@toa.io/extensions.exposition 1.0.0-alpha.286 → 1.0.0-alpha.288

package/transpiled/directives/auth/Federation.js

@@ -5,6 +5,14 @@ export class Federation {
         this.matchers = Object.entries(options).map(([key, value]) => [key, toMatcher(value)]);
         assert.ok(this.matchers.length > 0, '`auth:claims` requires at least one property defined');
     }
+    /** Which claims it takes needs the request; that it takes an identity does not. */
+    admits(identity) {
+        return identity === null ? false : undefined;
+    }
+    /** Which claims is the application's business; that it takes an identity is the caller's. */
+    describe(introspection) {
+        return { ...introspection, authenticated: true };
+    }
     authorize(identity, context, parameters) {
         if (identity === null || !('claims' in identity))
             return false;

package/transpiled/directives/auth/Federation.js.map

@@ -1 +1 @@
-{"version":3,"file":"Federation.js","sourceRoot":"","sources":["../../../source/directives/auth/Federation.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAIhC,MAAM,OAAO,UAAU;IACJ,QAAQ,CAAgC;IAEzD,YAAmB,OAAgB;QACjC,IAAI,CAAC,QAAQ,GAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAmC,CAAC,GAAG,CAC5E,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAC1C,CAAA;QAED,MAAM,CAAC,EAAE,CACP,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EACxB,sDAAsD,CACvD,CAAA;IACH,CAAC;IAEM,SAAS,CACd,QAAyB,EACzB,OAAgB,EAChB,UAAuB;QAEvB,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAA;QAE9D,MAAM,MAAM,GAAI,QAA8B,CAAC,MAAM,CAAA;QAErD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAA;QAE5D,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAA;QAE9C,IAAI,GAAG,KAAK,WAAW;YAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAEhF,IAAI,GAAG,KAAK,QAAQ;YAClB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACxB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACzB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAC7C,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YAC9B,CAAC,CAAA;QAEH,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,UAAU,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAEhC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,CAC9B,UAAU,CAAC,IAAI,CACb,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAC1E,CAAA;IACL,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,OAAO,CAAC,KAAwB,EAAE,SAAiB;IAC1D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAA;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAgB;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE5D,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAA;AAC/D,CAAC"}
+{"version":3,"file":"Federation.js","sourceRoot":"","sources":["../../../source/directives/auth/Federation.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAKhC,MAAM,OAAO,UAAU;IACJ,QAAQ,CAAgC;IAEzD,YAAmB,OAAgB;QACjC,IAAI,CAAC,QAAQ,GAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAmC,CAAC,GAAG,CAC5E,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAC1C,CAAA;QAED,MAAM,CAAC,EAAE,CACP,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EACxB,sDAAsD,CACvD,CAAA;IACH,CAAC;IAED,mFAAmF;IAC5E,MAAM,CAAC,QAAyB;QACrC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9C,CAAC;IAED,6FAA6F;IACtF,QAAQ,CAAC,aAA4B;QAC1C,OAAO,EAAE,GAAG,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IAClD,CAAC;IAEM,SAAS,CACd,QAAyB,EACzB,OAAgB,EAChB,UAAuB;QAEvB,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAA;QAE9D,MAAM,MAAM,GAAI,QAA8B,CAAC,MAAM,CAAA;QAErD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC;gBAAE,OAAO,KAAK,CAAA;QAE5D,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,SAAS,SAAS,CAAC,UAAkB;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAgB,CAAA;QAE9C,IAAI,GAAG,KAAK,WAAW;YAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAEhF,IAAI,GAAG,KAAK,QAAQ;YAClB,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACxB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBACzB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAC7C,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YAC9B,CAAC,CAAA;QAEH,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,UAAU,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAEhC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,CAC9B,UAAU,CAAC,IAAI,CACb,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAC1E,CAAA;IACL,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,OAAO,CAAC,KAAwB,EAAE,SAAiB;IAC1D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAA;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAgB;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE5D,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAA;AAC/D,CAAC"}

package/transpiled/directives/auth/Id.d.ts

@@ -1,7 +1,16 @@
 import { type Parameter } from '../../RTD/index.js';
 import { type Directive, type Identity } from './types.js';
+import type { Introspection } from '../../Introspection.js';
 export declare class Id implements Directive {
     private readonly parameter;
     constructor(parameter: string);
+    /**
+     * Whether it is *this* identity's cannot be told from a description, which has no route
+     * variable to read — but that there must be an identity at all can, and a caller with
+     * none is refused whatever the value would have been.
+     */
+    admits(identity: Identity | null): boolean | undefined;
+    /** Reaching it is being the identity it is about, which is what `private` says. */
+    describe(introspection: Introspection): Introspection;
     authorize(identity: Identity | null, _: unknown, parameters: Parameter[]): boolean;
 }

package/transpiled/directives/auth/Id.js

@@ -3,6 +3,18 @@ export class Id {
     constructor(parameter) {
         this.parameter = parameter;
     }
+    /**
+     * Whether it is *this* identity's cannot be told from a description, which has no route
+     * variable to read — but that there must be an identity at all can, and a caller with
+     * none is refused whatever the value would have been.
+     */
+    admits(identity) {
+        return identity === null ? false : undefined;
+    }
+    /** Reaching it is being the identity it is about, which is what `private` says. */
+    describe(introspection) {
+        return { ...introspection, private: true };
+    }
     authorize(identity, _, parameters) {
         if (identity === null)
             return false;

package/transpiled/directives/auth/Id.js.map

@@ -1 +1 @@
-{"version":3,"file":"Id.js","sourceRoot":"","sources":["../../../source/directives/auth/Id.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,EAAE;IACI,SAAS,CAAQ;IAElC,YAAmB,SAAiB;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,SAAS,CACd,QAAyB,EACzB,CAAU,EACV,UAAuB;QAEvB,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAEnC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,CAAA;QAEnF,OAAO,SAAS,EAAE,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAA;IACzC,CAAC;CACF"}
+{"version":3,"file":"Id.js","sourceRoot":"","sources":["../../../source/directives/auth/Id.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,EAAE;IACI,SAAS,CAAQ;IAElC,YAAmB,SAAiB;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,QAAyB;QACrC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9C,CAAC;IAED,mFAAmF;IAC5E,QAAQ,CAAC,aAA4B;QAC1C,OAAO,EAAE,GAAG,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5C,CAAC;IAEM,SAAS,CACd,QAAyB,EACzB,CAAU,EACV,UAAuB;QAEvB,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAEnC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,CAAA;QAEnF,OAAO,SAAS,EAAE,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAA;IACzC,CAAC;CACF"}

package/transpiled/directives/auth/Input.d.ts

@@ -4,6 +4,8 @@ export declare class Input implements Directive {
     priority: number;
     private readonly statements;
     constructor(declarations: Declaration[], create: Create);
+    /** It admits nobody: it says what a body may carry, not who may send one. */
+    admits(): boolean;
     authorize(identity: Identity | null, context: Context, parameters: Parameter[]): Promise<boolean>;
     private check;
 }

package/transpiled/directives/auth/Input.js

@@ -5,6 +5,10 @@ export class Input {
     constructor(declarations, create) {
         this.statements = declarations.map((declaration) => new Statement(declaration, create));
     }
+    /** It admits nobody: it says what a body may carry, not who may send one. */
+    admits() {
+        return false;
+    }
     async authorize(identity, context, parameters) {
         context.pipelines.body.push(async (body) => this.check(identity, context, parameters, body));
         return false;

package/transpiled/directives/auth/Input.js.map

@@ -1 +1 @@
-{"version":3,"file":"Input.js","sourceRoot":"","sources":["../../../source/directives/auth/Input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAI/C,MAAM,OAAO,KAAK;IACT,QAAQ,GAAG,CAAC,CAAA;IACF,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAmB,YAA2B,EAAE,MAAc;QAC5D,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,CAChC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CACpD,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAyB,EACzB,OAAgB,EAChB,UAAuB;QAEvB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAChD,CAAA;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED,sCAAsC;IAC9B,KAAK,CAAC,KAAK,CACjB,QAAyB,EACzB,OAAgB,EAChB,UAAuB,EACvB,IAAa;QAEb,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QAEnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CACtC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAY,CAAC,CAC7D,CACF,CAAA;QAED,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAA;QAEnF,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,MAAM,SAAS;IACI,UAAU,CAAU;IACpB,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAmB,EAAE,IAAI,EAAE,GAAG,UAAU,EAAe,EAAE,MAAc;QACrE,IAAI,CAAC,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAE1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAED,sCAAsC;IAC/B,KAAK,CAAC,KAAK,CAChB,QAAyB,EACzB,OAAgB,EAChB,UAAuB,EACvB,IAAU;QAEV,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAA;QAElE,IAAI,CAAC,KAAK;YAAE,OAAM;QAElB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE3E,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"Input.js","sourceRoot":"","sources":["../../../source/directives/auth/Input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAI/C,MAAM,OAAO,KAAK;IACT,QAAQ,GAAG,CAAC,CAAA;IACF,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAmB,YAA2B,EAAE,MAAc;QAC5D,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,CAChC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CACpD,CAAA;IACH,CAAC;IAED,6EAA6E;IACtE,MAAM;QACX,OAAO,KAAK,CAAA;IACd,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAyB,EACzB,OAAgB,EAChB,UAAuB;QAEvB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAChD,CAAA;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAED,sCAAsC;IAC9B,KAAK,CAAC,KAAK,CACjB,QAAyB,EACzB,OAAgB,EAChB,UAAuB,EACvB,IAAa;QAEb,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QAEnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CACtC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAY,CAAC,CAC7D,CACF,CAAA;QAED,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAA;QAEnF,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,MAAM,SAAS;IACI,UAAU,CAAU;IACpB,UAAU,GAAgB,EAAE,CAAA;IAE7C,YAAmB,EAAE,IAAI,EAAE,GAAG,UAAU,EAAe,EAAE,MAAc;QACrE,IAAI,CAAC,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAE1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAErC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;IACH,CAAC;IAED,sCAAsC;IAC/B,KAAK,CAAC,KAAK,CAChB,QAAyB,EACzB,OAAgB,EAChB,UAAuB,EACvB,IAAU;QAEV,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAA;QAElE,IAAI,CAAC,KAAK;YAAE,OAAM;QAElB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE3E,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;CACF"}

package/transpiled/directives/auth/Role.d.ts

@@ -1,6 +1,7 @@
 import { type Component } from '@toa.io/core';
 import { type Directive, type Identity } from './types.js';
 import type { Parameter } from '../../RTD/index.js';
+import type { Introspection } from '../../Introspection.js';
 export declare class Role implements Directive {
     static remote: Component | null;
     private readonly roles;
@@ -8,6 +9,12 @@ export declare class Role implements Directive {
     private readonly dynamic;
     constructor(roles: string | string[], discovery: Promise<Component>);
     static get(identity: Identity, discovery: Promise<Component>): Promise<string[]>;
+    /**
+     * Reaching it takes a role, which is what `protected` says. A role of the `system` scope
+     * says so besides: what it guards is the machinery an application runs on rather than
+     * anything it serves, and a reader has no business being offered it as one.
+     */
+    describe(introspection: Introspection): Introspection;
     authorize(identity: Identity | null, _: unknown, parameters: Parameter[]): Promise<boolean>;
     /** A role naming a route variable cannot be told from a description, which has no values. */
     admits(identity: Identity | null): Promise<boolean | undefined>;

package/transpiled/directives/auth/Role.js

@@ -18,6 +18,15 @@ export class Role {
         };
         return await this.remote.invoke('list', { query });
     }
+    /**
+     * Reaching it takes a role, which is what `protected` says. A role of the `system` scope
+     * says so besides: what it guards is the machinery an application runs on rather than
+     * anything it serves, and a reader has no business being offered it as one.
+     */
+    describe(introspection) {
+        const system = this.roles.some((role) => role === SYSTEM || role.startsWith(SYSTEM + ':'));
+        return { ...introspection, protected: true, ...(system ? { system: true } : {}) };
+    }
     async authorize(identity, _, parameters) {
         if (identity === null)
             return false;
@@ -50,4 +59,6 @@ export class Role {
         }));
     }
 }
+/** The scope of what an application runs on, as opposed to what it serves. */
+const SYSTEM = 'system';
 //# sourceMappingURL=Role.js.map

package/transpiled/directives/auth/Role.js.map

@@ -1 +1 @@
-{"version":3,"file":"Role.js","sourceRoot":"","sources":["../../../source/directives/auth/Role.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAMvC,MAAM,OAAO,IAAI;IACR,MAAM,CAAC,MAAM,GAAqB,IAAI,CAAA;IAC5B,KAAK,CAAU;IACf,SAAS,CAAoB;IAC7B,OAAO,CAAS;IAEjC,YAAmB,KAAwB,EAAE,SAA6B;QACxE,IAAI,CAAC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,GAAG,CACrB,QAAkB,EAClB,SAA6B;QAE7B,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAA;QAE/B,MAAM,KAAK,GAAU;YACnB,QAAQ,EAAE,aAAa,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YAC3C,KAAK,EAAE,IAAI;SACZ,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACpD,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAyB,EACzB,CAAU,EACV,UAAuB;QAEvB,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAEnC,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAE3D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC/C,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,MAAM,CAAC,QAAyB;QAC3C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAElC,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAEnC,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAE3D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACvC,CAAC;IAEO,KAAK,CAAC,KAAe,EAAE,UAAuB;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAExE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CACtB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CACnE,CAAA;YAED,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAA;QACrB,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,UAAU,CAAC,UAAuB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7B,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,CAAA;YAE3E,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,SAAS,IAAI,eAAe,GAAG,mBAAmB,CAAC,CAAA;YAElF,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CACH,CAAA;IACH,CAAC"}
+{"version":3,"file":"Role.js","sourceRoot":"","sources":["../../../source/directives/auth/Role.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAOvC,MAAM,OAAO,IAAI;IACR,MAAM,CAAC,MAAM,GAAqB,IAAI,CAAA;IAC5B,KAAK,CAAU;IACf,SAAS,CAAoB;IAC7B,OAAO,CAAS;IAEjC,YAAmB,KAAwB,EAAE,SAA6B;QACxE,IAAI,CAAC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,GAAG,CACrB,QAAkB,EAClB,SAA6B;QAE7B,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAA;QAE/B,MAAM,KAAK,GAAU;YACnB,QAAQ,EAAE,aAAa,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YAC3C,KAAK,EAAE,IAAI;SACZ,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACpD,CAAC;IAED;;;;OAIG;IACI,QAAQ,CAAC,aAA4B;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAC3D,CAAA;QAED,OAAO,EAAE,GAAG,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IACnF,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAyB,EACzB,CAAU,EACV,UAAuB;QAEvB,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAEnC,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAE3D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC/C,CAAC;IAED,6FAA6F;IACtF,KAAK,CAAC,MAAM,CAAC,QAAyB;QAC3C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAElC,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAEnC,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAE3D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACvC,CAAC;IAEO,KAAK,CAAC,KAAe,EAAE,UAAuB;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAExE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CACtB,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CACnE,CAAA;YAED,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAA;QACrB,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,UAAU,CAAC,UAAuB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7B,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,CAAA;YAE3E,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,SAAS,IAAI,eAAe,GAAG,mBAAmB,CAAC,CAAA;YAElF,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CACH,CAAA;IACH,CAAC;;AAGH,8EAA8E;AAC9E,MAAM,MAAM,GAAG,QAAQ,CAAA"}

package/transpiled/directives/cors/CORS.js

@@ -10,7 +10,7 @@ export class CORS {
     name = 'cors';
     requestHeaders = new Set(REQUEST_HEADERS);
     headers = new Headers({
-        'access-control-allow-methods': 'GET, POST, PUT, PATCH, DELETE, LOCK, UNLOCK',
+        'access-control-allow-methods': 'GET, POST, PUT, PATCH, DELETE, LOCK, UNLOCK, OPTIONS',
         'access-control-allow-credentials': 'true',
         'access-control-allow-headers': this.allowedHeaders(),
         'access-control-max-age': '3600',
@@ -19,7 +19,14 @@ export class CORS {
     });
     intercept(input) {
         const origin = input.request.headers.origin;
-        if (origin !== undefined && input.request.method === 'OPTIONS')
+        const requested = input.request.headers['access-control-request-method'];
+        /*
+         * A preflight is `OPTIONS` carrying `Access-Control-Request-Method`, and only that. A
+         * browser puts `Origin` on every request whose method is not `GET` or `HEAD` — its own
+         * `OPTIONS` included, same-origin or not — so answering that one here would put
+         * introspection out of reach of any page.
+         */
+        if (origin !== undefined && requested !== undefined && input.request.method === 'OPTIONS')
             return this.preflightResponse(origin);
         input.pipelines.response.push((output) => {
             output.headers ??= new Headers();

package/transpiled/directives/cors/CORS.js.map

@@ -1 +1 @@
-{"version":3,"file":"CORS.js","sourceRoot":"","sources":["../../../source/directives/cors/CORS.ts"],"names":[],"mappings":"AAGA,0DAA0D;AAC1D,MAAM,eAAe,GAAG;IACtB,QAAQ;IACR,eAAe;IACf,cAAc;IACd,UAAU;IACV,eAAe;CAChB,CAAA;AAED,MAAM,OAAO,IAAI;IACC,IAAI,GAAG,MAAM,CAAA;IAErB,cAAc,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,CAAA;IAExC,OAAO,GAAG,IAAI,OAAO,CAAC;QACrC,8BAA8B,EAAE,6CAA6C;QAC7E,kCAAkC,EAAE,MAAM;QAC1C,8BAA8B,EAAE,IAAI,CAAC,cAAc,EAAE;QACrD,wBAAwB,EAAE,MAAM;QAChC,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEK,SAAS,CAAC,KAAY;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE3C,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5D,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAEvC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAEhC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;gBAC9D,MAAM,CAAC,OAAO,CAAC,GAAG,CAChB,+BAA+B,EAC/B,wEAAwE,CACzE,CAAA;YACH,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;YAEnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;gBAC/D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAA;QAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IACzE,CAAC;IAEM,KAAK,CAAC,MAAc;QACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IACzE,CAAC;IAED;;;;OAIG;IACK,cAAc;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1D,CAAC;IAEO,iBAAiB,CAAC,MAAc;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QAEvD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF"}
+{"version":3,"file":"CORS.js","sourceRoot":"","sources":["../../../source/directives/cors/CORS.ts"],"names":[],"mappings":"AAGA,0DAA0D;AAC1D,MAAM,eAAe,GAAG;IACtB,QAAQ;IACR,eAAe;IACf,cAAc;IACd,UAAU;IACV,eAAe;CAChB,CAAA;AAED,MAAM,OAAO,IAAI;IACC,IAAI,GAAG,MAAM,CAAA;IAErB,cAAc,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,CAAA;IAExC,OAAO,GAAG,IAAI,OAAO,CAAC;QACrC,8BAA8B,EAAE,sDAAsD;QACtF,kCAAkC,EAAE,MAAM;QAC1C,8BAA8B,EAAE,IAAI,CAAC,cAAc,EAAE;QACrD,wBAAwB,EAAE,MAAM;QAChC,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEK,SAAS,CAAC,KAAY;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAA;QAExE;;;;;WAKG;QACH,IAAI,MAAM,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACvF,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAEvC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAEhC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;gBAC9D,MAAM,CAAC,OAAO,CAAC,GAAG,CAChB,+BAA+B,EAC/B,wEAAwE,CACzE,CAAA;YACH,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;YAEnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;gBAC/D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAA;QAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IACzE,CAAC;IAEM,KAAK,CAAC,MAAc;QACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IACzE,CAAC;IAED;;;;OAIG;IACK,cAAc;QACpB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1D,CAAC;IAEO,iBAAiB,CAAC,MAAc;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QAEvD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF"}

package/transpiled/directives/help/Family.d.ts

@@ -0,0 +1,28 @@
+import { Help } from './Help.js';
+import { Parameters } from './Parameters.js';
+import type { Introspection } from '../../Introspection.js';
+import type { Described } from './described.js';
+import type { Context } from '../../HTTP/index.js';
+import type { DirectiveFamily } from '../../RTD/index.js';
+/** The name the family is declared under, and what a consumer of one asks a method for. */
+export declare const FAMILY = "help";
+export type Directive = Help | Parameters;
+export declare class Family implements DirectiveFamily<Directive> {
+    readonly name = "help";
+    readonly mandatory = false;
+    /**
+     * What a node says of itself is not said of what is under it: inherited, `help:node`
+     * would describe every resource below as the one it was written for. The rest go with
+     * it — a sentence about one method is not true of the next, and a route variable a
+     * template does not have is not one at all.
+     */
+    readonly inherited = false;
+    /** What the nearest declaration says of the method, or nothing where none does. */
+    static method(directives: Directive[] | undefined): Help | null;
+    /** And the same of the resource the method is on. */
+    static node(directives: Directive[] | undefined): Help | null;
+    create(name: string, value: unknown, _: unknown, route: string): Directive;
+    /** What the route states this method and its parameters are. */
+    explain(directives: Directive[], _: Context, introspection: Introspection): Introspection;
+}
+export type { Described };

package/transpiled/directives/help/Family.js

@@ -0,0 +1,79 @@
+import assert from 'node:assert';
+import { Help } from './Help.js';
+import { Parameters } from './Parameters.js';
+/** The name the family is declared under, and what a consumer of one asks a method for. */
+export const FAMILY = 'help';
+export class Family {
+    name = FAMILY;
+    mandatory = false;
+    /**
+     * What a node says of itself is not said of what is under it: inherited, `help:node`
+     * would describe every resource below as the one it was written for. The rest go with
+     * it — a sentence about one method is not true of the next, and a route variable a
+     * template does not have is not one at all.
+     */
+    inherited = false;
+    /** What the nearest declaration says of the method, or nothing where none does. */
+    static method(directives) {
+        return stated(directives, 'method');
+    }
+    /** And the same of the resource the method is on. */
+    static node(directives) {
+        return stated(directives, 'node');
+    }
+    // eslint-disable-next-line max-params
+    create(name, value, _, route) {
+        if (name === 'node' || name === 'method')
+            return new Help(name, value);
+        assert.ok(name === 'route' || name === 'query', `Unknown directive: help:${name}`);
+        return new Parameters(name, value, route);
+    }
+    /** What the route states this method and its parameters are. */
+    explain(directives, _, introspection) {
+        const help = Family.method(directives);
+        const described = {
+            ...introspection,
+            ...(help?.title === undefined ? {} : { title: help.title }),
+            ...(help?.description === undefined ? {} : { description: help.description })
+        };
+        // a schema says `title` and `description` of what it describes, which is where these go
+        for (const subject of PARAMETERS) {
+            const declaration = declared(directives, subject);
+            if (declaration === null)
+                continue;
+            const parameters = declaration.parameters;
+            for (const [name, stated] of Object.entries(parameters)) {
+                const schema = described[subject]?.[name];
+                /*
+                 * A route variable is one because the template names it, whether or not the
+                 * operation declares it as input — and only then is it answered. `:id` on an
+                 * observation is the ordinary case: it is taken by the query, so nothing describes
+                 * it and the caller is not told it is a path parameter at all.
+                 *
+                 * Anything else is described only where it is already answered: a querystring
+                 * parameter is one only where the mapping takes it, and a segment `map:segments`
+                 * renames is answered under the property it fills.
+                 */
+                if (schema === undefined && !declaration.variables.includes(name))
+                    continue;
+                // written where the shape states it, whatever the schema already said
+                const merged = { ...schema };
+                delete merged.title;
+                delete merged.description;
+                described[subject] ??= {};
+                described[subject][name] = Object.assign(merged, stated);
+            }
+        }
+        return described;
+    }
+}
+const PARAMETERS = ['route', 'query'];
+function stated(directives, subject) {
+    const help = directives?.find((directive) => directive instanceof Help && directive.subject === subject);
+    return help ?? null;
+}
+function declared(directives, subject) {
+    const found = directives?.find((directive) => directive instanceof Parameters && directive.subject === subject);
+    return found ?? null;
+}
+//# sourceMappingURL=Family.js.map

package/transpiled/directives/help/Family.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Family.js","sourceRoot":"","sources":["../../../source/directives/help/Family.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAM5C,2FAA2F;AAC3F,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAA;AAI5B,MAAM,OAAO,MAAM;IACD,IAAI,GAAG,MAAM,CAAA;IACb,SAAS,GAAG,KAAK,CAAA;IAEjC;;;;;OAKG;IACa,SAAS,GAAG,KAAK,CAAA;IAEjC,mFAAmF;IAC5E,MAAM,CAAC,MAAM,CAAC,UAAmC;QACtD,OAAO,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IACrC,CAAC;IAED,qDAAqD;IAC9C,MAAM,CAAC,IAAI,CAAC,UAAmC;QACpD,OAAO,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC;IAED,sCAAsC;IAC/B,MAAM,CAAC,IAAY,EAAE,KAAc,EAAE,CAAU,EAAE,KAAa;QACnE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAEtE,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,2BAA2B,IAAI,EAAE,CAAC,CAAA;QAElF,OAAO,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC;IAED,gEAAgE;IACzD,OAAO,CACZ,UAAuB,EACvB,CAAU,EACV,aAA4B;QAE5B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAEtC,MAAM,SAAS,GAAkB;YAC/B,GAAG,aAAa;YAChB,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;SAC9E,CAAA;QAED,wFAAwF;QACxF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YAEjD,IAAI,WAAW,KAAK,IAAI;gBAAE,SAAQ;YAElC,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAA;YAEzC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;gBAEzC;;;;;;;;;mBASG;gBACH,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBAE3E,sEAAsE;gBACtE,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAA6B,CAAA;gBAEvD,OAAO,MAAM,CAAC,KAAK,CAAA;gBACnB,OAAO,MAAM,CAAC,WAAW,CAAA;gBAEzB,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;gBACzB,SAAS,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAsB,CAAA;YAChF,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AAED,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,CAAU,CAAA;AAE9C,SAAS,MAAM,CAAC,UAAmC,EAAE,OAAe;IAClE,MAAM,IAAI,GAAG,UAAU,EAAE,IAAI,CAC3B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,YAAY,IAAI,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,CAC1E,CAAA;IAED,OAAQ,IAAyB,IAAI,IAAI,CAAA;AAC3C,CAAC;AAED,SAAS,QAAQ,CACf,UAAmC,EACnC,OAAe;IAEf,MAAM,KAAK,GAAG,UAAU,EAAE,IAAI,CAC5B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,YAAY,UAAU,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,CAChF,CAAA;IAED,OAAQ,KAAgC,IAAI,IAAI,CAAA;AAClD,CAAC"}

package/transpiled/directives/help/Help.d.ts

@@ -0,0 +1,16 @@
+/**
+ * What a resource or a method is, in the words an application chooses for it — read by
+ * everything that describes one: `OPTIONS`, discovery, and the tools MCP publishes.
+ *
+ * The operation states what it is too, and that is not this. An operation is written
+ * without knowledge of any route, and a method is an operation and a route together — the
+ * same operation mounted twice is two methods, and one sentence is not true of both.
+ */
+export declare class Help {
+    /** `node` says what the resource is; `method` what one of its methods is. */
+    readonly subject: Subject;
+    readonly title: string | undefined;
+    readonly description: string | undefined;
+    constructor(subject: Subject, value: unknown);
+}
+export type Subject = 'node' | 'method';

package/transpiled/directives/help/Help.js

@@ -0,0 +1,22 @@
+import { described } from './described.js';
+/**
+ * What a resource or a method is, in the words an application chooses for it — read by
+ * everything that describes one: `OPTIONS`, discovery, and the tools MCP publishes.
+ *
+ * The operation states what it is too, and that is not this. An operation is written
+ * without knowledge of any route, and a method is an operation and a route together — the
+ * same operation mounted twice is two methods, and one sentence is not true of both.
+ */
+export class Help {
+    /** `node` says what the resource is; `method` what one of its methods is. */
+    subject;
+    title;
+    description;
+    constructor(subject, value) {
+        const stated = described(`help:${subject}`, value);
+        this.subject = subject;
+        this.title = stated.title;
+        this.description = stated.description;
+    }
+}
+//# sourceMappingURL=Help.js.map

package/transpiled/directives/help/Help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Help.js","sourceRoot":"","sources":["../../../source/directives/help/Help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAA;AAE1D;;;;;;;GAOG;AACH,MAAM,OAAO,IAAI;IACf,6EAA6E;IAC7D,OAAO,CAAS;IAChB,KAAK,CAAoB;IACzB,WAAW,CAAoB;IAE/C,YAAmB,OAAgB,EAAE,KAAc;QACjD,MAAM,MAAM,GAAc,SAAS,CAAC,QAAQ,OAAO,EAAE,EAAE,KAAK,CAAC,CAAA;QAE7D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;QACzB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;IACvC,CAAC;CACF"}

package/transpiled/directives/help/Parameters.d.ts

@@ -0,0 +1,18 @@
+import { type Described } from './described.js';
+/**
+ * What the parameters of a method are, by name: a route variable, or one of the
+ * querystring. Written where the method is, because what a variable means is what the
+ * route it is in makes of it.
+ *
+ * A name is not checked against the template, because the template is not what says them
+ * all: `map:segments` answers a variable under the property it fills instead, and that
+ * name is nowhere here. What matches nothing is not answered.
+ */
+export declare class Parameters {
+    readonly subject: Subject;
+    readonly parameters: Record<string, Described>;
+    /** What the route template names, which is a parameter whether an operation takes it or not. */
+    readonly variables: string[];
+    constructor(subject: Subject, value: unknown, route: string);
+}
+export type Subject = 'route' | 'query';

package/transpiled/directives/help/Parameters.js

@@ -0,0 +1,34 @@
+import assert from 'node:assert';
+import { segment } from '../../RTD/segment.js';
+import { described } from './described.js';
+/**
+ * What the parameters of a method are, by name: a route variable, or one of the
+ * querystring. Written where the method is, because what a variable means is what the
+ * route it is in makes of it.
+ *
+ * A name is not checked against the template, because the template is not what says them
+ * all: `map:segments` answers a variable under the property it fills instead, and that
+ * name is nowhere here. What matches nothing is not answered.
+ */
+export class Parameters {
+    subject;
+    parameters;
+    /** What the route template names, which is a parameter whether an operation takes it or not. */
+    variables;
+    constructor(subject, value, route) {
+        assert.ok(typeof value === 'object' && value !== null && !Array.isArray(value), `Directive help:${subject}: the value names each parameter it describes`);
+        const parameters = {};
+        for (const [name, stated] of Object.entries(value))
+            parameters[name] = described(`help:${subject}.${name}`, stated);
+        this.subject = subject;
+        this.parameters = parameters;
+        this.variables = subject === 'route' ? names(route) : [];
+    }
+}
+/** The variables the template names, which are what a route parameter may be called. */
+function names(route) {
+    return segment(route)
+        .map((part) => part.fragment !== null ? null : part.wildcard === true ? '**' : part.placeholder)
+        .filter((name) => name !== null);
+}
+//# sourceMappingURL=Parameters.js.map

package/transpiled/directives/help/Parameters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Parameters.js","sourceRoot":"","sources":["../../../source/directives/help/Parameters.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAA;AAE1D;;;;;;;;GAQG;AACH,MAAM,OAAO,UAAU;IACL,OAAO,CAAS;IAChB,UAAU,CAA2B;IAErD,gGAAgG;IAChF,SAAS,CAAU;IAEnC,YAAmB,OAAgB,EAAE,KAAc,EAAE,KAAa;QAChE,MAAM,CAAC,EAAE,CACP,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpE,kBAAkB,OAAO,+CAA+C,CACzE,CAAA;QAED,MAAM,UAAU,GAA8B,EAAE,CAAA;QAEhD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,OAAO,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;QAEjE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,CAAC;CACF;AAED,wFAAwF;AACxF,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,OAAO,CAAC,KAAK,CAAC;SAClB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CACjF;SACA,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AACpD,CAAC"}

package/transpiled/directives/help/described.d.ts

@@ -0,0 +1,16 @@
+/** What a resource, a method or a parameter says of itself, in the order it is written. */
+export interface Described {
+    title?: string;
+    description?: string;
+    /** what its methods are guarded by; see `guarded` */
+    authenticated?: boolean;
+    private?: boolean;
+    protected?: boolean;
+    system?: boolean;
+}
+/**
+ * A bare value is the title: it is the short thing, and the one a client has somewhere to
+ * put — a name is an address and reads as one. A sentence is written as a mapping, beside
+ * the title it explains, and either may stand alone.
+ */
+export declare function described(subject: string, value: unknown): Described;

package/transpiled/directives/help/described.js

@@ -0,0 +1,23 @@
+import assert from 'node:assert';
+/**
+ * A bare value is the title: it is the short thing, and the one a client has somewhere to
+ * put — a name is an address and reads as one. A sentence is written as a mapping, beside
+ * the title it explains, and either may stand alone.
+ */
+export function described(subject, value) {
+    const stated = typeof value === 'string' ? { title: value } : value;
+    assert.ok(typeof stated === 'object' && stated !== null && !Array.isArray(stated), `Directive ${subject}: the value is a title, or a \`title\` and a \`description\``);
+    const { title, description, ...rest } = stated;
+    assert.ok(Object.keys(rest).length === 0, `Directive ${subject}: unknown ${Object.keys(rest)
+        .map((key) => `'${key}'`)
+        .join(', ')}`);
+    assert.ok(title === undefined || (typeof title === 'string' && title.trim().length > 0), `Directive ${subject}: a title cannot be empty`);
+    assert.ok(description === undefined ||
+        (typeof description === 'string' && description.trim().length > 0), `Directive ${subject}: a description cannot be empty`);
+    assert.ok(title !== undefined || description !== undefined, `Directive ${subject}: says nothing`);
+    return {
+        ...(title === undefined ? {} : { title: title }),
+        ...(description === undefined ? {} : { description: description })
+    };
+}
+//# sourceMappingURL=described.js.map

package/transpiled/directives/help/described.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"described.js","sourceRoot":"","sources":["../../../source/directives/help/described.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAA;AAchC;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAc;IACvD,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;IAEnE,MAAM,CAAC,EAAE,CACP,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACvE,aAAa,OAAO,8DAA8D,CACnF,CAAA;IAED,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,MAAiC,CAAA;IAEzE,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAC9B,aAAa,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SAC/C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC;SACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAA;IAED,MAAM,CAAC,EAAE,CACP,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EAC7E,aAAa,OAAO,2BAA2B,CAChD,CAAA;IAED,MAAM,CAAC,EAAE,CACP,WAAW,KAAK,SAAS;QACvB,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EACpE,aAAa,OAAO,iCAAiC,CACtD,CAAA;IAED,MAAM,CAAC,EAAE,CACP,KAAK,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAChD,aAAa,OAAO,gBAAgB,CACrC,CAAA;IAED,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC;QAC1D,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAqB,EAAE,CAAC;KAC7E,CAAA;AACH,CAAC"}

package/transpiled/directives/help/index.d.ts

@@ -0,0 +1,22 @@
+import { Family } from './Family.js';
+import type { Described } from './described.js';
+import type { Directives } from '../../RTD/index.js';
+import type { Introspection } from '../../Introspection.js';
+export declare const help: Family;
+/**
+ * What the resource a method is on says of itself, or nothing where it says nothing. Read
+ * from the method because that is what carries a route's directives; every method of one
+ * node carries the same declaration.
+ */
+export declare function resource(directives: Directives): Described | null;
+/**
+ * What a resource is, taken from what its methods are: the flags are a method's, and a
+ * resource carries whichever of them any of its methods does — which is what a reader picks
+ * one icon by.
+ */
+export declare function guarded(methods: Record<string, Introspection>): Described;
+export { FAMILY, Family } from './Family.js';
+export { Help } from './Help.js';
+export { Parameters } from './Parameters.js';
+export type { Directive } from './Family.js';
+export type { Described } from './described.js';

package/transpiled/directives/help/index.js

@@ -0,0 +1,34 @@
+import { Family, FAMILY } from './Family.js';
+export const help = new Family();
+/**
+ * What the resource a method is on says of itself, or nothing where it says nothing. Read
+ * from the method because that is what carries a route's directives; every method of one
+ * node carries the same declaration.
+ */
+export function resource(directives) {
+    const stated = Family.node(directives.declared(FAMILY));
+    if (stated === null)
+        return null;
+    return {
+        ...(stated.title === undefined ? {} : { title: stated.title }),
+        ...(stated.description === undefined ? {} : { description: stated.description })
+    };
+}
+/**
+ * What a resource is, taken from what its methods are: the flags are a method's, and a
+ * resource carries whichever of them any of its methods does — which is what a reader picks
+ * one icon by.
+ */
+export function guarded(methods) {
+    const described = {};
+    for (const introspection of Object.values(methods))
+        for (const flag of FLAGS)
+            if (introspection[flag] === true)
+                described[flag] = true;
+    return described;
+}
+const FLAGS = ['authenticated', 'private', 'protected', 'system'];
+export { FAMILY, Family } from './Family.js';
+export { Help } from './Help.js';
+export { Parameters } from './Parameters.js';
+//# sourceMappingURL=index.js.map

package/transpiled/directives/help/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../source/directives/help/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAM5C,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,EAAE,CAAA;AAEhC;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,UAAsB;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAY,MAAM,CAAC,CAAC,CAAA;IAElE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAEhC,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;KACjF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,OAAsC;IAC5D,MAAM,SAAS,GAAc,EAAE,CAAA;IAE/B,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAEpF,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAA;AAE1E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA"}

package/transpiled/directives/index.d.ts

@@ -1,4 +1,8 @@
 import type { DirectiveFamily } from '../RTD/index.js';
 import type { Interceptor } from '../Interception.js';
 export declare const families: DirectiveFamily[];
+/**
+ * `cors` first, so a preflight is answered before anything reads the request; the page is
+ * last, and claims its own prefix.
+ */
 export declare const interceptors: Interceptor[];

package/transpiled/directives/index.js

@@ -8,17 +8,24 @@ import { map } from './map/index.js';
 import { mcp } from './mcp/index.js';
 import { req } from './require/index.js';
 import { flow } from './flow/index.js';
+import { help } from './help/index.js';
 import { discovery } from './oauth/index.js';
+import { Site } from '../Discovery/index.js';
 export const families = [
     authorization,
     io,
     cache,
     map,
     mcp,
+    help,
     req,
     flow,
     octets,
     dev
 ];
-export const interceptors = [cors, discovery];
+/**
+ * `cors` first, so a preflight is answered before anything reads the request; the page is
+ * last, and claims its own prefix.
+ */
+export const interceptors = [cors, discovery, new Site()];
 //# sourceMappingURL=index.js.map

package/transpiled/directives/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/directives/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAI5C,MAAM,CAAC,MAAM,QAAQ,GAAsB;IACzC,aAAa;IACb,EAAE;IACF,KAAK;IACL,GAAG;IACH,GAAG;IACH,GAAG;IACH,IAAI;IACJ,MAAM;IACN,GAAG;CACJ,CAAA;AACD,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/directives/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAI5C,MAAM,CAAC,MAAM,QAAQ,GAAsB;IACzC,aAAa;IACb,EAAE;IACF,KAAK;IACL,GAAG;IACH,GAAG;IACH,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,MAAM;IACN,GAAG;CACJ,CAAA;AACD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA"}

package/transpiled/directives/map/Headers.d.ts

@@ -4,6 +4,11 @@ import type { Introspection } from '../../Introspection.js';
 export declare class Headers extends Mapping<Record<string, string>> {
     private readonly headers;
     constructor(map: Record<string, string>);
+    /**
+     * The property is filled from a request header, so it is not the body's to send. Which
+     * header, and that there is one at all, is not answered: what an application reads off a
+     * request is its own, and a caller has nowhere to put one anyway.
+     */
     explain(introspection: Introspection): void;
     properties(context: Input): Record<string, string>;
 }

package/transpiled/directives/map/Headers.js

@@ -17,12 +17,14 @@ export class Headers extends Mapping {
         this.headers = Object.values(map).filter((header) => !FORBIDDEN.has(header));
         this.headers.forEach((header) => cors.allow(header));
     }
+    /**
+     * The property is filled from a request header, so it is not the body's to send. Which
+     * header, and that there is one at all, is not answered: what an application reads off a
+     * request is its own, and a caller has nowhere to put one anyway.
+     */
     explain(introspection) {
-        for (const [property, header] of Object.entries(this.value)) {
-            const schema = take(introspection, property);
-            introspection.headers ??= {};
-            introspection.headers[property] = { ...schema, header };
-        }
+        for (const property of Object.keys(this.value))
+            take(introspection, property);
     }
     properties(context) {
         context.pipelines.response.push((response) => {