@toa.io/extensions.exposition 1.0.0-alpha.282 → 1.0.0-alpha.284

package/transpiled/directives/oauth/documents.d.ts

@@ -0,0 +1,9 @@
+import type { OAuth } from '../../Annotation.js';
+/** The discovery documents of one authority, and the challenge that points at them. */
+export interface Documents {
+    /** The document a path names, or nothing when it names none. */
+    read: (pathname: string) => object | undefined;
+    /** `WWW-Authenticate` for a request to this path, which names the resource it failed at. */
+    challenge: (pathname: string) => string;
+}
+export declare function documents(issuer: string, oauth: OAuth): Documents;

package/transpiled/directives/oauth/documents.js

@@ -0,0 +1,82 @@
+export function documents(issuer, oauth) {
+    const server = authorizationServer(issuer, oauth);
+    const resources = protectedResources(issuer, oauth);
+    const scope = oauth.scopes === undefined ? '' : `, scope="${oauth.scopes.join(' ')}"`;
+    function read(pathname) {
+        if (pathname === AUTHORIZATION_SERVER || pathname === OPENID_CONFIGURATION)
+            return server;
+        if (pathname.startsWith(PROTECTED_RESOURCE))
+            return resources.get(pathname.slice(PROTECTED_RESOURCE.length));
+        return undefined;
+    }
+    function challenge(pathname) {
+        return `Bearer resource_metadata="${issuer}${PROTECTED_RESOURCE}${suffix(oauth, pathname)}"${scope}`;
+    }
+    return { read, challenge };
+}
+/**
+ * RFC 8414. `authorization_endpoint` is the application's own page and may be anywhere;
+ * everything else this extension serves. Both flags are load-bearing for a client that
+ * prefers Client ID Metadata Documents: without either it falls back to registration.
+ */
+function authorizationServer(issuer, oauth) {
+    const metadata = {
+        issuer,
+        authorization_endpoint: oauth.authorize,
+        token_endpoint: `${issuer}${TOKEN}`,
+        response_types_supported: ['code'],
+        grant_types_supported: ['authorization_code'],
+        code_challenge_methods_supported: ['S256'],
+        token_endpoint_auth_methods_supported: ['none'],
+        client_id_metadata_document_supported: true,
+        authorization_response_iss_parameter_supported: true
+    };
+    if (oauth.registration === 'open')
+        metadata.registration_endpoint = `${issuer}${REGISTRATION}`;
+    if (oauth.scopes !== undefined)
+        metadata.scopes_supported = oauth.scopes;
+    return metadata;
+}
+/**
+ * RFC 9728, keyed by the path the well-known segment is followed by: a client resolving
+ * `https://host/mcp` reads `/.well-known/oauth-protected-resource/mcp`, and one that names
+ * no path reads the document at the origin.
+ */
+function protectedResources(issuer, oauth) {
+    const map = new Map();
+    for (const path of oauth.resources ?? [])
+        map.set(canonical(path), resource(issuer, canonical(path), oauth));
+    map.set('', resource(issuer, '', oauth));
+    return map;
+}
+function resource(issuer, path, oauth) {
+    const metadata = {
+        resource: issuer + path,
+        authorization_servers: [issuer],
+        bearer_methods_supported: ['header']
+    };
+    if (oauth.scopes !== undefined)
+        metadata.scopes_supported = oauth.scopes;
+    return metadata;
+}
+/** The document a request to this path was refused against: the longest resource holding it. */
+function suffix(oauth, pathname) {
+    let longest = '';
+    for (const path of oauth.resources ?? [])
+        if (pathname.startsWith(path) && path.length > longest.length)
+            longest = path;
+    return canonical(longest);
+}
+/**
+ * A resource is identified without its trailing slash — the form MCP asks for — while a
+ * route is declared with one, so `/mcp/` identifies `…/mcp`.
+ */
+function canonical(path) {
+    return path.endsWith('/') ? path.slice(0, -1) : path;
+}
+const AUTHORIZATION_SERVER = '/.well-known/oauth-authorization-server';
+const PROTECTED_RESOURCE = '/.well-known/oauth-protected-resource';
+const OPENID_CONFIGURATION = '/.well-known/openid-configuration';
+const TOKEN = '/identity/grants/';
+const REGISTRATION = '/identity/clients/';
+//# sourceMappingURL=documents.js.map

package/transpiled/directives/oauth/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../../source/directives/oauth/documents.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,SAAS,CAAE,MAAc,EAAE,KAAY;IACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAErF,SAAS,IAAI,CAAE,QAAgB;QAC7B,IAAI,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,oBAAoB;YACxE,OAAO,MAAM,CAAA;QAEf,IAAI,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACzC,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAA;QAEjE,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,SAAS,SAAS,CAAE,QAAgB;QAClC,OAAO,6BAA6B,MAAM,GAAG,kBAAkB,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAA;IACtG,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAE,MAAc,EAAE,KAAY;IACxD,MAAM,QAAQ,GAA4B;QACxC,MAAM;QACN,sBAAsB,EAAE,KAAK,CAAC,SAAS;QACvC,cAAc,EAAE,GAAG,MAAM,GAAG,KAAK,EAAE;QACnC,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,qCAAqC,EAAE,CAAC,MAAM,CAAC;QAC/C,qCAAqC,EAAE,IAAI;QAC3C,8CAA8C,EAAE,IAAI;KACrD,CAAA;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM;QAC/B,QAAQ,CAAC,qBAAqB,GAAG,GAAG,MAAM,GAAG,YAAY,EAAE,CAAA;IAE7D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAC5B,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAA;IAE1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAE,MAAc,EAAE,KAAY;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;QACtC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;IAEpE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IAExC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAE,MAAc,EAAE,IAAY,EAAE,KAAY;IAC3D,MAAM,QAAQ,GAA4B;QACxC,QAAQ,EAAE,MAAM,GAAG,IAAI;QACvB,qBAAqB,EAAE,CAAC,MAAM,CAAC;QAC/B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;KACrC,CAAA;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAC5B,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAA;IAE1C,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,gGAAgG;AAChG,SAAS,MAAM,CAAE,KAAY,EAAE,QAAgB;IAC7C,IAAI,OAAO,GAAG,EAAE,CAAA;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;QACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3D,OAAO,GAAG,IAAI,CAAA;IAElB,OAAO,SAAS,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAE,IAAY;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtD,CAAC;AAED,MAAM,oBAAoB,GAAG,yCAAyC,CAAA;AACtE,MAAM,kBAAkB,GAAG,uCAAuC,CAAA;AAClE,MAAM,oBAAoB,GAAG,mCAAmC,CAAA;AAChE,MAAM,KAAK,GAAG,mBAAmB,CAAA;AACjC,MAAM,YAAY,GAAG,oBAAoB,CAAA"}

package/transpiled/directives/oauth/index.d.ts

@@ -0,0 +1,2 @@
+import { Discovery } from './Discovery.js';
+export declare const discovery: Discovery;

package/transpiled/directives/oauth/index.js

@@ -0,0 +1,3 @@
+import { Discovery } from './Discovery.js';
+export const discovery = new Discovery();
+//# sourceMappingURL=index.js.map

package/transpiled/directives/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../source/directives/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAA"}

package/transpiled/directives/octets/Octets.d.ts

@@ -8,5 +8,5 @@ export declare class Octets implements DirectiveFamily<Directive> {
     readonly mandatory: boolean;
     private discovery;
     create(name: string, value: any, remotes: Remotes): Directive;
-    preflight(directives: Directive[], input: Input, parameters: Parameter[]): Promise<Output>;
+    precall(directives: Directive[], input: Input, parameters: Parameter[]): Promise<Output>;
 }

package/transpiled/directives/octets/Octets.js

@@ -15,7 +15,7 @@ export class Octets {
         this.discovery ??= remotes.discover('exposition', 'octets');
         return new Class(value, this.discovery, remotes);
     }
-    async preflight(directives, input, parameters) {
+    async precall(directives, input, parameters) {
         let context = null;
         let action = null;
         for (const directive of directives)

package/transpiled/directives/octets/Octets.js.map

@@ -1 +1 @@
-{"version":3,"file":"Octets.js","sourceRoot":"","sources":["../../../source/directives/octets/Octets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAC9B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAQjD,MAAM,OAAO,MAAM;IACD,IAAI,GAAW,QAAQ,CAAA;IACvB,SAAS,GAAY,KAAK,CAAA;IAElC,SAAS,GAAG,IAAqC,CAAA;IAElD,MAAM,CAAE,IAAY,EAAE,KAAU,EAAE,OAAgB;QACvD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAE9B,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,CAAA;QAElE,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QAE3D,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,UAAuB,EAAE,KAAY,EAAE,UAAuB;QACpF,IAAI,OAAO,GAAmB,IAAI,CAAA;QAClC,IAAI,MAAM,GAAqB,IAAI,CAAA;QAEnC,KAAK,MAAM,SAAS,IAAI,UAAU;YAChC,IAAI,SAAS,YAAY,OAAO;gBAC9B,OAAO,KAAK,SAAS,CAAA;iBAClB,IAAI,MAAM,KAAK,IAAI;gBACtB,MAAM,GAAG,SAAS,CAAA;;gBAElB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAEjD,IAAI,MAAM,KAAK,IAAI;YACjB,OAAO,IAAI,CAAA;QAEb,4CAA4C;QAC5C,IAAI,OAAO,KAAK,IAAI;YAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAElD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAA;QAExE,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAC9B,MAAM,IAAI,QAAQ,CAAC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QAEvF,uCAAuC;QACvC,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;IAClG,CAAC;CACF;AAED,MAAM,UAAU,GAAgC;IAC9C,OAAO,EAAE,OAAO;IAChB,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,iBAAiB;CAC5B,CAAA"}
+{"version":3,"file":"Octets.js","sourceRoot":"","sources":["../../../source/directives/octets/Octets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAC9B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAQjD,MAAM,OAAO,MAAM;IACD,IAAI,GAAW,QAAQ,CAAA;IACvB,SAAS,GAAY,KAAK,CAAA;IAElC,SAAS,GAAG,IAAqC,CAAA;IAElD,MAAM,CAAE,IAAY,EAAE,KAAU,EAAE,OAAgB;QACvD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAE9B,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,CAAA;QAElE,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QAE3D,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;IAEM,KAAK,CAAC,OAAO,CAAE,UAAuB,EAAE,KAAY,EAAE,UAAuB;QAClF,IAAI,OAAO,GAAmB,IAAI,CAAA;QAClC,IAAI,MAAM,GAAqB,IAAI,CAAA;QAEnC,KAAK,MAAM,SAAS,IAAI,UAAU;YAChC,IAAI,SAAS,YAAY,OAAO;gBAC9B,OAAO,KAAK,SAAS,CAAA;iBAClB,IAAI,MAAM,KAAK,IAAI;gBACtB,MAAM,GAAG,SAAS,CAAA;;gBAElB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAEjD,IAAI,MAAM,KAAK,IAAI;YACjB,OAAO,IAAI,CAAA;QAEb,4CAA4C;QAC5C,IAAI,OAAO,KAAK,IAAI;YAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAElD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAA;QAExE,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAC9B,MAAM,IAAI,QAAQ,CAAC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QAEvF,uCAAuC;QACvC,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;IAClG,CAAC;CACF;AAED,MAAM,UAAU,GAAgC;IAC9C,OAAO,EAAE,OAAO;IAChB,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,iBAAiB;CAC5B,CAAA"}

package/transpiled/directives/require/Directive.d.ts

@@ -1,4 +1,4 @@
 import type { Input } from '../../io.js';
 export interface Directive {
-    preflight: (context: Input) => void;
+    precall: (context: Input) => void;
 }

package/transpiled/directives/require/Headers.d.ts

@@ -3,5 +3,5 @@ import type { Directive } from './Directive.js';
 export declare class Headers implements Directive {
     private readonly headers;
     constructor(headers: string[]);
-    preflight(context: Input): void;
+    precall(context: Input): void;
 }

package/transpiled/directives/require/Headers.js

@@ -6,7 +6,7 @@ export class Headers {
             headers = [headers];
         this.headers = headers;
     }
-    preflight(context) {
+    precall(context) {
         for (const header of this.headers)
             if (context.request.headers[header] === undefined)
                 throw new BadRequest(`Header required: ${header}`);

package/transpiled/directives/require/Headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"Headers.js","sourceRoot":"","sources":["../../../source/directives/require/Headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,OAAO,OAAO;IACD,OAAO,CAAU;IAElC,YAAoB,OAAiB;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,OAAO,GAAG,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAEM,SAAS,CAAE,OAAc;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS;gBAC/C,MAAM,IAAI,UAAU,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;CACF"}
+{"version":3,"file":"Headers.js","sourceRoot":"","sources":["../../../source/directives/require/Headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,MAAM,OAAO,OAAO;IACD,OAAO,CAAU;IAElC,YAAoB,OAAiB;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACzB,OAAO,GAAG,CAAC,OAAO,CAAC,CAAA;QAErB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAEM,OAAO,CAAE,OAAc;QAC5B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS;gBAC/C,MAAM,IAAI,UAAU,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAA;IACxD,CAAC;CACF"}

package/transpiled/directives/require/Require.d.ts

@@ -5,5 +5,5 @@ export declare class Require implements DirectiveFamily {
     readonly name = "require";
     readonly mandatory = false;
     create(name: string, value: unknown): Directive;
-    preflight(instances: Directive[], context: Input): null;
+    precall(instances: Directive[], context: Input): null;
 }

package/transpiled/directives/require/Require.js

@@ -7,9 +7,9 @@ export class Require {
         assert.ok(name in directives, `Unknown directive: require:${name}`);
         return new directives[name](value);
     }
-    preflight(instances, context) {
+    precall(instances, context) {
         for (const instance of instances)
-            instance.preflight(context);
+            instance.precall(context);
         return null;
     }
 }

package/transpiled/directives/require/Require.js.map

@@ -1 +1 @@
-{"version":3,"file":"Require.js","sourceRoot":"","sources":["../../../source/directives/require/Require.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAKtC,MAAM,OAAO,OAAO;IACF,IAAI,GAAG,SAAS,CAAA;IAChB,SAAS,GAAG,KAAK,CAAA;IAE1B,MAAM,CAAE,IAAY,EAAE,KAAc;QACzC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,UAAU,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAA;QAEnE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAEM,SAAS,CAAE,SAAsB,EAAE,OAAc;QACtD,KAAK,MAAM,QAAQ,IAAI,SAAS;YAC9B,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAE7B,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,MAAM,UAAU,GAAkD;IAChE,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,OAAO;CACjB,CAAA"}
+{"version":3,"file":"Require.js","sourceRoot":"","sources":["../../../source/directives/require/Require.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAKtC,MAAM,OAAO,OAAO;IACF,IAAI,GAAG,SAAS,CAAA;IAChB,SAAS,GAAG,KAAK,CAAA;IAE1B,MAAM,CAAE,IAAY,EAAE,KAAc;QACzC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,UAAU,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAA;QAEnE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAEM,OAAO,CAAE,SAAsB,EAAE,OAAc;QACpD,KAAK,MAAM,QAAQ,IAAI,SAAS;YAC9B,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAE3B,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,MAAM,UAAU,GAAkD;IAChE,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,OAAO;CACjB,CAAA"}

package/transpiled/index.d.ts

@@ -3,3 +3,5 @@ export { deployment } from './deployment.js';
 export { components } from './Composition.js';
 export { Factory } from './Factory.js';
 export type { Remotes } from './Remotes.js';
+export type { Claims, Identity } from './userland.js';
+export type * as octets from './octets.js';

package/transpiled/schemas.d.ts

@@ -1,7 +1,9 @@
 import type { Query } from './HTTP/index.js';
 import type { Node } from './RTD/index.js';
+import type { Call } from './RPC/types.js';
 import type { Schema } from '@toa.io/schemas';
 import type { Annotation } from './Annotation.js';
 export declare const querystring: Schema<Query>;
 export declare const annotation: Schema<Annotation>;
 export declare const node: Schema<Node>;
+export declare const call: Schema<Call>;

package/transpiled/schemas.js

@@ -5,4 +5,5 @@ const namespace = schemas.namespace(path);
 export const querystring = namespace.schema('querystring');
 export const annotation = namespace.schema('annotation');
 export const node = namespace.schema('node');
+export const call = namespace.schema('call');
 //# sourceMappingURL=schemas.js.map

package/transpiled/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../source/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAA;AAM1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;AACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;AAEzC,MAAM,CAAC,MAAM,WAAW,GAAkB,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;AACzE,MAAM,CAAC,MAAM,UAAU,GAAuB,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAC5E,MAAM,CAAC,MAAM,IAAI,GAAiB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../source/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAA;AAO1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;AACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;AAEzC,MAAM,CAAC,MAAM,WAAW,GAAkB,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;AACzE,MAAM,CAAC,MAAM,UAAU,GAAuB,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAC5E,MAAM,CAAC,MAAM,IAAI,GAAiB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC1D,MAAM,CAAC,MAAM,IAAI,GAAiB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA"}

package/transpiled/userland.d.ts

@@ -0,0 +1,39 @@
+/**
+ * What Exposition puts into an operation's input, for the operation to be written against.
+ *
+ * The gateway's own types are its business; these are the application's.
+ */
+/**
+ * The identity behind the call, as `auth:delegate` embeds it:
+ *
+ * ```yaml
+ * /echo:
+ *   GET:
+ *     auth:assert: true
+ *     auth:delegate: identity
+ *     endpoint: echo
+ * ```
+ *
+ * ```javascript
+ * export async function computation ({ identity }, context) { }
+ * ```
+ */
+export interface Identity {
+    readonly id: string;
+    /** What the identity holds. Delegation resolves them, so they are always here. */
+    roles: string[];
+    permissions?: Record<string, string[]>;
+    /** How the identity was authenticated; `null` for a transient one. */
+    scheme: string | null;
+    /** Whether the credentials presented are due to be exchanged. */
+    refresh: boolean;
+    /** The token's claims, where the identity was federated. */
+    claims?: Claims;
+}
+/** A federated token's payload: what it must carry, and whatever else the issuer put there. */
+export interface Claims {
+    iss: string;
+    sub: string;
+    aud?: string | string[];
+    [claim: string]: unknown;
+}

package/transpiled/userland.js

@@ -0,0 +1,7 @@
+/**
+ * What Exposition puts into an operation's input, for the operation to be written against.
+ *
+ * The gateway's own types are its business; these are the application's.
+ */
+export {};
+//# sourceMappingURL=userland.js.map

package/transpiled/userland.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userland.js","sourceRoot":"","sources":["../source/userland.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}