@toa.io/extensions.exposition 1.0.0-alpha.2 → 1.0.0-alpha.200

package/transpiled/Remotes.js

@@ -4,17 +4,18 @@ exports.Remotes = void 0;
 const core_1 = require("@toa.io/core");
 class Remotes extends core_1.Connector {
     boot;
-    remotes = {};
+    cache = {};
     constructor(boot) {
         super();
         this.boot = boot;
     }
-    async discover(namespace, name) {
+    async discover(namespace, name, version = 'local') {
         const locator = new core_1.Locator(name, namespace);
-        this.remotes[locator.id] ??= this.create(locator);
-        return await this.remotes[locator.id];
+        const key = locator.id + ':' + version;
+        this.cache[key] ??= this.locate(locator);
+        return this.cache[key];
     }
-    async create(locator) {
+    async locate(locator) {
         const remote = await this.boot.remote(locator);
         this.depends(remote);
         await remote.connect();

package/transpiled/Remotes.js.map

@@ -1 +1 @@
-{"version":3,"file":"Remotes.js","sourceRoot":"","sources":["../source/Remotes.ts"],"names":[],"mappings":";;;AAAA,uCAAiE;AAGjE,MAAa,OAAQ,SAAQ,gBAAS;IACnB,IAAI,CAAY;IAChB,OAAO,GAAuC,EAAE,CAAA;IAEjE,YAAoB,IAAgB;QAClC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAE,SAAiB,EAAE,IAAY;QACpD,MAAM,OAAO,GAAG,IAAI,cAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QAE5C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAEjD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACvC,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,OAAgB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAEpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QAEtB,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AA1BD,0BA0BC"}
+{"version":3,"file":"Remotes.js","sourceRoot":"","sources":["../source/Remotes.ts"],"names":[],"mappings":";;;AAAA,uCAA8D;AAG9D,MAAa,OAAQ,SAAQ,gBAAS;IACnB,IAAI,CAAY;IAChB,KAAK,GAAoC,EAAE,CAAA;IAE5D,YAAoB,IAAgB;QAClC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAE,SAAiB,EAAE,IAAY,EAAE,UAAkB,OAAO;QAC/E,MAAM,OAAO,GAAG,IAAI,cAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,GAAG,GAAG,GAAG,OAAO,CAAA;QAEtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAExC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,OAAgB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAEpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QAEtB,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AA3BD,0BA2BC"}

package/transpiled/Tenant.d.ts

@@ -1,12 +1,12 @@
-import { Connector, type Locator, type bindings } from '@toa.io/core';
-import { type Label } from './discovery';
-import type * as RTD from './RTD/syntax';
+import { Connector } from '@toa.io/core';
+import type { bindings } from '@toa.io/core';
+import type { Label } from './discovery';
+import type { Branch } from './Branch';
 export declare class Tenant extends Connector {
     private readonly broadcast;
     private readonly branch;
-    constructor(broadcast: Broadcast, locator: Locator, node: RTD.Node);
+    constructor(broadcast: Broadcast, branch: Branch);
     open(): Promise<void>;
-    dispose(): Promise<void>;
     private expose;
 }
 type Broadcast = bindings.Broadcast<Label>;

package/transpiled/Tenant.js

@@ -5,30 +5,19 @@ const core_1 = require("@toa.io/core");
 class Tenant extends core_1.Connector {
     broadcast;
     branch;
-    constructor(broadcast, locator, node) {
+    constructor(broadcast, branch) {
         super();
         this.broadcast = broadcast;
-        this.branch = {
-            namespace: locator.namespace,
-            component: locator.name,
-            isolated: locator.namespace === 'identity',
-            node
-        };
+        this.branch = branch;
         this.depends(broadcast);
     }
     async open() {
         await this.expose();
         await this.broadcast.receive('ping', this.expose.bind(this));
-        console.info('Exposition Tenant for ' +
-            `'${this.branch.namespace}.${this.branch.component}' has started.`);
-    }
-    async dispose() {
-        console.info('Exposition Tenant for ' +
-            `'${this.branch.namespace}.${this.branch.component}' has been stopped.`);
     }
     async expose() {
         await this.broadcast.transmit('expose', this.branch);
     }
 }
 exports.Tenant = Tenant;
-//# sourceMappingURL=Tenant.js.map
+//# sourceMappingURL=Tenant.js.map

package/transpiled/Tenant.js.map

@@ -1 +1 @@
-{"version":3,"file":"Tenant.js","sourceRoot":"","sources":["../source/Tenant.ts"],"names":[],"mappings":";;;AAAA,uCAAqE;AAKrE,MAAa,MAAO,SAAQ,gBAAS;IAClB,SAAS,CAAW;IACpB,MAAM,CAAQ;IAE/B,YAAoB,SAAoB,EAAE,OAAgB,EAAE,IAAc;QACxE,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAE1B,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,IAAI;YACvB,QAAQ,EAAE,OAAO,CAAC,SAAS,KAAK,UAAU;YAC1C,IAAI;SACL,CAAA;QAED,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAEe,KAAK,CAAC,IAAI;QACxB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAE5D,OAAO,CAAC,IAAI,CAAC,wBAAwB;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,gBAAgB,CAAC,CAAA;IACvE,CAAC;IAEe,KAAK,CAAC,OAAO;QAC3B,OAAO,CAAC,IAAI,CAAC,wBAAwB;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,qBAAqB,CAAC,CAAA;IAC5E,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC;CACF;AAnCD,wBAmCC"}
+{"version":3,"file":"Tenant.js","sourceRoot":"","sources":["../source/Tenant.ts"],"names":[],"mappings":";;;AAAA,uCAAwC;AAKxC,MAAa,MAAO,SAAQ,gBAAS;IAClB,SAAS,CAAW;IACpB,MAAM,CAAQ;IAE/B,YAAoB,SAAoB,EAAE,MAAc;QACtD,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAEe,KAAK,CAAC,IAAI;QACxB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC;CACF;AArBD,wBAqBC"}

package/transpiled/deployment.d.ts

@@ -1,3 +1,3 @@
 import { type Dependency } from '@toa.io/operations';
 import { type Annotation } from './Annotation';
-export declare function deployment(_: unknown, annotation: Annotation | undefined): Dependency;
+export declare function deployment(_: unknown, annotation?: Annotation): Dependency;

package/transpiled/deployment.js

@@ -22,30 +22,37 @@ var __importStar = (this && this.__importStar) || function (mod) {
     __setModuleDefault(result, mod);
     return result;
 };
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.deployment = void 0;
+const node_assert_1 = __importDefault(require("node:assert"));
 const generic_1 = require("@toa.io/generic");
 const schemas = __importStar(require("./schemas"));
 const Directive_1 = require("./Directive");
 const Composition_1 = require("./Composition");
 const syntax_1 = require("./RTD/syntax");
+const HTTP_1 = require("./HTTP");
 function deployment(_, annotation) {
+    node_assert_1.default.ok(annotation !== undefined, 'Exposition context annotation is required');
+    schemas.annotation.validate(annotation);
     const labels = (0, Composition_1.components)().labels;
     const service = {
         group: 'exposition',
         name: 'gateway',
-        port: 8000,
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        port: HTTP_1.PORT,
         version: require('../package.json').version,
         variables: [],
-        components: labels
+        components: labels,
+        resources: annotation.resources,
+        ingress: { default: true, hosts: [] },
+        probe: {
+            path: '/.ready',
+            port: HTTP_1.PORT,
+            delay: HTTP_1.DELAY
+        }
     };
-    if (annotation?.host !== undefined)
-        service.ingress = {
-            host: annotation.host,
-            class: annotation.class,
-            annotations: annotation.annotations
-        };
     if (annotation?.['/'] !== undefined) {
         const tree = (0, syntax_1.parse)(annotation['/'], Directive_1.shortcuts);
         service.variables.push({
@@ -53,13 +60,19 @@ function deployment(_, annotation) {
             value: (0, generic_1.encode)(tree)
         });
     }
-    if (annotation?.debug === true)
-        service.variables.push({
-            name: 'TOA_EXPOSITION_DEBUG',
-            value: '1'
-        });
-    if (annotation !== undefined)
-        schemas.annotaion.validate(annotation);
+    const { debug, trace, authorities } = annotation;
+    service.ingress.hosts = Object.values(authorities);
+    service.ingress.class = annotation.class;
+    service.ingress.annotations = annotation.annotations;
+    const properties = { authorities };
+    if (debug === true)
+        properties.debug = true;
+    if (trace === true)
+        properties.trace = true;
+    service.variables.push({
+        name: 'TOA_EXPOSITION_PROPERTIES',
+        value: (0, generic_1.encode)(properties)
+    });
     return { services: [service] };
 }
 exports.deployment = deployment;

package/transpiled/deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../source/deployment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA,6CAAwC;AAExC,mDAAoC;AACpC,2CAAuC;AACvC,+CAA0C;AAC1C,yCAAoC;AAEpC,SAAgB,UAAU,CAAE,CAAU,EAAE,UAAkC;IACxE,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC,MAAM,CAAA;IAElC,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI;QACV,8DAA8D;QAC9D,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO;QAC3C,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,MAAM;KACnB,CAAA;IAED,IAAI,UAAU,EAAE,IAAI,KAAK,SAAS;QAChC,OAAO,CAAC,OAAO,GAAG;YAChB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAA;IAEH,IAAI,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAA,cAAK,EAAC,UAAU,CAAC,GAAG,CAAC,EAAE,qBAAS,CAAC,CAAA;QAE9C,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAA,gBAAM,EAAC,IAAI,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,UAAU,EAAE,KAAK,KAAK,IAAI;QAC5B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE,GAAG;SACX,CAAC,CAAA;IAEJ,IAAI,UAAU,KAAK,SAAS;QAC1B,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAExC,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAA;AAChC,CAAC;AAvCD,gCAuCC"}
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../source/deployment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAEhC,6CAAwC;AAExC,mDAAoC;AACpC,2CAAuC;AACvC,+CAA0C;AAC1C,yCAAoC;AACpC,iCAAoC;AAEpC,SAAgB,UAAU,CAAE,CAAU,EAAE,UAAuB;IAC7D,qBAAM,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,EAAE,2CAA2C,CAAC,CAAA;IAChF,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAEvC,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC,MAAM,CAAA;IAElC,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,WAAI;QACV,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO;QAC3C,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAI;YACV,KAAK,EAAE,YAAK;SACb;KACF,CAAA;IAED,IAAI,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAA,cAAK,EAAC,UAAU,CAAC,GAAG,CAAC,EAAE,qBAAS,CAAC,CAAA;QAE9C,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAA,gBAAM,EAAC,IAAI,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,UAAU,CAAA;IAEhD,OAAO,CAAC,OAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACnD,OAAO,CAAC,OAAQ,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IACzC,OAAO,CAAC,OAAQ,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAA;IAErD,MAAM,UAAU,GAAe,EAAE,WAAW,EAAE,CAAA;IAE9C,IAAI,KAAK,KAAK,IAAI;QAChB,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;IAEzB,IAAI,KAAK,KAAK,IAAI;QAChB,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;IAEzB,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC;QACtB,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,IAAA,gBAAM,EAAC,UAAU,CAAC;KAC1B,CAAC,CAAA;IAEF,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAA;AAChC,CAAC;AAnDD,gCAmDC"}

package/transpiled/directives/auth/Anonymous.d.ts

@@ -1,6 +1,6 @@
-import { type Directive, type Input } from './types';
+import { type Directive, type Context } from './types';
 export declare class Anonymous implements Directive {
     private readonly allow;
     constructor(allow: boolean);
-    authorize(_: any, input: Input): boolean;
+    authorize(_: any, context: Context): boolean;
 }

package/transpiled/directives/auth/Anonymous.js

@@ -6,11 +6,10 @@ class Anonymous {
     constructor(allow) {
         this.allow = allow;
     }
-    authorize(_, input) {
-        if ('authorization' in input.headers)
-            return false;
-        else
-            return this.allow;
+    authorize(_, context) {
+        return 'authorization' in context.request.headers
+            ? false
+            : this.allow;
     }
 }
 exports.Anonymous = Anonymous;

package/transpiled/directives/auth/Anonymous.js.map

@@ -1 +1 @@
-{"version":3,"file":"Anonymous.js","sourceRoot":"","sources":["../../../source/directives/auth/Anonymous.ts"],"names":[],"mappings":";;;AAEA,MAAa,SAAS;IACH,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,KAAY;QACpC,IAAI,eAAe,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;;YAC7C,OAAO,IAAI,CAAC,KAAK,CAAA;IACxB,CAAC;CACF;AAXD,8BAWC"}
+{"version":3,"file":"Anonymous.js","sourceRoot":"","sources":["../../../source/directives/auth/Anonymous.ts"],"names":[],"mappings":";;;AAEA,MAAa,SAAS;IACH,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,OAAgB;QACxC,OAAO,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO;YAC/C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;IAChB,CAAC;CACF;AAZD,8BAYC"}

package/transpiled/directives/auth/Anyone.d.ts

@@ -0,0 +1,6 @@
+import { type Directive, type Context } from './types';
+export declare class Anyone implements Directive {
+    private readonly allow;
+    constructor(allow: boolean);
+    authorize(_: any, context: Context): boolean;
+}

package/transpiled/directives/auth/Anyone.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Anyone = void 0;
+class Anyone {
+    allow;
+    constructor(allow) {
+        this.allow = allow;
+    }
+    authorize(_, context) {
+        return context.identity !== null && this.allow;
+    }
+}
+exports.Anyone = Anyone;
+//# sourceMappingURL=Anyone.js.map

package/transpiled/directives/auth/Anyone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Anyone.js","sourceRoot":"","sources":["../../../source/directives/auth/Anyone.ts"],"names":[],"mappings":";;;AAEA,MAAa,MAAM;IACA,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,OAAgB;QACxC,OAAO,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAA;IAChD,CAAC;CACF;AAVD,wBAUC"}

package/transpiled/directives/auth/Assert.d.ts

@@ -0,0 +1,7 @@
+import type { Context, Directive, Identity } from './types';
+export declare class Assert implements Directive {
+    private readonly disabled;
+    constructor(enabled: boolean);
+    authorize(identity: Identity | null, context: Context): Promise<boolean>;
+    private incept;
+}

package/transpiled/directives/auth/Assert.js

@@ -0,0 +1,57 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Assert = void 0;
+const node_assert_1 = __importDefault(require("node:assert"));
+const generic_1 = require("@toa.io/generic");
+const http = __importStar(require("../../HTTP"));
+const Incept_1 = require("./Incept");
+class Assert {
+    disabled;
+    constructor(enabled) {
+        node_assert_1.default.ok(typeof enabled === 'boolean', '`auth:assert` directive value must be a boolean');
+        this.disabled = !enabled;
+    }
+    async authorize(identity, context) {
+        if (!this.disabled)
+            await this.incept(context, identity);
+        return false;
+    }
+    async incept(context, identity) {
+        if (context.request.headers.authorization === undefined)
+            throw new http.Unauthorized();
+        if (identity === null) {
+            context.identity = await Incept_1.Incept.incept(context, (0, generic_1.newid)());
+            context.pipelines.response.push((response) => {
+                response.status = 201;
+            });
+        }
+    }
+}
+exports.Assert = Assert;
+//# sourceMappingURL=Assert.js.map

package/transpiled/directives/auth/Assert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Assert.js","sourceRoot":"","sources":["../../../source/directives/auth/Assert.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAChC,6CAAuC;AACvC,iDAAkC;AAClC,qCAAiC;AAGjC,MAAa,MAAM;IACA,QAAQ,CAAS;IAElC,YAAoB,OAAgB;QAClC,qBAAM,CAAC,EAAE,CAAC,OAAO,OAAO,KAAK,SAAS,EAAE,iDAAiD,CAAC,CAAA;QAE1F,IAAI,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAA;IAC1B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,QAAyB,EAAE,OAAgB;QACjE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAEtC,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,OAAgB,EAAE,QAAyB;QAC/D,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrD,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;QAE/B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,CAAC,QAAQ,GAAG,MAAM,eAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAA,eAAK,GAAE,CAAC,CAAA;YAExD,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC3C,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;CACF;AA5BD,wBA4BC"}

package/transpiled/directives/auth/Authorization.d.ts

@@ -1,10 +1,9 @@
 import * as http from '../../HTTP';
 import type { Output } from '../../io';
 import type { Remotes } from '../../Remotes';
-import type { Family } from '../../Directive';
-import type { Parameter } from '../../RTD';
-import type { Directive, Extension, Input } from './types';
-export declare class Authorization implements Family<Directive, Extension> {
+import type { Parameter, DirectiveFamily } from '../../RTD';
+import type { Directive, Extension, Context } from './types';
+export declare class Authorization implements DirectiveFamily<Directive, Extension> {
     readonly depends: string[];
     readonly name: string;
     readonly mandatory: boolean;
@@ -13,8 +12,9 @@ export declare class Authorization implements Family<Directive, Extension> {
     private tokens;
     private bans;
     create(name: string, value: any, remotes: Remotes): Directive;
-    preflight(directives: Directive[], input: Input, parameters: Parameter[]): Promise<Output>;
-    settle(directives: Directive[], request: Input, response: http.OutgoingMessage): Promise<void>;
+    preflight(directives: Directive[], context: Context, parameters: Parameter[]): Promise<Output>;
+    settle(directives: Directive[], context: Context, response: http.OutgoingMessage): Promise<void>;
     private resolve;
+    private permitted;
     private banned;
 }

package/transpiled/directives/auth/Authorization.js

@@ -29,15 +29,22 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Authorization = void 0;
 const node_assert_1 = __importDefault(require("node:assert"));
 const matchacho_1 = require("matchacho");
+const openspan_1 = require("openspan");
+const minimatch_1 = require("minimatch");
 const http = __importStar(require("../../HTTP"));
 const Anonymous_1 = require("./Anonymous");
 const Id_1 = require("./Id");
 const Role_1 = require("./Role");
 const Rule_1 = require("./Rule");
 const Incept_1 = require("./Incept");
+const Assert_1 = require("./Assert");
 const Echo_1 = require("./Echo");
-const split_1 = require("./split");
 const Scheme_1 = require("./Scheme");
+const Delegate_1 = require("./Delegate");
+const Federation_1 = require("./Federation");
+const Anyone_1 = require("./Anyone");
+const Input_1 = require("./Input");
+const split_1 = require("./split");
 const schemes_1 = require("./schemes");
 class Authorization {
     depends = ['Vary'];
@@ -48,56 +55,67 @@ class Authorization {
     tokens = null;
     bans = null;
     create(name, value, remotes) {
-        node_assert_1.default.ok(name in CLASSES, `Directive '${name}' is not provided by the '${this.name}' family.`);
-        const Class = CLASSES[name];
+        node_assert_1.default.ok(name in constructors, `Directive 'auth:${name}' is not implemented`);
+        const Class = constructors[name];
         for (const name of REMOTES)
             this.discovery[name] ??= remotes.discover('identity', name);
-        return (0, matchacho_1.match)(Class, Role_1.Role, () => new Role_1.Role(value, this.discovery.roles), Rule_1.Rule, () => new Rule_1.Rule(value, this.create.bind(this)), Incept_1.Incept, () => new Incept_1.Incept(value, this.discovery), () => new Class(value));
+        return (0, matchacho_1.match)(Class, Role_1.Role, () => new Role_1.Role(value, this.discovery.roles), Rule_1.Rule, () => new Rule_1.Rule(value, this.create.bind(this)), Input_1.Input, () => new Input_1.Input(value, this.create.bind(this)), Incept_1.Incept, () => new Incept_1.Incept(value, this.discovery), Delegate_1.Delegate, () => new Delegate_1.Delegate(value, this.discovery.roles), () => new Class(value));
     }
-    async preflight(directives, input, parameters) {
-        const identity = await this.resolve(input.headers.authorization);
-        input.identity = identity;
+    async preflight(directives, context, parameters) {
+        context.identity = await this.resolve(context.authority, context.request.headers.authorization);
+        directives.sort((a, b) => (a.priority ?? 1) - (b.priority ?? 1));
         for (const directive of directives) {
-            const allow = await directive.authorize(identity, input, parameters);
+            const allow = await directive.authorize(context.identity, context, parameters);
             if (allow)
-                return directive.reply?.(identity) ?? null;
+                if (this.permitted(context))
+                    return directive.reply?.(context) ?? null;
+                else
+                    throw new http.Forbidden();
         }
-        if (identity === null)
+        if (context.identity === null)
             throw new http.Unauthorized();
         else
             throw new http.Forbidden();
     }
-    async settle(directives, request, response) {
-        for (const directive of directives)
-            await directive.settle?.(request, response);
-        const identity = request.identity;
+    async settle(directives, context, response) {
+        await Promise.all(directives.map(async (directive) => directive.settle?.(context, response)));
+        const identity = context.identity;
         if (identity === null)
             return;
         if (identity.scheme === schemes_1.PRIMARY && !identity.refresh)
             return;
         // Role directive may have already set the value
-        if (identity.roles === undefined)
-            await Role_1.Role.set(identity, this.discovery.roles);
+        identity.roles ??= await Role_1.Role.get(identity, this.discovery.roles);
         this.tokens ??= await this.discovery.tokens;
-        const token = await this.tokens.invoke('encrypt', { input: { identity } });
+        const token = await this.tokens.invoke('encrypt', {
+            input: { authority: context.authority, identity }
+        });
         const authorization = `Token ${token}`;
-        if (response.headers === undefined)
-            response.headers = new Headers();
+        response.headers ??= new Headers();
         response.headers.set('authorization', authorization);
+        response.headers.set('cache-control', 'no-store');
     }
-    async resolve(authorization) {
+    async resolve(authority, authorization) {
         if (authorization === undefined)
             return null;
         const [scheme, credentials] = (0, split_1.split)(authorization);
         const provider = schemes_1.PROVIDERS[scheme];
-        if (!(provider in this.discovery))
-            throw new http.Unauthorized(`Unknown authentication scheme '${scheme}'.`);
+        if (provider === undefined)
+            throw new http.Unauthorized(`Unknown authentication scheme '${scheme}'`);
         this.schemes[scheme] ??= await this.discovery[provider];
         const result = await this.schemes[scheme].invoke('authenticate', {
-            input: credentials
+            input: {
+                scheme,
+                authority,
+                credentials
+            }
         });
-        if (result instanceof Error)
+        if (result instanceof Error) {
+            const code = result.code;
+            if (typeof code === 'string')
+                openspan_1.console.info('Authentication failed', { code });
             return null;
+        }
         const identity = result.identity;
         if (scheme !== schemes_1.PRIMARY && (await this.banned(identity)))
             throw new http.Unauthorized();
@@ -105,6 +123,15 @@ class Authorization {
         identity.refresh = result.refresh;
         return identity;
     }
+    permitted(context) {
+        const permissions = context.identity?.permissions;
+        if (permissions === undefined)
+            return true;
+        return Object.entries(permissions).some(([pattern, methods]) => {
+            return methods.some((method) => method === '*' || method === context.request.method) &&
+                (0, minimatch_1.minimatch)(context.request.url, pattern);
+        });
+    }
     async banned(identity) {
         this.bans ??= await this.discovery.bans;
         const ban = await this.bans.invoke('observe', { query: { id: identity.id } });
@@ -112,14 +139,19 @@ class Authorization {
     }
 }
 exports.Authorization = Authorization;
-const CLASSES = {
+const constructors = {
     anonymous: Anonymous_1.Anonymous,
+    anyone: Anyone_1.Anyone,
     id: Id_1.Id,
     role: Role_1.Role,
     rule: Rule_1.Rule,
     incept: Incept_1.Incept,
+    assert: Assert_1.Assert,
     scheme: Scheme_1.Scheme,
-    echo: Echo_1.Echo
+    echo: Echo_1.Echo,
+    delegate: Delegate_1.Delegate,
+    claims: Federation_1.Federation,
+    input: Input_1.Input
 };
-const REMOTES = ['basic', 'federation', 'tokens', 'roles', 'bans'];
+const REMOTES = ['basic', 'federation', 'tokens', 'roles', 'bans', 'otp'];
 //# sourceMappingURL=Authorization.js.map

package/transpiled/directives/auth/Authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"Authorization.js","sourceRoot":"","sources":["../../../source/directives/auth/Authorization.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAChC,yCAAiC;AACjC,iDAAkC;AAClC,2CAAuC;AACvC,6BAAyB;AACzB,iCAA6B;AAC7B,iCAA6B;AAC7B,qCAAiC;AACjC,iCAA6B;AAC7B,mCAA+B;AAC/B,qCAAiC;AACjC,uCAA8C;AAkB9C,MAAa,aAAa;IACR,OAAO,GAAa,CAAC,MAAM,CAAC,CAAA;IAC5B,IAAI,GAAW,MAAM,CAAA;IACrB,SAAS,GAAY,IAAI,CAAA;IAExB,OAAO,GAAG,EAAwB,CAAA;IAClC,SAAS,GAAG,EAA0B,CAAA;IAC/C,MAAM,GAAqB,IAAI,CAAA;IAC/B,IAAI,GAAqB,IAAI,CAAA;IAE9B,MAAM,CAAE,IAAY,EAAE,KAAU,EAAE,OAAgB;QACvD,qBAAM,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,EACvB,cAAc,IAAI,6BAA6B,IAAI,CAAC,IAAI,WAAW,CAAC,CAAA;QAEtE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAE3B,KAAK,MAAM,IAAI,IAAI,OAAO;YACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAE7D,OAAO,IAAA,iBAAK,EAAC,KAAK,EAChB,WAAI,EAAE,GAAG,EAAE,CAAC,IAAI,WAAI,CAAC,KAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACtE,WAAI,EAAE,GAAG,EAAE,CAAC,IAAI,WAAI,CAAC,KAA+B,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC7E,eAAM,EAAE,GAAG,EAAE,CAAC,IAAI,eAAM,CAAC,KAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EACzD,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,UAAuB,EAC7C,KAAY,EACZ,UAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAEhE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAA;QAEzB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;YAEpE,IAAI,KAAK;gBACP,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAA;QAC9C,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;;YAC/C,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;IACjC,CAAC;IAEM,KAAK,CAAC,MAAM,CAAE,UAAuB,EAC1C,OAAc,EACd,QAA8B;QAC9B,KAAK,MAAM,SAAS,IAAI,UAAU;YAAE,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAE/E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAEjC,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAM;QAE7B,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAO,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAM;QAE5D,gDAAgD;QAChD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,WAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAEhF,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAA;QAE3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAS,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QAClF,MAAM,aAAa,GAAG,SAAS,KAAK,EAAE,CAAA;QAEtC,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;QAEpE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IACtD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAE,aAAiC;QACtD,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAE5C,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAA,aAAK,EAAC,aAAa,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,mBAAS,CAAC,MAAM,CAAC,CAAA;QAElC,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC;YAC/B,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,kCAAkC,MAAM,IAAI,CAAC,CAAA;QAE3E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAEvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAuB,cAAc,EAAE;YACrF,KAAK,EAAE,WAAW;SACnB,CAAC,CAAA;QAEF,IAAI,MAAM,YAAY,KAAK;YAAE,OAAO,IAAI,CAAA;QAExC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAEhC,IAAI,MAAM,KAAK,iBAAO,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAE,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;QAEtF,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAA;QACxB,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAEjC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,QAAkB;QACtC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAM,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAElF,OAAO,GAAG,CAAC,MAAM,CAAA;IACnB,CAAC;CACF;AAtGD,sCAsGC;AAED,MAAM,OAAO,GAAkE;IAC7E,SAAS,EAAE,qBAAS;IACpB,EAAE,EAAE,OAAE;IACN,IAAI,EAAE,WAAI;IACV,IAAI,EAAE,WAAI;IACV,MAAM,EAAE,eAAM;IACd,MAAM,EAAE,eAAM;IACd,IAAI,EAAE,WAAI;CACX,CAAA;AAED,MAAM,OAAO,GAAa,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA"}
+{"version":3,"file":"Authorization.js","sourceRoot":"","sources":["../../../source/directives/auth/Authorization.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAChC,yCAAiC;AACjC,uCAAkC;AAClC,yCAAqC;AACrC,iDAAkC;AAClC,2CAAuC;AACvC,6BAAyB;AACzB,iCAA6B;AAC7B,iCAA6B;AAC7B,qCAAiC;AACjC,qCAAiC;AACjC,iCAA6B;AAC7B,qCAAiC;AACjC,yCAAqC;AACrC,6CAAyC;AACzC,qCAAiC;AACjC,mCAAiD;AACjD,mCAA+B;AAC/B,uCAA8C;AAiB9C,MAAa,aAAa;IACR,OAAO,GAAa,CAAC,MAAM,CAAC,CAAA;IAC5B,IAAI,GAAW,MAAM,CAAA;IACrB,SAAS,GAAY,IAAI,CAAA;IAExB,OAAO,GAAG,EAAwB,CAAA;IAClC,SAAS,GAAG,EAA0B,CAAA;IAC/C,MAAM,GAAqB,IAAI,CAAA;IAC/B,IAAI,GAAqB,IAAI,CAAA;IAE9B,MAAM,CAAE,IAAY,EAAE,KAAU,EAAE,OAAgB;QACvD,qBAAM,CAAC,EAAE,CAAC,IAAI,IAAI,YAAY,EAC5B,mBAAmB,IAAI,sBAAsB,CAAC,CAAA;QAEhD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,KAAK,MAAM,IAAI,IAAI,OAAO;YACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;QAE7D,OAAO,IAAA,iBAAK,EAAC,KAAK,EAChB,WAAI,EAAE,GAAG,EAAE,CAAC,IAAI,WAAI,CAAC,KAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACtE,WAAI,EAAE,GAAG,EAAE,CAAC,IAAI,WAAI,CAAC,KAA+B,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAC7E,aAAK,EAAE,GAAG,EAAE,CAAC,IAAI,aAAK,CAAC,KAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACtE,eAAM,EAAE,GAAG,EAAE,CAAC,IAAI,eAAM,CAAC,KAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EACzD,mBAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAQ,CAAC,KAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACnE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,UAAuB,EAC7C,OAAgB,EAChB,UAAuB;QACvB,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAC/F,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAA;QAEhE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE9E,IAAI,KAAK;gBACP,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBACzB,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAA;;oBAEzC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;QAChC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAC3B,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;;YAE7B,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAA;IAC9B,CAAC;IAEM,KAAK,CAAC,MAAM,CAAE,UAAuB,EAC1C,OAAgB,EAChB,QAA8B;QAC9B,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CACnD,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAA;QAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAEjC,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAM;QAER,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAO,IAAI,CAAC,QAAQ,CAAC,OAAO;YAClD,OAAM;QAER,gDAAgD;QAChD,QAAQ,CAAC,KAAK,KAAK,MAAM,WAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACjE,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAA;QAE3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAS,SAAS,EAAE;YACxD,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE;SAClD,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,SAAS,KAAK,EAAE,CAAA;QAEtC,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;QAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;QACpD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IACnD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAE,SAAiB,EAAE,aAAiC;QACzE,IAAI,aAAa,KAAK,SAAS;YAC7B,OAAO,IAAI,CAAA;QAEb,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,IAAA,aAAK,EAAC,aAAa,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,mBAAS,CAAC,MAAM,CAAC,CAAA;QAElC,IAAI,QAAQ,KAAK,SAAS;YACxB,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,kCAAkC,MAAM,GAAG,CAAC,CAAA;QAE1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAEvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAuB,cAAc,EAAE;YACrF,KAAK,EAAE;gBACL,MAAM;gBACN,SAAS;gBACT,WAAW;aACZ;SACF,CAAC,CAAA;QAEF,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAsB,MAAsC,CAAC,IAAI,CAAA;YAE3E,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAC1B,kBAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;YAEjD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAEhC,IAAI,MAAM,KAAK,iBAAO,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAE,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;QAEtF,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAA;QACxB,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAEjC,OAAO,QAAQ,CAAA;IACjB,CAAC;IAEO,SAAS,CAAE,OAAgB;QACjC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAA;QAEjD,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,IAAI,CAAA;QAEb,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE;YAC7D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAClF,IAAA,qBAAS,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,QAAkB;QACtC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAA;QAEvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAM,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAElF,OAAO,GAAG,CAAC,MAAM,CAAA;IACnB,CAAC;CACF;AAzID,sCAyIC;AAED,MAAM,YAAY,GAAkE;IAClF,SAAS,EAAE,qBAAS;IACpB,MAAM,EAAE,eAAM;IACd,EAAE,EAAE,OAAE;IACN,IAAI,EAAE,WAAI;IACV,IAAI,EAAE,WAAI;IACV,MAAM,EAAE,eAAM;IACd,MAAM,EAAE,eAAM;IACd,MAAM,EAAE,eAAM;IACd,IAAI,EAAE,WAAI;IACV,QAAQ,EAAE,mBAAQ;IAClB,MAAM,EAAE,uBAAU;IAClB,KAAK,EAAE,aAAK;CACb,CAAA;AAED,MAAM,OAAO,GAAa,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA"}

package/transpiled/directives/auth/Delegate.d.ts

@@ -0,0 +1,9 @@
+import type { Context, Directive, Identity } from './types';
+import type { Component } from '@toa.io/core';
+export declare class Delegate implements Directive {
+    private readonly property;
+    private readonly discovery;
+    constructor(property: string, discovery: Promise<Component>);
+    authorize(identity: Identity | null, context: Context): Promise<boolean>;
+    private embed;
+}

package/transpiled/directives/auth/Delegate.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Delegate = void 0;
+const HTTP_1 = require("../../HTTP");
+const Role_1 = require("./Role");
+class Delegate {
+    property;
+    discovery;
+    constructor(property, discovery) {
+        this.property = property;
+        this.discovery = discovery;
+    }
+    async authorize(identity, context) {
+        if (identity === null)
+            return false;
+        identity.roles ??= await Role_1.Role.get(identity, this.discovery);
+        context.pipelines.body.push((body) => this.embed(body, identity));
+        return true;
+    }
+    embed(body, identity) {
+        if (body === undefined)
+            body = {};
+        check(body);
+        body[this.property] = structuredClone(identity);
+        return body;
+    }
+}
+exports.Delegate = Delegate;
+function check(body) {
+    if (typeof body !== 'object' || body === null)
+        throw new HTTP_1.BadRequest('Invalid request body');
+}
+//# sourceMappingURL=Delegate.js.map

package/transpiled/directives/auth/Delegate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Delegate.js","sourceRoot":"","sources":["../../../source/directives/auth/Delegate.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AACvC,iCAA6B;AAI7B,MAAa,QAAQ;IACF,QAAQ,CAAQ;IAChB,SAAS,CAAoB;IAE9C,YAAoB,QAAgB,EAAE,SAA6B;QACjE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,QAAyB,EAAE,OAAgB;QACjE,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAO,KAAK,CAAA;QAEd,QAAQ,CAAC,KAAK,KAAK,MAAM,WAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC3D,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;QAEjE,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAE,IAAa,EAAE,QAAkB;QAC9C,IAAI,IAAI,KAAK,SAAS;YACpB,IAAI,GAAG,EAAE,CAAA;QAEX,KAAK,CAAC,IAAI,CAAC,CAAA;QACX,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QAE/C,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA5BD,4BA4BC;AAED,SAAS,KAAK,CAAE,IAAa;IAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAC3C,MAAM,IAAI,iBAAU,CAAC,sBAAsB,CAAC,CAAA;AAChD,CAAC"}

package/transpiled/directives/auth/Echo.d.ts

@@ -1,6 +1,6 @@
-import { type OutgoingMessage } from '../../HTTP';
-import { type Directive, type Identity } from './types';
+import type { OutgoingMessage } from '../../HTTP';
+import type { Directive, Identity, Context } from './types';
 export declare class Echo implements Directive {
-    authorize(identity: Identity | null): boolean;
-    reply(identity: Identity | null): OutgoingMessage;
+    authorize(identity: Identity | null, context: Context): boolean;
+    reply(context: Context): OutgoingMessage;
 }

package/transpiled/directives/auth/Echo.js

@@ -1,12 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Echo = void 0;
+const create_1 = require("./create");
 class Echo {
-    authorize(identity) {
-        return identity !== null;
+    authorize(identity, context) {
+        if (identity === null && 'authorization' in context.request.headers)
+            return false;
+        context.identity ??= (0, create_1.create)();
+        return true;
     }
-    reply(identity) {
-        return { body: identity };
+    reply(context) {
+        const body = context.identity;
+        return body.scheme === null
+            ? { status: 201, body }
+            : { body };
     }
 }
 exports.Echo = Echo;

package/transpiled/directives/auth/Echo.js.map

@@ -1 +1 @@
-{"version":3,"file":"Echo.js","sourceRoot":"","sources":["../../../source/directives/auth/Echo.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACR,SAAS,CAAE,QAAyB;QACzC,OAAO,QAAQ,KAAK,IAAI,CAAA;IAC1B,CAAC;IAEM,KAAK,CAAE,QAAyB;QACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC3B,CAAC;CACF;AARD,oBAQC"}
+{"version":3,"file":"Echo.js","sourceRoot":"","sources":["../../../source/directives/auth/Echo.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AAIjC,MAAa,IAAI;IACR,SAAS,CAAE,QAAyB,EAAE,OAAgB;QAC3D,IAAI,QAAQ,KAAK,IAAI,IAAI,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO;YACjE,OAAO,KAAK,CAAA;QAEd,OAAO,CAAC,QAAQ,KAAK,IAAA,eAAM,GAAE,CAAA;QAE7B,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAE,OAAgB;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAS,CAAA;QAE9B,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI;YACzB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IACd,CAAC;CACF;AAjBD,oBAiBC"}