@toa.io/extensions.exposition 1.0.0-alpha.28 → 1.0.0-alpha.283

package/transpiled/directives/map/Language.d.ts

@@ -0,0 +1,10 @@
+import { Mapping } from './Mapping.js';
+import type { Input } from '../../io.js';
+import type { Parameter } from '../../RTD/index.js';
+import type { Directive } from './Directive.js';
+export declare class Language extends Mapping<string> {
+    private languages;
+    constructor(property: string);
+    properties(context: Input, parameters: Parameter[], directives: Directive[]): Record<string, string>;
+    private resolve;
+}

package/transpiled/directives/map/Language.js

@@ -0,0 +1,31 @@
+import assert from 'node:assert';
+import Negotiator from 'negotiator';
+import { cors } from '../cors/index.js';
+import { Mapping } from './Mapping.js';
+import { Languages } from './Languages.js';
+export class Language extends Mapping {
+    languages = null;
+    constructor(property) {
+        assert.ok(typeof property === 'string', '`map:language` must be a string');
+        cors.allow('accept-language');
+        super(property);
+    }
+    properties(context, parameters, directives) {
+        this.languages ??= this.resolve(directives);
+        const negotiator = new Negotiator(context.request);
+        const language = negotiator.language(this.languages) ?? this.languages[0];
+        context.pipelines.response.push((response) => {
+            response.headers ??= new Headers();
+            response.headers.set('content-language', language);
+            response.headers.append('vary', 'accept-language');
+        });
+        return { [this.value]: language };
+    }
+    resolve(directives) {
+        for (const directive of directives)
+            if (directive instanceof Languages)
+                return directive.value;
+        throw new Error('Supported languages are not defined, add `map:languages` directive');
+    }
+}
+//# sourceMappingURL=Language.js.map

package/transpiled/directives/map/Language.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Language.js","sourceRoot":"","sources":["../../../source/directives/map/Language.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,UAAU,MAAM,YAAY,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAK1C,MAAM,OAAO,QAAS,SAAQ,OAAe;IACnC,SAAS,GAAoB,IAAI,CAAA;IAEzC,YAAoB,QAAgB;QAClC,MAAM,CAAC,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,EAAE,iCAAiC,CAAC,CAAA;QAE1E,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;QAC7B,KAAK,CAAC,QAAQ,CAAC,CAAA;IACjB,CAAC;IAEM,UAAU,CAAE,OAAc,EAAE,UAAuB,EAAE,UAAuB;QACjF,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAE3C,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QAEzE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3C,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAA;YAClD,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAA;IACnC,CAAC;IAEO,OAAO,CAAE,UAAuB;QACtC,KAAK,MAAM,SAAS,IAAI,UAAU;YAChC,IAAI,SAAS,YAAY,SAAS;gBAChC,OAAO,SAAS,CAAC,KAAK,CAAA;QAE1B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IACvF,CAAC;CACF"}

package/transpiled/directives/map/Languages.d.ts

@@ -0,0 +1,4 @@
+import { Property } from './Properties.js';
+export declare class Languages extends Property<'languages'> {
+    constructor(value: string[]);
+}

package/transpiled/directives/map/Languages.js

@@ -0,0 +1,10 @@
+import assert from 'node:assert';
+import { Property } from './Properties.js';
+export class Languages extends Property {
+    constructor(value) {
+        assert.ok(Array.isArray(value) && value.length > 0, '`map:languages` must be a non-empty array of strings');
+        assert.ok(value.every((language) => typeof language === 'string'), '`map:languages` must be an array of strings');
+        super('languages', value);
+    }
+}
+//# sourceMappingURL=Languages.js.map

package/transpiled/directives/map/Languages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Languages.js","sourceRoot":"","sources":["../../../source/directives/map/Languages.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAE1C,MAAM,OAAO,SAAU,SAAQ,QAAqB;IAClD,YAAoB,KAAe;QACjC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,sDAAsD,CAAC,CAAA;QAC3G,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,EAAE,6CAA6C,CAAC,CAAA;QAEjH,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC3B,CAAC;CACF"}

package/transpiled/directives/map/Map.d.ts

@@ -0,0 +1,13 @@
+import { Property } from './Properties.js';
+import { Mapping } from './Mapping.js';
+import type { Directive } from './Directive.js';
+import type { DirectiveFamily, Parameter } from '../../RTD/index.js';
+import type { Input, Output } from '../../io.js';
+import type { Remotes } from '../../Remotes.js';
+export declare class Map implements DirectiveFamily {
+    readonly name = "map";
+    readonly mandatory = false;
+    private remotes;
+    create(name: string, value: unknown, remotes: Remotes): Property | Mapping;
+    preflight(directives: Directive[], context: Input, parameters: Parameter[]): Promise<Output>;
+}

package/transpiled/directives/map/Map.js

@@ -0,0 +1,44 @@
+import { match } from 'matchacho';
+import { properties, Property } from './Properties.js';
+import { Mapping } from './Mapping.js';
+import { Headers } from './Headers.js';
+import { Languages } from './Languages.js';
+import { Language } from './Language.js';
+import { Segments } from './Segments.js';
+import { Authority } from './Authority.js';
+import { BufferMapping } from './Buffer.js';
+import { Claims } from './Claims.js';
+export class Map {
+    name = 'map';
+    mandatory = false;
+    remotes;
+    create(name, value, remotes) {
+        this.remotes = remotes;
+        return match(name, () => properties.has(name), (name) => new Property(name, value), () => name in mappings, (name) => new mappings[name](value, remotes), () => {
+            throw new Error(`Directive 'map:${name}' is not implemented`);
+        });
+    }
+    async preflight(directives, context, parameters) {
+        const properties = {};
+        for (const directive of directives)
+            if (directive instanceof Mapping)
+                Object.assign(properties, await directive.properties(context, parameters, directives));
+        context.pipelines.body.push((body) => {
+            if (body === undefined || body === null || typeof body !== 'object')
+                return properties;
+            else
+                return Object.assign(body, properties);
+        });
+        return null;
+    }
+}
+const mappings = {
+    authority: Authority,
+    buffer: BufferMapping,
+    headers: Headers,
+    languages: Languages,
+    language: Language,
+    segments: Segments,
+    claims: Claims
+};
+//# sourceMappingURL=Map.js.map

package/transpiled/directives/map/Map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Map.js","sourceRoot":"","sources":["../../../source/directives/map/Map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAOpC,MAAM,OAAO,GAAG;IACE,IAAI,GAAG,KAAK,CAAA;IACZ,SAAS,GAAG,KAAK,CAAA;IAEzB,OAAO,CAAU;IAElB,MAAM,CAAE,IAAY,EAAE,KAAc,EAAE,OAAgB;QAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QAEtB,OAAO,KAAK,CAAC,IAAI,EACf,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAQ,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAW,CAAC,EACzE,GAAG,EAAE,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,IAA2B,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAC3F,GAAG,EAAE;YACH,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,sBAAsB,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;IACN,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,UAAuB,EAAE,OAAc,EAAE,UAAuB;QACtF,MAAM,UAAU,GAAG,EAAE,CAAA;QAErB,KAAK,MAAM,SAAS,IAAI,UAAU;YAChC,IAAI,SAAS,YAAY,OAAO;gBAC9B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;QAE1F,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAa,EAAE,EAAE;YAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBACjE,OAAO,UAAU,CAAA;;gBAEjB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAKD,MAAM,QAAQ,GAAoE;IAChF,SAAS,EAAE,SAAS;IACpB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,OAAO;IAChB,SAAS,EAAE,SAAS;IACpB,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,MAAM;CACf,CAAA"}

package/transpiled/directives/map/Mapping.d.ts

@@ -0,0 +1,13 @@
+import type { Remotes } from '../../Remotes.js';
+import type { Directive } from './Directive.js';
+import type { Input } from '../../io.js';
+import type { Parameter } from '../../RTD/index.js';
+export declare abstract class Mapping<T = unknown> {
+    protected value: T;
+    protected remotes?: Remotes;
+    protected constructor(value: T, remotes?: Remotes);
+    abstract properties(context: Input, parameters: Parameter[], directives: Directive[]): Output;
+}
+type Properties = Record<string, unknown> | null;
+type Output = Properties | Promise<Properties>;
+export {};

package/transpiled/directives/map/Mapping.js

@@ -0,0 +1,9 @@
+export class Mapping {
+    value;
+    remotes;
+    constructor(value, remotes) {
+        this.value = value;
+        this.remotes = remotes;
+    }
+}
+//# sourceMappingURL=Mapping.js.map

package/transpiled/directives/map/Mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Mapping.js","sourceRoot":"","sources":["../../../source/directives/map/Mapping.ts"],"names":[],"mappings":"AAKA,MAAM,OAAgB,OAAO;IACjB,KAAK,CAAG;IACR,OAAO,CAAU;IAE3B,YAAuB,KAAQ,EAAE,OAAiB;QAChD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CAGF"}

package/transpiled/directives/{vary → map}/Properties.d.ts

@@ -1,9 +1,9 @@
 export interface Properties {
-    languages?: string[];
+    languages: string[];
 }
 export declare class Property<K extends keyof Properties = keyof Properties> {
     readonly name: K;
     readonly value: Properties[K];
     constructor(name: K, value: Properties[K]);
 }
-export declare const properties: Properties;
+export declare const properties: Set<string>;

package/transpiled/directives/map/Properties.js

@@ -0,0 +1,10 @@
+export class Property {
+    name;
+    value;
+    constructor(name, value) {
+        this.name = name;
+        this.value = value;
+    }
+}
+export const properties = new Set('languages');
+//# sourceMappingURL=Properties.js.map

package/transpiled/directives/map/Properties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Properties.js","sourceRoot":"","sources":["../../../source/directives/map/Properties.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,QAAQ;IACH,IAAI,CAAG;IACP,KAAK,CAAe;IAEpC,YAAoB,IAAO,EAAE,KAAoB;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA"}

package/transpiled/directives/map/Segments.d.ts

@@ -0,0 +1,6 @@
+import { Mapping } from './Mapping.js';
+import type { Parameter } from '../../RTD/index.js';
+export declare class Segments extends Mapping<Record<string, string>> {
+    constructor(map: Record<string, string>);
+    properties(_: unknown, parameters: Parameter[]): Record<string, string>;
+}

package/transpiled/directives/map/Segments.js

@@ -0,0 +1,23 @@
+import assert from 'node:assert';
+import { Mapping } from './Mapping.js';
+export class Segments extends Mapping {
+    constructor(map) {
+        assert.ok(map.constructor === Object, '`map:segments` must be an object');
+        assert.ok(Object.values(map).every((value) => typeof value === 'string'), '`map:segments ` must be an object with string values');
+        super(map);
+    }
+    properties(_, parameters) {
+        return Object.entries(this.value).reduce((properties, [property, parameter]) => {
+            const cut = parameter[0] === '~';
+            if (cut)
+                parameter = parameter.slice(1);
+            const index = parameters.findIndex(({ name }) => name === parameter);
+            assert.ok(index > -1, `Route parameter '${parameter}' is missing`);
+            properties[property] = parameters[index].value;
+            if (cut)
+                parameters.splice(index, 1);
+            return properties;
+        }, {});
+    }
+}
+//# sourceMappingURL=Segments.js.map

package/transpiled/directives/map/Segments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Segments.js","sourceRoot":"","sources":["../../../source/directives/map/Segments.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,MAAM,OAAO,QAAS,SAAQ,OAA+B;IAC3D,YAAoB,GAA2B;QAC7C,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,kCAAkC,CAAC,CAAA;QAEzE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EACtE,sDAAsD,CAAC,CAAA;QAEzD,KAAK,CAAC,GAAG,CAAC,CAAA;IACZ,CAAC;IAEe,UAAU,CAAE,CAAU,EAAE,UAAuB;QAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,UAAkC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE;YACrG,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,CAAA;YAEhC,IAAI,GAAG;gBAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAEvC,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;YAEpE,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,oBAAoB,SAAS,cAAc,CAAC,CAAA;YAElE,UAAU,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAA;YAE9C,IAAI,GAAG;gBACL,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YAE7B,OAAO,UAAU,CAAA;QACnB,CAAC,EAAE,EAAE,CAAC,CAAA;IACR,CAAC;CACF"}

package/transpiled/directives/map/index.d.ts

@@ -0,0 +1,2 @@
+import { Map } from './Map.js';
+export declare const map: Map;

package/transpiled/directives/map/index.js

@@ -0,0 +1,3 @@
+import { Map } from './Map.js';
+export const map = new Map();
+//# sourceMappingURL=index.js.map

package/transpiled/directives/map/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../source/directives/map/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAE9B,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA"}

package/transpiled/directives/oauth/Discovery.d.ts

@@ -0,0 +1,23 @@
+import type * as http from '../../HTTP/index.js';
+import type { Input, Output } from '../../io.js';
+import type { Interceptor } from '../../Interception.js';
+/**
+ * What a client reads before it can authenticate: where the authorization server is, and
+ * what this resource expects. Both are fixed paths a specification names, both must be
+ * answered to anyone, and both are a function of the annotation alone — nothing is read to
+ * build them, so they are built once per authority and served as they are.
+ *
+ * An interceptor rather than a route because `auth` runs before any directive: a client
+ * re-reading discovery while holding a stale token would have it verified, and then be
+ * refused a document that has to be public.
+ */
+export declare class Discovery implements Interceptor {
+    /**
+     * A map, because the key is the request's authority and an unconfigured host is passed
+     * through as itself: `Host: constructor` names something a plain object answers on its own.
+     */
+    private readonly authorities;
+    mount(options: http.Options): void;
+    reset(): void;
+    intercept(input: Input): Output;
+}

package/transpiled/directives/oauth/Discovery.js

@@ -0,0 +1,58 @@
+import { documents } from './documents.js';
+/**
+ * What a client reads before it can authenticate: where the authorization server is, and
+ * what this resource expects. Both are fixed paths a specification names, both must be
+ * answered to anyone, and both are a function of the annotation alone — nothing is read to
+ * build them, so they are built once per authority and served as they are.
+ *
+ * An interceptor rather than a route because `auth` runs before any directive: a client
+ * re-reading discovery while holding a stale token would have it verified, and then be
+ * refused a document that has to be public.
+ */
+export class Discovery {
+    /**
+     * A map, because the key is the request's authority and an unconfigured host is passed
+     * through as itself: `Host: constructor` names something a plain object answers on its own.
+     */
+    authorities = new Map();
+    mount(options) {
+        this.authorities.clear();
+        if (options.oauth === undefined)
+            return;
+        for (const [authority, host] of Object.entries(options.authorities))
+            this.authorities.set(authority, documents(origin(host), options.oauth));
+    }
+    reset() {
+        this.authorities.clear();
+    }
+    intercept(input) {
+        const known = this.authorities.get(input.authority);
+        if (known === undefined)
+            return null;
+        // every reply, not just a document's: the challenge is what points a client here
+        input.pipelines.response.push((response) => {
+            if (response.status !== UNAUTHORIZED)
+                return;
+            response.headers ??= new Headers();
+            response.headers.set('www-authenticate', known.challenge(input.url.pathname));
+        });
+        const body = known.read(input.url.pathname);
+        if (body === undefined)
+            return null;
+        return { body, headers: new Headers({ 'cache-control': 'public, max-age=3600' }) };
+    }
+}
+/**
+ * The absolute URL an authority is reached at. Loopback is served over http and everything
+ * else over https: the gateway may sit behind a terminating proxy, so the connection does
+ * not say which, and the configured host does. Taken from the configuration rather than
+ * from the request's `host`, which is the client's to write.
+ */
+function origin(host) {
+    const name = host.split(':')[0];
+    const loopback = name === 'localhost' || name === '127.0.0.1' || name === '[::1]' ||
+        name.endsWith('.localhost');
+    return `${loopback ? 'http' : 'https'}://${host}`;
+}
+const UNAUTHORIZED = 401;
+//# sourceMappingURL=Discovery.js.map

package/transpiled/directives/oauth/Discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Discovery.js","sourceRoot":"","sources":["../../../source/directives/oauth/Discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAA;AAK1D;;;;;;;;;GASG;AACH,MAAM,OAAO,SAAS;IACpB;;;OAGG;IACc,WAAW,GAAG,IAAI,GAAG,EAAqB,CAAA;IAEpD,KAAK,CAAE,OAAqB;QACjC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;QAExB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAC7B,OAAM;QAER,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3E,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;IAC1B,CAAC;IAEM,SAAS,CAAE,KAAY;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAEnD,IAAI,KAAK,KAAK,SAAS;YACrB,OAAO,IAAI,CAAA;QAEb,iFAAiF;QACjF,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY;gBAClC,OAAM;YAER,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/E,CAAC,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAE3C,IAAI,IAAI,KAAK,SAAS;YACpB,OAAO,IAAI,CAAA;QAEb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,eAAe,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAA;IACpF,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAE,IAAY;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAE/B,MAAM,QAAQ,GAAG,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,OAAO;QAC/E,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IAE7B,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,IAAI,EAAE,CAAA;AACnD,CAAC;AAED,MAAM,YAAY,GAAG,GAAG,CAAA"}

package/transpiled/directives/oauth/documents.d.ts

@@ -0,0 +1,9 @@
+import type { OAuth } from '../../Annotation.js';
+/** The discovery documents of one authority, and the challenge that points at them. */
+export interface Documents {
+    /** The document a path names, or nothing when it names none. */
+    read: (pathname: string) => object | undefined;
+    /** `WWW-Authenticate` for a request to this path, which names the resource it failed at. */
+    challenge: (pathname: string) => string;
+}
+export declare function documents(issuer: string, oauth: OAuth): Documents;

package/transpiled/directives/oauth/documents.js

@@ -0,0 +1,82 @@
+export function documents(issuer, oauth) {
+    const server = authorizationServer(issuer, oauth);
+    const resources = protectedResources(issuer, oauth);
+    const scope = oauth.scopes === undefined ? '' : `, scope="${oauth.scopes.join(' ')}"`;
+    function read(pathname) {
+        if (pathname === AUTHORIZATION_SERVER || pathname === OPENID_CONFIGURATION)
+            return server;
+        if (pathname.startsWith(PROTECTED_RESOURCE))
+            return resources.get(pathname.slice(PROTECTED_RESOURCE.length));
+        return undefined;
+    }
+    function challenge(pathname) {
+        return `Bearer resource_metadata="${issuer}${PROTECTED_RESOURCE}${suffix(oauth, pathname)}"${scope}`;
+    }
+    return { read, challenge };
+}
+/**
+ * RFC 8414. `authorization_endpoint` is the application's own page and may be anywhere;
+ * everything else this extension serves. Both flags are load-bearing for a client that
+ * prefers Client ID Metadata Documents: without either it falls back to registration.
+ */
+function authorizationServer(issuer, oauth) {
+    const metadata = {
+        issuer,
+        authorization_endpoint: oauth.authorize,
+        token_endpoint: `${issuer}${TOKEN}`,
+        response_types_supported: ['code'],
+        grant_types_supported: ['authorization_code'],
+        code_challenge_methods_supported: ['S256'],
+        token_endpoint_auth_methods_supported: ['none'],
+        client_id_metadata_document_supported: true,
+        authorization_response_iss_parameter_supported: true
+    };
+    if (oauth.registration === 'open')
+        metadata.registration_endpoint = `${issuer}${REGISTRATION}`;
+    if (oauth.scopes !== undefined)
+        metadata.scopes_supported = oauth.scopes;
+    return metadata;
+}
+/**
+ * RFC 9728, keyed by the path the well-known segment is followed by: a client resolving
+ * `https://host/mcp` reads `/.well-known/oauth-protected-resource/mcp`, and one that names
+ * no path reads the document at the origin.
+ */
+function protectedResources(issuer, oauth) {
+    const map = new Map();
+    for (const path of oauth.resources ?? [])
+        map.set(canonical(path), resource(issuer, canonical(path), oauth));
+    map.set('', resource(issuer, '', oauth));
+    return map;
+}
+function resource(issuer, path, oauth) {
+    const metadata = {
+        resource: issuer + path,
+        authorization_servers: [issuer],
+        bearer_methods_supported: ['header']
+    };
+    if (oauth.scopes !== undefined)
+        metadata.scopes_supported = oauth.scopes;
+    return metadata;
+}
+/** The document a request to this path was refused against: the longest resource holding it. */
+function suffix(oauth, pathname) {
+    let longest = '';
+    for (const path of oauth.resources ?? [])
+        if (pathname.startsWith(path) && path.length > longest.length)
+            longest = path;
+    return canonical(longest);
+}
+/**
+ * A resource is identified without its trailing slash — the form MCP asks for — while a
+ * route is declared with one, so `/mcp/` identifies `…/mcp`.
+ */
+function canonical(path) {
+    return path.endsWith('/') ? path.slice(0, -1) : path;
+}
+const AUTHORIZATION_SERVER = '/.well-known/oauth-authorization-server';
+const PROTECTED_RESOURCE = '/.well-known/oauth-protected-resource';
+const OPENID_CONFIGURATION = '/.well-known/openid-configuration';
+const TOKEN = '/identity/grants/';
+const REGISTRATION = '/identity/clients/';
+//# sourceMappingURL=documents.js.map

package/transpiled/directives/oauth/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../../source/directives/oauth/documents.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,SAAS,CAAE,MAAc,EAAE,KAAY;IACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAErF,SAAS,IAAI,CAAE,QAAgB;QAC7B,IAAI,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,oBAAoB;YACxE,OAAO,MAAM,CAAA;QAEf,IAAI,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACzC,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAA;QAEjE,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,SAAS,SAAS,CAAE,QAAgB;QAClC,OAAO,6BAA6B,MAAM,GAAG,kBAAkB,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAA;IACtG,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAE,MAAc,EAAE,KAAY;IACxD,MAAM,QAAQ,GAA4B;QACxC,MAAM;QACN,sBAAsB,EAAE,KAAK,CAAC,SAAS;QACvC,cAAc,EAAE,GAAG,MAAM,GAAG,KAAK,EAAE;QACnC,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,qCAAqC,EAAE,CAAC,MAAM,CAAC;QAC/C,qCAAqC,EAAE,IAAI;QAC3C,8CAA8C,EAAE,IAAI;KACrD,CAAA;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM;QAC/B,QAAQ,CAAC,qBAAqB,GAAG,GAAG,MAAM,GAAG,YAAY,EAAE,CAAA;IAE7D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAC5B,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAA;IAE1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAE,MAAc,EAAE,KAAY;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;QACtC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;IAEpE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IAExC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAE,MAAc,EAAE,IAAY,EAAE,KAAY;IAC3D,MAAM,QAAQ,GAA4B;QACxC,QAAQ,EAAE,MAAM,GAAG,IAAI;QACvB,qBAAqB,EAAE,CAAC,MAAM,CAAC;QAC/B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;KACrC,CAAA;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAC5B,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAA;IAE1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,gGAAgG;AAChG,SAAS,MAAM,CAAE,KAAY,EAAE,QAAgB;IAC7C,IAAI,OAAO,GAAG,EAAE,CAAA;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;QACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3D,OAAO,GAAG,IAAI,CAAA;IAElB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAE,IAAY;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtD,CAAC;AAED,MAAM,oBAAoB,GAAG,yCAAyC,CAAA;AACtE,MAAM,kBAAkB,GAAG,uCAAuC,CAAA;AAClE,MAAM,oBAAoB,GAAG,mCAAmC,CAAA;AAChE,MAAM,KAAK,GAAG,mBAAmB,CAAA;AACjC,MAAM,YAAY,GAAG,oBAAoB,CAAA"}

package/transpiled/directives/oauth/index.d.ts

@@ -0,0 +1,2 @@
+import { Discovery } from './Discovery.js';
+export declare const discovery: Discovery;

package/transpiled/directives/oauth/index.js

@@ -0,0 +1,3 @@
+import { Discovery } from './Discovery.js';
+export const discovery = new Discovery();
+//# sourceMappingURL=index.js.map

package/transpiled/directives/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../source/directives/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAA"}

package/transpiled/directives/octets/Context.d.ts

@@ -1,5 +1,5 @@
-import { Directive } from './Directive';
-import type { Output } from '../../io';
+import { Directive } from './Directive.js';
+import type { Output } from '../../io.js';
 export declare class Context extends Directive {
     readonly targeted = false;
     readonly storage: string;

package/transpiled/directives/octets/Context.js

@@ -1,42 +1,15 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Context = void 0;
-const schemas = __importStar(require("./schemas"));
-const Directive_1 = require("./Directive");
-class Context extends Directive_1.Directive {
+import assert from 'node:assert';
+import { Directive } from './Directive.js';
+export class Context extends Directive {
     targeted = false;
     storage;
     constructor(value) {
         super();
-        schemas.context.validate(value);
+        assert.ok(typeof value === 'string', 'Directive \'octets:context\' must must be a string');
         this.storage = value;
     }
     async apply() {
         return null;
     }
 }
-exports.Context = Context;
 //# sourceMappingURL=Context.js.map

package/transpiled/directives/octets/Context.js.map

@@ -1 +1 @@
-{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../../source/directives/octets/Context.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAoC;AACpC,2CAAuC;AAGvC,MAAa,OAAQ,SAAQ,qBAAS;IACpB,QAAQ,GAAG,KAAK,CAAA;IAChB,OAAO,CAAQ;IAE/B,YAAoB,KAAc;QAChC,KAAK,EAAE,CAAA;QACP,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE/B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAdD,0BAcC"}
+{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../../source/directives/octets/Context.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAG1C,MAAM,OAAO,OAAQ,SAAQ,SAAS;IACpB,QAAQ,GAAG,KAAK,CAAA;IAChB,OAAO,CAAQ;IAE/B,YAAoB,KAAc;QAChC,KAAK,EAAE,CAAA;QAEP,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,oDAAoD,CAAC,CAAA;QAE1F,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}

package/transpiled/directives/octets/Delete.d.ts

@@ -1,10 +1,10 @@
-import { Directive } from './Directive';
-import type { Parameter } from '../../RTD';
-import type { Unit } from './workflows';
+import { Directive } from './Directive.js';
+import type { Parameter } from '../../RTD/index.js';
+import type { Unit } from './workflows/index.js';
 import type { Component } from '@toa.io/core';
-import type { Output } from '../../io';
-import type { Input } from './types';
-import type { Remotes } from '../../Remotes';
+import type { Output } from '../../io.js';
+import type { Input } from './types.js';
+import type { Remotes } from '../../Remotes.js';
 export declare class Delete extends Directive {
     readonly targeted = true;
     private readonly workflow?;

package/transpiled/directives/octets/Delete.js

@@ -1,67 +1,40 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Delete = void 0;
-const stream_1 = require("stream");
-const HTTP_1 = require("../../HTTP");
-const schemas = __importStar(require("./schemas"));
-const workflows_1 = require("./workflows");
-const Directive_1 = require("./Directive");
-class Delete extends Directive_1.Directive {
+import { Readable } from 'stream';
+import { NotFound } from '../../HTTP/index.js';
+import * as schemas from './schemas.js';
+import { Workflow } from './workflows/index.js';
+import { Directive } from './Directive.js';
+export class Delete extends Directive {
     targeted = true;
     workflow;
     discovery;
-    storage = null;
+    storage;
     constructor(options, discovery, remotes) {
         super();
         schemas.remove.validate(options);
         if (options?.workflow !== undefined)
-            this.workflow = new workflows_1.Workflow(options.workflow, remotes);
+            this.workflow = new Workflow(options.workflow, remotes);
         this.discovery = discovery;
     }
     async apply(storage, input, parameters) {
         this.storage ??= await this.discovery;
-        const entry = await this.storage.invoke('get', {
-            input: {
-                storage,
-                path: input.request.url
-            }
-        });
-        if (entry instanceof Error)
-            throw new HTTP_1.NotFound();
         const output = {};
         if (this.workflow !== undefined) {
+            const entry = await this.storage.invoke('head', {
+                input: {
+                    storage,
+                    path: input.request.url
+                }
+            });
+            if (entry instanceof Error)
+                throw new NotFound();
             output.status = 202;
-            output.body = stream_1.Readable.from(this.execute(input, storage, entry, parameters));
+            output.body = Readable.from(this.execute(input, storage, entry, parameters));
         }
         else
             await this.delete(storage, input);
         return output;
     }
     async delete(storage, input) {
-        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
         await this.storage.invoke('delete', {
             input: {
                 storage,
@@ -71,8 +44,12 @@ class Delete extends Directive_1.Directive {
     }
     // eslint-disable-next-line max-params
     async *execute(input, storage, entry, parameters) {
-        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-        for await (const chunk of this.workflow.execute(input, storage, entry, parameters)) {
+        const location = {
+            storage,
+            authority: input.authority,
+            path: input.request.url
+        };
+        for await (const chunk of this.workflow.execute(location, entry, parameters)) {
             yield chunk;
             if (typeof chunk === 'object' && chunk !== null && 'error' in chunk)
                 return;
@@ -80,5 +57,4 @@ class Delete extends Directive_1.Directive {
         await this.delete(storage, input);
     }
 }
-exports.Delete = Delete;
 //# sourceMappingURL=Delete.js.map