@toa.io/extensions.exposition 1.0.0-alpha.3 → 1.0.0-alpha.300

package/transpiled/directives/index.js

@@ -1,12 +1,31 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.interceptors = exports.families = void 0;
-const dev_1 = require("./dev");
-const auth_1 = require("./auth");
-const cache_1 = require("./cache");
-const octets_1 = require("./octets");
-const cors_1 = require("./cors");
-const vary_1 = require("./vary");
-exports.families = [auth_1.authorization, cache_1.cache, octets_1.octets, vary_1.vary, dev_1.dev];
-exports.interceptors = [cors_1.cors];
+import { authorization } from './auth/index.js';
+import { cache } from './cache/index.js';
+import { cors } from './cors/index.js';
+import { dev } from './dev/index.js';
+import { octets } from './octets/index.js';
+import { io } from './io/index.js';
+import { map } from './map/index.js';
+import { mcp } from './mcp/index.js';
+import { req } from './require/index.js';
+import { flow } from './flow/index.js';
+import { help } from './help/index.js';
+import { discovery } from './oauth/index.js';
+import { Site } from '../Discovery/index.js';
+export const families = [
+    authorization,
+    io,
+    cache,
+    map,
+    mcp,
+    help,
+    req,
+    flow,
+    octets,
+    dev
+];
+/**
+ * `cors` first, so a preflight is answered before anything reads the request; the page is
+ * last, and claims its own prefix.
+ */
+export const interceptors = [cors, discovery, new Site()];
 //# sourceMappingURL=index.js.map

package/transpiled/directives/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/directives/index.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAC3B,iCAAsC;AACtC,mCAA+B;AAC/B,qCAAiC;AACjC,iCAA6B;AAC7B,iCAA6B;AAIhB,QAAA,QAAQ,GAAa,CAAC,oBAAa,EAAE,aAAK,EAAE,eAAM,EAAE,WAAI,EAAE,SAAG,CAAC,CAAA;AAC9D,QAAA,YAAY,GAAkB,CAAC,WAAI,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/directives/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAA;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAI5C,MAAM,CAAC,MAAM,QAAQ,GAAsB;IACzC,aAAa;IACb,EAAE;IACF,KAAK;IACL,GAAG;IACH,GAAG;IACH,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,MAAM;IACN,GAAG;CACJ,CAAA;AACD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA"}

package/transpiled/directives/io/Directive.d.ts

@@ -0,0 +1,13 @@
+import type { Sync } from './lib/throttle/index.js';
+import type { Parameter } from '../../RTD/index.js';
+import type { Input as Context } from '../../io.js';
+import type * as http from '../../HTTP/index.js';
+export interface Directive {
+    precall: (context: Context, parameters: Parameter[]) => void;
+    /** Synchronous by contract: settling holds the response, and none of it needs I/O. */
+    settle?: (context: Context, response: http.OutgoingMessage) => void;
+}
+export interface Constructor {
+    validate: (value: unknown) => void;
+    new (value: any, sync: Sync, route: string): Directive;
+}

package/transpiled/directives/io/Directive.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Directive.js.map

package/transpiled/directives/io/Directive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Directive.js","sourceRoot":"","sources":["../../../source/directives/io/Directive.ts"],"names":[],"mappings":""}

package/transpiled/directives/io/IO.d.ts

@@ -0,0 +1,28 @@
+import type * as http from '../../HTTP/index.js';
+import type { Parameter, DirectiveFamily } from '../../RTD/index.js';
+import type { Remotes } from '../../Remotes.js';
+import type { Directive } from './Directive.js';
+import type { Introspection } from '../../Introspection.js';
+import type { extensions } from '@toa.io/core/types';
+export declare class IO implements DirectiveFamily<Directive> {
+    readonly name = "io";
+    readonly mandatory = true;
+    private host;
+    /** Throttling reconciles through the atom of the gateways, one for every directive. */
+    private sync;
+    mount(host: extensions.Host): void;
+    create(name: string, value: unknown, remotes: Remotes, route: string): Directive;
+    precall(directives: Directive[], context: http.Context, parameters: Parameter[]): null;
+    /**
+     * What a whitelist admits is what the schema states. Without an `io:output` the reply is
+     * dropped before it is sent, so there is no output to describe at all.
+     */
+    explain(directives: Directive[], _: http.Context, introspection: Introspection): Introspection;
+    settle(directives: Directive[], context: http.Context, output: http.OutgoingMessage): void;
+    /**
+     * The ticker belongs to the family rather than to any route's directives, and the
+     * factory disposes every route it made — so this runs once per route at shutdown,
+     * and disposing an already stopped ticker is what makes that harmless.
+     */
+    dispose(): void;
+}

package/transpiled/directives/io/IO.js

@@ -0,0 +1,76 @@
+import { restrict } from '../../Introspection.js';
+import { Output } from './Output.js';
+import { Input } from './Input.js';
+import { Throttle } from './Throttle.js';
+import { Status } from './Status.js';
+import { Sync } from './lib/throttle/index.js';
+import { ATOM_GROUP } from '@toa.io/definitions/extensions.exposition';
+export class IO {
+    name = 'io';
+    mandatory = true;
+    host;
+    /** Throttling reconciles through the atom of the gateways, one for every directive. */
+    sync = null;
+    mount(host) {
+        this.host = host;
+    }
+    // eslint-disable-next-line max-params
+    create(name, value, remotes, route) {
+        if (!(name in constructors))
+            throw new Error(`Directive 'io:${name}' is not implemented`);
+        const Directive = constructors[name];
+        Directive.validate(value);
+        if (name === 'throttle')
+            this.sync ??= new Sync(this.host.atom(ATOM_GROUP));
+        return new Directive(value, this.sync, route);
+    }
+    precall(directives, context, parameters) {
+        let restricted = false;
+        for (const directive of directives) {
+            restricted ||= directive instanceof Output;
+            directive.precall(context, parameters);
+        }
+        if (!restricted)
+            DENIAL.precall(context, parameters);
+        return null;
+    }
+    /**
+     * What a whitelist admits is what the schema states. Without an `io:output` the reply is
+     * dropped before it is sent, so there is no output to describe at all.
+     */
+    explain(directives, _, introspection) {
+        let restricted = false;
+        for (const directive of directives) {
+            if (directive instanceof Input)
+                introspection.input = restrict(introspection.input, directive.allowed);
+            if (!(directive instanceof Output))
+                continue;
+            restricted = true;
+            if (!directive.disabled)
+                introspection.output = restrict(introspection.output, directive.allowed);
+        }
+        if (!restricted)
+            delete introspection.output;
+        return introspection;
+    }
+    settle(directives, context, output) {
+        for (const directive of directives)
+            directive.settle?.(context, output);
+    }
+    /**
+     * The ticker belongs to the family rather than to any route's directives, and the
+     * factory disposes every route it made — so this runs once per route at shutdown,
+     * and disposing an already stopped ticker is what makes that harmless.
+     */
+    dispose() {
+        this.sync?.dispose();
+    }
+}
+const constructors = {
+    input: Input,
+    output: Output,
+    status: Status,
+    throttle: Throttle
+};
+const DENIAL = new Output([]);
+//# sourceMappingURL=IO.js.map

package/transpiled/directives/io/IO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IO.js","sourceRoot":"","sources":["../../../source/directives/io/IO.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AAM9C,OAAO,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAA;AAGtE,MAAM,OAAO,EAAE;IACG,IAAI,GAAG,IAAI,CAAA;IACX,SAAS,GAAG,IAAI,CAAA;IAExB,IAAI,CAAkB;IAE9B,uFAAuF;IAC/E,IAAI,GAAgB,IAAI,CAAA;IAEzB,KAAK,CAAC,IAAqB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAED,sCAAsC;IAC/B,MAAM,CACX,IAAY,EACZ,KAAc,EACd,OAAgB,EAChB,KAAa;QAEb,IAAI,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,sBAAsB,CAAC,CAAA;QAE9D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEpC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEzB,IAAI,IAAI,KAAK,UAAU;YAAE,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;QAE3E,OAAO,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,IAAK,EAAE,KAAK,CAAC,CAAA;IAChD,CAAC;IAEM,OAAO,CACZ,UAAuB,EACvB,OAAqB,EACrB,UAAuB;QAEvB,IAAI,UAAU,GAAG,KAAK,CAAA;QAEtB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,UAAU,KAAK,SAAS,YAAY,MAAM,CAAA;YAE1C,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QACxC,CAAC;QAED,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAEpD,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;OAGG;IACI,OAAO,CACZ,UAAuB,EACvB,CAAe,EACf,aAA4B;QAE5B,IAAI,UAAU,GAAG,KAAK,CAAA;QAEtB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,SAAS,YAAY,KAAK;gBAC5B,aAAa,CAAC,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;YAExE,IAAI,CAAC,CAAC,SAAS,YAAY,MAAM,CAAC;gBAAE,SAAQ;YAE5C,UAAU,GAAG,IAAI,CAAA;YAEjB,IAAI,CAAC,SAAS,CAAC,QAAQ;gBACrB,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;QAC5E,CAAC;QAED,IAAI,CAAC,UAAU;YAAE,OAAO,aAAa,CAAC,MAAM,CAAA;QAE5C,OAAO,aAAa,CAAA;IACtB,CAAC;IAEM,MAAM,CACX,UAAuB,EACvB,OAAqB,EACrB,MAA4B;QAE5B,KAAK,MAAM,SAAS,IAAI,UAAU;YAAE,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzE,CAAC;IAED;;;;OAIG;IACI,OAAO;QACZ,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAA;IACtB,CAAC;CACF;AAED,MAAM,YAAY,GAAgC;IAChD,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,QAAQ,EAAE,QAAQ;CACnB,CAAA;AAED,MAAM,MAAM,GAAc,IAAI,MAAM,CAAC,EAAE,CAAC,CAAA"}

package/transpiled/directives/io/Input.d.ts

@@ -0,0 +1,12 @@
+import type { Directive } from './Directive.js';
+import type { Input as Context } from '../../io.js';
+export declare class Input implements Directive {
+    /** what a client may send, which is therefore what the input schema states */
+    readonly allowed: Set<string>;
+    constructor(permissions: Permissions);
+    static validate(permissions: unknown): asserts permissions is Permissions;
+    precall(context: Context): void;
+    private check;
+    private violation;
+}
+export type Permissions = string[];

package/transpiled/directives/io/Input.js

@@ -0,0 +1,43 @@
+import { BadRequest } from '../../HTTP/index.js';
+import * as schemas from './schemas.js';
+export class Input {
+    /** what a client may send, which is therefore what the input schema states */
+    allowed;
+    constructor(permissions) {
+        this.allowed = new Set(permissions);
+    }
+    static validate(permissions) {
+        schemas.input.validate(permissions, "Incorrect 'io:input' format");
+    }
+    precall(context) {
+        // Restrictions are on what the client sent, so the check goes to the front of the
+        // pipeline whatever order the families ran in: `auth:delegate` embeds the identity
+        // and `map:*` assigns mapped properties, and those additions are the server's own,
+        // not input to be restricted.
+        context.pipelines.body.unshift((body) => this.check(body));
+    }
+    check(body) {
+        if (body === undefined)
+            return body;
+        try {
+            schemas.message.validate(body);
+        }
+        catch {
+            throw new BadRequest('Invalid request body');
+        }
+        const property = this.violation(body);
+        if (property !== undefined)
+            throw new BadRequest(`Unexpected input: ${property}`);
+        return body;
+    }
+    violation(value) {
+        if (!Array.isArray(value))
+            return Object.keys(value).find((key) => !this.allowed.has(key));
+        for (const item of value) {
+            const property = this.violation(item);
+            if (property !== undefined)
+                return property;
+        }
+    }
+}
+//# sourceMappingURL=Input.js.map

package/transpiled/directives/io/Input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Input.js","sourceRoot":"","sources":["../../../source/directives/io/Input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AAKvC,MAAM,OAAO,KAAK;IAChB,8EAA8E;IAC9D,OAAO,CAAa;IAEpC,YAAmB,WAAwB;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;IACrC,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAC,WAAoB;QACzC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAc,WAAW,EAAE,6BAA6B,CAAC,CAAA;IACjF,CAAC;IAEM,OAAO,CAAC,OAAgB;QAC7B,kFAAkF;QAClF,mFAAmF;QACnF,mFAAmF;QACnF,8BAA8B;QAC9B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5D,CAAC;IAEO,KAAK,CAAC,IAAa;QACzB,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAEnC,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAsB,IAAI,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,UAAU,CAAC,sBAAsB,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAErC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAA;QAEjF,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,SAAS,CAAC,KAA0B;QAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACvB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAEjE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAErC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAA;QAC7C,CAAC;IACH,CAAC;CACF"}

package/transpiled/directives/io/Message.d.ts

@@ -0,0 +1 @@
+export type Message = Record<string, unknown>;

package/transpiled/directives/io/Message.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Message.js.map

package/transpiled/directives/io/Message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Message.js","sourceRoot":"","sources":["../../../source/directives/io/Message.ts"],"names":[],"mappings":""}

package/transpiled/directives/io/Output.d.ts

@@ -0,0 +1,17 @@
+import type { Directive } from './Directive.js';
+import type { Input as Context } from '../../io.js';
+export declare class Output implements Directive {
+    /** whether the reply passes whole, which is when the schema is the operation's own */
+    readonly disabled: boolean;
+    /** what a reply may carry, which is therefore what the output schema states */
+    readonly allowed: Set<string>;
+    private readonly omitted;
+    private readonly permissions;
+    constructor(permissions: Permissions);
+    static validate(permissions: unknown): asserts permissions is Permissions;
+    precall(context: Context): void;
+    private restriction;
+    /** Runs per entity of a collection, hence the set and the absence of intermediates. */
+    private fit;
+}
+export type Permissions = string[] | boolean;

package/transpiled/directives/io/Output.js

@@ -0,0 +1,60 @@
+import { Stream } from 'node:stream';
+import { console } from 'openspan';
+import * as schemas from './schemas.js';
+export class Output {
+    /** whether the reply passes whole, which is when the schema is the operation's own */
+    disabled = false;
+    /** what a reply may carry, which is therefore what the output schema states */
+    allowed;
+    omitted = true;
+    permissions = [];
+    constructor(permissions) {
+        if (typeof permissions === 'boolean')
+            if (permissions)
+                this.disabled = true;
+            else
+                this.omitted = false;
+        else
+            this.permissions = permissions;
+        this.allowed = new Set(this.permissions);
+    }
+    static validate(permissions) {
+        schemas.output.validate(permissions, "Incorrect 'io:output' format");
+    }
+    precall(context) {
+        context.pipelines.response.push(this.restriction(context));
+    }
+    restriction(context) {
+        return (message) => {
+            // what the gateway built is its own — a code and a message — and a restriction has
+            // nothing to say about it; everything else is a reply the operation returned, and is
+            // restricted whatever status it carries
+            const error = message.authentic === true;
+            const stream = message.body instanceof Stream;
+            const none = message.body === undefined || message.body === null;
+            if (this.disabled || error || stream || none)
+                return;
+            if (typeof message.body !== 'object' || this.permissions.length === 0) {
+                if (this.omitted)
+                    console.warn("Permissions for 'io:output' are not specified properly, response omitted", { path: context.url.pathname });
+                delete message.body;
+                return;
+            }
+            schemas.message.validate(message.body, "'io:output' expects response to be an object or array of objects");
+            if (Array.isArray(message.body))
+                message.body = message.body.map((entity) => this.fit(entity));
+            else
+                message.body = this.fit(message.body);
+        };
+    }
+    /** Runs per entity of a collection, hence the set and the absence of intermediates. */
+    fit(message) {
+        const output = {};
+        // the keys of the entity, so that the response keeps the order it was built in
+        for (const key of Object.keys(message))
+            if (this.allowed.has(key))
+                output[key] = message[key];
+        return output;
+    }
+}
+//# sourceMappingURL=Output.js.map

package/transpiled/directives/io/Output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Output.js","sourceRoot":"","sources":["../../../source/directives/io/Output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AAMvC,MAAM,OAAO,MAAM;IACjB,sFAAsF;IACtE,QAAQ,GAAY,KAAK,CAAA;IAEzC,+EAA+E;IAC/D,OAAO,CAAa;IACnB,OAAO,GAAY,IAAI,CAAA;IACvB,WAAW,GAAa,EAAE,CAAA;IAE3C,YAAmB,WAAwB;QACzC,IAAI,OAAO,WAAW,KAAK,SAAS;YAClC,IAAI,WAAW;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;;gBAChC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;;YACtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAEnC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC1C,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAC,WAAoB;QACzC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAA;IACtE,CAAC;IAEM,OAAO,CAAC,OAAgB;QAC7B,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5D,CAAC;IAEO,WAAW,CAAC,OAAgB;QAClC,OAAO,CAAC,OAAwB,EAAQ,EAAE;YACxC,mFAAmF;YACnF,qFAAqF;YACrF,wCAAwC;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,KAAK,IAAI,CAAA;YACxC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,YAAY,MAAM,CAAA;YAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAA;YAEhE,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,MAAM,IAAI,IAAI;gBAAE,OAAM;YAEpD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,IAAI,IAAI,CAAC,OAAO;oBACd,OAAO,CAAC,IAAI,CACV,0EAA0E,EAC1E,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAC/B,CAAA;gBAEH,OAAO,OAAO,CAAC,IAAI,CAAA;gBAEnB,OAAM;YACR,CAAC;YAED,OAAO,CAAC,OAAO,CAAC,QAAQ,CACtB,OAAO,CAAC,IAAI,EACZ,kEAAkE,CACnE,CAAA;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC7B,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAiB,CAAC,CAAC,CAAA;;gBACrE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5C,CAAC,CAAA;IACH,CAAC;IAED,uFAAuF;IAC/E,GAAG,CAAC,OAAgB;QAC1B,MAAM,MAAM,GAAY,EAAE,CAAA;QAE1B,+EAA+E;QAC/E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAEvD,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}

package/transpiled/directives/io/Status.d.ts

@@ -0,0 +1,19 @@
+import type { Directive } from './Directive.js';
+import type * as http from '../../HTTP/index.js';
+/**
+ * The status of the reply, taken from a property of what the operation returned and removed
+ * from it — an outcome the operation knows and the transport does not, like a protocol that
+ * states its error as a body rather than as a status of its own.
+ *
+ * Settled rather than transformed, so the status is set before anything reads it. A reply of
+ * 300 or above is left as the operation built it, which `io:output` does not restrict: a
+ * failure and a success are different shapes, and one list of permitted properties does not
+ * describe both.
+ */
+export declare class Status implements Directive {
+    private readonly property;
+    constructor(property: unknown);
+    static validate(value: unknown): asserts value is string;
+    precall(): void;
+    settle(_: unknown, response: http.OutgoingMessage): void;
+}

package/transpiled/directives/io/Status.js

@@ -0,0 +1,35 @@
+/**
+ * The status of the reply, taken from a property of what the operation returned and removed
+ * from it — an outcome the operation knows and the transport does not, like a protocol that
+ * states its error as a body rather than as a status of its own.
+ *
+ * Settled rather than transformed, so the status is set before anything reads it. A reply of
+ * 300 or above is left as the operation built it, which `io:output` does not restrict: a
+ * failure and a success are different shapes, and one list of permitted properties does not
+ * describe both.
+ */
+export class Status {
+    property;
+    constructor(property) {
+        this.property = property;
+    }
+    static validate(value) {
+        if (typeof value !== 'string')
+            throw new Error('`io:status` must be a string');
+    }
+    precall() {
+        // nothing to do until the operation has answered
+    }
+    settle(_, response) {
+        const body = response.body;
+        if (body === null || typeof body !== 'object' || !(this.property in body))
+            return;
+        const value = body[this.property];
+        if (typeof value !== 'number')
+            throw new Error(`\`io:status\` expects '${this.property}' to be a number`);
+        response.status = value;
+        // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+        delete body[this.property];
+    }
+}
+//# sourceMappingURL=Status.js.map

package/transpiled/directives/io/Status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Status.js","sourceRoot":"","sources":["../../../source/directives/io/Status.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,OAAO,MAAM;IACA,QAAQ,CAAQ;IAEjC,YAAmB,QAAiB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAkB,CAAA;IACpC,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAC,KAAc;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAChF,CAAC;IAEM,OAAO;QACZ,iDAAiD;IACnD,CAAC;IAEM,MAAM,CAAC,CAAU,EAAE,QAA8B;QACtD,MAAM,IAAI,GAAY,QAAQ,CAAC,IAAI,CAAA;QAEnC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;YAAE,OAAM;QAEjF,MAAM,KAAK,GAAa,IAAgC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAEvE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3B,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,QAAQ,kBAAkB,CAAC,CAAA;QAE5E,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAA;QAEvB,gEAAgE;QAChE,OAAQ,IAAgC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACzD,CAAC;CACF"}

package/transpiled/directives/io/Throttle.d.ts

@@ -0,0 +1,11 @@
+import { type Declaration, type Sync } from './lib/throttle/index.js';
+import type * as http from '../../HTTP/index.js';
+import type { Parameter } from '../../RTD/index.js';
+import type { Directive } from './Directive.js';
+export declare class Throttle implements Directive {
+    private readonly quotas;
+    constructor(declaration: Declaration, sync: Sync, route: string);
+    static validate(declaration: unknown): asserts declaration is Declaration;
+    precall(context: http.Context, parameters: Parameter[]): void;
+    settle(context: http.Context, output: http.OutgoingMessage): void;
+}

package/transpiled/directives/io/Throttle.js

@@ -0,0 +1,22 @@
+import { TooManyRequests } from '../../HTTP/index.js';
+import * as schemas from './schemas.js';
+import { parse, Quotas } from './lib/throttle/index.js';
+export class Throttle {
+    quotas;
+    constructor(declaration, sync, route) {
+        this.quotas = Quotas.create(parse(declaration), route);
+        sync.register(this.quotas);
+    }
+    static validate(declaration) {
+        schemas.throttle.validate(declaration, "Incorrect 'io:throttle' format");
+    }
+    precall(context, parameters) {
+        const retry = this.quotas.check(context, parameters);
+        if (retry > 0)
+            throw new TooManyRequests(retry);
+    }
+    settle(context, output) {
+        this.quotas.use(context, output);
+    }
+}
+//# sourceMappingURL=Throttle.js.map

package/transpiled/directives/io/Throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Throttle.js","sourceRoot":"","sources":["../../../source/directives/io/Throttle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,EAA+B,MAAM,yBAAyB,CAAA;AAKpF,MAAM,OAAO,QAAQ;IACF,MAAM,CAAQ;IAE/B,YAAmB,WAAwB,EAAE,IAAU,EAAE,KAAa;QACpE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAA;QAEtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC5B,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAC,WAAoB;QACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAA;IAC1E,CAAC;IAEM,OAAO,CAAC,OAAqB,EAAE,UAAuB;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAEpD,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC;IAEM,MAAM,CAAC,OAAqB,EAAE,MAA4B;QAC/D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;CACF"}

package/transpiled/directives/io/index.d.ts

@@ -0,0 +1,2 @@
+import { IO } from './IO.js';
+export declare const io: IO;

package/transpiled/directives/io/index.js

@@ -0,0 +1,3 @@
+import { IO } from './IO.js';
+export const io = new IO();
+//# sourceMappingURL=index.js.map

package/transpiled/directives/io/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../source/directives/io/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAE5B,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAA"}

package/transpiled/directives/io/lib/throttle/Configuration.d.ts

@@ -0,0 +1,26 @@
+export interface Configuration {
+    key: KeyComponent[];
+    condition?: KeyCondition[];
+    requests: number;
+    interval: number;
+}
+interface Rule<T, K = unknown> {
+    method: T;
+    options?: K;
+}
+export type KeyComponentMethod = 'ip' | 'path' | 'route' | 'identity' | 'segment';
+export type KeyConditionMethod = 'status';
+export type KeyComponent = Rule<KeyComponentMethod>;
+export type KeyCondition = Rule<KeyConditionMethod>;
+/** A bare component, or the one that takes an argument. */
+type KeyEntry = KeyComponentMethod | {
+    segment: string;
+};
+type KeyDeclaration = KeyEntry | KeyEntry[];
+type ConditionDeclaration = Record<KeyConditionMethod, unknown> | Array<Record<KeyConditionMethod, unknown>>;
+export interface Declaration extends Omit<Configuration, 'key' | 'condition'> {
+    key: KeyDeclaration;
+    condition?: ConditionDeclaration;
+}
+export declare function parse(declaration: Declaration): Configuration;
+export {};

package/transpiled/directives/io/lib/throttle/Configuration.js

@@ -0,0 +1,31 @@
+export function parse(declaration) {
+    const { key, condition, requests, interval } = declaration;
+    return {
+        key: mapKey(key),
+        condition: mapCondition(condition),
+        requests,
+        interval: interval * 1000
+    };
+}
+function mapKey(declaration) {
+    const entries = Array.isArray(declaration) ? declaration : [declaration];
+    // a bare `path`, or `segment: id` for the ones that take an argument
+    return entries.flatMap((entry) => typeof entry === 'string'
+        ? [{ method: entry }]
+        : Object.entries(entry).map(([method, options]) => ({
+            method: method,
+            options
+        })));
+}
+function mapCondition(declaration) {
+    if (declaration === undefined)
+        return;
+    // reduce to a single object, then map entries to rules
+    const conditions = Array.isArray(declaration) ? declaration : [declaration];
+    const single = conditions.reduce((acc, condition) => ({ ...acc, ...condition }), {});
+    return Object.entries(single).map(([method, options]) => ({
+        method,
+        options
+    }));
+}
+//# sourceMappingURL=Configuration.js.map

package/transpiled/directives/io/lib/throttle/Configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Configuration.js","sourceRoot":"","sources":["../../../../../source/directives/io/lib/throttle/Configuration.ts"],"names":[],"mappings":"AA+BA,MAAM,UAAU,KAAK,CAAC,WAAwB;IAC5C,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAA;IAE1D,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;QAChB,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;QAClC,QAAQ;QACR,QAAQ,EAAE,QAAQ,GAAG,IAAI;KAC1B,CAAA;AACH,CAAC;AAED,SAAS,MAAM,CAAC,WAA2B;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAExE,qEAAqE;IACrE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAkB,EAAE,CAC/C,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,EAAE,MAA4B;YACpC,OAAO;SACR,CAAC,CAAC,CACR,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,WAAkC;IACtD,IAAI,WAAW,KAAK,SAAS;QAAE,OAAM;IAErC,uDAAuD;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IAEpF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM;QACN,OAAO;KACR,CAAC,CAAmB,CAAA;AACvB,CAAC"}

package/transpiled/directives/io/lib/throttle/Keys.d.ts

@@ -0,0 +1,14 @@
+import { type Component } from './components/index.js';
+import { type Condition } from './conditions/index.js';
+import type { KeyComponent, KeyCondition } from './Configuration.js';
+import type { Parameter } from '../../../../RTD/index.js';
+import type { Input as Context, Output } from '../../../../io.js';
+export declare class Keys {
+    private readonly components;
+    private readonly conditions?;
+    constructor(components: Component[], conditions?: Condition[]);
+    static create(componentRules: KeyComponent[], conditionRules?: KeyCondition[], route?: string): Keys;
+    /** The key of the request, or nothing when a component cannot key it. */
+    get(context: Context, parameters?: Parameter[]): string | undefined;
+    matches(input: Context, output: Output): boolean;
+}

package/transpiled/directives/io/lib/throttle/Keys.js

@@ -0,0 +1,32 @@
+import { createHash } from 'node:crypto';
+import { Components } from './components/index.js';
+import { Conditions } from './conditions/index.js';
+const NONE = [];
+export class Keys {
+    components;
+    conditions;
+    constructor(components, conditions) {
+        this.components = components;
+        this.conditions = conditions;
+    }
+    static create(componentRules, conditionRules, route = '') {
+        const components = componentRules.map((rule) => new Components[rule.method](rule.options, route));
+        const conditions = conditionRules?.map((rule) => new Conditions[rule.method](rule.options));
+        return new this(components, conditions);
+    }
+    /** The key of the request, or nothing when a component cannot key it. */
+    get(context, parameters = NONE) {
+        const hash = createHash('sha256');
+        for (const component of this.components) {
+            const part = component.get(context, parameters);
+            if (part === undefined)
+                return;
+            hash.update(part);
+        }
+        return hash.digest('hex');
+    }
+    matches(input, output) {
+        return this.conditions?.some((condition) => !condition.match(input, output)) !== true;
+    }
+}
+//# sourceMappingURL=Keys.js.map

package/transpiled/directives/io/lib/throttle/Keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Keys.js","sourceRoot":"","sources":["../../../../../source/directives/io/lib/throttle/Keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAkB,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAkB,MAAM,uBAAuB,CAAA;AAKlE,MAAM,IAAI,GAAgB,EAAE,CAAA;AAE5B,MAAM,OAAO,IAAI;IACE,UAAU,CAAa;IACvB,UAAU,CAAc;IAEzC,YAAmB,UAAuB,EAAE,UAAwB;QAClE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;IAC9B,CAAC;IAEM,MAAM,CAAC,MAAM,CAClB,cAA8B,EAC9B,cAA+B,EAC/B,KAAK,GAAW,EAAE;QAElB,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAC3D,CAAA;QAED,MAAM,UAAU,GAAG,cAAc,EAAE,GAAG,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CACpD,CAAA;QAED,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACzC,CAAC;IAED,yEAAyE;IAClE,GAAG,CAAC,OAAgB,EAAE,UAAU,GAAgB,IAAI;QACzD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QAEjC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAE/C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAM;YAE9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAEM,OAAO,CAAC,KAAc,EAAE,MAAc;QAC3C,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAAA;IACvF,CAAC;CACF"}