@toa.io/extensions.exposition 1.0.0-alpha.282 → 1.0.0-alpha.283

package/CHANGELOG.md

@@ -3,6 +3,33 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [1.0.0-alpha.283](https://github.com/toa-io/toa/compare/v1.0.0-alpha.282...v1.0.0-alpha.283) (2026-09-04)
+
+### Bug Fixes
+
+* **cli:** an assignment hands back the new state, not nothing ([91304e9](https://github.com/toa-io/toa/commit/91304e9e9a3bba5933b7421b7a0ffff0c2e47795))
+* **exposition:** declare error codes as the operations return them ([a9007c0](https://github.com/toa-io/toa/commit/a9007c0dd1b199429af50fb57441281bb19ff971))
+* **exposition:** declare the errors the built-in components return ([27200c3](https://github.com/toa-io/toa/commit/27200c348ab09068d58c52c3e83208cb29cd7290))
+* **exposition:** look up an authority by a key an object does not answer ([cea57f5](https://github.com/toa-io/toa/commit/cea57f5010530b13fd20becfc69f2b243da95544))
+* **exposition:** read the configured token lifetime in seconds ([60486c6](https://github.com/toa-io/toa/commit/60486c6c2d2ba97caa9d01ab755351c99a156806))
+* **exposition:** reject a malformed Bearer rather than failing on it ([2b1a46d](https://github.com/toa-io/toa/commit/2b1a46d5b3d2abb64703b10b1543749baeac7596))
+* **storages:** take `Maybe` from core, not from the deprecated package ([bcaeeb3](https://github.com/toa-io/toa/commit/bcaeeb3c76c89af34e94ff569a210d21b7e87f64))
+
+### Features
+
+* **cli:** a type module is declarations, so it sits beside a component's source ([ca755d9](https://github.com/toa-io/toa/commit/ca755d93d1a04b7697dd0dd12eb59e5b6e2a71d1))
+* **cli:** generate an application's types from its manifests ([195ac94](https://github.com/toa-io/toa/commit/195ac94de0d8c9de995847599511782c399768a5))
+* **cli:** the built-in components ship types generated from their manifests ([bd7db9e](https://github.com/toa-io/toa/commit/bd7db9e88e46c1060223761898932239127f389a))
+* **exposition:** grant a client what a user allowed it ([95ef0cf](https://github.com/toa-io/toa/commit/95ef0cf6bcbb43580710ff9ce3e1d9e33c0f4963))
+* **exposition:** know what an OAuth client is ([5e101c8](https://github.com/toa-io/toa/commit/5e101c865f4bb75c01e7b5c637bfcd41f84c17e4))
+* **exposition:** let an operation state the status of its reply ([427864d](https://github.com/toa-io/toa/commit/427864d88f1c33a762b4b0f33489ad17eb7fb470))
+* **exposition:** let several providers claim one authentication scheme ([514177b](https://github.com/toa-io/toa/commit/514177b546fbd9fafe35c178cb38774f3e2f862a))
+* **exposition:** read a request sent as a form ([02fac86](https://github.com/toa-io/toa/commit/02fac86af392525fa374f16f51f1b3b07365b042))
+* **exposition:** serve OAuth discovery and challenge with it ([418890c](https://github.com/toa-io/toa/commit/418890cb30eb1dd041073a75f971b5820ae40a95))
+* **exposition:** set an exact cache-control whatever the method ([22f939a](https://github.com/toa-io/toa/commit/22f939a7a855d5ae2cfebb517caec98b8ca95de0))
+* **extensions:** an extension declares what it puts on a component's context ([133bc2a](https://github.com/toa-io/toa/commit/133bc2aad1e45a2d4aa68a08a5e44ca48d3b7414))
+
+
 # [1.0.0-alpha.282](https://github.com/toa-io/toa/compare/v1.0.0-alpha.281...v1.0.0-alpha.282) (2026-09-03)
 
 ### Bug Fixes

package/components/exposition.octets/manifest.toa.yaml

@@ -27,8 +27,19 @@ operations:
       - LOCATION_LENGTH
       - LOCATION_UNAVAILABLE
       - INVALID_ID
+      # what the storage refuses with, passed on
+      - NOT_FOUND
+      - LIMIT_EXCEEDED
+      - NOT_ACCEPTABLE
+      - TYPE_MISMATCH
   get: &simple
     bindings: ~
+    # what the storage refuses with, passed on
+    errors:
+      - NOT_FOUND
+      - LIMIT_EXCEEDED
+      - NOT_ACCEPTABLE
+      - TYPE_MISMATCH
     input:
       properties:
         range:

package/components/exposition.octets/types/index.d.ts

@@ -0,0 +1,3 @@
+export * from './toa.js'
+
+// What a manifest does not state belongs here, and every run keeps it.

package/components/exposition.octets/types/toa.d.ts

@@ -0,0 +1,41 @@
+// Written by `toa types`. Every run rewrites it.
+// What a manifest does not state belongs in a file of your own.
+
+import type { RemoteError } from '@toa.io/core'
+
+export type PutInput = {
+  location?: string
+  accept?: string
+  limit?: number
+  trust?: unknown
+  storage: string
+  request: unknown
+}
+
+export type GetInput = {
+  range?: string
+  agent?: string
+  storage: string
+  path: string
+}
+
+export type HeadInput = {
+  range?: string
+  agent?: string
+  storage: string
+  path: string
+}
+
+export type DeleteInput = {
+  range?: string
+  agent?: string
+  storage: string
+  path: string
+}
+
+export interface Component {
+  put: (request: { input: PutInput, task?: boolean }) => Promise<unknown | RemoteError<"LOCATION_UNTRUSTED" | "LOCATION_LENGTH" | "LOCATION_UNAVAILABLE" | "INVALID_ID" | "NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+  get: (request: { input: GetInput, task?: boolean }) => Promise<unknown | RemoteError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+  head: (request: { input: HeadInput, task?: boolean }) => Promise<unknown | RemoteError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+  delete: (request: { input: DeleteInput, task?: boolean }) => Promise<unknown | RemoteError<"NOT_FOUND" | "LIMIT_EXCEEDED" | "NOT_ACCEPTABLE" | "TYPE_MISMATCH">>
+}

package/components/identity.bans/types/index.d.ts

@@ -0,0 +1,3 @@
+export * from './toa.js'
+
+// What a manifest does not state belongs here, and every run keeps it.

package/components/identity.bans/types/toa.d.ts

@@ -0,0 +1,34 @@
+// Written by `toa types`. Every run rewrites it.
+// What a manifest does not state belongs in a file of your own.
+
+import type { Query } from '@toa.io/core'
+import type { Readable } from 'node:stream'
+
+export interface Entity {
+  comment?: string
+  banned: boolean
+  originator: string
+  id: string
+  _version?: number
+  _created?: number
+  _updated?: number
+  _deleted?: number | null
+}
+
+export type TransitInput = {
+  comment?: string
+  banned: boolean
+  originator: {
+    id?: string
+  }
+}
+
+export interface Component {
+  transit: (request: { input: TransitInput, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
+  assign: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
+  ensure: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
+  enumerate: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity[]>
+  observe: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity | null>
+  stream: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Readable>
+  terminate: (request: { input?: null, query?: Query<Entity>, task?: boolean }) => Promise<Entity>
+}

package/components/identity.basic/manifest.toa.yaml

@@ -26,6 +26,11 @@ entity:
 operations:
   transit:
     concurrency: retry
+    output: &id
+      type: object
+      required: [id]
+      properties:
+        id: { type: string }
     input:
       properties:
         username:
@@ -34,6 +39,9 @@ operations:
           type: string
         authority:
           type: string
+        inception:
+          description: Whether the credentials are being created rather than changed
+          type: boolean
       type: object
     errors: &transit.errors
       - PRINCIPAL_LOCKED
@@ -127,8 +135,7 @@ operations:
           minLength: 1
       required:
         - username
-    output:
-      {}
+    output: { type: 'null' }
   info:
     input:
       properties:
@@ -168,9 +175,11 @@ configuration:
       rounds:
         type: integer
         default: 10
+        minimum: 1
       pepper:
         description: Hashing pepper, a secret
         type: string
+        format: secret
       principal:
         description: Basic credentials whose Identity is granted the `system` role
         type: object
@@ -195,6 +204,8 @@ configuration:
           type: string
         default:
           - ^.{8,32}$
+    # every one of them has a default, so the component reads them without checking
+    required: [rounds, username, password]
 
 exposition:
   isolated: true

package/components/identity.basic/operations/add.d.ts

@@ -1,3 +1,3 @@
-import type { AddInput, Context, IdOutput } from './types.js';
-import type { Maybe } from '@toa.io/types';
-export declare function effect(input: AddInput, context: Context): Promise<Maybe<IdOutput>>;
+import type { AddInput, Context, TransitOutput } from '../types/index.js';
+import type { Maybe } from '@toa.io/core';
+export declare function effect(input: AddInput, context: Context): Promise<Maybe<TransitOutput>>;

package/components/identity.basic/operations/authenticate.d.ts

@@ -1,5 +1,5 @@
-import { type Maybe } from '@toa.io/types';
-import { type Context } from './types.js';
+import { type Maybe } from '@toa.io/core';
+import { type Context } from '../types/index.js';
 export declare function computation(input: Input, context: Context): Promise<Maybe<Output>>;
 interface Input {
     authority: string;

package/components/identity.basic/operations/check.d.ts

@@ -1,4 +1,4 @@
-import type { Context } from './types.js';
+import type { Context } from '../types/index.js';
 export declare function computation(input: Input, context: Context): Promise<void | null | Error>;
 interface Input {
     authority: string;

package/components/identity.basic/operations/delete.d.ts

@@ -1,5 +1,5 @@
-import type { Context } from './types.js';
-export declare function effect({ authority, identity }: Input, context: Context): Promise<void | null>;
+import type { Context, Entity } from '../types/index.js';
+export declare function effect({ authority, identity }: Input, context: Context): Promise<Entity | null>;
 interface Input {
     authority: string;
     identity: string;

package/components/identity.basic/operations/incept.d.ts

@@ -1,5 +1,5 @@
-import type { Context } from './types.js';
-import type { Maybe } from '@toa.io/types';
+import type { Context } from '../types/index.js';
+import type { Maybe } from '@toa.io/core';
 export declare function effect(input: Input, context: Context): Promise<Maybe<Output>>;
 interface Input {
     authority: string;

package/components/identity.basic/operations/info.d.ts

@@ -1,4 +1,4 @@
-import type { Context, Entity } from './types.js';
+import type { Context, Entity } from '../types/index.js';
 export declare function effect({ authority, identity }: Input, context: Context): Promise<Output | null>;
 interface Input {
     authority: string;

package/components/identity.basic/operations/transit.d.ts

@@ -1,5 +1,6 @@
-import type { Maybe, Operation } from '@toa.io/types';
-import type { Context, Entity, TransitInput, IdOutput } from './types.js';
+import type { Maybe } from '@toa.io/core';
+import type { Operation } from '@toa.io/bridges.node';
+import type { Context, Entity, TransitInput, TransitOutput } from '../types/index.js';
 export declare class Transition implements Operation {
     private rounds;
     private pepper;
@@ -10,5 +11,5 @@ export declare class Transition implements Operation {
     private passwordRx;
     mount(context: Context): void;
     private locked;
-    execute(input: TransitInput, object: Entity): Promise<Maybe<IdOutput>>;
+    execute(input: TransitInput, object: Entity): Promise<Maybe<TransitOutput>>;
 }

package/components/identity.basic/operations/transit.js

@@ -32,7 +32,8 @@ export class Transition {
                 this.keys.revoke({ input: { identity: object.id } })
             ]);
         }
-        else
+        else if (input.authority !== undefined)
+            // a record that is new and names no authority is refused by the entity contract
             object.authority = input.authority;
         if (input.username !== undefined) {
             if (existent && this.locked(object))

package/components/identity.basic/operations/transit.js.map

@@ -1 +1 @@
-{"version":3,"file":"transit.js","sourceRoot":"","sources":["../source/transit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAIxC,MAAM,OAAO,UAAU;IACb,MAAM,GAAW,EAAE,CAAA;IACnB,MAAM,GAAW,EAAE,CAAA;IACnB,SAAS,CAAY;IACrB,MAAM,GAAW,SAA8B,CAAA;IAC/C,IAAI,GAAS,SAA4B,CAAA;IACzC,UAAU,GAAa,EAAE,CAAA;IACzB,UAAU,GAAa,EAAE,CAAA;IAE1B,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,CAAA;QAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA;QAExC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxD,CAAC;IAEO,MAAM,CAAE,MAAc;QAC5B,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS;YACjC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS;YAC7C,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAA;IAC/C,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAmB,EAAE,MAAc;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAA;QACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAA;QAElD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;gBAC1B,OAAO,UAAU,CAAA;YAEnB,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;aACrD,CAAC,CAAA;QACJ,CAAC;;YACC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;QAEpC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACjC,OAAO,oBAAoB,CAAA;YAE7B,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;gBAC1C,OAAO,oBAAoB,CAAA;YAE7B,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAClC,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;gBAC1C,OAAO,oBAAoB,CAAA;YAE7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;YAE1C,MAAM,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC3C,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;IAC1B,CAAC;CACF;AAED,SAAS,IAAI,CAAE,WAAqB;IAClC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,SAAS,OAAO,CAAE,KAAa,EAAE,WAAqB;IACpD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,oBAAqB,SAAQ,KAAK;IACxD,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,sCAAsC,CAAA;CAC1E,CAAC,EAAE,CAAA;AAEJ,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,oBAAqB,SAAQ,KAAK;IACxD,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,0CAA0C,CAAA;CAC9E,CAAC,EAAE,CAAA;AAEJ,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,oBAAqB,SAAQ,KAAK;IACxD,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,0CAA0C,CAAA;CAC9E,CAAC,EAAE,CAAA;AAEJ,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,WAAY,SAAQ,KAAK;IACrC,IAAI,GAAG,QAAQ,CAAA;IACN,OAAO,GAAG,iCAAiC,CAAA;CACrE,CAAC,EAAE,CAAA"}
+{"version":3,"file":"transit.js","sourceRoot":"","sources":["../source/transit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAKxC,MAAM,OAAO,UAAU;IACb,MAAM,GAAW,EAAE,CAAA;IACnB,MAAM,GAAW,EAAE,CAAA;IACnB,SAAS,CAAY;IACrB,MAAM,GAAW,SAA8B,CAAA;IAC/C,IAAI,GAAS,SAA4B,CAAA;IACzC,UAAU,GAAa,EAAE,CAAA;IACzB,UAAU,GAAa,EAAE,CAAA;IAE1B,KAAK,CAAE,OAAgB;QAC5B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAA;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QAC1D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,CAAA;QAChD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAA;QAExC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IACxD,CAAC;IAEO,MAAM,CAAE,MAAc;QAC5B,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS;YACjC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS;YAC7C,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAA;IAC/C,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,KAAmB,EAAE,MAAc;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAA;QACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAA;QAElD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;gBAC1B,OAAO,UAAU,CAAA;YAEnB,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC;aACrD,CAAC,CAAA;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YACtC,gFAAgF;YAChF,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;QAEpC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACjC,OAAO,oBAAoB,CAAA;YAE7B,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;gBAC1C,OAAO,oBAAoB,CAAA;YAE7B,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAClC,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;gBAC1C,OAAO,oBAAoB,CAAA;YAE7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAA;YAE1C,MAAM,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC3C,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;IAC1B,CAAC;CACF;AAED,SAAS,IAAI,CAAE,WAAqB;IAClC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,SAAS,OAAO,CAAE,KAAa,EAAE,WAAqB;IACpD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,oBAAqB,SAAQ,KAAK;IACxD,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,sCAAsC,CAAA;CAC1E,CAAC,EAAE,CAAA;AAEJ,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,oBAAqB,SAAQ,KAAK;IACxD,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,0CAA0C,CAAA;CAC9E,CAAC,EAAE,CAAA;AAEJ,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,oBAAqB,SAAQ,KAAK;IACxD,IAAI,GAAG,kBAAkB,CAAA;IAChB,OAAO,GAAG,0CAA0C,CAAA;CAC9E,CAAC,EAAE,CAAA;AAEJ,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,WAAY,SAAQ,KAAK;IACrC,IAAI,GAAG,QAAQ,CAAA;IACN,OAAO,GAAG,iCAAiC,CAAA;CACrE,CAAC,EAAE,CAAA"}

package/components/identity.basic/source/add.ts

@@ -1,7 +1,7 @@
-import type { AddInput, Context, IdOutput } from './types.js'
-import type { Maybe } from '@toa.io/types'
+import type { AddInput, Context, TransitOutput } from '../types/index.js'
+import type { Maybe } from '@toa.io/core'
 
-export async function effect (input: AddInput, context: Context): Promise<Maybe<IdOutput>> {
+export async function effect (input: AddInput, context: Context): Promise<Maybe<TransitOutput>> {
   return await context.local.transit({
     input: {
       authority: input.authority,

package/components/identity.basic/source/authenticate.ts

@@ -1,8 +1,8 @@
 import { compare } from 'bcryptjs'
 import { quote } from '@toa.io/generic'
-import { type Query, type Maybe } from '@toa.io/types'
+import { type Query, type Maybe } from '@toa.io/core'
 import { split } from './lib/credentials.js'
-import { type Context } from './types.js'
+import { type Context } from '../types/index.js'
 
 export async function computation (input: Input, context: Context): Promise<Maybe<Output>> {
   const pair = split(input.credentials)

package/components/identity.basic/source/check.ts

@@ -1,5 +1,5 @@
 import { quote } from '@toa.io/generic'
-import type { Context } from './types.js'
+import type { Context } from '../types/index.js'
 
 export async function computation (input: Input, context: Context): Promise<void | null | Error> {
   const username = Buffer.from(input.username, 'base64url').toString()

package/components/identity.basic/source/delete.ts

@@ -1,6 +1,6 @@
-import type { Context } from './types.js'
+import type { Context, Entity } from '../types/index.js'
 
-export async function effect ({ authority, identity }: Input, context: Context): Promise<void | null> {
+export async function effect ({ authority, identity }: Input, context: Context): Promise<Entity | null> {
   const object = await context.local.observe({ query: { id: identity } })
 
   if (object === null || object instanceof Error || object.authority !== authority)

package/components/identity.basic/source/incept.ts

@@ -1,6 +1,6 @@
 import { split } from './lib/credentials.js'
-import type { Context } from './types.js'
-import type { Maybe } from '@toa.io/types'
+import type { Context } from '../types/index.js'
+import type { Maybe } from '@toa.io/core'
 
 export async function effect (input: Input, context: Context): Promise<Maybe<Output>> {
   const pair = split(input.credentials)

package/components/identity.basic/source/info.ts

@@ -1,4 +1,4 @@
-import type { Context, Entity } from './types.js'
+import type { Context, Entity } from '../types/index.js'
 
 export async function effect ({ authority, identity }: Input, context: Context): Promise<Output | null> {
   const object = await context.local.observe({ query: { id: identity } })

package/components/identity.basic/source/transit.ts

@@ -1,6 +1,7 @@
 import { genSalt, hash } from 'bcryptjs'
-import type { Maybe, Operation } from '@toa.io/types'
-import type { Context, Entity, Principal, TransitInput, IdOutput } from './types.js'
+import type { Maybe } from '@toa.io/core'
+import type { Operation } from '@toa.io/bridges.node'
+import type { Context, Entity, Principal, TransitInput, TransitOutput } from '../types/index.js'
 
 export class Transition implements Operation {
   private rounds: number = 10
@@ -28,7 +29,7 @@ export class Transition implements Operation {
       object.username === this.principal.username
   }
 
-  public async execute (input: TransitInput, object: Entity): Promise<Maybe<IdOutput>> {
+  public async execute (input: TransitInput, object: Entity): Promise<Maybe<TransitOutput>> {
     const deleted = object._deleted !== undefined && object._deleted !== null
     const existent = object._version !== 0 && !deleted
 
@@ -40,7 +41,8 @@ export class Transition implements Operation {
         this.tokens.revoke({ query: { id: object.id } }),
         this.keys.revoke({ input: { identity: object.id } })
       ])
-    } else
+    } else if (input.authority !== undefined)
+      // a record that is new and names no authority is refused by the entity contract
       object.authority = input.authority
 
     if (input.username !== undefined) {