@toa.io/extensions.exposition 1.0.0-alpha.284 → 1.0.0-alpha.286

package/components/identity.clients/operations/lib/cimd.js

@@ -69,7 +69,8 @@ function validate(id, metadata) {
     // the document names itself, so one client's cannot claim another's identity
     if (metadata.client_id !== id)
         return ERR_UNKNOWN_CLIENT;
-    if (!Array.isArray(metadata.redirect_uris) || metadata.redirect_uris.length === 0 ||
+    if (!Array.isArray(metadata.redirect_uris) ||
+        metadata.redirect_uris.length === 0 ||
         metadata.redirect_uris.some((uri) => typeof uri !== 'string'))
         return ERR_UNKNOWN_CLIENT;
     return {
@@ -83,4 +84,4 @@ function validate(id, metadata) {
 const CACHE = 'cimd:';
 /** Held in place of a document that could not be read, so a bad id is not refetched. */
 const MISS = '';
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.clients/operations/lib/redirect.js

@@ -15,9 +15,12 @@ function loopback(registered, redirect) {
     const b = parse(redirect);
     if (a === null || b === null)
         return false;
-    return a.protocol === 'http:' && b.protocol === 'http:' &&
-        LOOPBACK.has(a.hostname) && a.hostname === b.hostname &&
-        a.pathname === b.pathname && a.search === b.search;
+    return (a.protocol === 'http:' &&
+        b.protocol === 'http:' &&
+        LOOPBACK.has(a.hostname) &&
+        a.hostname === b.hostname &&
+        a.pathname === b.pathname &&
+        a.search === b.search);
 }
 function parse(value) {
     try {
@@ -29,4 +32,4 @@ function parse(value) {
 }
 /** `localhost` resolves through the host's own configuration, which RFC 8252 §8.3 warns of. */
 const LOOPBACK = new Set(['127.0.0.1', '[::1]', 'localhost']);
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.clients/operations/register.js

@@ -47,7 +47,7 @@ export class Effect {
         return {
             client_id: id,
             // of the record, not of this request: registering again answers what it answered
-            client_id_issued_at: Math.floor((entity._created ?? Date.now()) / 1000),
+            client_id_issued_at: Math.floor((entity.CREATED ?? Date.now()) / 1000),
             client_name: entity.name,
             client_uri: entity.uri,
             logo_uri: entity.logo,
@@ -81,4 +81,4 @@ function invalid(error, description) {
 }
 const BAD_REQUEST = 400;
 const LOOPBACK = new Set(['127.0.0.1', '[::1]', 'localhost']);
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.clients/source/describe.ts

@@ -1,5 +1,5 @@
 import { ERR_UNKNOWN_CLIENT, permits, read } from './lib/index.js'
-import type { Maybe } from '@toa.io/core'
+import type { Maybe } from '@toa.io/core/types'
 import type { Operation } from '@toa.io/bridges.node'
 import type { Client, Context } from './lib/index.js'
 
@@ -15,17 +15,16 @@ import type { Client, Context } from './lib/index.js'
 export class Computation implements Operation {
   private context!: Context
 
-  public mount (context: Context): void {
+  public mount(context: Context): void {
     this.context = context
   }
 
-  public async execute (input: Input): Promise<Maybe<Output>> {
+  public async execute(input: Input): Promise<Maybe<Output>> {
     const client = input.id.startsWith(HTTPS)
       ? await read(input.id, this.context)
       : await this.registered(input)
 
-    if (client instanceof Error)
-      return client
+    if (client instanceof Error) return client
 
     return {
       ...client,
@@ -35,12 +34,11 @@ export class Computation implements Operation {
     }
   }
 
-  private async registered (input: Input): Promise<Client | Error> {
+  private async registered(input: Input): Promise<Client | Error> {
     const entity = await this.context.local.observe({ query: { id: input.id } })
 
     // credentials are scoped to an authority, and so is what may act for them
-    if (entity === null || entity.authority !== input.authority)
-      return ERR_UNKNOWN_CLIENT
+    if (entity === null || entity.authority !== input.authority) return ERR_UNKNOWN_CLIENT
 
     return {
       client_id: entity.id,

package/components/identity.clients/source/lib/Context.ts

@@ -1,4 +1,4 @@
-import type { Call, Observation, Transition } from '@toa.io/core'
+import type { Call, Observation, Transition } from '@toa.io/core/types'
 import type { Stash } from '@toa.io/extensions.stash'
 import type { Logs } from '@toa.io/extensions.telemetry'
 import type { Entity } from './Entity.js'
@@ -14,9 +14,12 @@ export interface Context {
   configuration: Configuration
 }
 
-export type Fetch = (input: string | URL | Request, init?: RequestInit) => Promise<Response>
+export type Fetch = (
+  input: string | URL | Request,
+  init?: RequestInit
+) => Promise<Response>
 
-export type TransitInput = Omit<Entity, 'id' | '_created'>
+export type TransitInput = Omit<Entity, 'id' | 'CREATED'>
 
 export interface Configuration {
   /** Origins whose Client ID Metadata Documents may be read. Empty admits nobody. */

package/components/identity.clients/source/lib/Entity.ts

@@ -7,7 +7,7 @@ export interface Entity {
   logo?: string
   scope?: string
   expires?: number
-  _created?: number
+  CREATED?: number
 }
 
 /** What a client says about itself, in the shape both mechanisms carry it. */

package/components/identity.clients/source/lib/canonical.ts

@@ -10,7 +10,7 @@ import type { Metadata } from './Entity.js'
  * client per release of whoever sends it, and the authority is in there because credentials
  * are scoped to one.
  */
-export function identify (authority: string, metadata: Metadata): string {
+export function identify(authority: string, metadata: Metadata): string {
   const canonical = JSON.stringify([
     authority,
     metadata.client_name ?? null,

package/components/identity.clients/source/lib/cimd.test.ts

@@ -16,7 +16,7 @@ let context: Context
 let fetched: string[]
 let stored: Record<string, string>
 
-function respond (body: unknown, ok = true): Response {
+function respond(body: unknown, ok = true): Response {
   return {
     ok,
     text: async () => JSON.stringify(body)
@@ -94,15 +94,17 @@ it('should refuse anything but https', async () => {
 })
 
 it('should refuse a document that names another client', async () => {
-  context.fetch = mock.fn(async () => respond({ ...document, client_id: 'https://claude.ai/other' }))
+  context.fetch = mock.fn(async () =>
+    respond({ ...document, client_id: 'https://claude.ai/other' })
+  )
 
-  assert.ok(await read(ID, context) instanceof Error)
+  assert.ok((await read(ID, context)) instanceof Error)
 })
 
 it('should refuse a document with no redirect to send a code to', async () => {
   context.fetch = mock.fn(async () => respond({ client_id: ID, redirect_uris: [] }))
 
-  assert.ok(await read(ID, context) instanceof Error)
+  assert.ok((await read(ID, context)) instanceof Error)
 })
 
 it('should remember that a document did not answer', async () => {
@@ -114,7 +116,7 @@ it('should remember that a document did not answer', async () => {
     return respond({}, false)
   })
 
-  assert.ok(await read(ID, context) instanceof Error)
-  assert.ok(await read(ID, context) instanceof Error)
+  assert.ok((await read(ID, context)) instanceof Error)
+  assert.ok((await read(ID, context)) instanceof Error)
   assert.equal(calls, 1, 'a document that failed must not be refetched per request')
 })

package/components/identity.clients/source/lib/cimd.ts

@@ -8,23 +8,26 @@ import type { Client, Metadata } from './Entity.js'
  * URL is its `client_id`. Control of the origin is what proves the identity, so nothing is
  * registered and nothing is written — the document is read and held for a while.
  */
-export async function read (id: string, context: Context): Promise<Client | Error> {
+export async function read(id: string, context: Context): Promise<Client | Error> {
   // before anything is fetched: the id is the caller's to choose, and this runs inside
   // the cluster. An origin the configuration does not name is not reached at all.
-  if (!trusted(id, context.configuration.trust))
-    return ERR_UNKNOWN_CLIENT
+  if (!trusted(id, context.configuration.trust)) return ERR_UNKNOWN_CLIENT
 
   const key = CACHE + createHash('sha256').update(id).digest('hex')
   const cached = await context.stash.get(key)
 
   if (cached !== null)
-    return cached === MISS ? ERR_UNKNOWN_CLIENT : JSON.parse(cached) as Client
+    return cached === MISS ? ERR_UNKNOWN_CLIENT : (JSON.parse(cached) as Client)
 
   const client = await fetch(id, context)
 
   // a document that does not answer is remembered too, or a bad id is fetched per request
-  await context.stash.set(key, client instanceof Error ? MISS : JSON.stringify(client),
-    'EX', context.configuration.lifetime)
+  await context.stash.set(
+    key,
+    client instanceof Error ? MISS : JSON.stringify(client),
+    'EX',
+    context.configuration.lifetime
+  )
 
   return client
 }
@@ -33,7 +36,7 @@ export async function read (id: string, context: Context): Promise<Client | Erro
  * An https URL whose origin the configuration names. Compared by origin so that a path on a
  * trusted host cannot be escaped by one that merely starts the same way.
  */
-function trusted (id: string, trust: string[]): boolean {
+function trusted(id: string, trust: string[]): boolean {
   let url: URL
 
   try {
@@ -42,8 +45,7 @@ function trusted (id: string, trust: string[]): boolean {
     return false
   }
 
-  if (url.protocol !== 'https:')
-    return false
+  if (url.protocol !== 'https:') return false
 
   return trust.some((origin) => {
     try {
@@ -54,7 +56,7 @@ function trusted (id: string, trust: string[]): boolean {
   })
 }
 
-async function fetch (id: string, context: Context): Promise<Client | Error> {
+async function fetch(id: string, context: Context): Promise<Client | Error> {
   const { size, timeout } = context.configuration
 
   try {
@@ -64,13 +66,11 @@ async function fetch (id: string, context: Context): Promise<Client | Error> {
       headers: { accept: 'application/json' }
     })
 
-    if (!response.ok)
-      return ERR_UNKNOWN_CLIENT
+    if (!response.ok) return ERR_UNKNOWN_CLIENT
 
     const text = await response.text()
 
-    if (text.length > size)
-      return ERR_UNKNOWN_CLIENT
+    if (text.length > size) return ERR_UNKNOWN_CLIENT
 
     return validate(id, JSON.parse(text) as Metadata & { client_id?: string })
   } catch (error: unknown) {
@@ -83,13 +83,18 @@ async function fetch (id: string, context: Context): Promise<Client | Error> {
   }
 }
 
-function validate (id: string, metadata: Metadata & { client_id?: string }): Client | Error {
+function validate(
+  id: string,
+  metadata: Metadata & { client_id?: string }
+): Client | Error {
   // the document names itself, so one client's cannot claim another's identity
-  if (metadata.client_id !== id)
-    return ERR_UNKNOWN_CLIENT
+  if (metadata.client_id !== id) return ERR_UNKNOWN_CLIENT
 
-  if (!Array.isArray(metadata.redirect_uris) || metadata.redirect_uris.length === 0 ||
-    metadata.redirect_uris.some((uri) => typeof uri !== 'string'))
+  if (
+    !Array.isArray(metadata.redirect_uris) ||
+    metadata.redirect_uris.length === 0 ||
+    metadata.redirect_uris.some((uri) => typeof uri !== 'string')
+  )
     return ERR_UNKNOWN_CLIENT
 
   return {

package/components/identity.clients/source/lib/redirect.test.ts

@@ -16,7 +16,10 @@ it('should refuse anything else on a registered host', () => {
 })
 
 it('should refuse a host that merely starts the same way', () => {
-  assert.equal(permits(hosted, 'https://claude.ai.evil.example/api/mcp/auth_callback'), false)
+  assert.equal(
+    permits(hosted, 'https://claude.ai.evil.example/api/mcp/auth_callback'),
+    false
+  )
 })
 
 it('should ignore the port of a loopback address', () => {
@@ -33,7 +36,10 @@ it('should not ignore the path of a loopback address', () => {
 })
 
 it('should not treat a remote address as loopback', () => {
-  assert.equal(permits(['http://example.com/callback'], 'http://example.com:8080/callback'), false)
+  assert.equal(
+    permits(['http://example.com/callback'], 'http://example.com:8080/callback'),
+    false
+  )
 })
 
 it('should not cross schemes', () => {

package/components/identity.clients/source/lib/redirect.ts

@@ -7,23 +7,27 @@
  * `http://127.0.0.1/callback` and comes back on an ephemeral port; comparing those
  * literally would refuse every one of them.
  */
-export function permits (registered: string[], redirect: string): boolean {
+export function permits(registered: string[], redirect: string): boolean {
   return registered.some((uri) => uri === redirect || loopback(uri, redirect))
 }
 
-function loopback (registered: string, redirect: string): boolean {
+function loopback(registered: string, redirect: string): boolean {
   const a = parse(registered)
   const b = parse(redirect)
 
-  if (a === null || b === null)
-    return false
+  if (a === null || b === null) return false
 
-  return a.protocol === 'http:' && b.protocol === 'http:' &&
-    LOOPBACK.has(a.hostname) && a.hostname === b.hostname &&
-    a.pathname === b.pathname && a.search === b.search
+  return (
+    a.protocol === 'http:' &&
+    b.protocol === 'http:' &&
+    LOOPBACK.has(a.hostname) &&
+    a.hostname === b.hostname &&
+    a.pathname === b.pathname &&
+    a.search === b.search
+  )
 }
 
-function parse (value: string): URL | null {
+function parse(value: string): URL | null {
   try {
     return new URL(value)
   } catch {

package/components/identity.clients/source/register.ts

@@ -1,5 +1,5 @@
 import { identify } from './lib/index.js'
-import type { Maybe } from '@toa.io/core'
+import type { Maybe } from '@toa.io/core/types'
 import type { Operation } from '@toa.io/bridges.node'
 import type { Context, Metadata } from './lib/index.js'
 
@@ -16,24 +16,27 @@ export class Effect implements Operation {
   private transit!: Context['local']['transit']
   private ttl!: number
 
-  public mount (context: Context): void {
+  public mount(context: Context): void {
     this.transit = context.local.transit
     this.ttl = context.configuration.ttl
   }
 
-  public async execute (input: Input): Promise<Maybe<Output>> {
+  public async execute(input: Input): Promise<Maybe<Output>> {
     const { authority } = input
 
-    if (input.token_endpoint_auth_method !== undefined &&
-      input.token_endpoint_auth_method !== 'none')
-      return invalid('invalid_client_metadata',
-        'Only public clients are supported: token_endpoint_auth_method must be `none`')
+    if (
+      input.token_endpoint_auth_method !== undefined &&
+      input.token_endpoint_auth_method !== 'none'
+    )
+      return invalid(
+        'invalid_client_metadata',
+        'Only public clients are supported: token_endpoint_auth_method must be `none`'
+      )
 
     const uris = input.redirect_uris.map(normalize)
 
     for (const uri of uris)
-      if (uri instanceof Error)
-        return invalid('invalid_redirect_uri', uri.message)
+      if (uri instanceof Error) return invalid('invalid_redirect_uri', uri.message)
 
     const metadata: Metadata = {
       client_name: input.client_name,
@@ -61,7 +64,7 @@ export class Effect implements Operation {
     return {
       client_id: id,
       // of the record, not of this request: registering again answers what it answered
-      client_id_issued_at: Math.floor((entity._created ?? Date.now()) / 1000),
+      client_id_issued_at: Math.floor((entity.CREATED ?? Date.now()) / 1000),
       client_name: entity.name,
       client_uri: entity.uri,
       logo_uri: entity.logo,
@@ -74,7 +77,7 @@ export class Effect implements Operation {
 }
 
 /** Absolute, no fragment, and either https or a loopback address (RFC 8252 §7.3). */
-function normalize (value: string): string | Error {
+function normalize(value: string): string | Error {
   let url: URL
 
   try {
@@ -83,20 +86,17 @@ function normalize (value: string): string | Error {
     return new Error(`\`${value}\` is not an absolute URI`)
   }
 
-  if (url.hash !== '')
-    return new Error(`\`${value}\` carries a fragment`)
+  if (url.hash !== '') return new Error(`\`${value}\` carries a fragment`)
 
-  if (url.protocol === 'https:')
-    return url.href
+  if (url.protocol === 'https:') return url.href
 
-  if (url.protocol === 'http:' && LOOPBACK.has(url.hostname))
-    return url.href
+  if (url.protocol === 'http:' && LOOPBACK.has(url.hostname)) return url.href
 
   return new Error(`\`${value}\` is neither https nor a loopback address`)
 }
 
 /** RFC 7591 §3.2.2: a registration error is a body, and `map:status` makes it the status. */
-function invalid (error: string, description: string): Output {
+function invalid(error: string, description: string): Output {
   return { status: BAD_REQUEST, error, error_description: description }
 }