@toolplex/app-server 0.1.0

package/LICENSE

@@ -0,0 +1,98 @@
+License text copyright (c) 2025 ToolPlex LLC. All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+Parameters
+
+Licensor:             ToolPlex LLC
+Licensed Work:        ToolPlex App Server, as published in this repository. The Licensed Work is (c) 2025
+                      ToolPlex LLC.
+Additional Use Grant: You may make production use of the Licensed Work, provided
+                      your use does not involve offering it or derivative works on a 
+                      hosted or embedded basis to compete with ToolPlex's paid platform 
+                      or services. For purposes of this license:
+
+                      A "competitive offering" is a product or service that is offered 
+                      to third parties on a paid basis (including through paid support), 
+                      and that significantly overlaps with ToolPlex's platform, including: 
+                      tool discovery, tool execution, agent control, or workflow/playbook 
+                      reuse.
+
+                      "Product" means software made available to end users or used to 
+                      operate hosted services.
+
+                      "Embedded" includes incorporating source or binary components of 
+                      the Licensed Work into another product or requiring the Licensed 
+                      Work for that product to function.
+
+                      "Internal use" within your organization is permitted, even for 
+                      commercial purposes, as long as it is not redistributed or offered 
+                      to others.
+
+                      "API Integration Restrictions": Use of the ToolPlex API or services 
+                      to build, enhance, or operate a competitive offering is prohibited, 
+                      regardless of whether the Licensed Work is directly incorporated.
+
+                      "Derivative Works": Includes any modification, adaptation, or custom 
+                      implementation based on the Licensed Work, including but not limited 
+                      to custom clients for ToolPlex API interaction. While permitted under 
+                      this license, such derivatives may present technical challenges and 
+                      are not officially supported.
+
+                      "Research and Academic Use": Non-commercial research, educational, 
+                      and academic use is permitted regardless of competitive overlap, 
+                      provided results are not used to develop commercial competitive 
+                      offerings.
+
+                      "Official Client Recommendation": While custom clients are permitted 
+                      under this license, ToolPlex strongly recommends using the official 
+                      client to ensure compatibility, security, and optimal performance.
+
+                      Hosting or using the Licensed Work for internal purposes within an 
+                      organization is not considered a competitive offering. ToolPlex 
+                      considers your organization to include all of your affiliates under 
+                      common control.
+
+Change Date:          None
+Change License:       MPL 2.0
+
+For information about alternative licensing arrangements for the Licensed Work,
+please contact support@toolplex.ai.
+
+Notice
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited production use.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.

package/README.md

@@ -0,0 +1,193 @@
+# @toolplex/app-server
+
+Fastify plugin for serving [ToolPlex](https://toolplex.ai) App Pages. Define page layouts, data handlers, and actions — the plugin generates the HTTP endpoints that power interactive pages in the ToolPlex desktop and mobile apps.
+
+## Install
+
+```bash
+npm install @toolplex/app-server
+```
+
+Requires Fastify 5+.
+
+## Quick Start
+
+```typescript
+import Fastify from 'fastify';
+import { registerAppPages } from '@toolplex/app-server';
+
+const server = Fastify();
+
+await server.register(registerAppPages, {
+  authToken: process.env.TOOLPLEX_APP_TOKEN,
+
+  pages: {
+    'production-report': {
+      title: 'Production Report',
+      filters: [
+        { key: 'month', type: 'dropdown', options: ['2026-01', '2026-02', '2026-03'] },
+        { key: 'department', type: 'dropdown', options: ['socks', 'accessories'] },
+      ],
+      sections: [
+        { type: 'card-row', source: 'kpis' },
+        { type: 'table', source: 'production', rowKey: 'id', columns: [
+          { key: 'department', label: 'Department' },
+          { key: 'units', label: 'Units', format: 'integer' },
+          { key: 'rate', label: 'Fulfillment', format: 'percent' },
+          { key: 'status', label: 'Status', format: { type: 'status', colors: { on_track: 'green', behind: 'yellow' } } },
+        ]},
+      ],
+    },
+  },
+
+  resources: {
+    production: {
+      fetch: async ({ page, pageSize, sort, filters }) => {
+        const rows = await db.query('SELECT * FROM production WHERE ...', filters);
+        const total = await db.count('production');
+        return { rows, total };
+      },
+    },
+    kpis: {
+      fetch: async () => ({
+        rows: [
+          { label: 'Fulfillment', value: 0.87, format: 'percent' },
+          { label: 'Units', value: 12400, format: 'integer' },
+        ],
+        total: 2,
+      }),
+    },
+  },
+
+  actions: {},
+});
+
+await server.listen({ port: 3100 });
+```
+
+## Generated Endpoints
+
+| Route | Method | Description |
+|-------|--------|-------------|
+| `/pages` | GET | List all page definitions |
+| `/pages/:pageId` | GET | Single page definition |
+| `/data/:resource` | GET | Paginated data (query params: `page`, `pageSize`, `sort`, filters) |
+| `/actions/:action` | POST | Execute an action (`{ ids, params, filters }`) |
+| `/context/:resource` | GET | Agent context for a resource |
+| `/context/page/:pageId` | GET | Agent context for an entire page |
+
+All routes require `Authorization: Bearer <token>` matching the configured `authToken`.
+
+## Page Definition
+
+```typescript
+{
+  title: string;
+  filters?: Filter[];         // Dropdown, text, or date filters
+  actions?: Action[];         // Toolbar or inline row actions
+  suggestions?: string[];     // Ghost suggestions for the agent sidebar
+  sections: (Section | Section[])[];  // Layout — single = full width, array = side-by-side grid
+}
+```
+
+### Sections
+
+Sections render top-to-bottom. Wrap sections in an array for side-by-side layout using a 12-column grid:
+
+```typescript
+sections: [
+  { type: 'card-row', source: 'kpis' },                    // Full width
+  [                                                          // Side by side
+    { type: 'table', source: 'data', rowKey: 'id', span: 8, columns: [...] },
+    { type: 'card-column', source: 'detail', span: 4 },
+  ],
+]
+```
+
+**Section types:**
+- `card-row` — Horizontal row of metric cards
+- `card-column` — Vertical stack of cards (useful as a sidebar)
+- `table` — Paginated, sortable data grid with row selection
+
+Tables support a `detail` field for a slide-out drawer:
+
+```typescript
+{ type: 'table', source: 'orders', rowKey: 'id', columns: [...],
+  detail: { source: 'order_detail' } }
+```
+
+### Column Formatting
+
+Simple formats as strings, rich formats as objects:
+
+```typescript
+{ key: 'amount', label: 'Amount', format: 'currency' }            // $1,234.00
+{ key: 'rate', label: 'Rate', format: 'percent' }                 // 87.5%
+{ key: 'active', label: 'Active', format: 'boolean' }             // ✓ / ✗
+{ key: 'status', label: 'Status', format: { type: 'status',       // Colored badge
+    colors: { active: 'green', pending: 'yellow' } } }
+{ key: 'change', label: 'YoY', format: { type: 'delta',           // +12.3% / -5.1%
+    format: 'percent' } }
+{ key: 'done', label: 'Done', format: { type: 'progress' } }      // Progress bar
+{ key: 'url', label: 'Link', format: { type: 'link' } }           // Clickable URL
+{ key: 'photo', label: '', format: { type: 'image', width: 32 } } // Thumbnail
+```
+
+### Actions
+
+```typescript
+actions: [
+  // Inline — button on each row
+  { label: 'Approve', action: 'approve', placement: 'inline' },
+
+  // Toolbar — operates on checkbox-selected rows
+  { label: 'Export', action: 'export_csv', placement: 'toolbar', selection_required: true },
+
+  // Global — no row selection needed
+  { label: 'Refresh', action: 'refresh_data', placement: 'toolbar' },
+]
+```
+
+### Detail Drawer
+
+When a table has `detail: { source: 'order_detail' }`, clicking a row opens a slide-out panel. The detail resource returns typed blocks:
+
+```typescript
+order_detail: {
+  fetch: async ({ selection }) => ({
+    rows: [
+      { type: 'header', value: 'Order #1234' },
+      { type: 'field', label: 'Customer', value: 'Acme Corp' },
+      { type: 'field', label: 'Total', value: 1250, format: 'currency' },
+      { type: 'list', label: 'Notes', items: [{ label: 'Rush delivery requested' }] },
+      { type: 'table', label: 'Line Items', columns: [...], rows: [...] },
+      { type: 'image', label: 'Receipt', url: 'https://...' },
+    ],
+    total: 1,
+  }),
+}
+```
+
+## Handler Contracts
+
+**Fetch** — receives `{ page, pageSize, sort?, filters?, selection? }`, returns `{ rows, total }`. The plugin wraps the response with pagination metadata.
+
+**Action** — receives `{ ids, params, filters }`, returns `{ affected, message?, data? }`. `ids` can be empty for global actions.
+
+**Context** — receives `{ filters?, selection? }`, returns `{ summary, selection?, suggestions? }`. Used by the ToolPlex agent to understand what's on screen.
+
+## Validation
+
+The plugin validates configuration at startup. Misconfigurations throw immediately with descriptive errors:
+
+```
+@toolplex/app-server configuration errors:
+  - Page "orders": table section with source "orders" is missing required "rowKey"
+  - Page "orders": references action "approve" but no action handler is defined
+```
+
+Fetch and action handler responses are validated at runtime — missing `rows`, wrong `total` type, etc.
+
+## License
+
+See [LICENSE](./LICENSE) for details.

package/dist/auth.d.ts

@@ -0,0 +1,3 @@
+import type { FastifyRequest, FastifyReply } from "fastify";
+export declare function createAuthHook(expectedToken: string): (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5D,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,IAEhD,SAAS,cAAc,EACvB,OAAO,YAAY,KAClB,OAAO,CAAC,IAAI,CAAC,CAiBjB"}

package/dist/auth.js

@@ -0,0 +1,17 @@
+export function createAuthHook(expectedToken) {
+    return async function verifyBearerToken(request, reply) {
+        const header = request.headers.authorization;
+        if (!header?.startsWith("Bearer ")) {
+            reply
+                .code(401)
+                .send({ error: "Missing or malformed Authorization header" });
+            return reply;
+        }
+        const token = header.slice(7);
+        if (token !== expectedToken) {
+            reply.code(401).send({ error: "Invalid token" });
+            return reply;
+        }
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,aAAqB;IAClD,OAAO,KAAK,UAAU,iBAAiB,CACrC,OAAuB,EACvB,KAAmB;QAEnB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAE7C,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,KAAK;iBACF,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { registerAppPages } from "./plugin.js";
+export type { AppServerConfig, ResourceDefinition, PageDefinition, Section, CardRowSection, CardColumnSection, TableSection, Column, Filter, Action, ColumnFormat, SimpleFormat, RichFormat, StatusFormat, DeltaFormat, LinkFormat, ImageFormat, ProgressFormat, FetchRequest, FetchResponse, ActionRequest, ActionResponse, ContextRequest, ContextResponse, PageContextRequest, PaginatedResponse, CardData, DetailBlock, DetailHeader, DetailField, DetailList, DetailTable, DetailImage, FetchHandler, ActionHandler, ContextHandler, PageContextHandler, SortSpec, Selection, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,YAAY,EAEV,eAAe,EACf,kBAAkB,EAGlB,cAAc,EACd,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,MAAM,EACN,MAAM,EACN,MAAM,EAGN,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EAGd,YAAY,EACZ,aAAa,EACb,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EAGjB,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,WAAW,EAGX,YAAY,EACZ,aAAa,EACb,cAAc,EACd,kBAAkB,EAGlB,QAAQ,EACR,SAAS,GACV,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+// @toolplex/app-server — Fastify plugin for serving ToolPlex App Pages
+export { registerAppPages } from "./plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/parsing.d.ts

@@ -0,0 +1,4 @@
+import type { FetchRequest, ContextRequest } from "./types.js";
+export declare function parseFetchParams(query: Record<string, string | undefined>): FetchRequest;
+export declare function parseContextParams(query: Record<string, string | undefined>): ContextRequest;
+//# sourceMappingURL=parsing.d.ts.map

package/dist/parsing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsing.d.ts","sourceRoot":"","sources":["../src/parsing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAuB,MAAM,YAAY,CAAC;AAUpF,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACxC,YAAY,CAQd;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACxC,cAAc,CAKhB"}

package/dist/parsing.js

@@ -0,0 +1,76 @@
+const DEFAULT_PAGE = 1;
+const DEFAULT_PAGE_SIZE = 50;
+const MAX_PAGE_SIZE = 500;
+// ---------------------------------------------------------------------------
+// Parse query params into typed request objects
+// ---------------------------------------------------------------------------
+export function parseFetchParams(query) {
+    const page = clampInt(query.page, DEFAULT_PAGE, 1);
+    const pageSize = clampInt(query.pageSize, DEFAULT_PAGE_SIZE, 1, MAX_PAGE_SIZE);
+    const sort = parseSort(query.sort);
+    const filters = parseFilters(query);
+    const selection = parseSelection(query.selection);
+    return { page, pageSize, sort, filters, selection };
+}
+export function parseContextParams(query) {
+    return {
+        filters: parseFilters(query),
+        selection: parseSelection(query.selection),
+    };
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function clampInt(raw, fallback, min, max) {
+    if (!raw)
+        return fallback;
+    const n = parseInt(raw, 10);
+    if (isNaN(n))
+        return fallback;
+    if (n < min)
+        return min;
+    if (max !== undefined && n > max)
+        return max;
+    return n;
+}
+function parseSort(raw) {
+    if (!raw)
+        return undefined;
+    const [key, dir] = raw.split(",");
+    if (!key)
+        return undefined;
+    return {
+        key,
+        direction: dir === "desc" ? "desc" : "asc",
+    };
+}
+function parseSelection(raw) {
+    if (!raw)
+        return undefined;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed.ids))
+            return undefined;
+        return parsed;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Extract filter params from query string.
+ * Reserved keys (page, pageSize, sort, selection) are excluded.
+ */
+const RESERVED_KEYS = new Set(["page", "pageSize", "sort", "selection"]);
+function parseFilters(query) {
+    const filters = {};
+    let hasFilters = false;
+    for (const [key, value] of Object.entries(query)) {
+        if (RESERVED_KEYS.has(key) || value === undefined)
+            continue;
+        filters[key] = value;
+        hasFilters = true;
+    }
+    return hasFilters ? filters : undefined;
+}
+//# sourceMappingURL=parsing.js.map

package/dist/parsing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsing.js","sourceRoot":"","sources":["../src/parsing.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,MAAM,UAAU,gBAAgB,CAC9B,KAAyC;IAEzC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAyC;IAEzC,OAAO;QACL,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;QAC5B,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,QAAQ,CACf,GAAuB,EACvB,QAAgB,EAChB,GAAW,EACX,GAAY;IAEZ,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,GAAG,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,SAAS,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAEzE,SAAS,YAAY,CACnB,KAAyC;IAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC"}

package/dist/plugin.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyInstance } from "fastify";
+import type { AppServerConfig } from "./types.js";
+declare function appServerPlugin(fastify: FastifyInstance, config: AppServerConfig): Promise<void>;
+export declare const registerAppPages: typeof appServerPlugin;
+export {};
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAQlD,iBAAe,eAAe,CAC5B,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,eAAO,MAAM,gBAAgB,wBAG3B,CAAC"}

package/dist/plugin.js

@@ -0,0 +1,33 @@
+import fp from "fastify-plugin";
+import { validateConfig } from "./validation.js";
+import { createAuthHook } from "./auth.js";
+import { registerPageRoutes } from "./routes/pages.js";
+import { registerDataRoutes } from "./routes/data.js";
+import { registerActionRoutes } from "./routes/actions.js";
+import { registerContextRoutes } from "./routes/context.js";
+async function appServerPlugin(fastify, config) {
+    // Validate everything at startup — fail fast on misconfiguration
+    validateConfig(config);
+    // Apply bearer token auth to all routes in this plugin scope
+    const authHook = createAuthHook(config.authToken);
+    fastify.addHook("onRequest", authHook);
+    // Register route groups
+    registerPageRoutes(fastify, config);
+    registerDataRoutes(fastify, config);
+    registerActionRoutes(fastify, config);
+    registerContextRoutes(fastify, config);
+    // Catch handler errors and return structured responses
+    fastify.setErrorHandler(async (error, _request, reply) => {
+        const status = error.statusCode ?? 500;
+        const message = status >= 500
+            ? "Internal server error in app-server handler"
+            : error.message;
+        fastify.log.error({ err: error, statusCode: status }, "app-server handler error");
+        return reply.code(status).send({ error: message });
+    });
+}
+export const registerAppPages = fp(appServerPlugin, {
+    name: "@toolplex/app-server",
+    fastify: ">=5.0.0",
+});
+//# sourceMappingURL=plugin.js.map

package/dist/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAGhC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,KAAK,UAAU,eAAe,CAC5B,OAAwB,EACxB,MAAuB;IAEvB,iEAAiE;IACjE,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEvC,wBAAwB;IACxB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAEvC,uDAAuD;IACvD,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,KAAsC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACxF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC;QACvC,MAAM,OAAO,GACX,MAAM,IAAI,GAAG;YACX,CAAC,CAAC,6CAA6C;YAC/C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QAEpB,OAAO,CAAC,GAAG,CAAC,KAAK,CACf,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,EAClC,0BAA0B,CAC3B,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,eAAe,EAAE;IAClD,IAAI,EAAE,sBAAsB;IAC5B,OAAO,EAAE,SAAS;CACnB,CAAC,CAAC"}

package/dist/routes/actions.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyInstance } from "fastify";
+import type { AppServerConfig } from "../types.js";
+export declare function registerActionRoutes(fastify: FastifyInstance, config: AppServerConfig): void;
+//# sourceMappingURL=actions.d.ts.map

package/dist/routes/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/routes/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,eAAe,GACtB,IAAI,CAwBN"}

package/dist/routes/actions.js

@@ -0,0 +1,19 @@
+import { validateActionResponse } from "../validation.js";
+export function registerActionRoutes(fastify, config) {
+    fastify.post("/actions/:action", async (request, reply) => {
+        const { action } = request.params;
+        const handler = config.actions[action];
+        if (!handler) {
+            return reply.code(404).send({ error: `Action "${action}" not found` });
+        }
+        const { ids, params, filters } = request.body ?? {};
+        const response = await handler({
+            ids: Array.isArray(ids) ? ids : [],
+            params: params ?? {},
+            filters: filters ?? {},
+        });
+        validateActionResponse(action, response);
+        return reply.send(response);
+    });
+}
+//# sourceMappingURL=actions.js.map

package/dist/routes/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/routes/actions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,UAAU,oBAAoB,CAClC,OAAwB,EACxB,MAAuB;IAEvB,OAAO,CAAC,IAAI,CAGT,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,MAAM,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;YAC7B,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAClC,MAAM,EAAE,MAAM,IAAI,EAAE;YACpB,OAAO,EAAE,OAAO,IAAI,EAAE;SACvB,CAAC,CAAC;QAEH,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEzC,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/context.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyInstance } from "fastify";
+import type { AppServerConfig } from "../types.js";
+export declare function registerContextRoutes(fastify: FastifyInstance, config: AppServerConfig): void;
+//# sourceMappingURL=context.d.ts.map

package/dist/routes/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/routes/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,aAAa,CAAC;AAG7E,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,eAAe,GACtB,IAAI,CA6CN"}

package/dist/routes/context.js

@@ -0,0 +1,70 @@
+import { parseContextParams } from "../parsing.js";
+export function registerContextRoutes(fastify, config) {
+    // Resource-level context
+    fastify.get("/context/:resource", async (request, reply) => {
+        const { resource } = request.params;
+        const definition = config.resources[resource];
+        if (!definition?.context) {
+            return reply
+                .code(404)
+                .send({ error: `No context handler for resource "${resource}"` });
+        }
+        const params = parseContextParams(request.query);
+        const response = await definition.context(params);
+        return reply.send(response);
+    });
+    // Page-level context
+    fastify.get("/context/page/:pageId", async (request, reply) => {
+        const { pageId } = request.params;
+        const page = config.pages[pageId];
+        if (!page) {
+            return reply.code(404).send({ error: `Page "${pageId}" not found` });
+        }
+        const params = parseContextParams(request.query);
+        const sectionSources = uniqueSources(page.sections);
+        // If page has a dedicated context handler, use it
+        if (page.context) {
+            const response = await page.context({ ...params, sections: sectionSources });
+            return reply.send(response);
+        }
+        // Fallback: aggregate resource-level context handlers
+        const response = await aggregateContext(config, sectionSources, params);
+        return reply.send(response);
+    });
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function uniqueSources(sections) {
+    const sources = new Set();
+    for (const entry of sections) {
+        const items = Array.isArray(entry) ? entry : [entry];
+        for (const section of items) {
+            sources.add(section.source);
+        }
+    }
+    return [...sources];
+}
+async function aggregateContext(config, sources, params) {
+    const summaries = [];
+    let selectionText;
+    const suggestions = [];
+    for (const source of sources) {
+        const handler = config.resources[source]?.context;
+        if (!handler)
+            continue;
+        const result = await handler(params);
+        if (result.summary)
+            summaries.push(result.summary);
+        if (result.selection && !selectionText)
+            selectionText = result.selection;
+        if (result.suggestions)
+            suggestions.push(...result.suggestions);
+    }
+    return {
+        summary: summaries.join(" "),
+        selection: selectionText,
+        suggestions: suggestions.length > 0 ? suggestions : undefined,
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/routes/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/routes/context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,UAAU,qBAAqB,CACnC,OAAwB,EACxB,MAAuB;IAEvB,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAGR,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;YACzB,OAAO,KAAK;iBACT,IAAI,CAAC,GAAG,CAAC;iBACT,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,QAAQ,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,OAAO,CAAC,GAAG,CAGR,uBAAuB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAElC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,MAAM,aAAa,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpD,kDAAkD;QAClD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;YAC7E,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QAED,sDAAsD;QACtD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,aAAa,CAAC,QAAiC;IACtD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAuB,EACvB,OAAiB,EACjB,MAA6G;IAE7G,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,aAAiC,CAAC;IACtC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,OAAO;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,aAAa;YAAE,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC;QACzE,IAAI,MAAM,CAAC,WAAW;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5B,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC;AACJ,CAAC"}

package/dist/routes/data.d.ts

@@ -0,0 +1,4 @@
+import type { FastifyInstance } from "fastify";
+import type { AppServerConfig } from "../types.js";
+export declare function registerDataRoutes(fastify: FastifyInstance, config: AppServerConfig): void;
+//# sourceMappingURL=data.d.ts.map

package/dist/routes/data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/routes/data.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,aAAa,CAAC;AAItE,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,eAAe,GACtB,IAAI,CA2BN"}

package/dist/routes/data.js

@@ -0,0 +1,23 @@
+import { parseFetchParams } from "../parsing.js";
+import { validateFetchResponse } from "../validation.js";
+export function registerDataRoutes(fastify, config) {
+    fastify.get("/data/:resource", async (request, reply) => {
+        const { resource } = request.params;
+        const definition = config.resources[resource];
+        if (!definition) {
+            return reply.code(404).send({ error: `Resource "${resource}" not found` });
+        }
+        const params = parseFetchParams(request.query);
+        const response = await definition.fetch(params);
+        validateFetchResponse(resource, response);
+        const result = {
+            rows: response.rows,
+            total: response.total,
+            page: params.page,
+            pageSize: params.pageSize,
+            totalPages: Math.ceil(response.total / params.pageSize),
+        };
+        return reply.send(result);
+    });
+}
+//# sourceMappingURL=data.js.map

package/dist/routes/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../src/routes/data.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,UAAU,kBAAkB,CAChC,OAAwB,EACxB,MAAuB;IAEvB,OAAO,CAAC,GAAG,CAGR,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,QAAQ,aAAa,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEhD,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAsB;YAChC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC;SACxD,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/pages.d.ts

@@ -0,0 +1,8 @@
+import type { FastifyInstance } from "fastify";
+import type { AppServerConfig } from "../types.js";
+/**
+ * Serves page definitions. Context handlers are stripped since they're
+ * server-side functions that can't be serialized to JSON.
+ */
+export declare function registerPageRoutes(fastify: FastifyInstance, config: AppServerConfig): void;
+//# sourceMappingURL=pages.d.ts.map

package/dist/routes/pages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../src/routes/pages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnE;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,eAAe,GACtB,IAAI,CAiBN"}

package/dist/routes/pages.js

@@ -0,0 +1,24 @@
+/**
+ * Serves page definitions. Context handlers are stripped since they're
+ * server-side functions that can't be serialized to JSON.
+ */
+export function registerPageRoutes(fastify, config) {
+    const serialized = buildSerializablePages(config);
+    fastify.get("/pages", async (_request, reply) => {
+        return reply.send(serialized);
+    });
+    fastify.get("/pages/:pageId", async (request, reply) => {
+        const page = serialized.find((p) => p.id === request.params.pageId);
+        if (!page) {
+            return reply.code(404).send({ error: "Page not found" });
+        }
+        return reply.send(page);
+    });
+}
+function buildSerializablePages(config) {
+    return Object.entries(config.pages).map(([id, page]) => {
+        const { context: _context, ...rest } = page;
+        return { id, ...rest };
+    });
+}
+//# sourceMappingURL=pages.js.map

package/dist/routes/pages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.js","sourceRoot":"","sources":["../../src/routes/pages.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAwB,EACxB,MAAuB;IAEvB,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAElD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CACT,gBAAgB,EAChB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CACF,CAAC;AACJ,CAAC;AAQD,SAAS,sBAAsB,CAC7B,MAAuB;IAEvB,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;QACrD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,216 @@
+export interface PageDefinition {
+    id: string;
+    title: string;
+    filters?: Filter[];
+    actions?: Action[];
+    suggestions?: string[];
+    sections: (Section | Section[])[];
+    context?: PageContextHandler;
+}
+export type Section = CardRowSection | CardColumnSection | TableSection;
+export interface CardRowSection {
+    type: "card-row";
+    source: string;
+    span?: number;
+}
+export interface CardColumnSection {
+    type: "card-column";
+    source: string;
+    span?: number;
+}
+export interface TableSection {
+    type: "table";
+    source: string;
+    rowKey: string;
+    columns: Column[];
+    span?: number;
+    detail?: {
+        source: string;
+    };
+}
+export interface Column {
+    key: string;
+    label: string;
+    format?: ColumnFormat;
+    width?: number;
+}
+export type ColumnFormat = SimpleFormat | RichFormat;
+/** String shorthands — cover 90% of columns */
+export type SimpleFormat = "text" | "integer" | "number" | "percent" | "currency" | "date" | "boolean";
+/** Object format — richer visual treatment */
+export type RichFormat = StatusFormat | DeltaFormat | LinkFormat | ImageFormat | ProgressFormat;
+/** Colored badge — maps cell values to colors */
+export interface StatusFormat {
+    type: "status";
+    colors?: Record<string, string>;
+}
+/** Signed delta — green positive, red negative */
+export interface DeltaFormat {
+    type: "delta";
+    format?: "number" | "percent";
+}
+/** Clickable URL */
+export interface LinkFormat {
+    type: "link";
+    label?: string;
+}
+/** Inline thumbnail */
+export interface ImageFormat {
+    type: "image";
+    width?: number;
+    height?: number;
+}
+/** Progress bar for 0–1 values */
+export interface ProgressFormat {
+    type: "progress";
+}
+export interface Filter {
+    key: string;
+    type: "dropdown" | "text" | "date";
+    label?: string;
+    options?: string[];
+    options_source?: string;
+    default?: string;
+}
+export interface Action {
+    label: string;
+    action: string;
+    params?: Record<string, unknown>;
+    confirm?: string;
+    placement?: "toolbar" | "inline";
+    selection_required?: boolean;
+}
+export interface FetchRequest {
+    page: number;
+    pageSize: number;
+    sort?: SortSpec;
+    filters?: Record<string, string>;
+    selection?: Selection;
+}
+export interface FetchResponse {
+    rows: Record<string, unknown>[];
+    total: number;
+}
+export interface ActionRequest {
+    ids: (string | number)[];
+    params: Record<string, unknown>;
+    filters: Record<string, string>;
+}
+export interface ActionResponse {
+    affected: number;
+    message?: string;
+    data?: Record<string, unknown>;
+}
+export interface ContextRequest {
+    filters?: Record<string, string>;
+    selection?: Selection;
+}
+export interface ContextResponse {
+    summary: string;
+    selection?: string;
+    suggestions?: string[];
+}
+export interface PageContextRequest extends ContextRequest {
+    sections: string[];
+}
+export type FetchHandler = (req: FetchRequest) => Promise<FetchResponse>;
+export type ActionHandler = (req: ActionRequest) => Promise<ActionResponse>;
+export type ContextHandler = (req: ContextRequest) => Promise<ContextResponse>;
+export type PageContextHandler = (req: PageContextRequest) => Promise<ContextResponse>;
+export interface ResourceDefinition {
+    fetch: FetchHandler;
+    context?: ContextHandler;
+}
+export interface AppServerConfig {
+    authToken: string;
+    pages: Record<string, Omit<PageDefinition, "id">>;
+    resources: Record<string, ResourceDefinition>;
+    actions: Record<string, ActionHandler>;
+}
+export interface SortSpec {
+    key: string;
+    direction: "asc" | "desc";
+}
+export interface Selection {
+    type: "row" | "rows";
+    ids?: (string | number)[];
+}
+/**
+ * Card resources use the same FetchHandler as tables, but each row
+ * should match this shape. The renderer reads these fields to display
+ * metric cards.
+ *
+ * Example:
+ *   { label: "Open Issues", value: 45, format: "integer" }
+ *   { label: "Completion", value: 0.71, format: "percent" }
+ *   { label: "Revenue", value: 12500, format: "currency" }
+ */
+export interface CardData {
+    label: string;
+    value: number | string;
+    format?: ColumnFormat;
+}
+/**
+ * Detail resources use the same FetchHandler, but each row should be a
+ * typed block. The drawer renderer uses the `type` field to pick the
+ * right component for each block.
+ *
+ * Example response from a detail fetch handler:
+ *   rows: [
+ *     { type: "header", value: "Issue #1705: Unmatched Customer" },
+ *     { type: "field", label: "Raw Name", value: "ACJDM SALES CORP." },
+ *     { type: "field", label: "Confidence", value: 0.92, format: "percent" },
+ *     { type: "list", label: "Candidate Matches", items: [
+ *       { label: "ACJDM Sales Corporation", value: 0.92, format: "percent", id: "c_441" },
+ *       { label: "ACJDM Trading", value: 0.78, format: "percent", id: "c_209" },
+ *     ]},
+ *     { type: "table", label: "Sample Transactions", columns: [...], rows: [...] },
+ *   ]
+ */
+export type DetailBlock = DetailHeader | DetailField | DetailList | DetailTable | DetailImage;
+export interface DetailHeader {
+    type: "header";
+    value: string;
+}
+export interface DetailField {
+    type: "field";
+    label: string;
+    value: string | number | boolean | null;
+    format?: ColumnFormat;
+}
+export interface DetailList {
+    type: "list";
+    label: string;
+    items: {
+        label: string;
+        value?: string | number;
+        format?: ColumnFormat;
+        id?: string | number;
+    }[];
+}
+export interface DetailTable {
+    type: "table";
+    label: string;
+    columns: {
+        key: string;
+        label: string;
+        format?: ColumnFormat;
+    }[];
+    rows: Record<string, unknown>[];
+}
+export interface DetailImage {
+    type: "image";
+    label?: string;
+    url: string;
+    alt?: string;
+    width?: number;
+    height?: number;
+}
+export interface PaginatedResponse {
+    rows: Record<string, unknown>[];
+    total: number;
+    page: number;
+    pageSize: number;
+    totalPages: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;IAClC,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,MAAM,OAAO,GAAG,cAAc,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAExE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,UAAU,CAAC;AAErD,+CAA+C;AAC/C,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,SAAS,GACT,QAAQ,GACR,SAAS,GACT,UAAU,GACV,MAAM,GACN,SAAS,CAAC;AAEd,8CAA8C;AAC9C,MAAM,MAAM,UAAU,GAClB,YAAY,GACZ,WAAW,GACX,UAAU,GACV,WAAW,GACX,cAAc,CAAC;AAEnB,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAEjC;AAED,kDAAkD;AAClD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC/B;AAED,oBAAoB;AACpB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uBAAuB;AACvB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,kCAAkC;AAClC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAKjC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAMD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AACzE,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAC/E,MAAM,MAAM,kBAAkB,GAAG,CAC/B,GAAG,EAAE,kBAAkB,KACpB,OAAO,CAAC,eAAe,CAAC,CAAC;AAM9B,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAMD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CACxC;AAMD,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,KAAK,GAAG,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CAC3B;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,WAAW,GACX,UAAU,GACV,WAAW,GACX,WAAW,CAAC;AAEhB,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACxC,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QACL,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KACtB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,YAAY,CAAA;KAAE,EAAE,CAAC;IACjE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/types.js

@@ -0,0 +1,5 @@
+// ---------------------------------------------------------------------------
+// Page Definition — the JSON schema that describes a page's layout and behavior
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E"}

package/dist/validation.d.ts

@@ -0,0 +1,5 @@
+import type { AppServerConfig, FetchResponse, ActionResponse } from "./types.js";
+export declare function validateConfig(config: AppServerConfig): void;
+export declare function validateFetchResponse(resource: string, response: unknown): asserts response is FetchResponse;
+export declare function validateActionResponse(action: string, response: unknown): asserts response is ActionResponse;
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EAEf,aAAa,EACb,cAAc,EACf,MAAM,YAAY,CAAC;AAMpB,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAuD5D;AAMD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,QAAQ,IAAI,aAAa,CAuBnC;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,QAAQ,IAAI,cAAc,CAgBpC"}

package/dist/validation.js

@@ -0,0 +1,77 @@
+// ---------------------------------------------------------------------------
+// Startup validation — fail fast with descriptive errors
+// ---------------------------------------------------------------------------
+export function validateConfig(config) {
+    const errors = [];
+    for (const [pageId, page] of Object.entries(config.pages)) {
+        const sections = flattenSections(page.sections);
+        for (const section of sections) {
+            // Every section source must have a resource handler
+            if (!config.resources[section.source]) {
+                errors.push(`Page "${pageId}": section references resource "${section.source}" but no fetch handler is defined`);
+            }
+            // Table sections must have rowKey
+            if (section.type === "table" && !section.rowKey) {
+                errors.push(`Page "${pageId}": table section with source "${section.source}" is missing required "rowKey"`);
+            }
+            // Table detail source must reference a resource
+            if (section.type === "table" && section.detail) {
+                if (!config.resources[section.detail.source]) {
+                    errors.push(`Page "${pageId}": table detail references resource "${section.detail.source}" but no fetch handler is defined`);
+                }
+            }
+        }
+        // Every action must have a handler
+        for (const action of page.actions ?? []) {
+            if (!config.actions[action.action]) {
+                errors.push(`Page "${pageId}": references action "${action.action}" but no action handler is defined`);
+            }
+        }
+        // Filter options_source must reference a resource
+        for (const filter of page.filters ?? []) {
+            if (filter.options_source && !config.resources[filter.options_source]) {
+                errors.push(`Page "${pageId}": filter "${filter.key}" has options_source "${filter.options_source}" but no resource handler is defined`);
+            }
+        }
+    }
+    if (errors.length > 0) {
+        throw new Error(`@toolplex/app-server configuration errors:\n  - ${errors.join("\n  - ")}`);
+    }
+}
+// ---------------------------------------------------------------------------
+// Runtime response validation
+// ---------------------------------------------------------------------------
+export function validateFetchResponse(resource, response) {
+    if (!response || typeof response !== "object") {
+        throw new ResponseValidationError(resource, "fetch handler must return an object");
+    }
+    const r = response;
+    if (!Array.isArray(r.rows)) {
+        throw new ResponseValidationError(resource, 'fetch handler must return "rows" as an array');
+    }
+    if (typeof r.total !== "number" || r.total < 0) {
+        throw new ResponseValidationError(resource, 'fetch handler must return "total" as a non-negative number');
+    }
+}
+export function validateActionResponse(action, response) {
+    if (!response || typeof response !== "object") {
+        throw new ResponseValidationError(action, "action handler must return an object");
+    }
+    const r = response;
+    if (typeof r.affected !== "number") {
+        throw new ResponseValidationError(action, 'action handler must return "affected" as a number');
+    }
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function flattenSections(sections) {
+    return sections.flatMap((s) => (Array.isArray(s) ? s : [s]));
+}
+class ResponseValidationError extends Error {
+    constructor(name, detail) {
+        super(`@toolplex/app-server [${name}]: ${detail}`);
+        this.name = "ResponseValidationError";
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAOA,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEhD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,oDAAoD;YACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CACT,SAAS,MAAM,mCAAmC,OAAO,CAAC,MAAM,mCAAmC,CACpG,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAChD,MAAM,CAAC,IAAI,CACT,SAAS,MAAM,iCAAiC,OAAO,CAAC,MAAM,gCAAgC,CAC/F,CAAC;YACJ,CAAC;YAED,gDAAgD;YAChD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,CACT,SAAS,MAAM,wCAAwC,OAAO,CAAC,MAAM,CAAC,MAAM,mCAAmC,CAChH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CACT,SAAS,MAAM,yBAAyB,MAAM,CAAC,MAAM,oCAAoC,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CACT,SAAS,MAAM,cAAc,MAAM,CAAC,GAAG,yBAAyB,MAAM,CAAC,cAAc,sCAAsC,CAC5H,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,QAAiB;IAEjB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EACR,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,QAAmC,CAAC;IAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EACR,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EACR,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,QAAiB;IAEjB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,uBAAuB,CAC/B,MAAM,EACN,sCAAsC,CACvC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,QAAmC,CAAC;IAE9C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,uBAAuB,CAC/B,MAAM,EACN,mDAAmD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,eAAe,CAAC,QAAiC;IACxD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,uBAAwB,SAAQ,KAAK;IACzC,YAAY,IAAY,EAAE,MAAc;QACtC,KAAK,CAAC,yBAAyB,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@toolplex/app-server",
+  "version": "0.1.0",
+  "description": "Fastify plugin for serving ToolPlex App Pages — page definitions, paginated data, actions, and agent context",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": ["dist"],
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/toolplex/app-server"
+  },
+  "homepage": "https://github.com/toolplex/app-server#readme",
+  "keywords": ["toolplex", "fastify", "fastify-plugin", "app-server", "pages", "dashboard"],
+  "scripts": {
+    "build": "tsc",
+    "build:watch": "tsc --watch",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint 'src/**/*.ts'",
+    "lint:fix": "eslint --fix 'src/**/*.ts'",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "fastify-plugin": "^5.0.1"
+  },
+  "peerDependencies": {
+    "fastify": ">=5.0.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.24.0",
+    "@types/node": "^20.5.0",
+    "eslint": "^9.24.0",
+    "fastify": "^5.2.2",
+    "tsx": "^4.19.2",
+    "typescript": "^5.0.0",
+    "typescript-eslint": "^8.29.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}