@toa.io/extensions.exposition 1.0.0-alpha.16 → 1.0.0-alpha.161

package/transpiled/directives/auth/Input.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Input = void 0;
+const HTTP_1 = require("../../HTTP");
+class Input {
+    priority = 0;
+    statements = [];
+    constructor(declarations, create) {
+        this.statements = declarations.map((declaration) => new Statement(declaration, create));
+    }
+    async authorize(identity, context, parameters) {
+        context.pipelines.body.push(async (body) => this.check(identity, context, parameters, body));
+        return false;
+    }
+    // eslint-disable-next-line max-params
+    async check(identity, context, parameters, body) {
+        if (body === undefined || body === null || body.constructor !== Object)
+            return body;
+        const settled = await Promise.allSettled(this.statements.map(async (statement) => statement.check(identity, context, parameters, body)));
+        for (const result of settled)
+            if (result.status === 'rejected')
+                throw result.reason;
+        return body;
+    }
+}
+exports.Input = Input;
+class Statement {
+    properties;
+    directives = [];
+    constructor({ prop, ...directives }, create) {
+        this.properties = typeof prop === 'string' ? [prop] : prop;
+        for (const [name, value] of Object.entries(directives)) {
+            const directive = create(name, value);
+            this.directives.push(directive);
+        }
+    }
+    // eslint-disable-next-line max-params
+    async check(identity, context, parameters, body) {
+        const match = this.properties.some((property) => property in body);
+        if (!match)
+            return;
+        for (const directive of this.directives) {
+            const authorized = await directive.authorize(identity, context, parameters);
+            if (!authorized)
+                throw new HTTP_1.Forbidden('Input property is not authorized');
+        }
+    }
+}
+//# sourceMappingURL=Input.js.map

package/transpiled/directives/auth/Input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Input.js","sourceRoot":"","sources":["../../../source/directives/auth/Input.ts"],"names":[],"mappings":";;;AAAA,qCAAsC;AAItC,MAAa,KAAK;IACT,QAAQ,GAAG,CAAC,CAAA;IACF,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,YAA2B,EAAE,MAAc;QAC7D,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;IACzF,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,OAAgB,EAAE,UAAuB;QACnE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAA;QAE5F,OAAO,KAAK,CAAA;IACd,CAAC;IAED,sCAAsC;IAC9B,KAAK,CAAC,KAAK,CAAE,QAAyB,EAAE,OAAgB,EAAE,UAAuB,EAAE,IAAa;QACtG,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YACpE,OAAO,IAAI,CAAA;QAEb,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAC/E,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAY,CAAC,CAAC,CAAC,CAAA;QAEhE,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAC9B,MAAM,MAAM,CAAC,MAAM,CAAA;QAEvB,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA7BD,sBA6BC;AAED,MAAM,SAAS;IACI,UAAU,CAAU;IACpB,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,EAAE,IAAI,EAAE,GAAG,UAAU,EAAe,EAAE,MAAc;QACtE,IAAI,CAAC,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAE1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAED,sCAAsC;IAC/B,KAAK,CAAC,KAAK,CAAE,QAAyB,EAAE,OAAgB,EAAE,UAAuB,EAAE,IAAU;QAClG,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAA;QAElE,IAAI,CAAC,KAAK;YACR,OAAM;QAER,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE3E,IAAI,CAAC,UAAU;gBACb,MAAM,IAAI,gBAAS,CAAC,kCAAkC,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;CACF"}

package/transpiled/directives/auth/Role.d.ts

@@ -7,7 +7,7 @@ export declare class Role implements Directive {
     private readonly discovery;
     private readonly dynamic;
     constructor(roles: string | string[], discovery: Promise<Component>);
-    static set(identity: Identity, discovery: Promise<Component>): Promise<void>;
+    static get(identity: Identity, discovery: Promise<Component>): Promise<string[]>;
     authorize(identity: Identity | null, _: unknown, parameters: Parameter[]): Promise<boolean>;
     private match;
     private substitute;

package/transpiled/directives/auth/Role.js

@@ -15,20 +15,18 @@ class Role {
         this.discovery = discovery;
         this.dynamic = this.roles.some((role) => role.includes('{'));
     }
-    static async set(identity, discovery) {
+    static async get(identity, discovery) {
         this.remote ??= await discovery;
         const query = {
             criteria: `identity==${identity.id}`,
             limit: 1024
         };
-        identity.roles = await this.remote.invoke('list', { query });
+        return await this.remote.invoke('list', { query });
     }
     async authorize(identity, _, parameters) {
         if (identity === null)
             return false;
-        await Role.set(identity, this.discovery);
-        if (identity.roles.length === 0) // Role.set()
-            return false;
+        identity.roles ??= await Role.get(identity, this.discovery);
         return this.match(identity.roles, parameters);
     }
     match(roles, parameters) {
@@ -43,7 +41,7 @@ class Role {
     substitute(parameters) {
         return this.roles.map((role) => role.replaceAll(/{(\w+)}/g, (_, key) => {
             const value = parameters.find((parameter) => parameter.name === key)?.value;
-            node_assert_1.default.ok(value !== undefined, `Role '${role}' requires '${key}' route parameter.`);
+            node_assert_1.default.ok(value !== undefined, `Role '${role}' requires '${key}' route parameter`);
             return value;
         }));
     }

package/transpiled/directives/auth/Role.js.map

@@ -1 +1 @@
-{"version":3,"file":"Role.js","sourceRoot":"","sources":["../../../source/directives/auth/Role.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAKhC,MAAa,IAAI;IACR,MAAM,CAAC,MAAM,GAAqB,IAAI,CAAA;IAC5B,KAAK,CAAU;IACf,SAAS,CAAoB;IAC7B,OAAO,CAAS;IAEjC,YAAoB,KAAwB,EAAE,SAA6B;QACzE,IAAI,CAAC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAE,QAAkB,EAAE,SAA6B;QACxE,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAA;QAE/B,MAAM,KAAK,GAAU;YACnB,QAAQ,EAAE,aAAa,QAAQ,CAAC,EAAE,EAAE;YACpC,KAAK,EAAE,IAAI;SACZ,CAAA;QAED,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,CAAU,EAAE,UAAuB;QAC7D,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAO,KAAK,CAAA;QAEd,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAExC,IAAI,QAAQ,CAAC,KAAM,CAAC,MAAM,KAAK,CAAC,EAAE,aAAa;YAE7C,OAAO,KAAK,CAAA;QAEd,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAM,EAAE,UAAU,CAAC,CAAA;IAChD,CAAC;IAEO,KAAK,CAAE,KAAe,EAAE,UAAuB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAExE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAA;YAE5F,IAAI,EAAE;gBACJ,OAAO,IAAI,CAAA;QACf,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,UAAU,CAAE,UAAuB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACrE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,CAAA;YAE3E,qBAAM,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,EAC3B,SAAS,IAAI,eAAe,GAAG,oBAAoB,CAAC,CAAA;YAEtD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;;AA3DH,oBA4DC"}
+{"version":3,"file":"Role.js","sourceRoot":"","sources":["../../../source/directives/auth/Role.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAKhC,MAAa,IAAI;IACR,MAAM,CAAC,MAAM,GAAqB,IAAI,CAAA;IAC5B,KAAK,CAAU;IACf,SAAS,CAAoB;IAC7B,OAAO,CAAS;IAEjC,YAAoB,KAAwB,EAAE,SAA6B;QACzE,IAAI,CAAC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAE,QAAkB,EAAE,SAA6B;QACxE,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAA;QAE/B,MAAM,KAAK,GAAU;YACnB,QAAQ,EAAE,aAAa,QAAQ,CAAC,EAAE,EAAE;YACpC,KAAK,EAAE,IAAI;SACZ,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACpD,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,CAAU,EAAE,UAAuB;QAC7D,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAO,KAAK,CAAA;QAEd,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAE3D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC/C,CAAC;IAEO,KAAK,CAAE,KAAe,EAAE,UAAuB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAExE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAA;YAE5F,IAAI,EAAE;gBACJ,OAAO,IAAI,CAAA;QACf,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,UAAU,CAAE,UAAuB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACrE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,CAAA;YAE3E,qBAAM,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,EAC3B,SAAS,IAAI,eAAe,GAAG,mBAAmB,CAAC,CAAA;YAErD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;;AAvDH,oBAwDC"}

package/transpiled/directives/auth/Rule.d.ts

@@ -1,9 +1,7 @@
 import { type Parameter } from '../../RTD';
-import type { Input, Directive, Identity } from './types';
+import type { Context, Directive, Identity, Create } from './types';
 export declare class Rule implements Directive {
     private readonly directives;
     constructor(directives: Record<string, any>, create: Create);
-    authorize(identity: Identity | null, input: Input, parameters: Parameter[]): Promise<boolean>;
+    authorize(identity: Identity | null, context: Context, parameters: Parameter[]): Promise<boolean>;
 }
-type Create = (name: string, value: any, ...args: any[]) => Directive;
-export {};

package/transpiled/directives/auth/Rule.js

@@ -9,9 +9,9 @@ class Rule {
             this.directives.push(directive);
         }
     }
-    async authorize(identity, input, parameters) {
+    async authorize(identity, context, parameters) {
         for (const directive of this.directives) {
-            const authorized = await directive.authorize(identity, input, parameters);
+            const authorized = await directive.authorize(identity, context, parameters);
             if (!authorized)
                 return false;
         }

package/transpiled/directives/auth/Rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"Rule.js","sourceRoot":"","sources":["../../../source/directives/auth/Rule.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACE,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,UAA+B,EAAE,MAAc;QACjE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,KAAY,EAAE,UAAuB;QAC/D,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;YAEzE,IAAI,CAAC,UAAU;gBACb,OAAO,KAAK,CAAA;QAChB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAtBD,oBAsBC"}
+{"version":3,"file":"Rule.js","sourceRoot":"","sources":["../../../source/directives/auth/Rule.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACE,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAoB,UAA+B,EAAE,MAAc;QACjE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,OAAgB,EAAE,UAAuB;QACnE,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE3E,IAAI,CAAC,UAAU;gBACb,OAAO,KAAK,CAAA;QAChB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAtBD,oBAsBC"}

package/transpiled/directives/auth/Scheme.d.ts

@@ -1,7 +1,7 @@
-import { type Directive, type Identity, type Input } from './types';
+import { type Directive, type Identity, type Context } from './types';
 export declare class Scheme implements Directive {
     private readonly scheme;
     private readonly Scheme;
     constructor(scheme: string);
-    authorize(_: Identity | null, input: Input): boolean;
+    authorize(_: Identity | null, context: Context): boolean;
 }

package/transpiled/directives/auth/Scheme.js

@@ -33,13 +33,13 @@ class Scheme {
         this.scheme = scheme.toLowerCase();
         this.Scheme = scheme[0].toUpperCase() + scheme.substring(1);
     }
-    authorize(_, input) {
-        if (input.request.headers.authorization === undefined)
+    authorize(_, context) {
+        if (context.request.headers.authorization === undefined)
             return false;
-        const [scheme] = (0, split_1.split)(input.request.headers.authorization);
+        const [scheme] = (0, split_1.split)(context.request.headers.authorization);
         if (scheme !== this.scheme)
             throw new http.Forbidden(this.Scheme +
-                ' authentication scheme is required to access this resource.');
+                ' authentication scheme is required to access this resource');
         return false;
     }
 }

package/transpiled/directives/auth/Scheme.js.map

@@ -1 +1 @@
-{"version":3,"file":"Scheme.js","sourceRoot":"","sources":["../../../source/directives/auth/Scheme.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAElC,mCAA+B;AAE/B,MAAa,MAAM;IACA,MAAM,CAAQ;IACd,MAAM,CAAQ;IAE/B,YAAoB,MAAc;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IAEM,SAAS,CAAE,CAAkB,EAAE,KAAY;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACnD,OAAO,KAAK,CAAA;QAEd,MAAM,CAAC,MAAM,CAAC,GAAG,IAAA,aAAK,EAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAE3D,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YACxB,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;gBAClC,6DAA6D,CAAC,CAAA;QAElE,OAAO,KAAK,CAAA;IACd,CAAC;CACF;AArBD,wBAqBC"}
+{"version":3,"file":"Scheme.js","sourceRoot":"","sources":["../../../source/directives/auth/Scheme.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAElC,mCAA+B;AAE/B,MAAa,MAAM;IACA,MAAM,CAAQ;IACd,MAAM,CAAQ;IAE/B,YAAoB,MAAc;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IAEM,SAAS,CAAE,CAAkB,EAAE,OAAgB;QACpD,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrD,OAAO,KAAK,CAAA;QAEd,MAAM,CAAC,MAAM,CAAC,GAAG,IAAA,aAAK,EAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAE7D,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YACxB,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;gBAClC,4DAA4D,CAAC,CAAA;QAEjE,OAAO,KAAK,CAAA;IACd,CAAC;CACF;AArBD,wBAqBC"}

package/transpiled/directives/auth/create.d.ts

@@ -0,0 +1,2 @@
+import type { Identity } from './types';
+export declare function create(credentials?: string): Identity;

package/transpiled/directives/auth/create.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.create = void 0;
+const generic_1 = require("@toa.io/generic");
+function create(credentials) {
+    return {
+        id: (0, generic_1.newid)(),
+        scheme: credentials?.split(' ')[0] ?? null,
+        refresh: false,
+        roles: []
+    };
+}
+exports.create = create;
+//# sourceMappingURL=create.js.map

package/transpiled/directives/auth/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../source/directives/auth/create.ts"],"names":[],"mappings":";;;AAAA,6CAAuC;AAGvC,SAAgB,MAAM,CAAE,WAAoB;IAC1C,OAAO;QACL,EAAE,EAAE,IAAA,eAAK,GAAE;QACX,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;QAC1C,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE;KACV,CAAA;AACH,CAAC;AAPD,wBAOC"}

package/transpiled/directives/auth/schemes.d.ts

@@ -1,3 +1,4 @@
-import { type Remote, type Scheme } from './types';
+import type { Remote, Scheme } from './types';
 export declare const PROVIDERS: Record<Scheme, Remote>;
+export declare const INCEPTION: Remote[];
 export declare const PRIMARY: Scheme;

package/transpiled/directives/auth/schemes.js

@@ -1,10 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PRIMARY = exports.PROVIDERS = void 0;
+exports.PRIMARY = exports.INCEPTION = exports.PROVIDERS = void 0;
 exports.PROVIDERS = {
     basic: 'basic',
     token: 'tokens',
-    bearer: 'federation'
+    bearer: 'federation',
+    code: 'federation',
+    otp: 'otp'
 };
+exports.INCEPTION = ['basic', 'federation'];
 exports.PRIMARY = 'token';
 //# sourceMappingURL=schemes.js.map

package/transpiled/directives/auth/schemes.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemes.js","sourceRoot":"","sources":["../../../source/directives/auth/schemes.ts"],"names":[],"mappings":";;;AAEa,QAAA,SAAS,GAA2B;IAC/C,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,YAAY;CACrB,CAAA;AAEY,QAAA,OAAO,GAAW,OAAO,CAAA"}
+{"version":3,"file":"schemes.js","sourceRoot":"","sources":["../../../source/directives/auth/schemes.ts"],"names":[],"mappings":";;;AAEa,QAAA,SAAS,GAA2B;IAC/C,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,KAAK;CACX,CAAA;AAEY,QAAA,SAAS,GAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;AAC7C,QAAA,OAAO,GAAW,OAAO,CAAA"}

package/transpiled/directives/auth/split.js

@@ -28,7 +28,7 @@ const http = __importStar(require("../../HTTP"));
 function split(authorization) {
     const space = authorization.indexOf(' ');
     if (space === -1)
-        throw new http.Unauthorized('Malformed authorization header.');
+        throw new http.Unauthorized('Malformed authorization header');
     const Scheme = authorization.slice(0, space);
     const scheme = Scheme.toLowerCase();
     const value = authorization.slice(space + 1);

package/transpiled/directives/auth/split.js.map

@@ -1 +1 @@
-{"version":3,"file":"split.js","sourceRoot":"","sources":["../../../source/directives/auth/split.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAGlC,SAAgB,KAAK,CAAE,aAAqB;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAExC,IAAI,KAAK,KAAK,CAAC,CAAC;QACd,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,iCAAiC,CAAC,CAAA;IAEhE,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAY,CAAA;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAE5C,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACxB,CAAC;AAXD,sBAWC"}
+{"version":3,"file":"split.js","sourceRoot":"","sources":["../../../source/directives/auth/split.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAkC;AAGlC,SAAgB,KAAK,CAAE,aAAqB;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAExC,IAAI,KAAK,KAAK,CAAC,CAAC;QACd,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAA;IAE/D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAY,CAAA;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAE5C,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AACxB,CAAC;AAXD,sBAWC"}

package/transpiled/directives/auth/types.d.ts

@@ -4,14 +4,16 @@ import { type Parameter } from '../../RTD';
 import type * as http from '../../HTTP';
 import type * as io from '../../io';
 export interface Directive {
-    authorize: (identity: Identity | null, input: Input, parameters: Parameter[]) => boolean | Promise<boolean>;
-    reply?: (identity: Identity | null) => http.OutgoingMessage;
-    settle?: (request: Input, response: http.OutgoingMessage) => Promise<void>;
+    priority?: number;
+    authorize: (identity: Identity | null, context: Context, parameters: Parameter[]) => boolean | Promise<boolean>;
+    reply?: (context: Context) => http.OutgoingMessage | null;
+    settle?: (context: Context, response: http.OutgoingMessage) => Promise<void>;
 }
 export interface Identity {
     readonly id: string;
-    scheme: string;
     roles?: string[];
+    permissions?: Record<string, string[]>;
+    scheme: string | null;
     refresh: boolean;
 }
 export interface Extension {
@@ -20,12 +22,13 @@ export interface Extension {
 export interface Ban {
     banned: boolean;
 }
-export type Input = io.Input & Extension;
+export type Context = io.Input & Extension;
 export type AuthenticationResult = Maybe<{
     identity: Identity;
     refresh: boolean;
 }>;
-export type Scheme = 'basic' | 'token' | 'bearer';
-export type Remote = 'basic' | 'federation' | 'tokens' | 'roles' | 'bans';
+export type Scheme = 'basic' | 'token' | 'bearer' | 'code' | 'otp';
+export type Remote = 'basic' | 'federation' | 'tokens' | 'roles' | 'bans' | 'otp';
 export type Discovery = Record<Remote, Promise<Component>>;
 export type Schemes = Record<Scheme, Component>;
+export type Create = (name: string, value: any, ...args: any[]) => Directive;

package/transpiled/directives/cache/Cache.d.ts

@@ -1,5 +1,5 @@
-import type { Input, Output } from '../../io';
-import type { Directive } from './types';
+import type { Output } from '../../io';
+import type { AuthenticatedContext, Directive } from './types';
 import type { DirectiveFamily } from '../../RTD';
 import type * as http from '../../HTTP';
 export declare class Cache implements DirectiveFamily<Directive> {
@@ -7,5 +7,5 @@ export declare class Cache implements DirectiveFamily<Directive> {
     readonly mandatory: boolean;
     create(name: string, value: any): Directive;
     preflight(): Output;
-    settle(directives: Directive[], input: Input, response: http.OutgoingMessage): Promise<void>;
+    settle(directives: Directive[], context: AuthenticatedContext, response: http.OutgoingMessage): Promise<void>;
 }

package/transpiled/directives/cache/Cache.js

@@ -5,19 +5,27 @@ const Control_1 = require("./Control");
 const Exact_1 = require("./Exact");
 class Cache {
     name = 'cache';
-    mandatory = false;
+    mandatory = true;
     create(name, value) {
         const Class = constructors[name];
         if (Class === undefined)
-            throw new Error(`Directive 'cache:${name}' is not implemented.`);
+            throw new Error(`Directive 'cache:${name}' is not implemented`);
         return new Class(value);
     }
     preflight() {
         return null;
     }
-    async settle(directives, input, response) {
+    async settle(directives, context, response) {
+        const directive = directives[0];
         response.headers ??= new Headers();
-        directives[0]?.set(input, response.headers);
+        if (directive === undefined) {
+            if (context.identity !== null && !Control_1.Control.disabled(response.headers)) {
+                response.headers.set('cache-control', 'private');
+                response.headers.append('vary', 'authorization');
+            }
+        }
+        else
+            directive.set(context, response.headers);
     }
 }
 exports.Cache = Cache;

package/transpiled/directives/cache/Cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"Cache.js","sourceRoot":"","sources":["../../../source/directives/cache/Cache.ts"],"names":[],"mappings":";;;AAAA,uCAAmC;AACnC,mCAA+B;AAM/B,MAAa,KAAK;IACA,IAAI,GAAW,OAAO,CAAA;IACtB,SAAS,GAAY,KAAK,CAAA;IAEnC,MAAM,CAAE,IAAY,EAAE,KAAU;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,uBAAuB,CAAC,CAAA;QAElE,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,SAAS;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,MAAM,CAClB,UAAuB,EAAE,KAAY,EAAE,QAA8B;QACpE,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;QAClC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7C,CAAC;CACF;AAtBD,sBAsBC;AAED,MAAM,YAAY,GAAkD;IAClE,OAAO,EAAE,iBAAO;IAChB,KAAK,EAAE,aAAK;CACb,CAAA"}
+{"version":3,"file":"Cache.js","sourceRoot":"","sources":["../../../source/directives/cache/Cache.ts"],"names":[],"mappings":";;;AAAA,uCAAmC;AACnC,mCAA+B;AAM/B,MAAa,KAAK;IACA,IAAI,GAAW,OAAO,CAAA;IACtB,SAAS,GAAY,IAAI,CAAA;IAElC,MAAM,CAAE,IAAY,EAAE,KAAU;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,sBAAsB,CAAC,CAAA;QAEjE,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,SAAS;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,MAAM,CAClB,UAAuB,EAAE,OAA6B,EAAE,QAA8B;QACrF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;QAE/B,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;QAElC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,iBAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;gBAChD,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;;YACC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC;CACF;AA/BD,sBA+BC;AAED,MAAM,YAAY,GAAkD;IAClE,OAAO,EAAE,iBAAO;IAChB,KAAK,EAAE,aAAK;CACb,CAAA"}

package/transpiled/directives/cache/Control.d.ts

@@ -1,9 +1,10 @@
 import type { AuthenticatedContext, Directive } from './types';
 export declare class Control implements Directive {
     protected readonly value: string;
-    private cache;
+    private control;
+    private vary;
     constructor(value: string);
+    static disabled(headers: Headers): boolean;
     set(context: AuthenticatedContext, headers: Headers): void;
     protected resolve(request: AuthenticatedContext): string;
-    private mask;
 }

package/transpiled/directives/cache/Control.js

@@ -4,39 +4,56 @@ exports.Control = void 0;
 const matchacho_1 = require("matchacho");
 class Control {
     value;
-    cache = null;
+    control = null;
+    vary = false;
     constructor(value) {
         this.value = value;
     }
+    static disabled(headers) {
+        const value = headers.get('cache-control');
+        if (value === null)
+            return false;
+        const directives = mask(value);
+        return (directives & NO_STORE) === NO_STORE;
+    }
     set(context, headers) {
         if (!['GET', 'HEAD', 'OPTIONS'].includes(context.request.method))
             return;
-        this.cache ??= this.resolve(context);
-        headers.set('cache-control', this.cache);
+        this.control ??= this.resolve(context);
+        if (Control.disabled(headers))
+            return;
+        headers.set('cache-control', this.control);
+        if (this.vary)
+            headers.append('vary', 'authorization');
     }
     resolve(request) {
         if (request.identity === null)
             return this.value;
-        const directives = this.mask();
+        const directives = mask(this.value);
+        if ((directives & PRIVATE) === PRIVATE)
+            this.vary = true;
         if ((directives & (PUBLIC | NO_CACHE)) === PUBLIC)
             return 'no-cache, ' + this.value;
-        if ((directives & (PUBLIC | PRIVATE)) === 0)
+        if ((directives & (PUBLIC | PRIVATE)) === 0) {
+            this.vary = true;
             return 'private, ' + this.value;
+        }
         return this.value;
     }
-    mask() {
-        const directives = this.value.match(DIRECTIVES_RX);
-        if (directives === null)
-            return 0;
-        let mask = 0;
-        for (const directive of directives)
-            mask |= (0, matchacho_1.match)(directive, 'private', PRIVATE, 'public', PUBLIC, 'no-cache', NO_CACHE, 0);
-        return mask;
-    }
 }
 exports.Control = Control;
-const DIRECTIVES_RX = /\b(private|public|no-cache)\b/ig;
+function mask(value) {
+    const directives = value.match(DIRECTIVES_RX);
+    if (directives === null)
+        return 0;
+    let mask = 0;
+    for (const directive of directives)
+        mask |= (0, matchacho_1.match)(directive, 'private', PRIVATE, 'public', PUBLIC, 'no-cache', NO_CACHE, 'no-store', NO_STORE, 0);
+    return mask;
+}
+const DIRECTIVES_RX = /\b(private|public|no-cache|no-store)\b/ig;
 const PUBLIC = 1;
 const PRIVATE = 2;
 const NO_CACHE = 4;
+const NO_STORE = 8;
 //# sourceMappingURL=Control.js.map

package/transpiled/directives/cache/Control.js.map

@@ -1 +1 @@
-{"version":3,"file":"Control.js","sourceRoot":"","sources":["../../../source/directives/cache/Control.ts"],"names":[],"mappings":";;;AAAA,yCAAiC;AAGjC,MAAa,OAAO;IACC,KAAK,CAAQ;IACxB,KAAK,GAAkB,IAAI,CAAA;IAEnC,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,GAAG,CAAE,OAA6B,EAAE,OAAgB;QACzD,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9D,OAAM;QAER,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAEpC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAES,OAAO,CAAE,OAA6B;QAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAA;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAE9B,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,KAAK,MAAM;YAC/C,OAAO,YAAY,GAAG,IAAI,CAAC,KAAK,CAAA;QAElC,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC;YACzC,OAAO,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAEO,IAAI;QACV,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAElD,IAAI,UAAU,KAAK,IAAI;YACrB,OAAO,CAAC,CAAA;QAEV,IAAI,IAAI,GAAG,CAAC,CAAA;QAEZ,KAAK,MAAM,SAAS,IAAI,UAAU;YAChC,IAAI,IAAI,IAAA,iBAAK,EAAS,SAAS,EAC7B,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,QAAQ,EACpB,CAAC,CAAC,CAAA;QAEN,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAjDD,0BAiDC;AAED,MAAM,aAAa,GAAG,iCAAiC,CAAA;AAEvD,MAAM,MAAM,GAAG,CAAC,CAAA;AAChB,MAAM,OAAO,GAAG,CAAC,CAAA;AACjB,MAAM,QAAQ,GAAG,CAAC,CAAA"}
+{"version":3,"file":"Control.js","sourceRoot":"","sources":["../../../source/directives/cache/Control.ts"],"names":[],"mappings":";;;AAAA,yCAAiC;AAGjC,MAAa,OAAO;IACC,KAAK,CAAQ;IACxB,OAAO,GAAkB,IAAI,CAAA;IAC7B,IAAI,GAAY,KAAK,CAAA;IAE7B,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAE,OAAgB;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAE1C,IAAI,KAAK,KAAK,IAAI;YAChB,OAAO,KAAK,CAAA;QAEd,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9B,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,QAAQ,CAAA;IAC7C,CAAC;IAEM,GAAG,CAAE,OAA6B,EAAE,OAAgB;QACzD,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9D,OAAM;QAER,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAEtC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC3B,OAAM;QAER,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAE1C,IAAI,IAAI,CAAC,IAAI;YACX,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC3C,CAAC;IAES,OAAO,CAAE,OAA6B;QAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAA;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,OAAO;YACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAElB,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,KAAK,MAAM;YAC/C,OAAO,YAAY,GAAG,IAAI,CAAC,KAAK,CAAA;QAElC,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;YAEhB,OAAO,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;QACjC,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;CACF;AAvDD,0BAuDC;AAED,SAAS,IAAI,CAAE,KAAa;IAC1B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAE7C,IAAI,UAAU,KAAK,IAAI;QACrB,OAAO,CAAC,CAAA;IAEV,IAAI,IAAI,GAAG,CAAC,CAAA;IAEZ,KAAK,MAAM,SAAS,IAAI,UAAU;QAChC,IAAI,IAAI,IAAA,iBAAK,EAAS,SAAS,EAC7B,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,QAAQ,EACpB,UAAU,EAAE,QAAQ,EACpB,CAAC,CAAC,CAAA;IAEN,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,aAAa,GAAG,0CAA0C,CAAA;AAEhE,MAAM,MAAM,GAAG,CAAC,CAAA;AAChB,MAAM,OAAO,GAAG,CAAC,CAAA;AACjB,MAAM,QAAQ,GAAG,CAAC,CAAA;AAClB,MAAM,QAAQ,GAAG,CAAC,CAAA"}

package/transpiled/directives/cors/CORS.js

@@ -7,12 +7,11 @@ class CORS {
         'accept',
         'authorization',
         'content-type',
-        'etag',
         'if-match',
         'if-none-match'
     ]);
     headers = new Headers({
-        'access-control-allow-methods': 'GET, POST, PUT, PATCH, DELETE',
+        'access-control-allow-methods': 'GET, POST, PUT, PATCH, DELETE, LOCK, UNLOCK',
         'access-control-allow-credentials': 'true',
         'access-control-allow-headers': Array.from(this.requestHeaders).join(', '),
         'access-control-max-age': '3600',
@@ -28,7 +27,8 @@ class CORS {
         input.pipelines.response.push((output) => {
             output.headers ??= new Headers();
             output.headers.set('access-control-allow-origin', origin);
-            output.headers.set('access-control-expose-headers', 'authorization, content-type, content-length, etag');
+            output.headers.set('access-control-allow-credentials', 'true');
+            output.headers.set('access-control-expose-headers', 'authorization, content-type, content-length, date, etag, last-modified');
             const method = input.request.method;
             if (method === 'GET' || method === 'HEAD' || method === 'OPTIONS')
                 output.headers.append('vary', 'origin');

package/transpiled/directives/cors/CORS.js.map

@@ -1 +1 @@
-{"version":3,"file":"CORS.js","sourceRoot":"","sources":["../../../source/directives/cors/CORS.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACC,IAAI,GAAG,MAAM,CAAA;IAEZ,cAAc,GAAG,IAAI,GAAG,CAAS;QAChD,QAAQ;QACR,eAAe;QACf,cAAc;QACd,MAAM;QACN,UAAU;QACV,eAAe;KAChB,CAAC,CAAA;IAEe,OAAO,GAAG,IAAI,OAAO,CAAC;QACrC,8BAA8B,EAAE,+BAA+B;QAC/D,kCAAkC,EAAE,MAAM;QAC1C,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1E,wBAAwB,EAAE,MAAM;QAChC,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEK,SAAS,CAAE,KAAY;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE3C,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,IAAI,CAAA;QAEb,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAEvC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAChD,mDAAmD,CAAC,CAAA;YAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;YAEnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;gBAC/D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAE,MAAc;QAC1B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9F,CAAC;IAEO,iBAAiB,CAAE,MAAc;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QAEvD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF;AA1DD,oBA0DC"}
+{"version":3,"file":"CORS.js","sourceRoot":"","sources":["../../../source/directives/cors/CORS.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACC,IAAI,GAAG,MAAM,CAAA;IAEZ,cAAc,GAAG,IAAI,GAAG,CAAS;QAChD,QAAQ;QACR,eAAe;QACf,cAAc;QACd,UAAU;QACV,eAAe;KAChB,CAAC,CAAA;IAEe,OAAO,GAAG,IAAI,OAAO,CAAC;QACrC,8BAA8B,EAAE,6CAA6C;QAC7E,kCAAkC,EAAE,MAAM;QAC1C,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1E,wBAAwB,EAAE,MAAM;QAChC,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEK,SAAS,CAAE,KAAY;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE3C,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,IAAI,CAAA;QAEb,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAEvC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;YAC9D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAChD,wEAAwE,CAAC,CAAA;YAE3E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;YAEnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;gBAC/D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAE,MAAc;QAC1B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9F,CAAC;IAEO,iBAAiB,CAAE,MAAc;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QAEvD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF;AA1DD,oBA0DC"}

package/transpiled/directives/dev/Development.d.ts

@@ -5,5 +5,5 @@ export declare class Development implements DirectiveFamily<Directive> {
     readonly name: string;
     readonly mandatory: boolean;
     create(name: string, value: unknown): Directive;
-    preflight(directives: Directive[], input: Input): Output;
+    preflight(directives: Directive[], input: Input): Promise<Output>;
 }

package/transpiled/directives/dev/Development.js

@@ -3,27 +3,33 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Development = void 0;
 const Stub_1 = require("./Stub");
 const Throw_1 = require("./Throw");
+const Sleep_1 = require("./Sleep");
 class Development {
     name = 'dev';
     mandatory = false;
     create(name, value) {
         const Class = constructors[name];
         if (Class === undefined)
-            throw new Error(`Directive 'dev:${name}' is not implemented.`);
+            throw new Error(`Directive 'dev:${name}' is not implemented`);
         return new Class(value);
     }
-    preflight(directives, input) {
+    async preflight(directives, input) {
+        let output = null;
         for (const directive of directives) {
-            const output = directive.apply(input);
-            if (output !== null)
-                return output;
+            const out = await directive.apply(input);
+            if (out !== null)
+                if (output !== null)
+                    throw new Error('`dev` directives ambiguous output');
+                else
+                    output = out;
         }
-        return null;
+        return output;
     }
 }
 exports.Development = Development;
 const constructors = {
     stub: Stub_1.Stub,
-    throw: Throw_1.Throw
+    throw: Throw_1.Throw,
+    sleep: Sleep_1.Sleep
 };
 //# sourceMappingURL=Development.js.map

package/transpiled/directives/dev/Development.js.map

@@ -1 +1 @@
-{"version":3,"file":"Development.js","sourceRoot":"","sources":["../../../source/directives/dev/Development.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAC7B,mCAA+B;AAK/B,MAAa,WAAW;IACN,IAAI,GAAW,KAAK,CAAA;IACpB,SAAS,GAAY,KAAK,CAAA;IAEnC,MAAM,CAAE,IAAY,EAAE,KAAc;QACzC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,uBAAuB,CAAC,CAAA;QAEhE,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,SAAS,CAAE,UAAuB,EAAE,KAAY;QACrD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAErC,IAAI,MAAM,KAAK,IAAI;gBACjB,OAAO,MAAM,CAAA;QACjB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAvBD,kCAuBC;AAED,MAAM,YAAY,GAAkD;IAClE,IAAI,EAAE,WAAI;IACV,KAAK,EAAE,aAAK;CACb,CAAA"}
+{"version":3,"file":"Development.js","sourceRoot":"","sources":["../../../source/directives/dev/Development.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAC7B,mCAA+B;AAC/B,mCAA+B;AAK/B,MAAa,WAAW;IACN,IAAI,GAAW,KAAK,CAAA;IACpB,SAAS,GAAY,KAAK,CAAA;IAEnC,MAAM,CAAE,IAAY,EAAE,KAAc;QACzC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,sBAAsB,CAAC,CAAA;QAE/D,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,UAAuB,EAAE,KAAY;QAC3D,IAAI,MAAM,GAAG,IAAI,CAAA;QAEjB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAExC,IAAI,GAAG,KAAK,IAAI;gBACd,IAAI,MAAM,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;;oBACpE,MAAM,GAAG,GAAG,CAAA;QACrB,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AA1BD,kCA0BC;AAED,MAAM,YAAY,GAAkD;IAClE,IAAI,EAAE,WAAI;IACV,KAAK,EAAE,aAAK;IACZ,KAAK,EAAE,aAAK;CACb,CAAA"}

package/transpiled/directives/dev/Sleep.d.ts

@@ -0,0 +1,8 @@
+import type { Directive } from './types';
+import type { Input, Output } from '../../io';
+export declare class Sleep implements Directive {
+    private static warned;
+    private readonly maximum;
+    constructor(value: number);
+    apply(input: Input): Promise<Output>;
+}

package/transpiled/directives/dev/Sleep.js

@@ -0,0 +1,36 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sleep = void 0;
+const node_assert_1 = __importDefault(require("node:assert"));
+const promises_1 = require("node:timers/promises");
+const openspan_1 = require("openspan");
+const cors_1 = require("../cors");
+const HTTP_1 = require("../../HTTP");
+class Sleep {
+    static warned = false;
+    maximum;
+    constructor(value) {
+        node_assert_1.default.ok(Number.isInteger(value), '`dev:sleep` directive value must be an integer');
+        if (!Sleep.warned) {
+            openspan_1.console.warn(`Sleep directive is enabled (maximum: ${value}ms)`);
+            Sleep.warned = true;
+        }
+        cors_1.cors.allow('sleep');
+        this.maximum = value;
+    }
+    async apply(input) {
+        const value = input.request.headers.sleep;
+        if (value === undefined)
+            return null;
+        const duration = Number.parseInt(value);
+        if (Number.isNaN(duration) || duration < 0 || duration > this.maximum)
+            throw new HTTP_1.BadRequest('Invalid sleep duration');
+        await (0, promises_1.setTimeout)(duration);
+        return null;
+    }
+}
+exports.Sleep = Sleep;
+//# sourceMappingURL=Sleep.js.map

package/transpiled/directives/dev/Sleep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Sleep.js","sourceRoot":"","sources":["../../../source/directives/dev/Sleep.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAChC,mDAAiD;AACjD,uCAAkC;AAClC,kCAA8B;AAC9B,qCAAuC;AAIvC,MAAa,KAAK;IACR,MAAM,CAAC,MAAM,GAAG,KAAK,CAAA;IACZ,OAAO,CAAQ;IAEhC,YAAoB,KAAa;QAC/B,qBAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,gDAAgD,CAAC,CAAA;QAEpF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,kBAAO,CAAC,IAAI,CAAC,wCAAwC,KAAK,KAAK,CAAC,CAAA;YAChE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAA;QACrB,CAAC;QAED,WAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACnB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,KAAK,CAAE,KAAY;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAA2B,CAAA;QAE/D,IAAI,KAAK,KAAK,SAAS;YACrB,OAAO,IAAI,CAAA;QAEb,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEvC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO;YACnE,MAAM,IAAI,iBAAU,CAAC,wBAAwB,CAAC,CAAA;QAEhD,MAAM,IAAA,qBAAU,EAAC,QAAQ,CAAC,CAAA;QAE1B,OAAO,IAAI,CAAA;IACb,CAAC;;AA9BH,sBA+BC"}

package/transpiled/directives/dev/types.d.ts

@@ -1,4 +1,4 @@
 import type { Input, Output } from '../../io';
 export interface Directive {
-    apply: (input: Input) => Output;
+    apply: (input: Input) => Promise<Output> | Output;
 }

package/transpiled/directives/flow/Compose.d.ts

@@ -0,0 +1,9 @@
+import type { Directive } from './types';
+import type { Input as Context } from '../../io';
+export declare class Compose implements Directive {
+    private readonly expressions;
+    constructor(composition: any);
+    attach(context: Context): void;
+    private compose;
+    private execute;
+}