent {
+    name: string;
+    data: Record<string, unknown>;
+}
+/** Subset of request context handed to page methods (cookies + query + body merged). */
+export type PageContext = Record<string, unknown>;
+export interface WebOptions {
+    cookieKeys?: string[];
+    cookieOptions?: Record<string, unknown>;
+    enableCors?: boolean;
+    corsOrigins?: string[];
+    /** Route prefix; must start and end with "/". Default "/". Mirrors pie admin_subdomain. */
+    adminSubdomain?: string;
+    disableServing?: boolean;
+    servingUrl?: string;
+    assetsPath?: string;
+    aggregationRule?: 'by_underscore';
+    useSocketioSupport?: boolean;
+    useCentrifugeSupport?: boolean;
+    centrifugeUrl?: string;
+    centrifugeApiKey?: string;
+    centrifugeHmacSecret?: string;
+    centrifugeSubFn?: (cookies: Record<string, string>) => string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/server/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,YAAY,EAAE,YAAY,EAAE,CAAA;AAE5B,8FAA8F;AAC9F,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED,wFAAwF;AACxF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEjD,MAAM,WAAW,UAAU;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAA;CAChE"}

package/dist/server/web.d.ts

@@ -0,0 +1,23 @@
+import { type Express } from 'express';
+import { AsyncPage } from './page';
+import type { WebOptions } from './types';
+/**
+ * Assembles an Express app mirroring the pie FastAPI runtime: routes for
+ * content, process, ajax, support, and centrifuge token, plus realtime
+ * publishing wired into every page.
+ */
+export declare class Web {
+    pages: Record<string, AsyncPage | string>;
+    opts: WebOptions & {
+        adminSubdomain: string;
+    };
+    constructor(pages: Record<string, AsyncPage | string>, opts?: WebOptions);
+    private wirePublishers;
+    /** Resolve a pathname to a page, following string aliases. */
+    resolvePage(pathname: string): AsyncPage | null;
+    private contextFromRequest;
+    private collectAjax;
+    getApp(): Express;
+    private corsMiddleware;
+}
+//# sourceMappingURL=web.d.ts.map

package/dist/server/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/server/web.ts"],"names":[],"mappings":"AAAA,OAAgB,EACZ,KAAK,OAAO,EAIf,MAAM,SAAS,CAAA;AAIhB,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAGlC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAMzC;;;;GAIG;AACH,qBAAa,GAAG;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC,CAAA;IACzC,IAAI,EAAE,UAAU,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAA;gBAEjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC,EAAE,IAAI,GAAE,UAAe;IAU5E,OAAO,CAAC,cAAc;IAsBtB,8DAA8D;IAC9D,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAe/C,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,WAAW;IAYnB,MAAM,IAAI,OAAO;IAkJjB,OAAO,CAAC,cAAc;CAyBzB"}

package/dist/tests/server/card-fill.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=card-fill.test.d.ts.map

package/dist/tests/server/card-fill.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card-fill.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/card-fill.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/card-generate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=card-generate.test.d.ts.map

package/dist/tests/server/card-generate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"card-generate.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/card-generate.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/cards.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cards.test.d.ts.map

package/dist/tests/server/cards.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cards.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/cards.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/e2e.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=e2e.test.d.ts.map

package/dist/tests/server/e2e.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2e.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/e2e.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/entry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=entry.test.d.ts.map

package/dist/tests/server/entry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/entry.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/form.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=form.test.d.ts.map

package/dist/tests/server/form.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/form.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/page.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=page.test.d.ts.map

package/dist/tests/server/page.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/page.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/realtime.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=realtime.test.d.ts.map

package/dist/tests/server/realtime.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/realtime.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/web-ajax.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=web-ajax.test.d.ts.map

package/dist/tests/server/web-ajax.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-ajax.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/web-ajax.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/web-content.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=web-content.test.d.ts.map

package/dist/tests/server/web-content.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-content.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/web-content.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/web-process.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=web-process.test.d.ts.map

package/dist/tests/server/web-process.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-process.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/web-process.test.ts"],"names":[],"mappings":""}

package/dist/tests/server/web-token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=web-token.test.d.ts.map

package/dist/tests/server/web-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-token.test.d.ts","sourceRoot":"","sources":["../../../src/tests/server/web-token.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@swarm.ing/pieui",
-    "version": "2.1.7",
+    "version": "2.2.0",
     "description": "A React component library featuring PieCard component",
     "repository": {
         "type": "git",
@@ -34,6 +34,11 @@
             "require": "./dist/agent/index.js",
             "types": "./dist/agent/index.d.ts"
         },
+        "./server": {
+            "import": "./dist/server/index.esm.js",
+            "require": "./dist/server/index.js",
+            "types": "./dist/server/index.d.ts"
+        },
         "./telegram": {
             "import": "./dist/telegram/index.esm.js",
             "require": "./dist/telegram/index.js",
@@ -67,7 +72,7 @@
         }
     },
     "scripts": {
-        "build": "rm -rf ./dist && rm -rf pieui-*.tgz && bun run build:clean && NODE_ENV=production bun run build:esm && NODE_ENV=production bun run build:cjs && NODE_ENV=production bun run build:components:esm && NODE_ENV=production bun run build:components:cjs && NODE_ENV=production bun run build:agent:esm && NODE_ENV=production bun run build:agent:cjs && NODE_ENV=production bun run build:telegram:esm && NODE_ENV=production bun run build:telegram:cjs && NODE_ENV=production bun run build:native:esm && NODE_ENV=production bun run build:native:cjs && NODE_ENV=production bun run build:max:esm && NODE_ENV=production bun run build:max:cjs && NODE_ENV=production bun run build:storybook:esm && NODE_ENV=production bun run build:storybook:cjs && NODE_ENV=production bun run build:storybook:addon:esm && NODE_ENV=production bun run build:storybook:addon:cjs && NODE_ENV=production bun run build:storybook:addon:manager:esm && NODE_ENV=production bun run build:storybook:addon:manager:cjs && NODE_ENV=production bun run build:storybook:addon:preset && bun run build:banner && NODE_ENV=production bun run build:types && NODE_ENV=production bun run build:cli && bun src/cli.ts postbuild --src-dir src --out-dir dist && bun pm pack",
+        "build": "rm -rf ./dist && rm -rf pieui-*.tgz && bun run build:clean && NODE_ENV=production bun run build:esm && NODE_ENV=production bun run build:cjs && NODE_ENV=production bun run build:components:esm && NODE_ENV=production bun run build:components:cjs && NODE_ENV=production bun run build:agent:esm && NODE_ENV=production bun run build:agent:cjs && NODE_ENV=production bun run build:server:esm && NODE_ENV=production bun run build:server:cjs && NODE_ENV=production bun run build:telegram:esm && NODE_ENV=production bun run build:telegram:cjs && NODE_ENV=production bun run build:native:esm && NODE_ENV=production bun run build:native:cjs && NODE_ENV=production bun run build:max:esm && NODE_ENV=production bun run build:max:cjs && NODE_ENV=production bun run build:storybook:esm && NODE_ENV=production bun run build:storybook:cjs && NODE_ENV=production bun run build:storybook:addon:esm && NODE_ENV=production bun run build:storybook:addon:cjs && NODE_ENV=production bun run build:storybook:addon:manager:esm && NODE_ENV=production bun run build:storybook:addon:manager:cjs && NODE_ENV=production bun run build:storybook:addon:preset && bun run build:banner && NODE_ENV=production bun run build:types && NODE_ENV=production bun run build:cli && bun src/cli.ts postbuild --src-dir src --out-dir dist && bun pm pack",
         "build:banner": "node -e \"const fs=require('fs');['dist/index.esm.js','dist/index.js','dist/components/index.esm.js','dist/components/index.js','dist/agent/index.esm.js','dist/agent/index.js','dist/telegram/index.esm.js','dist/telegram/index.js','dist/native/index.esm.js','dist/native/index.js','dist/max/index.esm.js','dist/max/index.js','dist/storybook/index.esm.js','dist/storybook/index.js','dist/storybook/addon/index.esm.js','dist/storybook/addon/index.js'].forEach(f=>{if(fs.existsSync(f)){fs.writeFileSync(f,'\\\"use client\\\";\\n'+fs.readFileSync(f,'utf8'))}})\"",
         "build:clean": "rm -rf dist",
         "build:esm": "bun build src/index.ts --outfile dist/index.esm.js --format esm --target browser --jsx=automatic --jsx-import-source=react --minify --packages=external",
@@ -76,6 +81,8 @@
         "build:components:cjs": "bun build src/components/index.ts --outfile dist/components/index.js --format cjs --target node --jsx=automatic --jsx-import-source=react --minify --packages=external",
         "build:agent:esm": "bun build src/agent/index.ts --outfile dist/agent/index.esm.js --format esm --target browser --jsx=automatic --jsx-import-source=react --minify --packages=external",
         "build:agent:cjs": "bun build src/agent/index.ts --outfile dist/agent/index.js --format cjs --target node --jsx=automatic --jsx-import-source=react --minify --packages=external",
+        "build:server:esm": "bun build src/server/index.ts --outfile dist/server/index.esm.js --format esm --target node --packages=external",
+        "build:server:cjs": "bun build src/server/index.ts --outfile dist/server/index.js --format cjs --target node --packages=external",
         "build:telegram:esm": "bun build src/telegram/index.ts --outfile dist/telegram/index.esm.js --format esm --target browser --jsx=automatic --jsx-import-source=react --minify --packages=external",
         "build:telegram:cjs": "bun build src/telegram/index.ts --outfile dist/telegram/index.js --format cjs --target node --jsx=automatic --jsx-import-source=react --minify --packages=external",
         "build:native:esm": "bun build src/native/index.ts --outfile dist/native/index.esm.js --format esm --target browser --jsx=automatic --jsx-import-source=react --minify --packages=external",
@@ -133,7 +140,10 @@
         "react": ">=19",
         "react-dom": ">=19",
         "@openai/agents": "^0.4.5",
-        "react-native": ">=0.74"
+        "react-native": ">=0.74",
+        "express": "^5.0.0",
+        "jsonwebtoken": "^9.0.0",
+        "cookie-parser": "^1.4.0"
     },
     "peerDependenciesMeta": {
         "@openai/agents": {
@@ -141,14 +151,29 @@
         },
         "react-native": {
             "optional": true
+        },
+        "express": {
+            "optional": true
+        },
+        "jsonwebtoken": {
+            "optional": true
+        },
+        "cookie-parser": {
+            "optional": true
         }
     },
     "devDependencies": {
+        "cookie-parser": "^1.4.7",
+        "express": "^5.2.1",
+        "jsonwebtoken": "^9.0.3",
         "@openai/agents": "^0.4.5",
         "@testing-library/jest-dom": "^6.9.1",
         "@testing-library/react": "^16.3.2",
         "@types/bun": "latest",
+        "@types/cookie-parser": "^1.4.10",
+        "@types/express": "^5.0.6",
         "@types/glob": "^9.0.0",
+        "@types/jsonwebtoken": "^9.0.10",
         "@types/node": "^25.5.0",
         "@types/react": "^19.2.14",
         "ajv": "^8.18.0",