@dsh-workbench/shared 0.3.10 → 1.0.0-beta.0

package/dist/host/recipe-rules.js

@@ -0,0 +1,382 @@
+const METHODS = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE'];
+const RESPONSE_KINDS = ['json', 'text'];
+const CONTENT_TYPES = ['json', 'form'];
+const CREDENTIAL_HEADERS = [
+    'authorization',
+    'cookie',
+    'x-api-key',
+    'x-auth-token',
+    'x-csrf-token',
+    'x-xsrf-token',
+];
+export const DEFAULT_RECIPE_MAX_BYTES = 2 * 1024 * 1024;
+export const MAX_RECIPE_CALLS = 8;
+const MAX_MAX_BYTES = 8 * 1024 * 1024;
+function recordOf(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function textOf(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+function httpOriginProblem(value) {
+    const text = textOf(value);
+    if (text === '')
+        return 'origin 不能为空';
+    try {
+        const url = new URL(text);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return 'origin 只认 http(s)';
+        if (url.origin !== text)
+            return 'origin 只写到域（不带路径、不带尾斜杠）';
+    }
+    catch {
+        return `origin 不是合法地址：${text}`;
+    }
+    return undefined;
+}
+function relativePathProblem(value, label) {
+    const text = textOf(value);
+    if (text === '')
+        return `${label} 不能为空`;
+    if (text.includes('\\'))
+        return `${label} 里不许有反斜杠`;
+    if (text.startsWith('//'))
+        return `${label} 不许用协议相对地址`;
+    if (text.includes('?') || text.includes('#'))
+        return `${label} 不带查询 / 锚点，参数走 query`;
+    if (!text.startsWith('/'))
+        return `${label} 要以 / 开头`;
+    return undefined;
+}
+function absoluteUrlProblem(value, label) {
+    const text = textOf(value);
+    if (text === '')
+        return `${label} 不能为空`;
+    try {
+        const url = new URL(text);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return `${label} 只认 http(s)`;
+    }
+    catch {
+        return `${label} 不是合法地址：${text}`;
+    }
+    return undefined;
+}
+function requestPathProblem(value, origin, label) {
+    const text = textOf(value);
+    const relative = relativePathProblem(value, label);
+    if (relative === undefined)
+        return undefined;
+    if (text.startsWith('/') || text.startsWith('//') || text.includes('\\') || text.includes('?') || text.includes('#')) {
+        return relative;
+    }
+    try {
+        const url = new URL(text);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return `${label} 只认 http(s)`;
+        if (url.origin !== origin)
+            return `${label} 要和 origin 同源`;
+    }
+    catch {
+        return `${label} 要以 / 开头，或者是同源的绝对地址`;
+    }
+    return undefined;
+}
+function resolvedUrlProblem(value, origin, label) {
+    const text = textOf(value);
+    if (text === '')
+        return `${label} 不能为空`;
+    if (text.startsWith('//'))
+        return `${label} 不许用协议相对地址`;
+    return absoluteUrlProblem(text.startsWith('/') ? `${origin}${text}` : text, label);
+}
+function queryProblem(value) {
+    if (value === undefined)
+        return undefined;
+    const map = recordOf(value);
+    if (map === undefined)
+        return 'query 要是对象';
+    for (const [name, entry] of Object.entries(map)) {
+        if (name.trim() === '')
+            return 'query 的键不能为空';
+        if (typeof entry !== 'string' && typeof entry !== 'number' && typeof entry !== 'boolean') {
+            return `query.${name} 只能是字符串 / 数字 / 布尔`;
+        }
+    }
+    return undefined;
+}
+function headersProblem(value) {
+    if (value === undefined)
+        return undefined;
+    const map = recordOf(value);
+    if (map === undefined)
+        return 'headers 要是对象';
+    for (const [name, entry] of Object.entries(map)) {
+        if (name.trim() === '')
+            return 'headers 的键不能为空';
+        if (typeof entry !== 'string')
+            return `headers.${name} 要是字符串`;
+        if (CREDENTIAL_HEADERS.includes(name.toLowerCase())) {
+            return `headers 里不许写凭据头 ${name} —— 凭据走 auth.place`;
+        }
+    }
+    return undefined;
+}
+function bodyProblem(value, contentType) {
+    if (value === undefined)
+        return undefined;
+    if (contentType === 'form') {
+        const map = recordOf(value);
+        if (map === undefined)
+            return 'contentType: form 时 body 要是对象';
+        for (const [name, entry] of Object.entries(map)) {
+            if (typeof entry !== 'string')
+                return `contentType: form 时 body.${name} 要是字符串`;
+        }
+        return undefined;
+    }
+    try {
+        JSON.stringify(value);
+    }
+    catch {
+        return 'body 要能 JSON 序列化';
+    }
+    return undefined;
+}
+function sourceProblem(value, origin) {
+    const source = recordOf(value);
+    if (source === undefined)
+        return 'auth.source 要是对象';
+    const kind = textOf(source['kind']);
+    if (kind === 'cookie')
+        return undefined;
+    if (kind === 'cookieValue') {
+        return textOf(source['name']) === '' ? 'auth.source.name 不能为空' : undefined;
+    }
+    if (kind === 'meta') {
+        return textOf(source['name']) === '' ? 'auth.source.name 不能为空' : undefined;
+    }
+    if (kind === 'global') {
+        return textOf(source['path']) === '' ? 'auth.source.path 不能为空' : undefined;
+    }
+    if (kind === 'storage') {
+        if (textOf(source['area']) !== 'local' && textOf(source['area']) !== 'session') {
+            return 'auth.source.area 只认 local / session';
+        }
+        return textOf(source['key']) === '' ? 'auth.source.key 不能为空' : undefined;
+    }
+    if (kind === 'endpoint') {
+        const urlIssue = resolvedUrlProblem(source['url'], origin, 'auth.source.url');
+        if (urlIssue !== undefined)
+            return urlIssue;
+        const method = textOf(source['method']);
+        if (method !== '' && method !== 'GET' && method !== 'POST') {
+            return 'auth.source.method 只认 GET / POST';
+        }
+        if (textOf(source['path']) === '')
+            return 'auth.source.path（token 在返回里的位置）不能为空';
+        return bodyProblem(source['body'], 'json');
+    }
+    return `不认识的 auth.source.kind：${kind === '' ? '（空）' : kind}`;
+}
+function placeProblem(value, source) {
+    const place = recordOf(value);
+    if (place === undefined)
+        return 'auth.place 要是对象';
+    const where = textOf(place['in']);
+    if (where === 'cookie') {
+        if (source !== undefined && source.kind !== 'cookie') {
+            return '凭据不是 cookie，place.in 不能是 cookie';
+        }
+        return undefined;
+    }
+    if (where === 'header' || where === 'query') {
+        if (textOf(place['name']) === '')
+            return 'auth.place.name 不能为空';
+        if (source !== undefined && source.kind === 'cookie') {
+            return 'cookie 来源没有 token 可放，place.in 要写 cookie';
+        }
+        return undefined;
+    }
+    if (where === 'body') {
+        if (textOf(place['field']) === '')
+            return 'auth.place.field 不能为空';
+        if (source !== undefined && source.kind === 'cookie') {
+            return 'cookie 来源没有 token 可放，place.in 要写 cookie';
+        }
+        return undefined;
+    }
+    return `不认识的 auth.place.in：${where === '' ? '（空）' : where}`;
+}
+function authProblem(value, origin) {
+    if (value === undefined)
+        return undefined;
+    const auth = recordOf(value);
+    if (auth === undefined)
+        return 'auth 要是对象';
+    if (textOf(auth['kind']) === 'none') {
+        if (auth['source'] !== undefined || auth['place'] !== undefined) {
+            return 'auth.kind: none 时不许带 source / place';
+        }
+        return undefined;
+    }
+    if (auth['kind'] !== undefined)
+        return 'auth.kind 只认 none';
+    const sourceIssue = sourceProblem(auth['source'], origin);
+    if (sourceIssue !== undefined)
+        return sourceIssue;
+    return placeProblem(auth['place'], auth['source']);
+}
+function maxBytesProblem(value) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'number' || !Number.isInteger(value) || value <= 0)
+        return 'response.maxBytes 要是正整数';
+    if (value > MAX_MAX_BYTES)
+        return `response.maxBytes 最大 ${MAX_MAX_BYTES}`;
+    return undefined;
+}
+function responseProblem(value) {
+    if (value === undefined)
+        return undefined;
+    const response = recordOf(value);
+    if (response === undefined)
+        return 'response 要是对象';
+    const kind = textOf(response['kind']);
+    if (!RESPONSE_KINDS.includes(kind))
+        return `response.kind 只认 ${RESPONSE_KINDS.join(' / ')}`;
+    if (response['path'] !== undefined && textOf(response['path']) === '')
+        return 'response.path 不能为空';
+    return maxBytesProblem(response['maxBytes']);
+}
+function responseOverrideProblem(value) {
+    if (value === undefined)
+        return undefined;
+    const response = recordOf(value);
+    if (response === undefined)
+        return 'response 要是对象';
+    if (response['kind'] !== undefined && !RESPONSE_KINDS.includes(textOf(response['kind']))) {
+        return `response.kind 只认 ${RESPONSE_KINDS.join(' / ')}`;
+    }
+    if (response['path'] !== undefined && textOf(response['path']) === '')
+        return 'response.path 不能为空';
+    return maxBytesProblem(response['maxBytes']);
+}
+function authOf(recipe) {
+    return recipe.auth ?? { source: { kind: 'cookie' }, place: { in: 'cookie' } };
+}
+function overridesProblem(recipe, overrides) {
+    if (overrides.path !== undefined) {
+        const pathIssue = requestPathProblem(overrides.path, recipe.origin, 'path');
+        if (pathIssue !== undefined)
+            return pathIssue;
+    }
+    const queryIssue = queryProblem(overrides.query);
+    if (queryIssue !== undefined)
+        return queryIssue;
+    const headersIssue = headersProblem(overrides.headers);
+    if (headersIssue !== undefined)
+        return headersIssue;
+    const responseIssue = responseOverrideProblem(overrides.response);
+    if (responseIssue !== undefined)
+        return responseIssue;
+    const contentType = recipe.request.contentType ?? 'json';
+    const bodyIssue = bodyProblem(overrides.body, contentType);
+    if (bodyIssue !== undefined)
+        return bodyIssue;
+    if (overrides.body !== undefined && recipe.request.method === 'GET') {
+        return 'GET 不带 body';
+    }
+    const auth = authOf(recipe);
+    const place = auth.kind === 'none' ? undefined : auth.place;
+    if (place?.in === 'body' && overrides.body !== undefined && recordOf(overrides.body) === undefined) {
+        return 'auth.place 是 body 时 overrides.body 要是对象';
+    }
+    return undefined;
+}
+export function recipeProblemOf(recipe, overrides) {
+    const box = recordOf(recipe);
+    if (box === undefined)
+        return '配方要是对象';
+    const originIssue = httpOriginProblem(box['origin']);
+    if (originIssue !== undefined)
+        return originIssue;
+    const origin = textOf(box['origin']);
+    if (box['loginUrl'] !== undefined) {
+        const loginIssue = absoluteUrlProblem(box['loginUrl'], 'loginUrl');
+        if (loginIssue !== undefined)
+            return loginIssue;
+    }
+    if (box['session'] !== undefined && textOf(box['session']) === '')
+        return 'session 不能为空';
+    if (box['timeoutMs'] !== undefined) {
+        const timeout = box['timeoutMs'];
+        if (typeof timeout !== 'number' || !Number.isInteger(timeout) || timeout <= 0) {
+            return 'timeoutMs 要是正整数';
+        }
+    }
+    const request = recordOf(box['request']);
+    if (request === undefined)
+        return 'request 要是对象';
+    const method = textOf(request['method']);
+    if (!METHODS.includes(method))
+        return `request.method 只认 ${METHODS.join(' / ')}`;
+    const pathIssue = requestPathProblem(request['path'], origin, 'request.path');
+    if (pathIssue !== undefined)
+        return pathIssue;
+    const queryIssue = queryProblem(request['query']);
+    if (queryIssue !== undefined)
+        return queryIssue;
+    const headersIssue = headersProblem(request['headers']);
+    if (headersIssue !== undefined)
+        return headersIssue;
+    const contentType = textOf(request['contentType']);
+    if (contentType !== '' && !CONTENT_TYPES.includes(contentType)) {
+        return `request.contentType 只认 ${CONTENT_TYPES.join(' / ')}`;
+    }
+    const bodyIssue = bodyProblem(request['body'], contentType === 'form' ? 'form' : 'json');
+    if (bodyIssue !== undefined)
+        return bodyIssue;
+    if (request['body'] !== undefined && method === 'GET')
+        return 'GET 不带 body';
+    const authIssue = authProblem(box['auth'], origin);
+    if (authIssue !== undefined)
+        return authIssue;
+    const auth = recordOf(box['auth']);
+    const place = auth === undefined ? undefined : recordOf(auth['place']);
+    if (place !== undefined && textOf(place['in']) === 'body' && request['body'] !== undefined) {
+        if (recordOf(request['body']) === undefined)
+            return 'auth.place 是 body 时 request.body 要是对象';
+    }
+    const responseIssue = responseProblem(box['response']);
+    if (responseIssue !== undefined)
+        return responseIssue;
+    if (overrides === undefined)
+        return undefined;
+    return overridesProblem(recipe, overrides);
+}
+export function callsProblemOf(recipe, calls) {
+    const recipeIssue = recipeProblemOf(recipe);
+    if (recipeIssue !== undefined)
+        return recipeIssue;
+    const box = recordOf(calls);
+    if (box === undefined)
+        return 'calls 要是对象，键就是结果名';
+    const names = Object.keys(box);
+    if (names.length === 0)
+        return 'calls 不能为空';
+    if (names.length > MAX_RECIPE_CALLS)
+        return `一次最多 ${MAX_RECIPE_CALLS} 条 calls`;
+    for (const name of names) {
+        if (name.trim() === '')
+            return 'calls 的键不能为空';
+        if (recordOf(box[name]) === undefined)
+            return `calls.${name} 要是对象`;
+        const issue = overridesProblem(recipe, box[name]);
+        if (issue !== undefined)
+            return `calls.${name}：${issue}`;
+    }
+    return undefined;
+}

package/dist/host/recipe.d.ts

@@ -0,0 +1,14 @@
+import type { CallOverrides, RecipeCalls, RequestRecipe } from '../contract/data.js';
+export interface RecipeDescription {
+    readonly method: string;
+    readonly url: string;
+    readonly body?: unknown;
+    readonly auth?: {
+        readonly source: string;
+        readonly place: string;
+        readonly name?: string;
+    } | undefined;
+}
+export declare function scriptOf(recipe: RequestRecipe, overrides?: CallOverrides): string;
+export declare function describeRecipe(recipe: RequestRecipe, overrides?: CallOverrides): RecipeDescription;
+export declare function scriptOfMany(recipe: RequestRecipe, calls: RecipeCalls): string;

package/dist/host/recipe.js

@@ -0,0 +1,283 @@
+import { callsProblemOf, DEFAULT_RECIPE_MAX_BYTES, recipeProblemOf } from './recipe-rules.js';
+function authOf(recipe) {
+    return recipe.auth ?? { source: { kind: 'cookie' }, place: { in: 'cookie' } };
+}
+function needsToken(auth) {
+    return auth.kind !== 'none' && auth.source.kind !== 'cookie';
+}
+function mergedHeaders(recipe, overrides) {
+    return { ...(recipe.request.headers ?? {}), ...(overrides.headers ?? {}) };
+}
+function mergedQuery(recipe, overrides) {
+    const query = {};
+    for (const [name, value] of Object.entries(recipe.request.query ?? {}))
+        query[name] = String(value);
+    for (const [name, value] of Object.entries(overrides.query ?? {}))
+        query[name] = String(value);
+    return query;
+}
+function baseUrlOf(recipe, overrides) {
+    const path = overrides.path ?? recipe.request.path;
+    return path.startsWith('/') ? `${recipe.origin}${path}` : path;
+}
+function urlOf(recipe, overrides) {
+    const url = new URL(baseUrlOf(recipe, overrides));
+    for (const [name, value] of Object.entries(mergedQuery(recipe, overrides))) {
+        url.searchParams.set(name, value);
+    }
+    return url.toString();
+}
+function responseOf(recipe, overrides) {
+    const base = recipe.response;
+    const extra = overrides.response ?? {};
+    return {
+        kind: extra.kind ?? base?.kind ?? 'json',
+        path: extra.path ?? base?.path,
+        maxBytes: extra.maxBytes ?? base?.maxBytes ?? DEFAULT_RECIPE_MAX_BYTES,
+    };
+}
+function bodyOf(recipe, overrides) {
+    return overrides.body !== undefined ? overrides.body : recipe.request.body;
+}
+function quote(value) {
+    return JSON.stringify(value);
+}
+function literal(value) {
+    return JSON.stringify(value);
+}
+function encodedBody(value) {
+    return typeof value === 'string' ? literal(value) : `JSON.stringify(${literal(value)})`;
+}
+function tokenLines(recipe, auth) {
+    if (!needsToken(auth))
+        return [];
+    const source = auth.kind === 'none' ? undefined : auth.source;
+    if (source === undefined)
+        return [];
+    if (source.kind === 'cookieValue') {
+        return [
+            '  const cookie = (name) => {',
+            '    const hit = document.cookie.split("; ").find((one) => one.startsWith(name + "="));',
+            '    return hit === undefined ? "" : decodeURIComponent(hit.slice(name.length + 1));',
+            '  };',
+            `  const token = cookie(${quote(source.name)});`,
+            '  if (token === "") return { ok: false, code: "auth-failed", message: "页面里没有这个 cookie" };',
+        ];
+    }
+    if (source.kind === 'meta') {
+        return [
+            `  const meta = document.querySelector(${quote(`meta[name="${source.name}"]`)});`,
+            '  const token = meta === null ? "" : (meta.getAttribute("content") || "");',
+            '  if (token === "") return { ok: false, code: "auth-failed", message: "页面里没有这个 meta" };',
+        ];
+    }
+    if (source.kind === 'global') {
+        return [
+            `  const token = pick(globalThis, ${quote(source.path)});`,
+            '  if (typeof token !== "string" || token === "") return { ok: false, code: "auth-failed", message: "页面里没有这个全局变量" };',
+        ];
+    }
+    if (source.kind === 'storage') {
+        const store = source.area === 'local' ? 'localStorage' : 'sessionStorage';
+        const path = source.path === undefined ? '' : source.path;
+        return [
+            `  const raw = ${store}.getItem(${quote(source.key)});`,
+            '  let parsed = raw;',
+            '  try { parsed = raw === null ? null : JSON.parse(raw); } catch (error) { parsed = raw; }',
+            path === ''
+                ? '  const token = parsed;'
+                : `  const token = pick(parsed, ${quote(path)});`,
+            '  if (typeof token !== "string" || token === "") return { ok: false, code: "auth-failed", message: "页面里没有这个 token" };',
+        ];
+    }
+    if (source.kind === 'endpoint') {
+        const method = source.method ?? 'GET';
+        const hasBody = source.body !== undefined;
+        const endpointUrl = source.url.startsWith('/') ? `${recipe.origin}${source.url}` : source.url;
+        const lines = [
+            '  let pre;',
+            '  try {',
+            `    pre = await fetch(${quote(endpointUrl)}, { method: ${quote(method)}, credentials: "include", headers: { "content-type": "application/json" }${hasBody ? `, body: ${encodedBody(source.body)}` : ''} });`,
+            '  } catch (error) {',
+            '    return { ok: false, code: "fetch-failed", message: String(error) };',
+            '  }',
+            '  if (pre.status === 401 || pre.status === 403) return { ok: false, code: "not-logged-in" };',
+            '  const preText = await pre.text();',
+            '  if (!pre.ok) return { ok: false, code: "http-" + pre.status, message: preText.slice(0, 200) };',
+            '  let preJson;',
+            '  try { preJson = JSON.parse(preText); } catch (error) {',
+            '    return { ok: false, code: "shape", message: "换登录态时返回的不是 JSON" };',
+            '  }',
+            `  const token = pick(preJson, ${quote(source.path)});`,
+            '  if (typeof token !== "string" || token === "") return { ok: false, code: "auth-failed", message: "换登录态时没拿到 token" };',
+        ];
+        return lines;
+    }
+    return [];
+}
+function fetchLine(recipe, hasBody) {
+    return `    res = await fetch(url, { method: ${quote(recipe.request.method)}, credentials: "include", headers${hasBody ? ', body' : ''} });`;
+}
+export function scriptOf(recipe, overrides = {}) {
+    const problem = recipeProblemOf(recipe, overrides);
+    if (problem !== undefined)
+        throw new Error(problem);
+    const auth = authOf(recipe);
+    const body = bodyOf(recipe, overrides);
+    const contentType = recipe.request.contentType ?? 'json';
+    const place = auth.kind === 'none' ? undefined : auth.place;
+    const bodyPlace = place?.in === 'body' ? place : undefined;
+    const hasBody = body !== undefined || bodyPlace !== undefined;
+    const headers = mergedHeaders(recipe, overrides);
+    const headerNames = Object.keys(headers).map((name) => name.toLowerCase());
+    if (hasBody && !headerNames.includes('content-type')) {
+        headers['content-type'] = contentType === 'form' ? 'application/x-www-form-urlencoded' : 'application/json';
+    }
+    const url = urlOf(recipe, overrides);
+    const { kind: responseKind, path: responsePath, maxBytes } = responseOf(recipe, overrides);
+    const lines = [];
+    lines.push('(async () => {');
+    lines.push(`  if (location.origin !== ${quote(recipe.origin)}) return { ok: false, code: "not-on-site" };`);
+    lines.push('  const pick = (value, path) => path.split(".").reduce((one, key) => (one === null || one === undefined ? one : one[key]), value);');
+    lines.push('  const set = (target, path, value) => { const parts = path.split("."); let at = target; for (let index = 0; index < parts.length - 1; index += 1) { const key = parts[index]; if (at[key] === null || typeof at[key] !== "object") at[key] = {}; at = at[key]; } at[parts[parts.length - 1]] = value; return target; };');
+    lines.push(...tokenLines(recipe, auth));
+    lines.push(`  const headers = ${literal(headers)};`);
+    if (place?.in === 'header' && needsToken(auth)) {
+        lines.push(`  headers[${quote(place.name)}] = ${quote(place.prefix ?? '')} + token;`);
+    }
+    if (hasBody) {
+        if (contentType === 'form') {
+            lines.push(`  const body = new URLSearchParams(${literal(body ?? {})});`);
+            if (bodyPlace !== undefined)
+                lines.push(`  body.set(${quote(bodyPlace.field)}, token);`);
+        }
+        else {
+            lines.push(`  let body = ${literal(body ?? {})};`);
+            if (bodyPlace !== undefined)
+                lines.push(`  set(body, ${quote(bodyPlace.field)}, token);`);
+            lines.push('  if (typeof body !== "string") body = JSON.stringify(body);');
+        }
+    }
+    lines.push(`  let url = ${quote(url)};`);
+    if (place?.in === 'query' && needsToken(auth)) {
+        lines.push(`  url += (url.indexOf("?") === -1 ? "?" : "&") + ${quote(`${place.name}=`)} + encodeURIComponent(token);`);
+    }
+    lines.push('  let res;');
+    lines.push('  try {');
+    lines.push(fetchLine(recipe, hasBody));
+    lines.push('  } catch (error) {');
+    lines.push('    return { ok: false, code: "fetch-failed", message: String(error) };');
+    lines.push('  }');
+    lines.push('  const text = await res.text();');
+    lines.push(`  if (new TextEncoder().encode(text).length > ${maxBytes}) return { ok: false, code: "too-large", message: "返回超过 ${Math.round(maxBytes / 1024)} KB" };`);
+    lines.push('  if (!res.ok) return { ok: false, code: "http-" + res.status, message: text.slice(0, 200) };');
+    if (responseKind === 'text') {
+        lines.push('  return { ok: true, text };');
+    }
+    else {
+        lines.push('  let data;');
+        lines.push('  try {');
+        lines.push('    data = JSON.parse(text);');
+        lines.push('  } catch (error) {');
+        lines.push('    return { ok: false, code: "shape", message: "返回的不是 JSON（可能跳到登录页了）" };');
+        lines.push('  }');
+        if (responsePath === undefined) {
+            lines.push('  return { ok: true, data };');
+        }
+        else {
+            lines.push(`  const value = pick(data, ${quote(responsePath)});`);
+            lines.push(`  if (value === undefined) return { ok: false, code: "shape", message: "返回里没有 ${responsePath} 这一格" };`);
+            lines.push('  return { ok: true, data: value };');
+        }
+    }
+    lines.push('})()');
+    return lines.join('\n');
+}
+export function describeRecipe(recipe, overrides = {}) {
+    const problem = recipeProblemOf(recipe, overrides);
+    if (problem !== undefined)
+        throw new Error(problem);
+    const auth = authOf(recipe);
+    const body = bodyOf(recipe, overrides);
+    const placement = auth.kind === 'none' ? undefined : auth.place;
+    const name = placement === undefined || placement.in === 'cookie'
+        ? undefined
+        : placement.in === 'body'
+            ? placement.field
+            : placement.name;
+    return {
+        method: recipe.request.method,
+        url: urlOf(recipe, overrides),
+        ...(body === undefined ? {} : { body }),
+        ...(placement === undefined
+            ? {}
+            : {
+                auth: {
+                    source: auth.kind === 'none' ? 'none' : auth.source.kind,
+                    place: placement.in,
+                    ...(name === undefined ? {} : { name }),
+                },
+            }),
+    };
+}
+export function scriptOfMany(recipe, calls) {
+    const problem = callsProblemOf(recipe, calls);
+    if (problem !== undefined)
+        throw new Error(problem);
+    if (recipe.request.method !== 'GET')
+        throw new Error('批量读只认 GET，写一条一条走 submit');
+    const auth = authOf(recipe);
+    const place = auth.kind === 'none' ? undefined : auth.place;
+    if (place?.in === 'body')
+        throw new Error('批量读不带 body 里的凭据');
+    const lines = [];
+    lines.push('(async () => {');
+    lines.push(`  if (location.origin !== ${quote(recipe.origin)}) return { ok: false, code: "not-on-site" };`);
+    lines.push('  const pick = (value, path) => path.split(".").reduce((one, key) => (one === null || one === undefined ? one : one[key]), value);');
+    lines.push(...tokenLines(recipe, auth));
+    lines.push(`  const headers = ${literal(recipe.request.headers ?? {})};`);
+    if (place?.in === 'header' && needsToken(auth)) {
+        lines.push(`  headers[${quote(place.name)}] = ${quote(place.prefix ?? '')} + token;`);
+    }
+    if (place?.in === 'query' && needsToken(auth)) {
+        lines.push(`  const withToken = (url) => url + (url.indexOf("?") === -1 ? "?" : "&") + ${quote(`${place.name}=`)} + encodeURIComponent(token);`);
+    }
+    else {
+        lines.push('  const withToken = (url) => url;');
+    }
+    lines.push('  const one = async (url, headers, kind, path, maxBytes) => {');
+    lines.push('    let res;');
+    lines.push('    try {');
+    lines.push('      res = await fetch(url, { method: "GET", credentials: "include", headers });');
+    lines.push('    } catch (error) {');
+    lines.push('      return { ok: false, code: "fetch-failed", message: String(error) };');
+    lines.push('    }');
+    lines.push('    const text = await res.text();');
+    lines.push('    if (new TextEncoder().encode(text).length > maxBytes) return { ok: false, code: "too-large", message: "返回超过 " + Math.round(maxBytes / 1024) + " KB" };');
+    lines.push('    if (!res.ok) return { ok: false, code: "http-" + res.status, message: text.slice(0, 200) };');
+    lines.push('    if (kind === "text") return { ok: true, text };');
+    lines.push('    let data;');
+    lines.push('    try {');
+    lines.push('      data = JSON.parse(text);');
+    lines.push('    } catch (error) {');
+    lines.push('      return { ok: false, code: "shape", message: "返回的不是 JSON（可能跳到登录页了）" };');
+    lines.push('    }');
+    lines.push('    if (path === null) return { ok: true, data };');
+    lines.push('    const value = pick(data, path);');
+    lines.push('    if (value === undefined) return { ok: false, code: "shape", message: "返回里没有 " + path + " 这一格" };');
+    lines.push('    return { ok: true, data: value };');
+    lines.push('  };');
+    lines.push('  const results = {};');
+    lines.push('  await Promise.all([');
+    for (const [name, call] of Object.entries(calls)) {
+        const extra = call.headers ?? {};
+        const headersArg = Object.keys(extra).length === 0 ? 'headers' : `Object.assign({}, headers, ${literal(extra)})`;
+        const { kind, path, maxBytes } = responseOf(recipe, call);
+        const pathArg = path === undefined ? 'null' : quote(path);
+        lines.push(`    one(withToken(${quote(urlOf(recipe, call))}), ${headersArg}, ${quote(kind)}, ${pathArg}, ${maxBytes}).then((result) => { results[${quote(name)}] = result; }),`);
+    }
+    lines.push('  ]);');
+    lines.push('  return { ok: true, results };');
+    lines.push('})()');
+    return lines.join('\n');
+}