@toa.io/extensions.configuration 1.0.0-alpha.31 → 1.0.0-alpha.310

package/transpiled/Composition.js

@@ -0,0 +1,38 @@
+import { readdirSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { Connector } from '@toa.io/core';
+import { uiPort } from '@toa.io/definitions/extensions.configuration';
+import { UI } from './UI.js';
+/** Hosts the values component in the service process. */
+export class Composition extends Connector {
+    host;
+    constructor(host) {
+        super();
+        this.host = host;
+    }
+    async open() {
+        const composition = await this.host.composition(components().paths);
+        await composition.connect();
+        this.depends(composition);
+        // connected here rather than declared as a dependency: dependencies are connected
+        // before `open` runs, so one added from inside it would never be
+        const ui = new UI(uiPort());
+        await ui.connect();
+        this.depends(ui);
+    }
+}
+export function components() {
+    const labels = [];
+    const paths = [];
+    for (const entry of entries()) {
+        labels.push(entry.name.replace('.', '-'));
+        paths.push(resolve(ROOT, entry.name));
+    }
+    return { labels, paths };
+}
+function entries() {
+    const entries = readdirSync(ROOT, { withFileTypes: true });
+    return entries.filter((entry) => entry.isDirectory());
+}
+const ROOT = resolve(import.meta.dirname, '../components/');
+//# sourceMappingURL=Composition.js.map

package/transpiled/Composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Composition.js","sourceRoot":"","sources":["../source/Composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAe,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,8CAA8C,CAAA;AACrE,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAG5B,yDAAyD;AACzD,MAAM,OAAO,WAAY,SAAQ,SAAS;IACvB,IAAI,CAAM;IAE3B,YAAmB,IAAU;QAC3B,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEkB,KAAK,CAAC,IAAI;QAC3B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAA;QAEnE,MAAM,WAAW,CAAC,OAAO,EAAE,CAAA;QAE3B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAEzB,kFAAkF;QAClF,iEAAiE;QACjE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;QAE3B,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;QAElB,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAClB,CAAC;CACF;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,OAAO;IACd,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;AACvD,CAAC;AAOD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA"}

package/transpiled/Factory.d.ts

@@ -1,5 +1,12 @@
-import { type Locator, type extensions } from '@toa.io/core';
-import { type Manifest } from './manifest';
+import { type Connector, type Locator } from '@toa.io/core';
+import type { extensions } from '@toa.io/core/types';
+import type { Manifest } from '@toa.io/definitions/extensions.configuration';
 export declare class Factory implements extensions.Factory {
+    private readonly host;
+    private client;
+    constructor(host: Host);
     aspect(locator: Locator, manifest: Manifest): extensions.Aspect;
+    service(): Connector;
+    private shared;
 }
+export type Host = extensions.Host;

package/transpiled/Factory.js

@@ -1,13 +1,25 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Factory = void 0;
-const Aspect_1 = require("./Aspect");
-const configuration_1 = require("./configuration");
-class Factory {
+import { Aspect } from './Aspect.js';
+import { Client } from './Client.js';
+import { Composition } from './Composition.js';
+import { overridden } from './configuration.js';
+export class Factory {
+    host;
+    client = null;
+    constructor(host) {
+        this.host = host;
+    }
     aspect(locator, manifest) {
-        const value = (0, configuration_1.get)(locator, manifest);
-        return new Aspect_1.Aspect(value);
+        const client = overridden(locator) ? null : this.shared();
+        return new Aspect(locator, manifest, client);
+    }
+    // nothing connects to this, so a halt takes the whole of it
+    service() {
+        return this.host.gate(async () => new Composition(this.host));
+    }
+    shared() {
+        if (this.client === null || this.client.disposed)
+            this.client = new Client(this.host);
+        return this.client;
     }
 }
-exports.Factory = Factory;
 //# sourceMappingURL=Factory.js.map

package/transpiled/Factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"Factory.js","sourceRoot":"","sources":["../source/Factory.ts"],"names":[],"mappings":";;;AACA,qCAAiC;AAEjC,mDAAqC;AAErC,MAAa,OAAO;IACX,MAAM,CAAE,OAAgB,EAAE,QAAkB;QACjD,MAAM,KAAK,GAAG,IAAA,mBAAG,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAEpC,OAAO,IAAI,eAAM,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;CACF;AAND,0BAMC"}
+{"version":3,"file":"Factory.js","sourceRoot":"","sources":["../source/Factory.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAG/C,MAAM,OAAO,OAAO;IACD,IAAI,CAAM;IACnB,MAAM,GAAkB,IAAI,CAAA;IAEpC,YAAmB,IAAU;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEM,MAAM,CAAC,OAAgB,EAAE,QAAkB;QAChD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;QAEzD,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC9C,CAAC;IAED,4DAA4D;IACrD,OAAO;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/D,CAAC;IAEO,MAAM;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAErF,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;CACF"}

package/transpiled/Secret.d.ts

@@ -0,0 +1,15 @@
+import { inspect } from 'node:util';
+/**
+ * A configuration value that must not leak: a string only to whoever asks for it.
+ *
+ * This is what a value declared `format: secret` is on a component's context.
+ */
+export declare class Secret {
+    #private;
+    constructor(value: string);
+    unwrap(): string;
+    toString(): string;
+    toJSON(): string;
+    [inspect.custom](): string;
+}
+export declare const REDACTED = "<REDACTED>";

package/transpiled/Secret.js

@@ -0,0 +1,26 @@
+import { inspect } from 'node:util';
+/**
+ * A configuration value that must not leak: a string only to whoever asks for it.
+ *
+ * This is what a value declared `format: secret` is on a component's context.
+ */
+export class Secret {
+    #value;
+    constructor(value) {
+        this.#value = value;
+    }
+    unwrap() {
+        return this.#value;
+    }
+    toString() {
+        return REDACTED;
+    }
+    toJSON() {
+        return REDACTED;
+    }
+    [inspect.custom]() {
+        return REDACTED;
+    }
+}
+export const REDACTED = '<REDACTED>';
+//# sourceMappingURL=Secret.js.map

package/transpiled/Secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Secret.js","sourceRoot":"","sources":["../source/Secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC;;;;GAIG;AACH,MAAM,OAAO,MAAM;IACR,MAAM,CAAQ;IAEvB,YAAmB,KAAa;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;IACrB,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAEM,QAAQ;QACb,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEM,MAAM;QACX,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEM,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAA"}

package/transpiled/UI.d.ts

@@ -0,0 +1,25 @@
+import { Connector } from '@toa.io/core';
+/**
+ * Serves the configuration UI: the directory `ui` builds, and nothing else.
+ *
+ * The page is a single-page application whose mount path is baked into the bundle,
+ * so this server routes relative to `UI_PATH` — which is also what the ingress
+ * forwards. `/configuration/*` is left alone: that is the component's own API.
+ */
+export declare class UI extends Connector {
+    private readonly server;
+    private readonly port;
+    private readonly root;
+    constructor(port: number, root?: string);
+    protected open(): Promise<void>;
+    protected close(): Promise<void>;
+    private listen;
+    private respond;
+    /**
+     * The file a request lands on, or `null` when nothing does. A path that exists is
+     * served as it is; anything else that could be a route falls back to the page,
+     * because the client router — not this server — knows what routes there are.
+     */
+    private resolve;
+    private send;
+}

package/transpiled/UI.js

@@ -0,0 +1,173 @@
+import * as fs from 'node:fs';
+import * as http from 'node:http';
+import * as path from 'node:path';
+import { Connector } from '@toa.io/core';
+import { console } from 'openspan';
+import { UI_PATH } from '@toa.io/definitions/extensions.configuration';
+/**
+ * Serves the configuration UI: the directory `ui` builds, and nothing else.
+ *
+ * The page is a single-page application whose mount path is baked into the bundle,
+ * so this server routes relative to `UI_PATH` — which is also what the ingress
+ * forwards. `/configuration/*` is left alone: that is the component's own API.
+ */
+export class UI extends Connector {
+    server = http.createServer();
+    port;
+    root;
+    constructor(port, root = SITE) {
+        super();
+        this.port = port;
+        this.root = root;
+        this.server.on('request', (request, response) => {
+            this.listen(request, response);
+        });
+    }
+    async open() {
+        /*
+         * A taken port is a real error: uniqueness across services is settled at export
+         * time, so nothing here has to negotiate for one.
+         */
+        await new Promise((resolve, reject) => {
+            const failed = (error) => {
+                this.server.off('listening', listening);
+                reject(error);
+            };
+            const listening = () => {
+                this.server.off('error', failed);
+                resolve();
+            };
+            this.server.once('error', failed);
+            this.server.once('listening', listening);
+            this.server.listen(this.port);
+        });
+        if (!isFile(path.join(this.root, 'index.html')))
+            console.warn('Configuration UI is not built', { root: this.root });
+        console.info('Configuration UI started', { port: this.port, path: UI_PATH + '/' });
+    }
+    async close() {
+        const closed = new Promise((resolve) => this.server.once('close', () => {
+            resolve();
+        }));
+        this.server.close();
+        this.server.closeAllConnections();
+        await closed;
+    }
+    listen(request, response) {
+        void this.respond(request, response).catch((error) => {
+            console.error('Configuration UI failure', { message: error.message });
+            if (!response.writableEnded)
+                response.writeHead(500).end();
+        });
+    }
+    async respond(request, response) {
+        if (request.method !== 'GET' && request.method !== 'HEAD') {
+            response.writeHead(405, { allow: 'GET, HEAD' }).end();
+            return;
+        }
+        const pathname = decode(request.url ?? '/');
+        if (pathname === null) {
+            response.writeHead(400).end();
+            return;
+        }
+        // the port is the explorer's alone, so the root is the way in
+        if (pathname === '/') {
+            response.writeHead(302, { location: UI_PATH + '/' }).end();
+            return;
+        }
+        const file = this.resolve(pathname);
+        if (file === null)
+            response.writeHead(404).end();
+        else
+            await this.send(file, request, response);
+    }
+    /**
+     * The file a request lands on, or `null` when nothing does. A path that exists is
+     * served as it is; anything else that could be a route falls back to the page,
+     * because the client router — not this server — knows what routes there are.
+     */
+    resolve(pathname) {
+        if (!pathname.startsWith(UI_PATH))
+            return null;
+        const relative = pathname.slice(UI_PATH.length);
+        if (relative !== '' && !relative.startsWith('/'))
+            return null;
+        const file = path.join(this.root, relative);
+        if (file !== this.root && !file.startsWith(this.root + path.sep))
+            return null;
+        if (isFile(file))
+            return file;
+        /*
+         * A missing asset is missing, but a route can look like one: `identity.passkeys` is a
+         * component, not a file with an extension. What this server would have served is what
+         * it knows how to serve, so anything else is a route and falls back to the page — as
+         * does anything ending in a slash, which is no name for a file at all.
+         */
+        const asset = !relative.endsWith('/') && path.extname(relative) in TYPES;
+        return asset ? null : path.join(this.root, 'index.html');
+    }
+    async send(file, request, response) {
+        const stats = await fs.promises.stat(file).catch(() => null);
+        if (stats === null) {
+            response
+                .writeHead(503, { 'content-type': 'text/plain' })
+                .end('The configuration UI is not built. Run `npm run build:ui`.\n');
+            return;
+        }
+        response.writeHead(200, {
+            'content-type': TYPES[path.extname(file)] ?? 'application/octet-stream',
+            'content-length': stats.size,
+            'cache-control': caching(path.relative(this.root, file))
+        });
+        if (request.method === 'HEAD')
+            response.end();
+        else
+            fs.createReadStream(file).pipe(response);
+    }
+}
+function decode(url) {
+    try {
+        return decodeURIComponent(url.split('?')[0]);
+    }
+    catch {
+        return null;
+    }
+}
+function isFile(file) {
+    return fs.existsSync(file) && fs.statSync(file).isFile();
+}
+/** Where `npm run build:ui` puts the page, from both `source` and `transpiled`. */
+const SITE = path.resolve(import.meta.dirname, '..', 'ui', 'dist');
+/** Assets under this prefix carry their build hash in the name. */
+const IMMUTABLE = path.join('_app', 'immutable');
+const FOREVER = 'public, max-age=31536000, immutable';
+/** The icons: named without a hash, so they are re-read, but rarely. */
+const ICONS = new Set(['favicon.ico', 'favicon-96x96.png', 'apple-touch-icon.png']);
+const DAY = 'public, max-age=86400';
+/**
+ * How long what is served may be held. The page is never cached — it names the assets,
+ * and their names carry the build. An icon is named for what it is rather than for its
+ * content, so it is asked about again, but not on every page load.
+ */
+function caching(relative) {
+    if (relative.startsWith(IMMUTABLE))
+        return FOREVER;
+    return ICONS.has(relative) ? DAY : 'no-cache';
+}
+const TYPES = {
+    '.css': 'text/css; charset=utf-8',
+    '.html': 'text/html; charset=utf-8',
+    '.ico': 'image/x-icon',
+    '.jpg': 'image/jpeg',
+    '.js': 'text/javascript; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.map': 'application/json; charset=utf-8',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.txt': 'text/plain; charset=utf-8',
+    '.webmanifest': 'application/manifest+json',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2'
+};
+//# sourceMappingURL=UI.js.map

package/transpiled/UI.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UI.js","sourceRoot":"","sources":["../source/UI.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,8CAA8C,CAAA;AAEtE;;;;;;GAMG;AACH,MAAM,OAAO,EAAG,SAAQ,SAAS;IACd,MAAM,GAAgB,IAAI,CAAC,YAAY,EAAE,CAAA;IACzC,IAAI,CAAQ;IACZ,IAAI,CAAQ;IAE7B,YAAmB,IAAY,EAAE,IAAI,GAAW,IAAI;QAClD,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC;IAEkB,KAAK,CAAC,IAAI;QAC3B;;;WAGG;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,CAAC,KAAY,EAAQ,EAAE;gBACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;gBACvC,MAAM,CAAC,KAAK,CAAC,CAAA;YACf,CAAC,CAAA;YAED,MAAM,SAAS,GAAG,GAAS,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBAChC,OAAO,EAAE,CAAA;YACX,CAAC,CAAA;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;YACxC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAEpE,OAAO,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,GAAG,GAAG,EAAE,CAAC,CAAA;IACpF,CAAC;IAEkB,KAAK,CAAC,KAAK;QAC5B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC7B,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CACH,CAAA;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QACnB,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAA;QAEjC,MAAM,MAAM,CAAA;IACd,CAAC;IAEO,MAAM,CAAC,OAA6B,EAAE,QAA6B;QACzE,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;YAC1D,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YAErE,IAAI,CAAC,QAAQ,CAAC,aAAa;gBAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;QAC5D,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,OAA6B,EAC7B,QAA6B;QAE7B,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1D,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;YAErD,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAA;QAE3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;YAE7B,OAAM;QACR,CAAC;QAED,8DAA8D;QAC9D,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACrB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;YAE1D,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAEnC,IAAI,IAAI,KAAK,IAAI;YAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;;YAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC/C,CAAC;IAED;;;;OAIG;IACK,OAAO,CAAC,QAAgB;QAC9B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAA;QAE9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAE/C,IAAI,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAE7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QAE3C,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAE7E,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAE7B;;;;;WAKG;QACH,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAA;QAExE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC1D,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,IAAY,EACZ,OAA6B,EAC7B,QAA6B;QAE7B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAE5D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,QAAQ;iBACL,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;iBAChD,GAAG,CAAC,8DAA8D,CAAC,CAAA;YAEtE,OAAM;QACR,CAAC;QAED,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B;YACvE,gBAAgB,EAAE,KAAK,CAAC,IAAI;YAC5B,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;SACzD,CAAC,CAAA;QAEF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,QAAQ,CAAC,GAAG,EAAE,CAAA;;YACxC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC/C,CAAC;CACF;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;AAC1D,CAAC;AAED,mFAAmF;AACnF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;AAElE,mEAAmE;AACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAChD,MAAM,OAAO,GAAG,qCAAqC,CAAA;AAErD,wEAAwE;AACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,CAAA;AACnF,MAAM,GAAG,GAAG,uBAAuB,CAAA;AAEnC;;;;GAIG;AACH,SAAS,OAAO,CAAC,QAAgB;IAC/B,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAA;IAElD,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAA;AAC/C,CAAC;AAED,MAAM,KAAK,GAA2B;IACpC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,gCAAgC;IACvC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,iCAAiC;IACzC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,2BAA2B;IACnC,cAAc,EAAE,2BAA2B;IAC3C,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;CACvB,CAAA"}

package/transpiled/configuration.d.ts

@@ -1,4 +1,9 @@
 import { type Locator } from '@toa.io/core';
-import { type Manifest } from './manifest';
-export declare function get(locator: Locator, manifest: Manifest): Node;
+import type { Manifest } from '@toa.io/definitions/extensions.configuration';
+/** The variable is set, so the values service is not consulted. */
+export declare function overridden(locator: Locator): boolean;
+/** The variable, the manifest defaults, then the schema. */
+export declare function local(locator: Locator, manifest: Manifest): Node;
+/** A copy of the value with the schema applied and the secrets substituted. */
+export declare function fit(raw: object, manifest: Manifest): Node;
 export type Node = Record<string, unknown>;

package/transpiled/configuration.js

@@ -1,49 +1,39 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.get = void 0;
-const generic_1 = require("@toa.io/generic");
-const schemas = __importStar(require("@toa.io/schemas"));
-const deployment_1 = require("./deployment");
-function get(locator, manifest) {
-    const values = getConfiguration(locator.uppercase);
-    substituteSecrets(values);
+import { add, environment } from '@toa.io/generic';
+import * as schemas from '@toa.io/schemas';
+import { PREFIX, SECRET_RX, assertSecrets } from '@toa.io/definitions/extensions.configuration';
+import { Secret } from './Secret.js';
+/** The variable is set, so the values service is not consulted. */
+export function overridden(locator) {
+    return environment.get(PREFIX + locator.uppercase) !== undefined;
+}
+/** The variable, the manifest defaults, then the schema. */
+export function local(locator, manifest) {
+    const values = read(locator.uppercase);
     if (manifest.defaults !== undefined)
-        (0, generic_1.add)(values, manifest.defaults);
+        add(values, manifest.defaults);
+    return fit(values, manifest);
+}
+/** A copy of the value with the schema applied and the secrets substituted. */
+export function fit(raw, manifest) {
+    // a copy of the caller's, and one of this realm: what came over the wire is JSON anyway
+    const values = JSON.parse(JSON.stringify(raw));
+    // the schema sees the references, which are the strings it declares
+    validate(values, manifest);
+    substituteSecrets(values);
+    return values;
+}
+function validate(values, manifest) {
     const schema = schemas.schema(manifest.schema);
     schema.validate(values);
-    return values;
+    assertSecrets(manifest.schema, values);
 }
-exports.get = get;
-function getConfiguration(suffix) {
-    const variable = deployment_1.PREFIX + suffix;
-    const string = process.env[variable];
+function read(suffix) {
+    const variable = PREFIX + suffix;
+    const string = environment.get(variable);
     if (string === undefined)
         return {};
     else
-        return (0, generic_1.decode)(string);
+        return JSON.parse(string);
 }
 function substituteSecrets(configuration) {
     for (const [key, value] of Object.entries(configuration)) {
@@ -51,16 +41,16 @@ function substituteSecrets(configuration) {
             substituteSecrets(value);
         if (typeof value !== 'string')
             continue;
-        const match = value.match(deployment_1.SECRET_RX);
+        const match = value.match(SECRET_RX);
         if (match === null)
             continue;
         const name = match.groups?.variable;
-        configuration[key] = getSecret(name);
+        configuration[key] = new Secret(getSecret(name));
     }
 }
 function getSecret(name) {
-    const variable = deployment_1.PREFIX + '_' + name;
-    const value = process.env[variable];
+    const variable = PREFIX + '_' + name;
+    const value = environment.get(variable);
     if (value === undefined)
         throw new Error(`${variable} is not set.`);
     return value;

package/transpiled/configuration.js.map

@@ -1 +1 @@
-{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../source/configuration.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA,6CAA6C;AAC7C,yDAA0C;AAC1C,6CAAgD;AAIhD,SAAgB,GAAG,CAAE,OAAgB,EAAE,QAAkB;IACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAElD,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAEzB,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QACjC,IAAA,aAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAEhC,MAAM,MAAM,GAAgB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE3D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAEvB,OAAO,MAAM,CAAA;AACf,CAAC;AAbD,kBAaC;AAED,SAAS,gBAAgB,CAAE,MAAc;IACvC,MAAM,QAAQ,GAAG,mBAAM,GAAG,MAAM,CAAA;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAEpC,IAAI,MAAM,KAAK,SAAS;QACtB,OAAO,EAAE,CAAA;;QAET,OAAO,IAAA,gBAAM,EAAC,MAAM,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,iBAAiB,CAAE,aAAmB;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAC7C,iBAAiB,CAAC,KAAa,CAAC,CAAA;QAElC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QAEvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAS,CAAC,CAAA;QAEpC,IAAI,KAAK,KAAK,IAAI;YAAE,SAAQ;QAE5B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAA;QAEnC,aAAa,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,IAAK,CAAC,CAAA;IACvC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAE,IAAY;IAC9B,MAAM,QAAQ,GAAG,mBAAM,GAAG,GAAG,GAAG,IAAI,CAAA;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAEnC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,cAAc,CAAC,CAAA;IAEnE,OAAO,KAAK,CAAA;AACd,CAAC"}
+{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../source/configuration.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EACL,MAAM,EACN,SAAS,EACT,aAAa,EACd,MAAM,8CAA8C,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAIpC,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,CAAA;AAClE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,KAAK,CAAC,OAAgB,EAAE,QAAkB;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAEtC,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAEnE,OAAO,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,QAAkB;IACjD,wFAAwF;IACxF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAS,CAAA;IAEtD,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC1B,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAEzB,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,MAAY,EAAE,QAAkB;IAChD,MAAM,MAAM,GAAgB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE3D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACvB,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,IAAI,CAAC,MAAc;IAC1B,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAA;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAExC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,aAAmB;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,iBAAiB,CAAC,KAAa,CAAC,CAAA;QAEjF,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAQ;QAEvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAEpC,IAAI,KAAK,KAAK,IAAI;YAAE,SAAQ;QAE5B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAA;QAEnC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,IAAK,CAAC,CAAC,CAAA;IACnD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,QAAQ,GAAG,MAAM,GAAG,GAAG,GAAG,IAAI,CAAA;IACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAEvC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,cAAc,CAAC,CAAA;IAEnE,OAAO,KAAK,CAAA;AACd,CAAC"}

package/transpiled/index.d.ts

@@ -1,3 +1,3 @@
-export { manifest } from './manifest';
-export { deployment } from './deployment';
-export { Factory } from './Factory';
+export { components } from './Composition.ts';
+export { Factory } from './Factory.ts';
+export { Secret } from './Secret.ts';

package/transpiled/index.js

@@ -1,10 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Factory = exports.deployment = exports.manifest = void 0;
-var manifest_1 = require("./manifest");
-Object.defineProperty(exports, "manifest", { enumerable: true, get: function () { return manifest_1.manifest; } });
-var deployment_1 = require("./deployment");
-Object.defineProperty(exports, "deployment", { enumerable: true, get: function () { return deployment_1.deployment; } });
-var Factory_1 = require("./Factory");
-Object.defineProperty(exports, "Factory", { enumerable: true, get: function () { return Factory_1.Factory; } });
+export { components } from './Composition.js';
+export { Factory } from './Factory.js';
+// what a value declared `format: secret` is on a component's context
+export { Secret } from './Secret.js';
 //# sourceMappingURL=index.js.map

package/transpiled/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../source/index.ts"],"names":[],"mappings":";;;AAAA,uCAAqC;AAA5B,oGAAA,QAAQ,OAAA;AACjB,2CAAyC;AAAhC,wGAAA,UAAU,OAAA;AACnB,qCAAmC;AAA1B,kGAAA,OAAO,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../source/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,qEAAqE;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA"}

package/ui/dist/_app/env.js

@@ -0,0 +1 @@
+export const env={}