create-mithaq 0.0.0-stage → 0.2.0

package/template/apps/asas-backoffice/src/server.ts

@@ -0,0 +1,30 @@
+import handler, { createServerEntry } from '@tanstack/react-start/server-entry'
+import type { ScreenClient } from 'mithaq/admin'
+import { checkComponents } from 'mithaq-admin/components.tsx'
+import { components } from './components.ts'
+import { withQuietAbort } from '../../asas-tanstack/src/quiet-abort.ts'
+
+// Every screen this app serves, checked against its components map as it starts, so a field whose kind has no
+// control fails the start, naming the kind and the field, and never reaches a page. Read on the server alone,
+// since a screen.json names every field of the screen.
+for (const client of Object.values(import.meta.glob<ScreenClient>('./routes/(screens)/*/screen.json', { eager: true, import: 'default' }))) {
+  checkComponents({ client, components })
+}
+
+// A refused start (a migration not applied) exits 1 rather than leave a server up that cannot serve.
+const { env } = process
+if (env.NODE_ENV === 'production') {
+  await (await import('asas')).asas.connect().catch((error: unknown) => {
+    console.error(error)
+    process.exit(1)
+  })
+}
+
+// Every request runs as the backoffice; nothing a request carries decides it, and the tenant app never does.
+// `asas` is imported per request so it is the same module every route reads.
+export default createServerEntry({
+  fetch: async (request: Request) => {
+    const { asBackoffice } = await import('asas')
+    return asBackoffice(() => handler.fetch(withQuietAbort(request)))
+  },
+})

package/template/apps/asas-backoffice/src/slide.ts

@@ -0,0 +1,22 @@
+/**
+ * The provider's own session read, which refreshes a session past its `updateAge` and forwards the cookie.
+ * Run it before the actor is resolved: a read that refreshes the row first leaves this one nothing due.
+ */
+export const slide = async ({
+  strategies,
+  headers,
+  setResponseHeader,
+}: {
+  strategies: readonly unknown[]
+  headers: Headers
+  setResponseHeader: (name: 'set-cookie', value: string[]) => void
+}) => {
+  const cookies: string[] = []
+  for (const strategy of strategies) {
+    const read = (strategy as { server?: { api?: { getSession?: (args: object) => Promise<{ headers: Headers }> } } }).server?.api?.getSession
+    if (read) cookies.push(...(await read({ headers, returnHeaders: true })).headers.getSetCookie())
+  }
+  // Set once with every strategy's cookies: a second set replaces the first.
+  if (cookies.length) setResponseHeader('set-cookie', cookies)
+}
+// mithaq-admin 2d3ab739c92c6c2b397041b76bf4b23b2902b7a2 bc0221e1088103f8638e0333b84aafb6b326e3991a187ced198bce2d090ecbe9

package/template/apps/asas-backoffice/src/start.ts

@@ -0,0 +1,42 @@
+import { createCsrfMiddleware, createMiddleware, createStart } from '@tanstack/react-start'
+import { dirOf, localeCookie, localeOf } from './copy.ts'
+
+// Not decoded: the only caller accepts two ASCII letters.
+const cookieOf = (header: string | null, name: string): string | undefined =>
+  header
+    ?.split(';')
+    .map((one) => one.trim().split('='))
+    .find(([key]) => key === name)
+    ?.slice(1)
+    .join('=')
+
+// The locale comes from the `locale` cookie alone, and `en` when there is none.
+const locale = createMiddleware({ type: 'request' }).server(({ request, next }) => {
+  const asked = localeOf(cookieOf(request.headers.get('cookie'), localeCookie))
+  return next({ context: { locale: asked, dir: dirOf(asked) } })
+})
+
+// Checks server function calls only; page renders and the plain HTTP arm under `/api` are untouched.
+const csrf = createCsrfMiddleware({ filter: (ctx) => ctx.handlerType === 'serverFn' })
+
+// The location is a path of this origin, so nothing the request's host header says reaches it.
+const home = createMiddleware({ type: 'request' }).server(({ request, next }) =>
+  new URL(request.url).pathname === '/' ? new Response(null, { status: 307, headers: { location: '/backoffice' } }) : next(),
+)
+
+// Only this origin may frame the pages, so no other site can lay this app under its own page and steer a click.
+// First, so it covers every other middleware's answer; the answer is rebuilt because a redirect's headers are immutable.
+const framing = createMiddleware({ type: 'request' }).server(async ({ next }) => {
+  const result = await next()
+  const answer = result.response
+  const html = answer.headers.get('content-type')?.startsWith('text/html') === true
+  if (answer.headers.has('content-security-policy') && !html) return result
+  const headers = new Headers(answer.headers)
+  if (!headers.has('content-security-policy')) headers.set('content-security-policy', "frame-ancestors 'self'")
+  // Every HTML answer is drawn for one session and locale, so a signed-out page must not come back
+  // from the cache on Back; the root document's script reloads a page the back-forward cache restores.
+  if (html) headers.set('cache-control', 'no-store')
+  return { ...result, response: new Response(answer.body, { status: answer.status, statusText: answer.statusText, headers }) }
+})
+
+export const startInstance = createStart(() => ({ requestMiddleware: [framing, home, csrf, locale] }))

package/template/apps/asas-backoffice/src/styles.css

@@ -0,0 +1,202 @@
+/* The owner's shadcn preset, `bunx --bun shadcn@latest init --preset b1Nt9T8mlk
+   --template start` (style `base-sera`), as it wrote this file, with RTL on for
+   Arabic and the two additions marked below. */
+@import "tailwindcss";
+@import "tw-animate-css";
+@import "shadcn/tailwind.css";
+@import "@fontsource-variable/noto-sans";
+@import "@fontsource-variable/figtree";
+/* Arabic, which the preset's two faces do not draw: the tenant app's own face
+   for it, listed first in `--font-sans` below so an Arabic page reads in it and
+   a Latin one falls through to the preset's. */
+@import "@fontsource/ibm-plex-sans-arabic";
+/* The admin's pieces in node_modules, which Tailwind never scans on its own. */
+@import "mithaq-admin/source.css";
+
+/* The project's own shells, pages and components, which the backoffice screen
+   loads, as the tenant app lists them (`apps/asas-tanstack/src/styles.css`).
+   Tailwind finds this app's own files, an ejected `src/components/mithaq`
+   among them, without one. */
+@source "../../../templates";
+
+@custom-variant dark (&:is(.dark *));
+
+:root {
+    --background: oklch(1 0 0);
+    --foreground: oklch(0.145 0.008 326);
+    --card: oklch(1 0 0);
+    --card-foreground: oklch(0.145 0.008 326);
+    --popover: oklch(1 0 0);
+    --popover-foreground: oklch(0.145 0.008 326);
+    --primary: oklch(0.491 0.27 292.581);
+    --primary-foreground: oklch(0.969 0.016 293.756);
+    --secondary: oklch(0.967 0.001 286.375);
+    --secondary-foreground: oklch(0.21 0.006 285.885);
+    --muted: oklch(0.96 0.003 325.6);
+    --muted-foreground: oklch(0.542 0.034 322.5);
+    --accent: oklch(0.96 0.003 325.6);
+    --accent-foreground: oklch(0.212 0.019 322.12);
+    /* Darker than the preset's red 600, which is 4.0:1 on the pale red fill the destructive button and menu item draw it on and 3.3:1 on its hover; this is 5.9:1 on the fill and 4.9:1 on the hover. */
+    --destructive: oklch(0.48 0.2 27.5);
+    --border: oklch(0.922 0.005 325.62);
+    --input: oklch(0.922 0.005 325.62);
+    --ring: oklch(0.711 0.019 323.02);
+    --chart-1: oklch(0.811 0.111 293.571);
+    --chart-2: oklch(0.606 0.25 292.717);
+    --chart-3: oklch(0.541 0.281 293.009);
+    --chart-4: oklch(0.491 0.27 292.581);
+    --chart-5: oklch(0.432 0.232 292.759);
+    --radius: 0.625rem;
+    --sidebar: oklch(0.985 0 0);
+    --sidebar-foreground: oklch(0.145 0.008 326);
+    --sidebar-primary: oklch(0.541 0.281 293.009);
+    --sidebar-primary-foreground: oklch(0.969 0.016 293.756);
+    --sidebar-accent: oklch(0.96 0.003 325.6);
+    --sidebar-accent-foreground: oklch(0.212 0.019 322.12);
+    --sidebar-border: oklch(0.922 0.005 325.62);
+    --sidebar-ring: oklch(0.711 0.019 323.02);
+}
+
+.dark {
+    --background: oklch(0.145 0.008 326);
+    --foreground: oklch(0.985 0 0);
+    --card: oklch(0.212 0.019 322.12);
+    --card-foreground: oklch(0.985 0 0);
+    --popover: oklch(0.212 0.019 322.12);
+    --popover-foreground: oklch(0.985 0 0);
+    --primary: oklch(0.432 0.232 292.759);
+    --primary-foreground: oklch(0.969 0.016 293.756);
+    --secondary: oklch(0.274 0.006 286.033);
+    --secondary-foreground: oklch(0.985 0 0);
+    --muted: oklch(0.263 0.024 320.12);
+    --muted-foreground: oklch(0.711 0.019 323.02);
+    --accent: oklch(0.263 0.024 320.12);
+    --accent-foreground: oklch(0.985 0 0);
+    --destructive: oklch(0.704 0.191 22.216);
+    --border: oklch(1 0 0 / 10%);
+    --input: oklch(1 0 0 / 15%);
+    --ring: oklch(0.542 0.034 322.5);
+    --chart-1: oklch(0.811 0.111 293.571);
+    --chart-2: oklch(0.606 0.25 292.717);
+    --chart-3: oklch(0.541 0.281 293.009);
+    --chart-4: oklch(0.491 0.27 292.581);
+    --chart-5: oklch(0.432 0.232 292.759);
+    --sidebar: oklch(0.212 0.019 322.12);
+    --sidebar-foreground: oklch(0.985 0 0);
+    --sidebar-primary: oklch(0.606 0.25 292.717);
+    --sidebar-primary-foreground: oklch(0.969 0.016 293.756);
+    --sidebar-accent: oklch(0.263 0.024 320.12);
+    --sidebar-accent-foreground: oklch(0.985 0 0);
+    --sidebar-border: oklch(1 0 0 / 10%);
+    --sidebar-ring: oklch(0.542 0.034 322.5);
+}
+
+@theme inline {
+    --font-sans: 'IBM Plex Sans Arabic', 'Noto Sans Variable', sans-serif;
+    --font-heading: 'Figtree Variable', sans-serif;
+    --color-sidebar-ring: var(--sidebar-ring);
+    --color-sidebar-border: var(--sidebar-border);
+    --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+    --color-sidebar-accent: var(--sidebar-accent);
+    --color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+    --color-sidebar-primary: var(--sidebar-primary);
+    --color-sidebar-foreground: var(--sidebar-foreground);
+    --color-sidebar: var(--sidebar);
+    --color-chart-5: var(--chart-5);
+    --color-chart-4: var(--chart-4);
+    --color-chart-3: var(--chart-3);
+    --color-chart-2: var(--chart-2);
+    --color-chart-1: var(--chart-1);
+    --color-ring: var(--ring);
+    --color-input: var(--input);
+    --color-border: var(--border);
+    --color-destructive: var(--destructive);
+    --color-accent-foreground: var(--accent-foreground);
+    --color-accent: var(--accent);
+    --color-muted-foreground: var(--muted-foreground);
+    --color-muted: var(--muted);
+    --color-secondary-foreground: var(--secondary-foreground);
+    --color-secondary: var(--secondary);
+    --color-primary-foreground: var(--primary-foreground);
+    --color-primary: var(--primary);
+    --color-popover-foreground: var(--popover-foreground);
+    --color-popover: var(--popover);
+    --color-card-foreground: var(--card-foreground);
+    --color-card: var(--card);
+    --color-foreground: var(--foreground);
+    --color-background: var(--background);
+    --radius-sm: calc(var(--radius) * 0.6);
+    --radius-md: calc(var(--radius) * 0.8);
+    --radius-lg: var(--radius);
+    --radius-xl: calc(var(--radius) * 1.4);
+    --radius-2xl: calc(var(--radius) * 1.8);
+    --radius-3xl: calc(var(--radius) * 2.2);
+    --radius-4xl: calc(var(--radius) * 2.6);
+}
+
+@layer base {
+  * {
+    @apply border-border outline-ring/50;
+    }
+  body {
+    @apply bg-background text-foreground;
+    }
+  html {
+    @apply font-sans;
+    }
+}
+/* What the backoffice draws beyond the preset, each a rule over a marker the
+   shared pieces already carry, so the tenant app, which does not load this
+   file, is unchanged. */
+
+/* A role's keys as readable groups. The preset's badge is 10px, uppercase and
+   unframed, so a run of them read as one wall of letters; here each key is a
+   small framed word in the page's own case, and each group is a block. */
+[data-permissions] > section + section {
+  border-top: 1px solid var(--border);
+  padding-top: 0.75rem;
+}
+[data-permissions] h3 {
+  color: var(--foreground);
+  font-size: 0.875rem;
+  font-weight: 600;
+}
+[data-permissions] [data-slot='badge'] {
+  border: 1px solid var(--border);
+  border-radius: 0;
+  padding: 0.125rem 0.5rem;
+  font-size: 0.8125rem;
+  font-weight: 400;
+  letter-spacing: normal;
+  text-transform: none;
+}
+/* A key the editor toggles (a button) is filled while it is on, which the
+   preset's badge shows by its text colour alone, and that the rule above
+   would otherwise have made the same as off. */
+[data-permissions] button[data-slot='badge'][aria-pressed='true'] {
+  background: var(--primary);
+  border-color: var(--primary);
+  color: var(--primary-foreground);
+}
+
+/* An empty field reads as a dash, in a list's cell and on a record page, as the
+   checkbox cell already draws a question never answered. */
+td[data-slot='table-cell']:empty::before,
+a[data-row-link]:empty::before,
+[data-field-value] > span:empty::before {
+  content: '—';
+  /* An empty alternative text, where it is understood, so a screen reader does not say "dash". */
+  content: '—' / '';
+  color: var(--muted-foreground);
+}
+
+/* The backoffice's cards are square, as its buttons, inputs and home cards are:
+   the section and form cards the registry draws with a rounded class of their
+   own, the frame a list's table sits in, the filter panel above it and the
+   danger region of a record page. */
+[data-slot='card'],
+:has(> [data-slot='table-container']),
+[data-mithaq-filters],
+[data-region='danger'] {
+  border-radius: 0;
+}

package/template/apps/asas-backoffice/src/theme.ts

@@ -0,0 +1,2 @@
+/** The provider and the blocking script in the document head both read this key, so the first paint matches the chosen theme. */
+export const themeStorageKey = 'vite-ui-theme'

package/template/apps/asas-backoffice/tsconfig.json

@@ -0,0 +1,19 @@
+{
+  "compilerOptions": {
+    "target": "es2024",
+    "lib": ["es2024", "dom", "dom.iterable"],
+    "module": "preserve",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "erasableSyntaxOnly": true,
+    "allowImportingTsExtensions": true,
+    "resolveJsonModule": true,
+    "types": ["node", "vite/client"],
+    "paths": { "@/*": ["./src/*"], "mithaq-admin/*": ["./src/components/mithaq/*", "./node_modules/mithaq-admin/registry/*"] }
+  },
+  "include": ["src/**/*.ts", "src/**/*.tsx", "vite.config.ts", "../../templates/mithaq/src/ui/*.tsx", "../../templates/asas/src/ui-*/*.tsx"]
+}

package/template/apps/asas-backoffice/vite.config.ts

@@ -0,0 +1,32 @@
+import tailwindcss from '@tailwindcss/vite'
+import { tanstackStart } from '@tanstack/react-start/plugin/vite'
+import viteReact from '@vitejs/plugin-react'
+import { mithaqAdmin } from 'mithaq/vite'
+import { defineConfig } from 'vite'
+import { fileURLToPath } from 'node:url'
+
+export default defineConfig({
+  // An alias rather than `resolve.tsconfigPaths`: the shells in the language package's `src/ui/` fall under a tsconfig
+  // with no `@/` and still import it. `^@/` leaves `@tanstack/*` alone.
+  resolve: { alias: [{ find: /^@\//, replacement: fileURLToPath(new URL('./src/', import.meta.url)) }] },
+  plugins: [
+    tailwindcss(),
+    // A file under this folder takes the place of mithaq-admin's file of the same name, for every importer.
+    mithaqAdmin(fileURLToPath(new URL('./src/components/mithaq/', import.meta.url))),
+    // `mithaq generate screens` writes `files.ts` and `types.ts` beside the route files; neither is a route.
+    tanstackStart({ router: { routeFileIgnorePattern: '^(files|types)\\.ts$' } }),
+    viteReact(),
+  ],
+  // Behind the proxy that routes by Host: bound to the loopback address it targets, and answering
+  // the public name in BACKOFFICE_URL, which Vite refuses in a Host header unless named here.
+  preview: { host: '127.0.0.1', allowedHosts: process.env.BACKOFFICE_URL ? [new URL(process.env.BACKOFFICE_URL).hostname] : [] },
+  environments: {
+    ssr: {
+      // `asas` and `mithaq` stay external: Vite bundles linked workspace packages by default, and bundling
+      // would follow the drizzle adapter's `drizzle-kit/api-postgres` import, which must never be followed.
+      // Both keys are needed: `resolve.external` is what dev reads, `build.rollupOptions.external` what the build reads.
+      resolve: { external: ['asas', 'mithaq'] },
+      build: { rollupOptions: { external: [/^asas$/, /^mithaq(\/|$)/] } },
+    },
+  },
+})

package/template/apps/asas-tanstack/components.json

@@ -0,0 +1,25 @@
+{
+  "$schema": "https://ui.shadcn.com/schema.json",
+  "style": "base-maia",
+  "rsc": false,
+  "tsx": true,
+  "tailwind": {
+    "config": "",
+    "css": "src/styles.css",
+    "baseColor": "stone",
+    "cssVariables": true,
+    "prefix": ""
+  },
+  "iconLibrary": "hugeicons",
+  "rtl": true,
+  "aliases": {
+    "components": "@/components",
+    "utils": "@/lib/utils",
+    "ui": "@/components/ui",
+    "lib": "@/lib",
+    "hooks": "@/hooks"
+  },
+  "menuColor": "default",
+  "menuAccent": "subtle",
+  "registries": {}
+}

package/template/apps/asas-tanstack/gitignore

@@ -0,0 +1,3 @@
+.tanstack
+dist
+node_modules

package/template/apps/asas-tanstack/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "asas-tanstack",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "build": "(cd ../../templates/asas && mithaq lock --check) && vite build",
+    "dev": "(cd ../../templates/asas && mithaq lock --check) && vite dev",
+    "preview": "(cd ../../templates/asas && mithaq lock --check) && vite preview"
+  },
+  "dependencies": {
+    "@base-ui/react": "^1.5.0",
+    "@fontsource-variable/raleway": "^5.2.8",
+    "@fontsource/ibm-plex-sans-arabic": "^5.2.8",
+    "@hugeicons/core-free-icons": "4.3.5",
+    "@hugeicons/react": "^1.1.6",
+    "@lexical/extension": "0.52.0",
+    "@lexical/link": "0.52.0",
+    "@lexical/list": "0.52.0",
+    "@lexical/react": "0.52.0",
+    "@lexical/rich-text": "0.52.0",
+    "@lexical/selection": "0.52.0",
+    "@lexical/utils": "0.52.0",
+    "@orpc/client": "1.15.1",
+    "@orpc/server": "1.15.1",
+    "@tanstack/react-form": "^1.33.5",
+    "@tanstack/react-query": "^5.104.0",
+    "@tanstack/react-router": "^1.170.29",
+    "@tanstack/react-start": "^1.168.56",
+    "asas": "*",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "input-otp": "^1.5.0",
+    "lexical": "0.52.0",
+    "lucide-react": "^1.16.0",
+    "mithaq": "*",
+    "mithaq-admin": "*",
+    "react": "^19.3.0",
+    "react-day-picker": "^10.0.1",
+    "react-dom": "^19.3.0",
+    "react-is": "^19.3.0",
+    "react-resizable-panels": "^4.13.3",
+    "recharts": "3.8.0",
+    "tailwind-merge": "^3.6.0",
+    "tw-animate-css": "^1.4.0"
+  },
+  "devDependencies": {
+    "@tailwindcss/vite": "^4.3.0",
+    "@tanstack/start-client-core": "^1.170.1",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@vitejs/plugin-react": "^6.0.2",
+    "shadcn": "4.18.0",
+    "tailwindcss": "^4.3.0",
+    "typescript": "^7.0.2",
+    "vite": "^8.0.13"
+  }
+}

package/template/apps/asas-tanstack/public/favicon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><rect width="32" height="32" rx="7" fill="#18181b"/><path d="M8 24h16M11 19h10M14 14h4M16 9v0" stroke="#fafafa" stroke-width="3" stroke-linecap="round"/></svg>

package/template/apps/asas-tanstack/src/api.ts

@@ -0,0 +1,147 @@
+import { afterCommitHeader, type ClientKayan, type FetchClient } from 'mithaq/admin'
+
+/** What a write may ask beside its input on a kayan that keeps drafts: a draft save, and an autosave. The fetch plug reads them off the query string only. */
+export type DraftOptions = { readonly draft?: boolean; readonly autosave?: boolean }
+
+const queryOf = ({ draft, autosave }: DraftOptions = {}) => (draft ? `?draft=true${autosave ? '&autosave=true' : ''}` : '')
+
+const call = async ({ kayan, operation, input, ...options }: { kayan: string; operation: string; input: Record<string, unknown> } & DraftOptions) => {
+  const response = await fetch(`/api/${encodeURIComponent(kayan)}/${encodeURIComponent(operation)}${queryOf(options)}`, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify(input),
+  })
+  const answer = await response.json().catch(() => null)
+  if (!response.ok) {
+    const error = new Error(typeof answer?.message === 'string' ? answer.message : `HTTP ${response.status}`)
+    Object.assign(error, { status: response.status, code: answer?.code, data: answer?.data })
+    throw error
+  }
+  // A failed `afterCommit` raises the screens' banner and a committed write
+  // clears it. Only the server knows an operation's effect, so the plug sets
+  // the header on writes and never on reads.
+  const said = response.headers.get(afterCommitHeader)
+  if (typeof window !== 'undefined' && said) {
+    window.dispatchEvent(new CustomEvent('mithaq:after-commit', { detail: said === 'failed' }))
+  }
+  return answer
+}
+
+// Restated, not imported from the `.tsx` file that declares them: a `.ts` file
+// must not need the JSX compiler.
+type FoundPage = { docs: readonly Record<string, unknown>[]; hasNextPage: boolean; nextPage: number | null }
+type FindApi = Readonly<
+  Record<
+    string,
+    | {
+        find: (input: Record<string, unknown>) => Promise<FoundPage>
+        create?: (input: Record<string, unknown>) => Promise<unknown>
+        delete?: (input: Record<string, unknown>) => Promise<unknown>
+        update?: (input: Record<string, unknown>) => Promise<unknown>
+      }
+    | undefined
+  >
+>
+
+/**
+ * Every operation of every kayan, keyed by name strings. `arm[kayan][operation](input)`
+ * posts to `POST /api/<kayan>/<operation>`; the proxy never answers `undefined`,
+ * and a name no kayan has is the server's not-found.
+ */
+export type Arm = Readonly<Record<string, Readonly<Record<string, (input: Record<string, unknown>, options?: DraftOptions) => Promise<unknown>>>>>
+export const arm = new Proxy(Object.create(null) as Arm, {
+  get: (_target, kayan: string) => new Proxy(Object.create(null) as Record<string, (input: Record<string, unknown>, options?: DraftOptions) => Promise<unknown>>, {
+    get: (_operations, operation: string) => (input: Record<string, unknown>, options?: DraftOptions) => call({ kayan, operation, input, ...options }),
+  }),
+})
+
+/**
+ * Whether an operation's input names a key: probes the schema with a value no
+ * browser-written schema accepts and looks for an issue at that key. A schema
+ * that answers asynchronously, or throws, reads as naming nothing.
+ */
+export const takesKey = (input: { '~standard': { validate: (value: unknown) => unknown } }, key: string) => {
+  let answer: { issues?: readonly { path?: readonly unknown[] }[] }
+  try {
+    answer = input['~standard'].validate({ [key]: Symbol(key) }) as typeof answer
+  } catch {
+    return false
+  }
+  if (answer instanceof Promise) {
+    answer.catch(() => {})
+    return false
+  }
+  return answer.issues?.some(({ path }) => {
+    const segment = path?.[0]
+    return String(typeof segment === 'object' && segment ? (segment as { key: unknown }).key : segment) === key
+  }) ?? false
+}
+
+/** What a screen's `client` is over an arm; the draft words ride along with the input. */
+export const clientOf = (through: Arm): FetchClient => ({ kayan, operation, input, draft, autosave }) => through[kayan]![operation]!(input, { draft, autosave })
+
+/**
+ * What the server's `client` is: each operation in process, as `actor`. Only the
+ * two draft words are read off the caller's options and the actor goes last, so
+ * a loader cannot run as someone else.
+ */
+export const actingAs = (
+  through: Readonly<Record<string, { operations: Record<string, (input: object, options: { actor?: unknown } & DraftOptions) => Promise<unknown>> }>>,
+  actor: unknown,
+): FetchClient => ({ kayan, operation, input, draft, autosave }) => through[kayan]!.operations[operation]!(input, { draft, autosave, actor })
+
+/**
+ * What a relationship control and cell read a second kayan through. Only the
+ * kayans the screen's loader already narrowed to what this actor may read are
+ * in the record, so a picker cannot page any other.
+ */
+export const readsOf = (kayans: readonly ClientKayan[]): FindApi =>
+  Object.fromEntries(
+    kayans.map((kayan) => [
+      kayan.name,
+      {
+        find: (input: Record<string, unknown>) => arm[kayan.name]!.find!(input) as Promise<FoundPage>,
+      },
+    ]),
+  )
+
+type FieldReads = {
+  readonly collections?: Readonly<
+    Record<string, { readonly fields?: Readonly<Record<string, Readonly<Record<string, boolean>> | undefined>> } | undefined>
+  >
+}
+
+/**
+ * One kayan of the projection with every field this actor may not read taken
+ * off it. A loader's result is serialized into the document, so an unreadable
+ * field's name, label or rule would otherwise reach the viewer.
+ */
+export const readable = (one: ClientKayan, report: FieldReads): ClientKayan => ({
+  ...one,
+  fields: one.fields.filter((field) => report.collections?.[one.name]?.fields?.[field.name]?.read === true),
+})
+
+/**
+ * Whether a thrown refusal is the caller's. Those carry an HTTP status; a store
+ * that is down or a hook bug carries none and must be rethrown, not reported
+ * as a missing row.
+ */
+export const caused = (thrown: unknown): boolean =>
+  typeof (thrown as { status?: unknown } | null | undefined)?.status === 'number'
+
+/**
+ * One POST at the auth arm (Better Auth's router under `/api/auth/user`) with the session cookie.
+ * Returns the answer instead of throwing: a refusal is a sentence for the viewer; no reply is status 0.
+ */
+export const authArm = async (path: string, body: unknown = {}) => {
+  const response = await fetch(`/api/auth/user/${path}`, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json' },
+    body: JSON.stringify(body),
+  }).catch(() => null)
+  if (!response) return { ok: false, status: 0, message: undefined, body: null }
+  const answered = (await response.json().catch(() => null)) as ({ message?: string } & Record<string, unknown>) | null
+  // The status too, because a rate limit's refusal carries no code to read.
+  return { ok: response.ok, status: response.status, message: answered?.message, body: answered }
+}
+// mithaq-admin 2d3ab739c92c6c2b397041b76bf4b23b2902b7a2 94db2fc49ad4391c0d1c2183cb41001dd08d62017c76af86cc5f611488c22c68