@toa.io/extensions.exposition 1.0.0-alpha.28 → 1.0.0-alpha.283

package/transpiled/Tenant.js

@@ -1,28 +1,53 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Tenant = void 0;
-const core_1 = require("@toa.io/core");
-class Tenant extends core_1.Connector {
+import { setTimeout } from 'node:timers/promises';
+import { Connector } from '@toa.io/core';
+import { BRANCH_TTL } from './const.js';
+export class Tenant extends Connector {
     broadcast;
     branch;
-    constructor(broadcast, locator, node) {
+    started = 0;
+    stopped = false;
+    constructor(broadcast, branch) {
         super();
         this.broadcast = broadcast;
-        this.branch = {
-            namespace: locator.namespace,
-            component: locator.name,
-            isolated: locator.namespace === 'identity',
-            node
-        };
+        this.branch = branch;
         this.depends(broadcast);
     }
     async open() {
+        this.started = Date.now();
         await this.expose();
         await this.broadcast.receive('ping', this.expose.bind(this));
+        void this.announce();
+    }
+    /**
+     * Announcing is stopped where the teardown begins, not in `dispose`, which a connector
+     * runs after every one of its dependencies has gone. A component on its way out that
+     * announces itself once more has its routes held open by whoever is listening, and the
+     * requests that follow reach nothing.
+     */
+    async close() {
+        this.stopped = true;
+    }
+    async announce() {
+        while (!this.stopped) {
+            const delay = exposeInterval(Date.now() - this.started);
+            await setTimeout(delay, undefined, { ref: false });
+            if (this.stopped)
+                break;
+            await this.expose();
+        }
     }
     async expose() {
-        await this.broadcast.transmit('expose', this.branch);
+        // the ping subscription outlives the announcing loop, and answering one on the way out
+        // is the same announcement by another route
+        if (this.stopped)
+            return;
+        await this.broadcast.transmit('expose', { ...this.branch, timestamp: this.started });
     }
 }
-exports.Tenant = Tenant;
+function exposeInterval(uptime) {
+    return Math.round(EXPOSE_MAX - (EXPOSE_MAX - EXPOSE_MIN) * Math.exp(-uptime / EXPOSE_TAU));
+}
+const EXPOSE_MIN = 5_000;
+const EXPOSE_MAX = Math.round(BRANCH_TTL / 2.1);
+const EXPOSE_TAU = 900_000;
 //# sourceMappingURL=Tenant.js.map

package/transpiled/Tenant.js.map

@@ -1 +1 @@
-{"version":3,"file":"Tenant.js","sourceRoot":"","sources":["../source/Tenant.ts"],"names":[],"mappings":";;;AAAA,uCAAqE;AAKrE,MAAa,MAAO,SAAQ,gBAAS;IAClB,SAAS,CAAW;IACpB,MAAM,CAAQ;IAE/B,YAAoB,SAAoB,EAAE,OAAgB,EAAE,IAAc;QACxE,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAE1B,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,IAAI;YACvB,QAAQ,EAAE,OAAO,CAAC,SAAS,KAAK,UAAU;YAC1C,IAAI;SACL,CAAA;QAED,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAEe,KAAK,CAAC,IAAI;QACxB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IACtD,CAAC;CACF;AA3BD,wBA2BC"}
+{"version":3,"file":"Tenant.js","sourceRoot":"","sources":["../source/Tenant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAKvC,MAAM,OAAO,MAAO,SAAQ,SAAS;IAClB,SAAS,CAAW;IACpB,MAAM,CAA2B;IAC1C,OAAO,GAAG,CAAC,CAAA;IACX,OAAO,GAAG,KAAK,CAAA;IAEvB,YAAoB,SAAoB,EAAE,MAAiC;QACzE,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAEe,KAAK,CAAC,IAAI;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAEzB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACnB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAE5D,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAA;IACtB,CAAC;IAED;;;;;OAKG;IACgB,KAAK,CAAC,KAAK;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;IACrB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;YAEvD,MAAM,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;YAElD,IAAI,IAAI,CAAC,OAAO;gBACd,MAAK;YAEP,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACrB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,uFAAuF;QACvF,4CAA4C;QAC5C,IAAI,IAAI,CAAC,OAAO;YACd,OAAM;QAER,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IACtF,CAAC;CACF;AAED,SAAS,cAAc,CAAE,MAAc;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,GAAG,KAAK,CAAA;AACxB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAA;AAC/C,MAAM,UAAU,GAAG,OAAO,CAAA"}

package/transpiled/const.d.ts

@@ -0,0 +1,3 @@
+export declare const BRANCH_TTL = 1800000;
+/** The replicas of the gateway decide together, whatever context they serve. */
+export declare const ATOM_GROUP = "exposition";

package/transpiled/const.js

@@ -0,0 +1,4 @@
+export const BRANCH_TTL = 1_800_000;
+/** The replicas of the gateway decide together, whatever context they serve. */
+export const ATOM_GROUP = 'exposition';
+//# sourceMappingURL=const.js.map

package/transpiled/const.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"const.js","sourceRoot":"","sources":["../source/const.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAA;AAEnC,gFAAgF;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAA"}

package/transpiled/deployment.d.ts

@@ -1,3 +1,3 @@
 import { type Dependency } from '@toa.io/operations';
-import { type Annotation } from './Annotation';
+import { type Annotation } from './Annotation.js';
 export declare function deployment(_: unknown, annotation?: Annotation): Dependency;

package/transpiled/deployment.js

@@ -1,79 +1,67 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deployment = void 0;
-const node_assert_1 = __importDefault(require("node:assert"));
-const generic_1 = require("@toa.io/generic");
-const schemas = __importStar(require("./schemas"));
-const Directive_1 = require("./Directive");
-const Composition_1 = require("./Composition");
-const syntax_1 = require("./RTD/syntax");
-const Server_1 = require("./HTTP/Server");
-function deployment(_, annotation) {
-    node_assert_1.default.ok(annotation !== undefined, 'Exposition context annotation is required');
+import { readFileSync } from 'node:fs';
+import assert from 'node:assert';
+import * as schemas from './schemas.js';
+import { shortcuts } from './Directive.js';
+import { components } from './Composition.js';
+import { parse } from './RTD/syntax/index.js';
+import { DELAY, PORT, PROBE } from './HTTP/index.js';
+export function deployment(_, annotation) {
+    assert.ok(annotation !== undefined, 'Exposition context annotation is required');
     schemas.annotation.validate(annotation);
-    const labels = (0, Composition_1.components)().labels;
+    const labels = components().labels;
     const service = {
         group: 'exposition',
         name: 'gateway',
-        port: Server_1.PORT,
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        version: require('../package.json').version,
+        port: PORT,
+        version: JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version,
         variables: [],
         components: labels,
-        ingress: { hosts: [] },
+        resources: annotation.resources,
+        ingress: { path: '/', hosts: [] },
         probe: {
             path: '/.ready',
-            port: Server_1.PORT,
-            delay: Server_1.DELAY
+            port: PROBE,
+            delay: DELAY
         }
     };
     if (annotation?.['/'] !== undefined) {
-        const tree = (0, syntax_1.parse)(annotation['/'], Directive_1.shortcuts);
+        const tree = parse(annotation['/'], shortcuts);
         service.variables.push({
             name: 'TOA_EXPOSITION',
-            value: (0, generic_1.encode)(tree)
+            value: JSON.stringify(tree)
         });
     }
-    const { debug, trace, authorities } = annotation;
+    const { debug, authorities } = annotation;
     service.ingress.hosts = Object.values(authorities);
-    service.ingress.class = annotation.class;
-    service.ingress.annotations = annotation.annotations;
+    // leaving these undefined lets the context's own ingress section supply them
+    if (annotation.class !== undefined)
+        service.ingress.class = annotation.class;
+    if (annotation.annotations !== undefined)
+        service.ingress.annotations = annotation.annotations;
+    if (annotation.service?.annotations !== undefined)
+        service.annotations = annotation.service.annotations;
     const properties = { authorities };
     if (debug === true)
         properties.debug = true;
-    if (trace === true)
-        properties.trace = true;
+    if (annotation.protocol !== undefined)
+        properties.protocol = annotation.protocol;
+    if (annotation.ip !== undefined)
+        properties.ip = annotation.ip;
+    if (annotation.bouncer !== undefined)
+        properties.bouncer = annotation.bouncer;
+    if (annotation.oauth !== undefined)
+        properties.oauth = annotation.oauth;
     service.variables.push({
         name: 'TOA_EXPOSITION_PROPERTIES',
-        value: (0, generic_1.encode)(properties)
+        value: JSON.stringify(properties)
+    });
+    // The identity composition nested in this process connects before route discovery settles,
+    // so telemetry's probe — which tracks that composition — would report ready too early.
+    // The gateway answers for itself, on the same port telemetry would have used.
+    service.variables.push({
+        name: 'TOA_TELEMETRY_READY',
+        value: JSON.stringify(false)
     });
     return { services: [service] };
 }
-exports.deployment = deployment;
 //# sourceMappingURL=deployment.js.map

package/transpiled/deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../source/deployment.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAAgC;AAEhC,6CAAwC;AAExC,mDAAoC;AACpC,2CAAuC;AACvC,+CAA0C;AAC1C,yCAAoC;AACpC,0CAA2C;AAE3C,SAAgB,UAAU,CAAE,CAAU,EAAE,UAAuB;IAC7D,qBAAM,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,EAAE,2CAA2C,CAAC,CAAA;IAChF,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAEvC,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC,MAAM,CAAA;IAElC,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,aAAI;QACV,8DAA8D;QAC9D,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO;QAC3C,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACtB,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,aAAI;YACV,KAAK,EAAE,cAAK;SACb;KACF,CAAA;IAED,IAAI,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAA,cAAK,EAAC,UAAU,CAAC,GAAG,CAAC,EAAE,qBAAS,CAAC,CAAA;QAE9C,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAA,gBAAM,EAAC,IAAI,CAAC;SACpB,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,UAAU,CAAA;IAEhD,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAClD,OAAO,CAAC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IACxC,OAAO,CAAC,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAA;IAEpD,MAAM,UAAU,GAAe,EAAE,WAAW,EAAE,CAAA;IAE9C,IAAI,KAAK,KAAK,IAAI;QAChB,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;IAEzB,IAAI,KAAK,KAAK,IAAI;QAChB,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;IAEzB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;QACrB,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,IAAA,gBAAM,EAAC,UAAU,CAAC;KAC1B,CAAC,CAAA;IAEF,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAA;AAChC,CAAC;AAnDD,gCAmDC"}
+{"version":3,"file":"deployment.js","sourceRoot":"","sources":["../source/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,MAAM,MAAM,aAAa,CAAA;AAGhC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAEpD,MAAM,UAAU,UAAU,CAAE,CAAU,EAAE,UAAuB;IAC7D,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,EAAE,2CAA2C,CAAC,CAAA;IAChF,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAEvC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,MAAM,CAAA;IAElC,MAAM,OAAO,GAAY;QACvB,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO;QAC9F,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,KAAK;SACb;KACF,CAAA;IAED,IAAI,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;QAE9C,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5B,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,UAAU,CAAA;IAEzC,OAAO,CAAC,OAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAEnD,6EAA6E;IAC7E,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;QAChC,OAAO,CAAC,OAAQ,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IAE3C,IAAI,UAAU,CAAC,WAAW,KAAK,SAAS;QACtC,OAAO,CAAC,OAAQ,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAA;IAEvD,IAAI,UAAU,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS;QAC/C,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAA;IAEtD,MAAM,UAAU,GAAe,EAAE,WAAW,EAAE,CAAA;IAE9C,IAAI,KAAK,KAAK,IAAI;QAChB,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;IAEzB,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS;QACnC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAA;IAE3C,IAAI,UAAU,CAAC,EAAE,KAAK,SAAS;QAC7B,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAA;IAE/B,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS;QAClC,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IAEzC,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;QAChC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IAErC,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC;QACtB,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;KAClC,CAAC,CAAA;IAEF,2FAA2F;IAC3F,uFAAuF;IACvF,8EAA8E;IAC9E,OAAO,CAAC,SAAU,CAAC,IAAI,CAAC;QACtB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KAC7B,CAAC,CAAA;IAEF,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAA;AAChC,CAAC"}

package/transpiled/directives/auth/Anonymous.d.ts

@@ -1,6 +1,6 @@
-import { type Directive, type Input } from './types';
+import { type Directive, type Context } from './types.js';
 export declare class Anonymous implements Directive {
     private readonly allow;
     constructor(allow: boolean);
-    authorize(_: any, input: Input): boolean;
+    authorize(_: any, context: Context): boolean;
 }

package/transpiled/directives/auth/Anonymous.js

@@ -1,16 +1,12 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Anonymous = void 0;
-class Anonymous {
+export class Anonymous {
     allow;
     constructor(allow) {
         this.allow = allow;
     }
-    authorize(_, input) {
-        return 'authorization' in input.request.headers
+    authorize(_, context) {
+        return 'authorization' in context.request.headers
             ? false
             : this.allow;
     }
 }
-exports.Anonymous = Anonymous;
 //# sourceMappingURL=Anonymous.js.map

package/transpiled/directives/auth/Anonymous.js.map

@@ -1 +1 @@
-{"version":3,"file":"Anonymous.js","sourceRoot":"","sources":["../../../source/directives/auth/Anonymous.ts"],"names":[],"mappings":";;;AAEA,MAAa,SAAS;IACH,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,KAAY;QACpC,OAAO,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO;YAC7C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;IAChB,CAAC;CACF;AAZD,8BAYC"}
+{"version":3,"file":"Anonymous.js","sourceRoot":"","sources":["../../../source/directives/auth/Anonymous.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,SAAS;IACH,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,OAAgB;QACxC,OAAO,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO;YAC/C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;IAChB,CAAC;CACF"}

package/transpiled/directives/auth/Anyone.d.ts

@@ -0,0 +1,6 @@
+import { type Directive, type Context } from './types.js';
+export declare class Anyone implements Directive {
+    private readonly allow;
+    constructor(allow: boolean);
+    authorize(_: any, context: Context): boolean;
+}

package/transpiled/directives/auth/Anyone.js

@@ -0,0 +1,10 @@
+export class Anyone {
+    allow;
+    constructor(allow) {
+        this.allow = allow;
+    }
+    authorize(_, context) {
+        return context.identity !== null && this.allow;
+    }
+}
+//# sourceMappingURL=Anyone.js.map

package/transpiled/directives/auth/Anyone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Anyone.js","sourceRoot":"","sources":["../../../source/directives/auth/Anyone.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,MAAM;IACA,KAAK,CAAS;IAE/B,YAAoB,KAAc;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,SAAS,CAAE,CAAM,EAAE,OAAgB;QACxC,OAAO,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAA;IAChD,CAAC;CACF"}

package/transpiled/directives/auth/Assert.d.ts

@@ -0,0 +1,7 @@
+import type { Context, Directive, Identity } from './types.js';
+export declare class Assert implements Directive {
+    private readonly disabled;
+    constructor(enabled: boolean);
+    authorize(identity: Identity | null, context: Context): Promise<boolean>;
+    private incept;
+}

package/transpiled/directives/auth/Assert.js

@@ -0,0 +1,29 @@
+import assert from 'node:assert';
+import { newid } from '@toa.io/generic';
+import * as http from '../../HTTP/index.js';
+import { Incept } from './Incept.js';
+export class Assert {
+    disabled;
+    constructor(enabled) {
+        assert.ok(typeof enabled === 'boolean', '`auth:assert` directive value must be a boolean');
+        this.disabled = !enabled;
+    }
+    async authorize(identity, context) {
+        if (!this.disabled)
+            await this.incept(context, identity);
+        return false;
+    }
+    async incept(context, identity) {
+        if (context.request.headers.authorization === undefined)
+            throw new http.Unauthorized();
+        if (identity === null) {
+            if (!Incept.acceptable(context))
+                throw new http.Unauthorized();
+            context.identity = await Incept.incept(context, newid());
+            context.pipelines.response.push((response) => {
+                response.status = 201;
+            });
+        }
+    }
+}
+//# sourceMappingURL=Assert.js.map

package/transpiled/directives/auth/Assert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Assert.js","sourceRoot":"","sources":["../../../source/directives/auth/Assert.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGpC,MAAM,OAAO,MAAM;IACA,QAAQ,CAAS;IAElC,YAAoB,OAAgB;QAClC,MAAM,CAAC,EAAE,CAAC,OAAO,OAAO,KAAK,SAAS,EAAE,iDAAiD,CAAC,CAAA;QAE1F,IAAI,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAA;IAC1B,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,QAAyB,EAAE,OAAgB;QACjE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QAEtC,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,OAAgB,EAAE,QAAyB;QAC/D,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACrD,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;QAE/B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC7B,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;YAE/B,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;YAExD,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC3C,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;CACF"}

package/transpiled/directives/auth/Authorization.d.ts

@@ -1,19 +1,29 @@
-import * as http from '../../HTTP';
-import type { Output } from '../../io';
-import type { Remotes } from '../../Remotes';
-import type { Parameter, DirectiveFamily } from '../../RTD';
-import type { Directive, Extension, Input } from './types';
+import * as http from '../../HTTP/index.js';
+import type { Output } from '../../io.js';
+import type { Remotes } from '../../Remotes.js';
+import type { Parameter, DirectiveFamily } from '../../RTD/index.js';
+import type { Host } from '../../Factory.js';
+import type { Directive, Extension, Context } from './types.js';
 export declare class Authorization implements DirectiveFamily<Directive, Extension> {
     readonly depends: string[];
     readonly name: string;
     readonly mandatory: boolean;
-    private readonly schemes;
+    private readonly components;
     private readonly discovery;
     private tokens;
     private bans;
+    /** Failed authentications per address, reconciled with the other gateways. */
+    private meter;
+    private sync;
+    mount(host: Host, options: http.Options): void;
+    dispose(): void;
     create(name: string, value: any, remotes: Remotes): Directive;
-    preflight(directives: Directive[], input: Input, parameters: Parameter[]): Promise<Output>;
-    settle(directives: Directive[], request: Input, response: http.OutgoingMessage): Promise<void>;
+    arrange(directives: Directive[]): void;
+    preflight(directives: Directive[], context: Context, parameters: Parameter[]): Promise<Output>;
+    settle(directives: Directive[], context: Context, response: http.OutgoingMessage): Promise<void>;
     private resolve;
+    private permitted;
     private banned;
 }
+/** Whether the permissions admit the method on the path the request is routed by. */
+export declare function permits(permissions: Record<string, string[]>, method: string, pathname: string): boolean;