pyweb-stack 0.1.0__tar.gz

pyweb_stack-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 MaanavKrishna and Claude
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

pyweb_stack-0.1.0/PKG-INFO

@@ -0,0 +1,198 @@
+Metadata-Version: 2.4
+Name: pyweb-stack
+Version: 0.1.0
+Summary: Full-stack web apps in one Python file: server-rendered pages, reactive browser UI, typed RPC.
+Author-email: MaanavKrishna <67054795+MaanavKrishna@users.noreply.github.com>, Claude <noreply@anthropic.com>
+Maintainer-email: MaanavKrishna <67054795+MaanavKrishna@users.noreply.github.com>
+License: MIT
+Project-URL: Homepage, https://maanavkrishna.github.io/PyWeb/
+Project-URL: Documentation, https://maanavkrishna.github.io/PyWeb/guide.html
+Project-URL: Source, https://github.com/MaanavKrishna/PyWeb
+Project-URL: Changelog, https://github.com/MaanavKrishna/PyWeb/blob/main/CHANGELOG.md
+Project-URL: Issues, https://github.com/MaanavKrishna/PyWeb/issues
+Keywords: web,framework,full-stack,reactive,rpc,ssr,compiler
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Web Environment
+Classifier: Framework :: AsyncIO
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: JavaScript
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Internet :: WWW/HTTP :: Dynamic Content
+Classifier: Topic :: Software Development :: Compilers
+Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: postgres
+Requires-Dist: psycopg[binary]>=3.1; extra == "postgres"
+Provides-Extra: mysql
+Requires-Dist: PyMySQL>=1.1; extra == "mysql"
+Provides-Extra: redis
+Requires-Dist: redis>=5; extra == "redis"
+Provides-Extra: crypto
+Requires-Dist: cryptography>=42; extra == "crypto"
+Provides-Extra: asgi
+Requires-Dist: uvicorn>=0.30; extra == "asgi"
+Provides-Extra: all
+Requires-Dist: psycopg[binary]>=3.1; extra == "all"
+Requires-Dist: PyMySQL>=1.1; extra == "all"
+Requires-Dist: redis>=5; extra == "all"
+Requires-Dist: cryptography>=42; extra == "all"
+Requires-Dist: uvicorn>=0.30; extra == "all"
+Provides-Extra: test
+Requires-Dist: pytest>=8; extra == "test"
+Requires-Dist: playwright>=1.45; extra == "test"
+Dynamic: license-file
+
+# PyWeb
+
+**Full-stack web apps in one Python file.** Server-rendered pages,
+reactive browser UI compiled from Python, and typed calls to server
+functions, without a JavaScript toolchain.
+
+[![CI](https://github.com/MaanavKrishna/PyWeb/actions/workflows/ci.yml/badge.svg)](https://github.com/MaanavKrishna/PyWeb/actions/workflows/ci.yml)
+[![Docs](https://img.shields.io/badge/docs-maanavkrishna.github.io%2FPyWeb-0d9488)](https://maanavkrishna.github.io/PyWeb/)
+![Python](https://img.shields.io/badge/python-3.10%E2%80%933.13-3776ab)
+![PyPI](https://img.shields.io/pypi/v/pyweb-stack)
+![License](https://img.shields.io/badge/license-MIT-lightgrey)
+
+```pyweb
+from pyweb import App, server
+
+app = App(title="Guestbook")
+ENTRIES = []
+
+
+@server
+def sign(name: str) -> list:
+    ENTRIES.append(name.strip() or "anonymous")
+    return ENTRIES
+
+
+@app.page("/")
+def Home():
+    entries = list(ENTRIES)     # computed on the server per request
+    name = ""                   # bound to the input: browser state
+
+    def submit():               # compiled to JavaScript
+        entries = sign(name)    # typed RPC to the server
+        name = ""
+
+    <main>
+        <h1>Guestbook ({len(entries)})</h1>
+        <form onsubmit={submit}>
+            <input bind={name} placeholder="Your name" />
+            <button>Sign</button>
+        </form>
+        <ul>
+            for entry in entries:
+                <li>{entry}</li>
+        </ul>
+    </main>
+```
+
+```bash
+pip install pyweb-stack   # imported as `pyweb`
+pyweb dev app.pyweb        # http://localhost:8000
+```
+
+## Why PyWeb
+
+- **Interactions run in the browser.** Handlers and expressions are
+  compiled to small JavaScript modules; the server is only contacted when
+  your code calls a `@server` function. No WebSocket per user, no
+  multi-megabyte Python runtime in the browser.
+- **Every page is server-rendered.** Complete HTML on first paint, real
+  data from your database, good for SEO and slow devices.
+- **You never write an API layer.** `@server` functions get endpoints,
+  argument validation, typed errors and generated browser calls.
+- **Plain variables are state.** The compiler sees which variables your
+  handlers change and makes exactly those reactive; updates touch only
+  the DOM nodes that read them.
+- **Boundaries are checked.** Database handles, imports and secrets can't
+  leak into browser code: it's a compile error with a line number.
+  `pyweb inspect` explains where every name runs and why.
+- **Stateless servers.** Signed-cookie sessions and plain HTTP RPC scale
+  horizontally behind any load balancer. Deploy with `pyweb serve`,
+  uvicorn/gunicorn (ASGI) or the generated Dockerfile.
+
+A typical interactive page ships under 1 KB of page code plus a ~10 KB
+(gzip) runtime that's cached across pages. Pages without interactivity
+ship no JavaScript.
+
+## Is it for you?
+
+**Good fit:** internal tools, admin panels, dashboards, CRUD apps,
+small SaaS products and content sites with interactive parts, built by
+people who'd rather stay in Python.
+
+**Not a fit:** large client-heavy single-page apps that need the npm
+ecosystem (use React/Svelte/Vue), or running scientific Python in the
+browser (use Pyodide/PyScript). See the
+[comparison](https://maanavkrishna.github.io/PyWeb/introduction.html)
+and [current limitations](docs/16-limitations-roadmap.md).
+
+## Documentation
+
+| | |
+|---|---|
+| Start | [Introduction](docs/01-introduction.md) · [Quickstart](docs/02-quickstart.md) · [Tutorial](docs/03-tutorial.md) |
+| Language | [`.pyweb` files](docs/04-pyweb-files.md) · [State & reactivity](docs/05-reactivity.md) · [Python in the browser](docs/07-browser-python.md) |
+| Server | [Server functions & RPC](docs/06-server-functions.md) · [Pages & routing](docs/08-pages-routing-assets.md) · [Data](docs/09-data.md) · [Auth](docs/10-auth.md) |
+| Ship | [Testing](docs/11-testing.md) · [Deployment](docs/12-deployment.md) · [Security](docs/13-security.md) · [CLI](docs/14-cli.md) |
+| Reference | [Toolkit & stability](docs/15-toolkit.md) · [Limitations & roadmap](docs/16-limitations-roadmap.md) · [Architecture](ARCHITECTURE.md) · [Changelog](CHANGELOG.md) |
+
+The same docs are published at
+**[maanavkrishna.github.io/PyWeb](https://maanavkrishna.github.io/PyWeb/)**,
+with compiler output shown next to each example.
+
+## Examples
+
+Each runs with `pyweb dev examples/<name>/app.pyweb` and is exercised in
+a real browser by the test suite.
+
+| Example | Shows |
+|---|---|
+| [`counter`](examples/counter/app.pyweb) | signals, computed values, binding a number input |
+| [`todo`](examples/todo/app.pyweb) | components, list mutation, filters, keyed lists |
+| [`blog`](examples/blog/app.pyweb) | SQL database, server functions, route params, 404s, validation errors |
+| [`auth`](examples/auth/app.pyweb) | registration, password hashing, sessions, protected pages |
+| [`chat`](examples/chat/app.pyweb) | route params, shared server state, polling with `on_mount` |
+| [`showcase`](examples/showcase/app.pyweb) | everything on one page, with a stylesheet |
+
+## Command line
+
+```bash
+pyweb new myapp                                  # scaffold
+pyweb dev app.pyweb                              # dev server: live reload + error overlay
+pyweb inspect app.pyweb                          # where each name runs, and why
+pyweb check app.pyweb                            # compile + security checks for CI
+pyweb build app.pyweb --out dist --production    # self-contained, hashed, minified dist/
+pyweb serve dist                                 # production server (/healthz, CSP, graceful shutdown)
+```
+
+## Status
+
+PyWeb 0.1 is the first public release (beta). The language, server API,
+RPC protocol and CLI are documented and tested, and changes to them are
+announced in the changelog (see [stability](docs/15-toolkit.md#stability)). The test suite covers the
+parser, the Python→JavaScript translation (differentially, against
+CPython), the reactive runtime, server rendering, RPC, sessions, every
+example app in Chromium, and the database/Redis layers against real
+Postgres, MySQL and Redis servers, on Python 3.10–3.13.
+
+## Authors
+
+Built by [MaanavKrishna](https://github.com/MaanavKrishna) and Claude.
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). Security reports:
+[SECURITY.md](SECURITY.md). License: MIT.

pyweb_stack-0.1.0/README.md

@@ -0,0 +1,145 @@
+# PyWeb
+
+**Full-stack web apps in one Python file.** Server-rendered pages,
+reactive browser UI compiled from Python, and typed calls to server
+functions, without a JavaScript toolchain.
+
+[![CI](https://github.com/MaanavKrishna/PyWeb/actions/workflows/ci.yml/badge.svg)](https://github.com/MaanavKrishna/PyWeb/actions/workflows/ci.yml)
+[![Docs](https://img.shields.io/badge/docs-maanavkrishna.github.io%2FPyWeb-0d9488)](https://maanavkrishna.github.io/PyWeb/)
+![Python](https://img.shields.io/badge/python-3.10%E2%80%933.13-3776ab)
+![PyPI](https://img.shields.io/pypi/v/pyweb-stack)
+![License](https://img.shields.io/badge/license-MIT-lightgrey)
+
+```pyweb
+from pyweb import App, server
+
+app = App(title="Guestbook")
+ENTRIES = []
+
+
+@server
+def sign(name: str) -> list:
+    ENTRIES.append(name.strip() or "anonymous")
+    return ENTRIES
+
+
+@app.page("/")
+def Home():
+    entries = list(ENTRIES)     # computed on the server per request
+    name = ""                   # bound to the input: browser state
+
+    def submit():               # compiled to JavaScript
+        entries = sign(name)    # typed RPC to the server
+        name = ""
+
+    <main>
+        <h1>Guestbook ({len(entries)})</h1>
+        <form onsubmit={submit}>
+            <input bind={name} placeholder="Your name" />
+            <button>Sign</button>
+        </form>
+        <ul>
+            for entry in entries:
+                <li>{entry}</li>
+        </ul>
+    </main>
+```
+
+```bash
+pip install pyweb-stack   # imported as `pyweb`
+pyweb dev app.pyweb        # http://localhost:8000
+```
+
+## Why PyWeb
+
+- **Interactions run in the browser.** Handlers and expressions are
+  compiled to small JavaScript modules; the server is only contacted when
+  your code calls a `@server` function. No WebSocket per user, no
+  multi-megabyte Python runtime in the browser.
+- **Every page is server-rendered.** Complete HTML on first paint, real
+  data from your database, good for SEO and slow devices.
+- **You never write an API layer.** `@server` functions get endpoints,
+  argument validation, typed errors and generated browser calls.
+- **Plain variables are state.** The compiler sees which variables your
+  handlers change and makes exactly those reactive; updates touch only
+  the DOM nodes that read them.
+- **Boundaries are checked.** Database handles, imports and secrets can't
+  leak into browser code: it's a compile error with a line number.
+  `pyweb inspect` explains where every name runs and why.
+- **Stateless servers.** Signed-cookie sessions and plain HTTP RPC scale
+  horizontally behind any load balancer. Deploy with `pyweb serve`,
+  uvicorn/gunicorn (ASGI) or the generated Dockerfile.
+
+A typical interactive page ships under 1 KB of page code plus a ~10 KB
+(gzip) runtime that's cached across pages. Pages without interactivity
+ship no JavaScript.
+
+## Is it for you?
+
+**Good fit:** internal tools, admin panels, dashboards, CRUD apps,
+small SaaS products and content sites with interactive parts, built by
+people who'd rather stay in Python.
+
+**Not a fit:** large client-heavy single-page apps that need the npm
+ecosystem (use React/Svelte/Vue), or running scientific Python in the
+browser (use Pyodide/PyScript). See the
+[comparison](https://maanavkrishna.github.io/PyWeb/introduction.html)
+and [current limitations](docs/16-limitations-roadmap.md).
+
+## Documentation
+
+| | |
+|---|---|
+| Start | [Introduction](docs/01-introduction.md) · [Quickstart](docs/02-quickstart.md) · [Tutorial](docs/03-tutorial.md) |
+| Language | [`.pyweb` files](docs/04-pyweb-files.md) · [State & reactivity](docs/05-reactivity.md) · [Python in the browser](docs/07-browser-python.md) |
+| Server | [Server functions & RPC](docs/06-server-functions.md) · [Pages & routing](docs/08-pages-routing-assets.md) · [Data](docs/09-data.md) · [Auth](docs/10-auth.md) |
+| Ship | [Testing](docs/11-testing.md) · [Deployment](docs/12-deployment.md) · [Security](docs/13-security.md) · [CLI](docs/14-cli.md) |
+| Reference | [Toolkit & stability](docs/15-toolkit.md) · [Limitations & roadmap](docs/16-limitations-roadmap.md) · [Architecture](ARCHITECTURE.md) · [Changelog](CHANGELOG.md) |
+
+The same docs are published at
+**[maanavkrishna.github.io/PyWeb](https://maanavkrishna.github.io/PyWeb/)**,
+with compiler output shown next to each example.
+
+## Examples
+
+Each runs with `pyweb dev examples/<name>/app.pyweb` and is exercised in
+a real browser by the test suite.
+
+| Example | Shows |
+|---|---|
+| [`counter`](examples/counter/app.pyweb) | signals, computed values, binding a number input |
+| [`todo`](examples/todo/app.pyweb) | components, list mutation, filters, keyed lists |
+| [`blog`](examples/blog/app.pyweb) | SQL database, server functions, route params, 404s, validation errors |
+| [`auth`](examples/auth/app.pyweb) | registration, password hashing, sessions, protected pages |
+| [`chat`](examples/chat/app.pyweb) | route params, shared server state, polling with `on_mount` |
+| [`showcase`](examples/showcase/app.pyweb) | everything on one page, with a stylesheet |
+
+## Command line
+
+```bash
+pyweb new myapp                                  # scaffold
+pyweb dev app.pyweb                              # dev server: live reload + error overlay
+pyweb inspect app.pyweb                          # where each name runs, and why
+pyweb check app.pyweb                            # compile + security checks for CI
+pyweb build app.pyweb --out dist --production    # self-contained, hashed, minified dist/
+pyweb serve dist                                 # production server (/healthz, CSP, graceful shutdown)
+```
+
+## Status
+
+PyWeb 0.1 is the first public release (beta). The language, server API,
+RPC protocol and CLI are documented and tested, and changes to them are
+announced in the changelog (see [stability](docs/15-toolkit.md#stability)). The test suite covers the
+parser, the Python→JavaScript translation (differentially, against
+CPython), the reactive runtime, server rendering, RPC, sessions, every
+example app in Chromium, and the database/Redis layers against real
+Postgres, MySQL and Redis servers, on Python 3.10–3.13.
+
+## Authors
+
+Built by [MaanavKrishna](https://github.com/MaanavKrishna) and Claude.
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). Security reports:
+[SECURITY.md](SECURITY.md). License: MIT.

pyweb_stack-0.1.0/pyproject.toml

@@ -0,0 +1,72 @@
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "pyweb-stack"
+version = "0.1.0"
+description = "Full-stack web apps in one Python file: server-rendered pages, reactive browser UI, typed RPC."
+readme = "README.md"
+license = { text = "MIT" }
+requires-python = ">=3.10"
+dependencies = []
+authors = [
+    { name = "MaanavKrishna", email = "67054795+MaanavKrishna@users.noreply.github.com" },
+    { name = "Claude", email = "noreply@anthropic.com" },
+]
+maintainers = [{ name = "MaanavKrishna", email = "67054795+MaanavKrishna@users.noreply.github.com" }]
+keywords = ["web", "framework", "full-stack", "reactive", "rpc", "ssr", "compiler"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Web Environment",
+    "Framework :: AsyncIO",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Operating System :: OS Independent",
+    "Programming Language :: JavaScript",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Internet :: WWW/HTTP :: Dynamic Content",
+    "Topic :: Software Development :: Compilers",
+    "Topic :: Software Development :: Libraries :: Application Frameworks",
+]
+
+[project.optional-dependencies]
+postgres = ["psycopg[binary]>=3.1"]
+mysql = ["PyMySQL>=1.1"]
+redis = ["redis>=5"]
+crypto = ["cryptography>=42"]
+asgi = ["uvicorn>=0.30"]
+all = ["psycopg[binary]>=3.1", "PyMySQL>=1.1", "redis>=5", "cryptography>=42", "uvicorn>=0.30"]
+test = ["pytest>=8", "playwright>=1.45"]
+
+[project.urls]
+Homepage = "https://maanavkrishna.github.io/PyWeb/"
+Documentation = "https://maanavkrishna.github.io/PyWeb/guide.html"
+Source = "https://github.com/MaanavKrishna/PyWeb"
+Changelog = "https://github.com/MaanavKrishna/PyWeb/blob/main/CHANGELOG.md"
+Issues = "https://github.com/MaanavKrishna/PyWeb/issues"
+
+[project.scripts]
+pyweb = "pyweb.cli:main"
+
+[tool.setuptools.packages.find]
+include = ["pyweb*"]
+
+[tool.setuptools.package-data]
+pyweb = ["runtime/browser/*.js", "py.typed"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+
+[tool.ruff]
+line-length = 120
+target-version = "py310"
+extend-exclude = ["website/dist"]
+
+[tool.ruff.lint]
+select = ["E9", "F"]

pyweb_stack-0.1.0/pyweb/__init__.py

@@ -0,0 +1,71 @@
+"""PyWeb — Python from browser to database."""
+
+from .app import App
+from .models import Email, Model
+from . import auth, cache, jobs, realtime, security, observability, forms, testing
+from . import sync, deploy, uploads, lsp, live
+from . import browser as browser_api
+from . import build, css, plugins, platform
+from .jobs import task
+from .context import NotFound, redirect, request, session
+from .rpc import RPCError
+from .decorators import component, edge, server, worker
+
+__all__ = [
+    "App",
+    "request",
+    "session",
+    "redirect",
+    "NotFound",
+    "RPCError",
+    "component",
+    "edge",
+    "server",
+    "worker",
+    "Email",
+    "Model",
+    "task",
+    "auth",
+    "cache",
+    "jobs",
+    "realtime",
+    "security",
+    "observability",
+    "forms",
+    "testing",
+    "sync",
+    "live",
+    "deploy",
+    "uploads",
+    "lsp",
+    "browser_api",
+    "build",
+    "css",
+    "plugins",
+    "platform",
+]
+
+def _version():
+    """Single source of truth: installed dist metadata, else pyproject."""
+    try:
+        from importlib.metadata import version, PackageNotFoundError
+        try:
+            return version("pyweb-stack")
+        except PackageNotFoundError:
+            pass
+    except ImportError:  # pragma: no cover - ancient Python
+        pass
+    import os
+    import re
+    root = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
+    try:
+        with open(os.path.join(root, "pyproject.toml")) as fh:
+            m = re.search(r'^version\s*=\s*"([^"]+)"', fh.read(), re.M)
+            if m:
+                return m.group(1)
+    except OSError:
+        pass
+    return "0.0.0+unknown"
+
+
+__version__ = _version()

pyweb_stack-0.1.0/pyweb/app.py

@@ -0,0 +1,37 @@
+"""Application object: page registry and configuration."""
+
+from __future__ import annotations
+
+
+class App:
+    def __init__(self, database=None, cache=None, auth=None, plugins=(), *,
+                 title="PyWeb", stylesheets=(), lang="en"):
+        self.title = title
+        self.stylesheets = list(stylesheets)
+        self.lang = lang
+        self.database = database
+        self.cache = cache
+        self.auth = auth
+        self.pages: list[tuple[str, str, dict]] = []
+        from pyweb.plugins import Registry
+        self.plugins = Registry()
+        for plugin in plugins:
+            self.use(plugin)
+
+    def page(self, route, *, title=None, render="server"):
+        def deco(fn):
+            self.pages.append((route, fn.__name__, {"render": render, "title": title}))
+            fn.__pyweb_route__ = route
+            fn.__pyweb_title__ = title
+            fn.__pyweb_render__ = render
+            return fn
+
+        return deco
+
+    def use(self, plugin):
+        """Attach a :class:`pyweb.plugins.Plugin`; merges its routes."""
+        self.plugins.add(plugin)
+        for route, fn in plugin.routes:
+            self.pages.append((route, fn.__name__, {"render": "server",
+                                                   "plugin": plugin.name}))
+        return plugin

pyweb_stack-0.1.0/pyweb/app_loader.py

@@ -0,0 +1,139 @@
+"""Load a `.pyweb` app for serving: compile, execute the Python half,
+wire ``@server`` functions to RPC, and render pages per request.
+
+``pyweb dev``, ``pyweb serve`` and the ASGI adapter all go through
+:class:`LoadedApp`, so the three behave identically.
+"""
+
+from __future__ import annotations
+
+import ast
+import copy
+import inspect
+import os
+import sys
+import types
+
+from .compiler import compile_source
+from .compiler import parser as P
+from .compiler.lower import is_ui_stmt
+from .context import NotFound, Redirect
+from .ssr import Renderer, page_html
+
+STATE_PREFIX = "__pyweb_state_"
+
+
+def _state_function(fn):
+    """Copy a page/component function into one that returns its locals.
+
+    Markup placeholders are dropped; an explicit ``return`` (e.g.
+    ``return redirect("/login")``) still returns early.
+    """
+    new = copy.deepcopy(fn)
+    new.name = STATE_PREFIX + fn.name
+    new.decorator_list = []
+    body = [s for s in new.body if not is_ui_stmt(s)]
+    ret = ast.Return(value=ast.Call(func=ast.Name(id="locals", ctx=ast.Load()), args=[], keywords=[]))
+    body.append(ret)
+    new.body = body
+    ast.fix_missing_locations(new)
+    return new
+
+
+class LoadedApp:
+    def __init__(self, path=None, *, source=None, filename=None, asset_urls=None,
+                 stylesheets=None):
+        if source is None:
+            with open(path, encoding="utf-8") as fh:
+                source = fh.read()
+        self.path = path
+        self.filename = filename or path or "app.pyweb"
+        self.source = source
+        self.asset_urls = dict(asset_urls or {})
+        self.extra_stylesheets = list(stylesheets or [])
+        self.compiled = compile_source(source, filename=self.filename)
+        self.ctx = self.compiled["context"]
+        self.module = self._exec()
+        self.rpc = {}
+        for spec in self.compiled["rpc"]:
+            fn = self.module.__dict__.get(spec["name"])
+            if callable(fn):
+                self.rpc[spec["name"]] = fn
+        app_obj = next((v for v in self.module.__dict__.values()
+                        if type(v).__name__ == "App" and type(v).__module__.startswith("pyweb")), None)
+        self.app = app_obj
+        self.title = getattr(app_obj, "title", None) or "PyWeb"
+        self.stylesheets = list(getattr(app_obj, "stylesheets", []) or []) + self.extra_stylesheets
+        self.lang = getattr(app_obj, "lang", "en") or "en"
+
+    # ----------------------------------------------------------- module
+    def _exec(self):
+        py_source, _ui = P.split_sources(self.source)
+        tree = ast.parse(py_source, filename=self.filename)
+        infos = [p["info"] for p in self.compiled["pages"].values()]
+        infos += list(self.compiled["components"].values())
+        for info in infos:
+            tree.body.append(_state_function(info.node))
+        stem = os.path.splitext(os.path.basename(self.filename))[0] or "app"
+        mod = types.ModuleType(f"pyweb_app_{stem}")
+        mod.__file__ = os.path.abspath(self.filename) if self.path else self.filename
+        mod.__dict__["__pyweb_ui__"] = lambda *_a: None
+        app_dir = os.path.dirname(os.path.abspath(self.path)) if self.path else None
+        if app_dir and app_dir not in sys.path:
+            sys.path.insert(0, app_dir)
+        sys.modules[mod.__name__] = mod
+        exec(compile(tree, self.filename, "exec"), mod.__dict__)  # noqa: S102 - the app itself
+        return mod
+
+    # -------------------------------------------------------- rendering
+    def _component_state(self, name, props):
+        info = self.compiled["components"][name]
+        fn = self.module.__dict__[STATE_PREFIX + name]
+        env = fn(**{k: v for k, v in props.items() if k in info.params})
+        return info.ui, env
+
+    def renderer(self):
+        return Renderer(self.module.__dict__, component_state=self._component_state, strict=True)
+
+    def coerce_params(self, page_name, raw):
+        fn = self.module.__dict__[STATE_PREFIX + page_name]
+        out = {}
+        for pname, param in inspect.signature(fn).parameters.items():
+            if pname not in raw:
+                continue
+            ann = param.annotation
+            value = raw[pname]
+            try:
+                if ann in (int, "int"):
+                    value = int(value)
+                elif ann in (float, "float"):
+                    value = float(value)
+            except ValueError:
+                raise NotFound(f"{pname}={value!r}") from None
+            out[pname] = value
+        return out
+
+    def render(self, page_name, params=None):
+        """Return ``html`` (str) or a :class:`~pyweb.context.Redirect`."""
+        page = self.compiled["pages"][page_name]
+        info = page["info"]
+        fn = self.module.__dict__[STATE_PREFIX + page_name]
+        args = self.coerce_params(page_name, params or {})
+        result = fn(**args)
+        if isinstance(result, Redirect):
+            return result
+        if not isinstance(result, dict):
+            raise TypeError(f"page {page_name}() returned {type(result).__name__}; pages may only "
+                            "return redirect(...)")
+        env = dict(result)
+        body = self.renderer().render(info.ui, env)
+        state = {k: env.get(k) for k in info.sent}
+        js_url = self.asset_urls.get(page_name)
+        if js_url is None and page["js"]:
+            js_url = page["js_url"]
+        title = info.title or self.title
+        if callable(getattr(self.app, "title_for", None)):
+            title = self.app.title_for(page_name) or title
+        return page_html(name=page_name, title=title, body=body, state=state,
+                         js_url=js_url if page["js"] else None, css_urls=self.stylesheets,
+                         lang=self.lang)