@open-rap/runtime 0.0.0-stage → 0.1.1

package/dist/launchpad/dev.js

@@ -0,0 +1,48 @@
+/**
+ * The development launchpad of `rapt dev` (decision D49): at `/`, a launchpad with the application
+ * and the development tools (documentation, $metadata, MCP tools), served by the application
+ * itself. Its configuration is `home/launchpad.json` of the development build; `/launchpad/config`
+ * gives the application and the documentation app the shell bar of the launchpad.
+ */
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { launchpadView } from "./server.js";
+const TYPES = {
+    ".html": "text/html; charset=utf-8",
+    ".js": "application/javascript; charset=utf-8",
+    ".json": "application/json; charset=utf-8",
+    ".xml": "application/xml; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".svg": "image/svg+xml",
+};
+/** Serves the files of `dir` at `/<mount>/`. */
+function serveFolder(app, mount, dir) {
+    const root = path.resolve(dir);
+    app.get(`/${mount}/*`, async (request, reply) => {
+        const relative = path.posix.normalize(request.params["*"] || "index.html").replace(/^(\.\.(\/|$))+/, "");
+        const file = path.join(root, relative);
+        if (!file.startsWith(root)) {
+            return reply.status(404).send("Not found");
+        }
+        try {
+            return reply.header("Cache-Control", "no-cache").type(TYPES[path.extname(file)] ?? "application/octet-stream").send(await readFile(file));
+        }
+        catch {
+            return reply.status(404).type("text/plain").send("Not found");
+        }
+    });
+    app.get(`/${mount}`, async (_request, reply) => reply.redirect(`/${mount}/index.html`));
+}
+export function registerDevLaunchpad(app, options) {
+    serveFolder(app, "home", path.join(options.dir, "home"));
+    serveFolder(app, "docs", path.join(options.dir, "docs"));
+    app.get("/launchpad/config", async (request, reply) => {
+        const user = request.user ?? (await options.authenticator.fromAuthorization(request.headers.authorization).catch(() => undefined));
+        if (user === undefined) {
+            return reply.status(401).send({ error: "authentication required" });
+        }
+        const view = launchpadView(options.config, user, undefined);
+        return reply.header("Cache-Control", "no-store").send({ ...view, home: "/", logo: "/home/logo.svg" });
+    });
+}
+//# sourceMappingURL=dev.js.map

package/dist/launchpad/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/launchpad/dev.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,KAAK,GAA2B;IACpC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,uCAAuC;IAC9C,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,eAAe;CACxB,CAAC;AAEF,gDAAgD;AAChD,SAAS,WAAW,CAAC,GAAoB,EAAE,KAAa,EAAE,GAAW;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAE,OAAO,CAAC,MAA0B,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAC9H,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC;YACH,OAAO,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5I,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAoB,EAAE,OAA8E;IACvI,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/launchpad/proxy.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Forwarding of the requests of the launchpad to its applications (decision D37): the launchpad
+ * is the only origin the browser sees, as the front-end server of the SAP Fiori launchpad. The UI
+ * of an application is mounted at `/apps/<id>/` (the prefix is removed), its services keep their
+ * paths. The cookies go with the request: the application reads the session the launchpad opened.
+ */
+import type { FastifyReply, FastifyRequest } from "fastify";
+export interface ForwardOptions {
+    /** The mount path of the application (`/apps/travel`): its redirections are rewritten below it. */
+    prefix?: string;
+    /** Timeout of the request (ms). */
+    timeout: number;
+    /** Name of the application, for the error message. */
+    app: string;
+    /** The answer is an OData error when the application cannot be reached (service paths). */
+    odata: boolean;
+}
+/**
+ * A redirection of the application, for the browser of the launchpad: `/ui/index.html` becomes
+ * `/apps/<id>/ui/index.html`; a login (`/auth/login?returnTo=/ui/…`) goes to the login of the
+ * launchpad, back to the page of the application. Other URLs are kept.
+ */
+export declare function rewriteLocation(location: string, prefix: string): string;
+/**
+ * The URL of a path of the application (`/ui/index.html?x=1`): below the URL of the application,
+ * whatever the path holds (`/http://other.host/` stays a path: no request to another host).
+ */
+export declare function targetUrl(base: URL, pathAndQuery: string): URL;
+/** Sends the request to `target` (the URL of the application with the path and the query) and its answer back. */
+export declare function forward(request: FastifyRequest, reply: FastifyReply, target: URL, options: ForwardOptions): Promise<FastifyReply>;

package/dist/launchpad/proxy.js

@@ -0,0 +1,98 @@
+/**
+ * Forwarding of the requests of the launchpad to its applications (decision D37): the launchpad
+ * is the only origin the browser sees, as the front-end server of the SAP Fiori launchpad. The UI
+ * of an application is mounted at `/apps/<id>/` (the prefix is removed), its services keep their
+ * paths. The cookies go with the request: the application reads the session the launchpad opened.
+ */
+/** Headers of one connection (RFC 9110 §7.6.1), not forwarded. */
+const HOP_BY_HOP = new Set(["connection", "keep-alive", "proxy-authenticate", "proxy-authorization", "proxy-connection", "te", "trailer", "transfer-encoding", "upgrade", "host", "content-length"]);
+/**
+ * A redirection of the application, for the browser of the launchpad: `/ui/index.html` becomes
+ * `/apps/<id>/ui/index.html`; a login (`/auth/login?returnTo=/ui/…`) goes to the login of the
+ * launchpad, back to the page of the application. Other URLs are kept.
+ */
+export function rewriteLocation(location, prefix) {
+    if (!location.startsWith("/") || location.startsWith("//")) {
+        return location;
+    }
+    if (location === "/auth" || location.startsWith("/auth/") || location.startsWith("/auth?")) {
+        const url = new URL(location, "http://launchpad.invalid");
+        const returnTo = url.searchParams.get("returnTo");
+        if (returnTo !== null && returnTo.startsWith("/") && !returnTo.startsWith("//") && !returnTo.startsWith(`${prefix}/`)) {
+            url.searchParams.set("returnTo", `${prefix}${returnTo}`);
+        }
+        return `${url.pathname}${url.search}${url.hash}`;
+    }
+    return `${prefix}${location}`;
+}
+/**
+ * The URL of a path of the application (`/ui/index.html?x=1`): below the URL of the application,
+ * whatever the path holds (`/http://other.host/` stays a path: no request to another host).
+ */
+export function targetUrl(base, pathAndQuery) {
+    const target = new URL(base.href);
+    const question = pathAndQuery.indexOf("?");
+    const pathname = question < 0 ? pathAndQuery : pathAndQuery.slice(0, question);
+    target.pathname = `${base.pathname.replace(/\/$/, "")}/${pathname.replace(/^\/+/, "")}`;
+    target.search = question < 0 ? "" : pathAndQuery.slice(question);
+    target.hash = "";
+    return target;
+}
+function forwardedHeaders(request, prefix) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(request.headers)) {
+        const lower = name.toLowerCase();
+        // the body is sent decoded: no compression negotiated with the application
+        if (value === undefined || HOP_BY_HOP.has(lower) || lower === "accept-encoding") {
+            continue;
+        }
+        for (const item of Array.isArray(value) ? value : [value]) {
+            headers.append(lower, item);
+        }
+    }
+    const forwardedFor = request.headers["x-forwarded-for"];
+    headers.set("x-forwarded-for", forwardedFor === undefined ? request.ip : `${String(forwardedFor)}, ${request.ip}`);
+    headers.set("x-forwarded-host", request.headers.host ?? "");
+    headers.set("x-forwarded-proto", request.protocol);
+    if (prefix !== undefined) {
+        headers.set("x-forwarded-prefix", prefix);
+    }
+    return headers;
+}
+/** Sends the request to `target` (the URL of the application with the path and the query) and its answer back. */
+export async function forward(request, reply, target, options) {
+    const init = {
+        method: request.method,
+        headers: forwardedHeaders(request, options.prefix),
+        redirect: "manual",
+        signal: AbortSignal.timeout(options.timeout),
+    };
+    if (request.method !== "GET" && request.method !== "HEAD" && Buffer.isBuffer(request.body)) {
+        init.body = request.body;
+    }
+    let response;
+    try {
+        response = await fetch(target, init);
+    }
+    catch (error) {
+        request.log.warn({ err: error, app: options.app }, "application not reachable");
+        const message = `The application ${options.app} is not reachable`;
+        reply.status(502);
+        return options.odata ? reply.type("application/json").send({ error: { code: "BAD_GATEWAY", message } }) : reply.type("text/plain").send(message);
+    }
+    reply.status(response.status);
+    response.headers.forEach((value, name) => {
+        // fetch has decoded the body; the cookies are set one by one below
+        if (HOP_BY_HOP.has(name) || name === "content-encoding" || name === "set-cookie") {
+            return;
+        }
+        reply.header(name, name === "location" && options.prefix !== undefined ? rewriteLocation(value, options.prefix) : value);
+    });
+    const cookies = response.headers.getSetCookie();
+    if (cookies.length > 0) {
+        reply.header("set-cookie", cookies);
+    }
+    const body = request.method === "HEAD" ? Buffer.alloc(0) : Buffer.from(await response.arrayBuffer());
+    return reply.send(body);
+}
+//# sourceMappingURL=proxy.js.map

package/dist/launchpad/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/launchpad/proxy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,kEAAkE;AAClE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAarM;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,MAAc;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;YACtH,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAS,EAAE,YAAoB;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/E,MAAM,CAAC,QAAQ,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IACxF,MAAM,CAAC,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuB,EAAE,MAA0B;IAC3E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,2EAA2E;QAC3E,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;YAChF,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACnH,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB,EAAE,KAAmB,EAAE,MAAW,EAAE,OAAuB;IAC9G,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;QAClD,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;KAC7C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,mBAAmB,OAAO,CAAC,GAAG,mBAAmB,CAAC;QAClE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnJ,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvC,mEAAmE;QACnE,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACjF,OAAO;QACT,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3H,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/launchpad/server.d.ts

@@ -0,0 +1,77 @@
+/**
+ * The launchpad of applications (decision D37), the counterpart of the SAP Fiori launchpad built
+ * with OpenUI5: one origin for the browser, one login, and tiles assigned to roles.
+ *
+ * - `/` and `/ui/`: the launchpad (ShellBar, groups of tiles, dynamic tiles with a `$count`);
+ * - `/launchpad/config`: the tiles the user sees (roles of the identity provider), the user;
+ * - `/go/<SemanticObject>-<action>`: navigation by intent to the application of a tile;
+ * - `/apps/<id>/…`: the UI of an application, forwarded to it; its services keep their paths;
+ * - `/auth/…`: the login (OIDC, authorization code with PKCE) whose session the applications read
+ *   (same `SESSION_SECRET`): a single sign-on, as the session of the front-end server of SAP.
+ *
+ * Configuration by the environment, as an application (server.ts): `PORT` (8090), `HOST`,
+ * `PUBLIC_URL`, `LOG_LEVEL`, `AUTH_MODE`, `DEV_USER`, `DEV_ROLES`, `OIDC_*`, `SESSION_SECRET`, and
+ * `APP_<ID>_URL` for the internal URL of each application.
+ */
+import { type FastifyInstance, type FastifyServerOptions } from "fastify";
+import { type LaunchpadModel, type LaunchpadTile } from "@open-rap/model";
+import { type AuthOptions } from "../auth/auth.js";
+import type { User } from "../auth/user.js";
+import { type UiOptions } from "../ui/plugin.js";
+export interface LaunchpadOptions {
+    config: LaunchpadModel;
+    auth?: AuthOptions;
+    /** The `ui/` folder of the generated launchpad and the OpenUI5 resources. */
+    ui?: UiOptions;
+    /** Internal URLs of the applications, replacing those of the configuration (`APP_<ID>_URL`). */
+    appUrls?: Record<string, string>;
+    logger?: FastifyServerOptions["logger"];
+    /** Timeout of a request forwarded to an application (ms, default 120 s). */
+    timeout?: number;
+}
+/** The tiles of the launchpad for a user, as `/launchpad/config` answers them. */
+export interface LaunchpadView {
+    title: string;
+    /** The home page and the mark of the launchpad, for the shell bar of the applications. */
+    home: string;
+    logo: string;
+    user: {
+        id: string;
+        name: string;
+        initials: string;
+    };
+    /** The logout of the launchpad (OIDC sessions). */
+    logout?: string;
+    groups: ViewGroup[];
+    /** The spaces and pages of the user (D48): one space of one page when launchpad.json has groups only. */
+    spaces: Array<{
+        id: string;
+        title: string;
+        pages: Array<{
+            id: string;
+            title: string;
+            groups: ViewGroup[];
+        }>;
+    }>;
+}
+type ViewGroup = {
+    title: string;
+    tiles: Array<Omit<LaunchpadTile, "roles" | "app">>;
+};
+/** The tiles a user sees; the groups without such a tile are left out. */
+export declare function launchpadView(config: LaunchpadModel, user: User, logout: string | undefined): LaunchpadView;
+export declare function createLaunchpad(options: LaunchpadOptions): Promise<FastifyInstance>;
+export interface StartLaunchpadOptions {
+    /** The generated launchpad folder (launchpad/config.json, ui/). */
+    dir: string;
+    env?: Record<string, string | undefined>;
+    listen?: boolean;
+}
+export interface RunningLaunchpad {
+    app: FastifyInstance;
+    url: string;
+    close(): Promise<void>;
+}
+/** Start-up of a generated launchpad (`node server.mjs`), configured by the environment. */
+export declare function startLaunchpad(options: StartLaunchpadOptions): Promise<RunningLaunchpad>;
+export {};

package/dist/launchpad/server.js

@@ -0,0 +1,177 @@
+/**
+ * The launchpad of applications (decision D37), the counterpart of the SAP Fiori launchpad built
+ * with OpenUI5: one origin for the browser, one login, and tiles assigned to roles.
+ *
+ * - `/` and `/ui/`: the launchpad (ShellBar, groups of tiles, dynamic tiles with a `$count`);
+ * - `/launchpad/config`: the tiles the user sees (roles of the identity provider), the user;
+ * - `/go/<SemanticObject>-<action>`: navigation by intent to the application of a tile;
+ * - `/apps/<id>/…`: the UI of an application, forwarded to it; its services keep their paths;
+ * - `/auth/…`: the login (OIDC, authorization code with PKCE) whose session the applications read
+ *   (same `SESSION_SECRET`): a single sign-on, as the session of the front-end server of SAP.
+ *
+ * Configuration by the environment, as an application (server.ts): `PORT` (8090), `HOST`,
+ * `PUBLIC_URL`, `LOG_LEVEL`, `AUTH_MODE`, `DEV_USER`, `DEV_ROLES`, `OIDC_*`, `SESSION_SECRET`, and
+ * `APP_<ID>_URL` for the internal URL of each application.
+ */
+import { platformEnvironment } from "../platform.js";
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import Fastify, {} from "fastify";
+import { appUrlVariable, tileVisible } from "@open-rap/model";
+import { AuthenticationError, Authenticator } from "../auth/auth.js";
+import { authFromEnvironment } from "../auth/environment.js";
+import { OidcSessions } from "../auth/session.js";
+import { registerUi } from "../ui/plugin.js";
+import { forward, targetUrl } from "./proxy.js";
+function initials(name) {
+    const words = name.split(/[\s._@-]+/).filter((w) => w !== "");
+    const letters = words.length >= 2 ? `${words[0]?.[0] ?? ""}${words[words.length - 1]?.[0] ?? ""}` : name.slice(0, 2);
+    return letters.toUpperCase();
+}
+/** The tiles a user sees; the groups without such a tile are left out. */
+export function launchpadView(config, user, logout) {
+    const name = user.name ?? user.id;
+    const view = { title: config.title, home: "/", logo: "/ui/logo.svg", user: { id: user.id, name, initials: initials(name) }, groups: [], spaces: [] };
+    if (logout !== undefined) {
+        view.logout = logout;
+    }
+    const visibleGroups = (groups) => groups
+        .map((group) => ({ title: group.title, tiles: group.tiles.filter((t) => tileVisible(t, user.roles)).map(({ roles: _roles, app: _app, ...tile }) => tile) }))
+        .filter((group) => group.tiles.length > 0);
+    const spaces = config.spaces ?? [{ id: "home", title: config.title, roles: [], pages: [{ id: "home", title: config.title, sections: config.groups }] }];
+    for (const space of spaces) {
+        if (!tileVisible(space, user.roles)) {
+            continue;
+        }
+        const pages = space.pages.map((page) => ({ id: page.id, title: page.title, groups: visibleGroups(page.sections) })).filter((page) => page.groups.length > 0);
+        if (pages.length > 0) {
+            view.spaces.push({ id: space.id, title: space.title, pages });
+            view.groups.push(...pages.flatMap((page) => page.groups));
+        }
+    }
+    return view;
+}
+const servicePathOf = (pathname, apps) => apps.find(({ root }) => pathname === root || pathname.startsWith(`${root}/`));
+export async function createLaunchpad(options) {
+    const { config } = options;
+    const app = Fastify({ logger: options.logger ?? false, bodyLimit: 20 * 1024 * 1024, return503OnClosing: true });
+    const auth = options.auth ?? { mode: "none" };
+    const authenticator = new Authenticator(auth);
+    if (auth.mode === "oidc" && auth.session === undefined) {
+        throw new Error("the launchpad needs browser sessions: set OIDC_CLIENT_ID and SESSION_SECRET");
+    }
+    const sessions = auth.mode === "oidc" && auth.session !== undefined ? new OidcSessions(authenticator, { ...auth, session: auth.session }) : undefined;
+    const timeout = options.timeout ?? 120_000;
+    const urls = new Map(config.apps.map((a) => [a.id, new URL(options.appUrls?.[a.id] ?? a.url)]));
+    const services = config.apps.flatMap((a) => a.servicePaths.map((p) => ({ app: a, root: p.replace(/\/$/, "") })));
+    // bodies are forwarded as they came
+    app.removeAllContentTypeParsers();
+    app.addContentTypeParser("*", { parseAs: "buffer" }, (_request, body, done) => done(null, body));
+    app.decorateRequest("user", undefined);
+    app.addHook("onRequest", async (request, reply) => {
+        const pathname = request.url.split("?")[0] ?? "/";
+        if (pathname === "/health" || pathname === "/auth" || pathname.startsWith("/auth/") || pathname.startsWith("/resources/")) {
+            return;
+        }
+        const service = servicePathOf(pathname, services) !== undefined;
+        const api = service || pathname.startsWith("/launchpad/");
+        try {
+            // a session of the launchpad, else (API clients) a bearer token; the development user
+            const user = (request.headers.authorization === undefined ? sessions?.user(request) : undefined) ?? (sessions === undefined || request.headers.authorization !== undefined ? await authenticator.fromAuthorization(request.headers.authorization) : undefined);
+            if (user !== undefined) {
+                request.user = user;
+                return;
+            }
+            if (!api && sessions !== undefined && (request.method === "GET" || request.method === "HEAD")) {
+                return reply.redirect(sessions.loginUrl(pathname === "/" ? "/ui/index.html" : request.url));
+            }
+            throw new AuthenticationError("authentication required");
+        }
+        catch (error) {
+            const status = error instanceof AuthenticationError ? error.status : 401;
+            const message = error.message;
+            if (status === 401) {
+                reply.header("WWW-Authenticate", 'Bearer realm="open-rap-runtime"');
+            }
+            return api ? reply.status(status).type("application/json").send({ error: { code: status === 403 ? "FORBIDDEN" : "UNAUTHORIZED", message } }) : reply.status(status).type("text/plain").send(message);
+        }
+    });
+    const logout = sessions === undefined ? undefined : "/auth/logout";
+    app.get("/launchpad/config", async (request, reply) => reply.header("Cache-Control", "no-store").send(launchpadView(config, request.user, logout)));
+    // navigation by intent: the first tile of the user with this semantic object and action
+    app.get("/go/:intent", async (request, reply) => {
+        const intent = request.params.intent;
+        const user = request.user;
+        const tile = config.groups.flatMap((g) => g.tiles).find((t) => t.intent === intent && tileVisible(t, user.roles));
+        if (tile === undefined) {
+            return reply.status(404).type("text/plain").send(`No application of the launchpad for the intent ${intent}`);
+        }
+        const question = request.url.indexOf("?");
+        const query = question < 0 ? "" : request.url.slice(question + 1);
+        const target = query === "" ? tile.target : `${tile.target}${tile.target.includes("?") ? "&" : "?"}${query}`;
+        return reply.redirect(target);
+    });
+    const mounted = async (request, reply) => {
+        const { id } = request.params;
+        const base = urls.get(id);
+        if (base === undefined) {
+            return reply.status(404).type("text/plain").send(`No application ${id} in the launchpad`);
+        }
+        const prefix = `/apps/${id}`;
+        const rest = request.url.slice(prefix.length);
+        if (rest === "" || rest.startsWith("?")) {
+            return reply.redirect(`${prefix}/${rest}`);
+        }
+        return forward(request, reply, targetUrl(base, rest), { prefix, timeout, app: id, odata: false });
+    };
+    const methods = ["GET", "HEAD", "POST", "PATCH", "PUT", "DELETE"];
+    app.route({ method: methods, url: "/apps/:id", handler: mounted });
+    app.route({ method: methods, url: "/apps/:id/*", handler: mounted });
+    // the services of the applications, at their own paths (the URIs of their UIs)
+    for (const { app: target, root } of services) {
+        const handler = async (request, reply) => {
+            const base = urls.get(target.id);
+            return forward(request, reply, targetUrl(base, request.url), { timeout, app: target.id, odata: true });
+        };
+        app.route({ method: methods, url: root, handler });
+        app.route({ method: methods, url: `${root}/*`, handler });
+    }
+    app.get("/health", async () => ({ status: "ok" }));
+    sessions?.register(app);
+    if (options.ui !== undefined) {
+        await registerUi(app, options.ui);
+    }
+    return app;
+}
+/** Start-up of a generated launchpad (`node server.mjs`), configured by the environment. */
+export async function startLaunchpad(options) {
+    const env = platformEnvironment(options.env ?? process.env);
+    const dir = path.resolve(options.dir);
+    const port = Number(env["PORT"] ?? 8090);
+    const host = env["HOST"] ?? "0.0.0.0";
+    const publicUrl = env["PUBLIC_URL"] ?? `http://localhost:${port}/`;
+    const config = JSON.parse(readFileSync(path.join(dir, "launchpad", "config.json"), "utf8"));
+    const appUrls = {};
+    for (const a of config.apps) {
+        const url = env[appUrlVariable(a.id)];
+        if (url !== undefined && url !== "") {
+            appUrls[a.id] = url;
+        }
+    }
+    const app = await createLaunchpad({
+        config,
+        auth: authFromEnvironment(env, publicUrl, config.claims),
+        appUrls,
+        logger: { level: env["LOG_LEVEL"] ?? "info" },
+        ui: { dir: path.join(dir, "ui"), resourcesFrom: dir },
+    });
+    let url = publicUrl;
+    if (options.listen !== false) {
+        url = (await app.listen({ port, host })).replace("0.0.0.0", "localhost");
+    }
+    else {
+        await app.ready();
+    }
+    return { app, url, close: () => app.close() };
+}
+//# sourceMappingURL=server.js.map

package/dist/launchpad/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/launchpad/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,EAAE,EAA2F,MAAM,SAAS,CAAC;AAC3H,OAAO,EAAE,cAAc,EAAE,WAAW,EAA8D,MAAM,iBAAiB,CAAC;AAC1H,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAoB,MAAM,iBAAiB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAkB,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA8BhD,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrH,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,MAAsB,EAAE,IAAU,EAAE,MAA0B;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;IAClC,MAAM,IAAI,GAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpK,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,MAAgC,EAAe,EAAE,CACtE,MAAM;SACH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SAC3J,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACxJ,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7J,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,IAAgD,EAAmD,EAAE,CAC5I,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;AAEhF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAyB;IAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAChH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtJ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjH,oCAAoC;IACpC,GAAG,CAAC,2BAA2B,EAAE,CAAC;IAClC,GAAG,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACjG,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEvC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1H,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;QAChE,MAAM,GAAG,GAAG,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,sFAAsF;YACtF,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/P,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;gBAC9F,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YACzE,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,CAAC;YACzC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvM,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;IACnE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAE5J,wFAAwF;IACxF,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAI,OAAO,CAAC,MAA6B,CAAC,MAAM,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAY,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAClH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,kDAAkD,MAAM,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC;QAC7G,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAyB,EAAE;QAC5F,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC;IACF,MAAM,OAAO,GAAgE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC/H,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAErE,+EAA+E;IAC/E,KAAK,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAyB,EAAE;YAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAQ,CAAC;YACxC,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzG,CAAC,CAAC;QACF,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAeD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;IACtC,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,oBAAoB,IAAI,GAAG,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAmB,CAAC;IAC9G,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACpC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;QACtB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC;QAChC,MAAM;QACN,IAAI,EAAE,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACxD,OAAO;QACP,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,MAAM,EAAE;QAC7C,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE;KACtD,CAAC,CAAC;IACH,IAAI,GAAG,GAAG,SAAS,CAAC;IACpB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;AAChD,CAAC"}

package/dist/mcp/server.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The MCP server of the application (decision D47): the Model Context Protocol over HTTP
+ * ("Streamable HTTP" transport, JSON responses) at `/mcp`. Each tool is an OData request run by the
+ * service itself, as the user of the MCP request: authorizations, access controls, feature
+ * control, validations and messages are those of the OData service.
+ *
+ * Authentication: a bearer token (OIDC), or the development user with AUTH_MODE=none. Browser
+ * sessions (cookies) are not accepted: a web page could otherwise call the tools in the user's name.
+ */
+import type { FastifyInstance } from "fastify";
+import type { McpToolModel, McpToolsModel } from "@open-rap/model";
+import { type Authenticator } from "../auth/auth.js";
+import type { ODataHandler, ODataRequest } from "../odata/handler.js";
+export declare const MCP_PATH = "/mcp";
+export interface McpOptions {
+    tools: McpToolsModel;
+    handler: ODataHandler;
+    authenticator: Authenticator;
+}
+/** The OData request of a tool call. */
+export declare function odataRequest(tool: McpToolModel, args: Record<string, unknown>): ODataRequest;
+export declare function registerMcp(app: FastifyInstance, options: McpOptions): void;