@toa.io/extensions.exposition 1.0.0-alpha.31 → 1.0.0-alpha.310

package/components/identity.tokens/types/toa.d.ts

@@ -0,0 +1,120 @@
+// Written by `toa types`. Every run rewrites it.
+// What a manifest does not state belongs in a file of your own.
+
+import type { Options, Query, RemoteError } from '@toa.io/core/types'
+import type { Secret } from '@toa.io/extensions.configuration'
+import type { FetchInit } from '@toa.io/extensions.fetch'
+import type { Logs, Metrics, Span } from '@toa.io/extensions.telemetry'
+import type { Readable } from 'node:stream'
+
+export interface Entity {
+  revokedAt?: number
+  id: string
+  VERSION: number
+  CREATED: number
+  UPDATED: number
+  DELETED: number | null
+  REGION: number
+}
+
+export type EncryptInput = {
+  lifetime?: number
+  scopes?: string[]
+  permissions?: Record<string, string[]>
+  /** Resource URIs this token may be presented at (RFC 8707) */
+  audience?: string[]
+  key?: {
+    id: string
+    key: string
+  }
+  authority: string
+  identity: {
+    id: string
+    roles: string[]
+    [key: string]: unknown
+  }
+}
+
+export type EncryptOutput = string
+
+export type DecryptInput = string
+
+export type DecryptOutput = {
+  /** The authority the token names as its issuer */
+  iss: string
+  identity: {
+    id: string
+    roles: string[]
+    [key: string]: unknown
+  }
+  iat: string
+  exp?: string
+  /** Resource URIs this token may be presented at */
+  aud?: string | unknown[]
+  custom: boolean
+  refresh: boolean
+}
+
+export type AuthenticateInput = {
+  authority: string
+  credentials: string
+}
+
+export type AuthenticateOutput = {
+  identity: {
+    id: string
+    roles: string[]
+    [key: string]: unknown
+  }
+  refresh: boolean
+}
+
+export type IssueInput = {
+  authority: string
+  identity: string
+  lifetime?: number
+  scopes?: string[]
+  permissions?: Record<string, string[]>
+  /** Resource URIs this token may be presented at (RFC 8707) */
+  audience?: string[]
+  label: string
+}
+
+export type IssueOutput = {
+  kid: string
+  exp?: number
+  token: string
+}
+
+export type RevokeOutput = null
+
+export interface Component {
+  encrypt: (request: { input: EncryptInput, task?: boolean }, options?: Options) => Promise<EncryptOutput | RemoteError<"INACCESSIBLE_SCOPE">>
+  decrypt: (request: { input: DecryptInput, task?: boolean }, options?: Options) => Promise<DecryptOutput | RemoteError<"INVALID_TOKEN" | "INVALID_KEY" | "FORGED_KEY" | "REVOKED_KEY">>
+  authenticate: (request: { input: AuthenticateInput, task?: boolean }, options?: Options) => Promise<AuthenticateOutput | RemoteError<"UNRECOGNIZED" | "AUTHORITY_MISMATCH" | "TOKEN_REVOKED" | "INVALID_TOKEN" | "INVALID_KEY" | "FORGED_KEY" | "REVOKED_KEY">>
+  issue: (request: { input: IssueInput, task?: boolean }, options?: Options) => Promise<IssueOutput | RemoteError<"INACCESSIBLE_SCOPE">>
+  revoke: (request: { input?: null, query?: Query<Entity>, task?: boolean }, options?: Options) => Promise<RevokeOutput>
+  assign: (request: { input?: null, query?: Query<Entity>, task?: boolean }, options?: Options) => Promise<Entity>
+  ensure: (request: { input?: null, query?: Query<Entity>, task?: boolean }, options?: Options) => Promise<Entity>
+  enumerate: (request: { input?: null, query?: Query<Entity>, task?: boolean }, options?: Options) => Promise<Entity[]>
+  observe: (request: { input?: null, query?: Query<Entity>, task?: boolean }, options?: Options) => Promise<Entity | null>
+  stream: (request: { input?: null, query?: Query<Entity>, task?: boolean }, options?: Options) => Promise<Readable>
+  terminate: (request: { input?: null, query?: Query<Entity>, task?: boolean }, options?: Options) => Promise<Entity>
+}
+
+export interface Configuration {
+  keys: Array<{
+    id: string
+    key: Secret
+    format?: "jwe" | "paseto"
+  }>
+  /** Token expiration time in seconds (default 30 days) */
+  lifetime: number
+  /** Token refresh time in seconds (default 10 minutes) */
+  refresh: number
+  /** Custom token keys LRU cache configuration */
+  cache: {
+    max: number
+    ttl: number
+  }
+}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@toa.io/extensions.exposition",
-  "version": "1.0.0-alpha.31",
+  "version": "1.0.0-alpha.310",
+  "type": "module",
   "description": "Toa Exposition",
   "author": "temich <tema.gurtovoy@gmail.com>",
   "homepage": "https://github.com/toa-io/toa#readme",
@@ -16,39 +17,60 @@
   "publishConfig": {
     "access": "public"
   },
+  "files": [
+    "transpiled",
+    "components",
+    "schemas",
+    "ui/dist",
+    "readme.md",
+    "!**/tsconfig.tsbuildinfo",
+    "!**/*.test.*",
+    "!**/.env*"
+  ],
   "dependencies": {
-    "@toa.io/core": "1.0.0-alpha.31",
-    "@toa.io/generic": "1.0.0-alpha.31",
-    "@toa.io/schemas": "1.0.0-alpha.31",
-    "bcryptjs": "2.4.3",
-    "error-value": "0.3.0",
-    "js-yaml": "4.1.0",
-    "matchacho": "0.3.5",
-    "msgpackr": "1.10.1",
-    "negotiator": "0.6.3",
-    "paseto": "3.1.4"
-  },
-  "jest": {
-    "preset": "ts-jest",
-    "testEnvironment": "node"
+    "@toa.io/core": "1.0.0-alpha.310",
+    "@toa.io/definitions": "1.0.0-alpha.310",
+    "@toa.io/generic": "1.0.0-alpha.310",
+    "@toa.io/schemas": "1.0.0-alpha.310",
+    "content-type": "3.1.0",
+    "matchacho": "0.6.1",
+    "minimatch": "10.2.6",
+    "msgpackr": "2.1.0",
+    "negotiator": "1.1.0",
+    "openspan": "1.0.0-alpha.305"
   },
   "scripts": {
-    "test": "jest",
-    "transpile": "tsc && npm run transpile:bans && npm run transpile:basic && npm run transpile:tokens && npm run transpile:roles && npm run transpile:federation",
+    "test": "echo \"Error: run tests from root\" && exit 1",
+    "transpile": "tsc && npm run transpile:bans && npm run transpile:basic && npm run transpile:tokens && npm run transpile:roles && npm run transpile:federation && npm run transpile:credentials && npm run transpile:keys && npm run transpile:passkeys && npm run transpile:otp && npm run transpile:clients && npm run transpile:grants",
     "transpile:bans": "tsc -p ./components/identity.bans",
     "transpile:basic": "tsc -p ./components/identity.basic",
     "transpile:tokens": "tsc -p ./components/identity.tokens",
     "transpile:roles": "tsc -p ./components/identity.roles",
     "transpile:federation": "tsc -p ./components/identity.federation",
-    "features": "cucumber-js",
-    "features:security": "cucumber-js --tags @security"
+    "transpile:credentials": "tsc -p ./components/identity.credentials",
+    "transpile:keys": "tsc -p ./components/identity.keys",
+    "transpile:passkeys": "tsc -p ./components/identity.passkeys",
+    "transpile:otp": "tsc -p ./components/identity.otp",
+    "transpile:clients": "tsc -p ./components/identity.clients",
+    "transpile:grants": "tsc -p ./components/identity.grants",
+    "build:ui": "npm --prefix ui ci && npm --prefix ui run build",
+    "prepack": "npm run build:ui",
+    "features": "TSX_TSCONFIG_PATH=features/steps/tsconfig.json NODE_OPTIONS=--import=tsx cucumber-js",
+    "features:h2c": "TOA_EXPOSITION_PROTOCOL=h2c TOA_AGENT_PROTOCOL=h2c TSX_TSCONFIG_PATH=features/steps/tsconfig.json NODE_OPTIONS=--import=tsx cucumber-js",
+    "features:security": "TSX_TSCONFIG_PATH=features/steps/tsconfig.json NODE_OPTIONS=--import=tsx cucumber-js --tags @security",
+    "features:octets": "TSX_TSCONFIG_PATH=features/steps/tsconfig.json NODE_OPTIONS=--import=tsx cucumber-js features/octets.*"
   },
   "devDependencies": {
-    "@toa.io/agent": "1.0.0-alpha.31",
-    "@toa.io/extensions.storages": "1.0.0-alpha.31",
-    "@types/bcryptjs": "2.4.3",
-    "@types/cors": "2.8.13",
-    "@types/negotiator": "0.6.1"
+    "@node-rs/bcrypt": "1.10.9",
+    "@simplewebauthn/server": "14.0.2",
+    "@toa.io/agent": "*",
+    "@toa.io/extensions.storages": "*",
+    "@types/cors": "2.8.19",
+    "@types/negotiator": "0.6.5",
+    "jose": "6.2.12",
+    "js-yaml": "5.4.2",
+    "lru-cache": "11.5.2",
+    "paseto": "4.0.1"
   },
-  "gitHead": "91839a488176853a0731f49abc70dc7103ed7cca"
+  "gitHead": "d952c57f77279729e26d52d50c6df47138ad0a4f"
 }

package/readme.md

@@ -130,13 +130,26 @@ exposition:
     example: the.example.com
 ```
 
-| Option        | Description                                                                                                       |
-|---------------|-------------------------------------------------------------------------------------------------------------------|
-| `auhorities`  | Mapping of authority identifiers to domain names. See [Authorities](documentation/authorities.md).                |
-| `class`       | Ingress class.                                                                                                    |
-| `annotations` | Ingress annotations.                                                                                              |
-| `debug`       | Output server errors. Default `false`.                                                                            |
-| `trace`       | Output [server timing](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Server-Timing). Default `false`. |
+| Option        | Description                                                                                                                   |
+| ------------- | ----------------------------------------------------------------------------------------------------------------------------- |
+| `auhorities`  | Mapping of authority identifiers to domain names. See [Authorities](documentation/authorities.md).                            |
+| `class`       | Ingress class.                                                                                                                |
+| `annotations` | Ingress annotations.                                                                                                          |
+| `debug`       | Output server errors. Default `false`.                                                                                        |
+| `ip`          | Header the client address is read from. See [Client address](documentation/ip.md).                                            |
+| `bouncer`     | Meter of failed authentications per address. See [Identity authentication](documentation/identity.md#failed-authentications). |
+| `censor`      | Header values a request is answered `451` for. See [Censor](documentation/censor.md).                                         |
+| `oauth`       | Authorization server exposed to OAuth clients. See [OAuth](documentation/oauth.md).                                           |
+| `protocol`    | `h1` or `h2c`. See [Protocol](documentation/protocol.md).                                                                     |
+| `rpc`         | JSON-RPC at `/.rpc`; none is served without it. See [JSON-RPC](documentation/rpc.md).                                         |
+| `mcp`         | MCP at `/.mcp`; none is served without it. See [MCP](documentation/mcp.md).                                                   |
+
+### Observability
+
+Each response contains a `ray` header with the trace ID of the request, and
+[server timing](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Server-Timing) headers.
+
+Incoming trace context is continued, see [Tracing](documentation/tracing.md).
 
 ### Context resources
 
@@ -180,12 +193,31 @@ exposition:
       GET: foo.bar.observe
 ```
 
+## Ready probe
+
+The gateway serves `GET /.ready` on port `8004`, not on the port it serves traffic on, and
+telemetry's probe is disabled in its process.
+
+It answers `200` only after the in-process identity composition has connected, initial route
+discovery has settled, and the HTTP server is listening. Before that it answers `503` with a
+`retry-after`. When ready, the process also sends `process.send('ready')` for PM2 `wait_ready`.
+
+See also [telemetry ready probe](../telemetry/readme.md#ready-probe) and
+[reserved ports](../../documentation/ports.md).
+
 ## See Also
 
 - [Protocol support](documentation/protocol.md)
+- [Client address](documentation/ip.md)
+- [Censor](documentation/censor.md)
 - [Resource Tree Definition](documentation/tree.md)
 - [Identity authentication](documentation/identity.md)
 - [Access authorization](documentation/access.md)
+- [Resource introspection](documentation/introspection.md)
+- [Help](documentation/help.md)
+- [Resource discovery](documentation/discovery.md)
+- [OAuth authorization server](documentation/oauth.md)
+- [Consent](documentation/consent.md)
 - [BLOBs](documentation/octets.md)
 - [Components and resources](documentation/components.md)
 - [Caching](documentation/cache.md)

package/schemas/io/throttle.cos.yaml

@@ -0,0 +1,81 @@
+definitions:
+  component:
+    anyOf:
+      - type: string
+        enum:
+          - ip
+          - path
+          - route
+          - identity
+      - type: object
+        properties:
+          segment:
+            type: string
+        required:
+          - segment
+        additionalProperties: false
+  condition:
+    type: object
+    properties:
+      status:
+        type: number
+type: object
+properties:
+  key:
+    anyOf:
+      - anyOf:
+          - type: string
+            enum:
+              - ip
+              - path
+              - route
+              - identity
+          - type: object
+            properties:
+              segment:
+                type: string
+            required:
+              - segment
+            additionalProperties: false
+      - type: array
+        items:
+          anyOf:
+            - type: string
+              enum:
+                - ip
+                - path
+                - route
+                - identity
+            - type: object
+              properties:
+                segment:
+                  type: string
+              required:
+                - segment
+              additionalProperties: false
+        minItems: 1
+  condition:
+    anyOf:
+      - type: object
+        properties:
+          status:
+            type: number
+      - type: array
+        items:
+          type: object
+          properties:
+            status:
+              type: number
+        minItems: 1
+  requests:
+    type: integer
+    minimum: 1
+  interval:
+    description: Seconds
+    type: integer
+    minimum: 1
+additionalProperties: false
+required:
+  - key
+  - requests
+  - interval

package/schemas/octets/delete.cos.yaml

@@ -1,2 +1,15 @@
-workflow+: <string>
-_: true
+properties:
+  workflow:
+    oneOf:
+      - type: object
+        patternProperties:
+          ^.+$:
+            type: string
+      - type: array
+        items:
+          type: object
+          patternProperties:
+            ^.+$:
+              type: string
+nullable: true
+type: object

package/schemas/octets/get.cos.yaml

@@ -0,0 +1,5 @@
+properties:
+  meta:
+    type: boolean
+nullable: true
+type: object

package/schemas/octets/put.cos.yaml

@@ -0,0 +1,31 @@
+type: object
+nullable: true
+properties:
+  location:
+    type: string
+  accept:
+    anyOf:
+      - type: string
+      - type: array
+        items:
+          type: string
+  limit:
+    type: string
+    pattern: ^(\d+(\.\d+)?)([kmgtKMBGT]i?)?[bB]?$
+  trust:
+    type: array
+    items:
+      type: string
+  workflow:
+    anyOf:
+      - type: object
+        patternProperties:
+          ^.+$:
+            type: string
+      - type: array
+        items:
+          type: object
+          patternProperties:
+            ^.+$:
+              type: string
+additionalProperties: false

package/schemas/octets/workflow.cos.yaml

@@ -4,7 +4,6 @@ definitions:
     patternProperties:
       ^[a-zA-Z0-9_]+$:
         type: string
-
 oneOf:
   - $ref: '#/definitions/unit'
   - type: array

package/transpiled/Announcements.d.ts

@@ -0,0 +1,26 @@
+import { Connector } from '@toa.io/core';
+import type { Branch } from './Branch.ts';
+import type { Label } from './discovery.ts';
+import type { bindings } from '@toa.io/core/types';
+/**
+ * What every tenant in this process announces through, and what answers the gateway when it
+ * asks. One subscription rather than one per tenant: a subscription with no group consumes a
+ * queue the binding remembers by the exchange alone, so a second one here would share it and
+ * each ask would reach one tenant of the two.
+ *
+ * It is held by the extension's factory, which outlives every composition it hands a tenant to,
+ * and is taken down once the last of them has gone.
+ */
+export declare class Announcements extends Connector {
+    private readonly broadcast;
+    private readonly tenants;
+    constructor(broadcast: Broadcast);
+    open(): Promise<void>;
+    /** Counts a tenant in, until what it returns is called. */
+    register(announce: Announce): () => void;
+    transmit(branch: Branch): Promise<void>;
+    private announce;
+}
+type Announce = () => Promise<void>;
+type Broadcast = bindings.Broadcast<Label>;
+export {};

package/transpiled/Announcements.js

@@ -0,0 +1,34 @@
+import { Connector } from '@toa.io/core';
+/**
+ * What every tenant in this process announces through, and what answers the gateway when it
+ * asks. One subscription rather than one per tenant: a subscription with no group consumes a
+ * queue the binding remembers by the exchange alone, so a second one here would share it and
+ * each ask would reach one tenant of the two.
+ *
+ * It is held by the extension's factory, which outlives every composition it hands a tenant to,
+ * and is taken down once the last of them has gone.
+ */
+export class Announcements extends Connector {
+    broadcast;
+    tenants = new Set();
+    constructor(broadcast) {
+        super();
+        this.broadcast = broadcast;
+        this.depends(broadcast);
+    }
+    async open() {
+        await this.broadcast.receive('ping', this.announce.bind(this));
+    }
+    /** Counts a tenant in, until what it returns is called. */
+    register(announce) {
+        this.tenants.add(announce);
+        return () => this.tenants.delete(announce);
+    }
+    async transmit(branch) {
+        await this.broadcast.transmit('expose', branch);
+    }
+    async announce() {
+        await Promise.all(Array.from(this.tenants, (announce) => announce()));
+    }
+}
+//# sourceMappingURL=Announcements.js.map

package/transpiled/Announcements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Announcements.js","sourceRoot":"","sources":["../source/Announcements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAKxC;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAc,SAAQ,SAAS;IACzB,SAAS,CAAW;IACpB,OAAO,GAAG,IAAI,GAAG,EAAY,CAAA;IAE9C,YAAmB,SAAoB;QACrC,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAE1B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAEe,KAAK,CAAC,IAAI;QACxB,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAChE,CAAC;IAED,2DAA2D;IACpD,QAAQ,CAAC,QAAkB;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAE1B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,MAAc;QAClC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACjD,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IACvE,CAAC;CACF"}

package/transpiled/Branch.d.ts

@@ -1,7 +1,48 @@
-import type * as RTD from './RTD/syntax';
+import type { Contract } from '@toa.io/core';
+import type * as RTD from './RTD/syntax/index.ts';
+import type { Node } from './RTD/index.ts';
 export interface Branch {
     namespace: string;
     component: string;
     isolated: boolean;
     node: RTD.Node;
+    /**
+     * The version of the component whose routes these are. It is what the contract of every
+     * endpoint they reach belongs to, so a component that changed without its routes changing
+     * is still a different thing to expose.
+     */
+    version: string;
+    /**
+     * What the component whose routes these are provides. It travels with them because what the
+     * gateway forwards is described by the version that offered the route, and the map this
+     * process reads may name the version before it.
+     */
+    contract: Contract;
+    /** What the routes are, so that a tree changed by something other than the sources is one too. */
+    routes: string;
+    /**
+     * When the tenant that announced it started, by its own clock. A replica on its way
+     * out announces the same component with an older stamp than the one replacing it, and
+     * that is what tells the two apart when their versions differ.
+     */
+    timestamp: number;
 }
+/** A branch the gateway has merged, and the tenant it came from. */
+export interface Exposed {
+    version: string;
+    /** @see Branch.routes */
+    routes: string;
+    /** The start time of the tenant this branch came from. */
+    timestamp: number;
+    nodes: Node[];
+}
+/**
+ * What to do with an announcement about a component that already has a branch exposed.
+ *
+ * - `refresh`: the same component and the same routes, so its expiration is extended and its
+ *   endpoints left alone
+ * - `superseded`: it came from a tenant that started before the one exposed now
+ * - `merge`: everything else
+ */
+export declare function decide(exposed: Exposed, branch: Branch): Decision;
+export type Decision = 'merge' | 'refresh' | 'superseded';

package/transpiled/Branch.js

@@ -1,3 +1,16 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * What to do with an announcement about a component that already has a branch exposed.
+ *
+ * - `refresh`: the same component and the same routes, so its expiration is extended and its
+ *   endpoints left alone
+ * - `superseded`: it came from a tenant that started before the one exposed now
+ * - `merge`: everything else
+ */
+export function decide(exposed, branch) {
+    if (exposed.version === branch.version && exposed.routes === branch.routes)
+        return 'refresh';
+    if (branch.timestamp < exposed.timestamp)
+        return 'superseded';
+    return 'merge';
+}
 //# sourceMappingURL=Branch.js.map

package/transpiled/Branch.js.map

@@ -1 +1 @@
-{"version":3,"file":"Branch.js","sourceRoot":"","sources":["../source/Branch.ts"],"names":[],"mappings":""}
+{"version":3,"file":"Branch.js","sourceRoot":"","sources":["../source/Branch.ts"],"names":[],"mappings":"AAgDA;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,OAAgB,EAAE,MAAc;IACrD,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAE5F,IAAI,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS;QAAE,OAAO,YAAY,CAAA;IAE7D,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/transpiled/Composition.d.ts

@@ -1,11 +1,10 @@
-import { Connector } from '@toa.io/core';
-import { type Bootloader } from './Factory';
-export declare class Composition extends Connector {
-    private readonly boot;
-    constructor(boot: Bootloader);
-    protected open(): Promise<void>;
-    protected dispose(): void;
-}
+import type { Connector } from '@toa.io/core';
+import { type Host } from './Factory.ts';
+/**
+ * The components the gateway runs itself, composed before its tree is built: what they provide
+ * is what the process composing them states, and a directive made with the tree is given it.
+ */
+export declare function composition(host: Host): Promise<Connector>;
 export declare function components(): Components;
 interface Components {
     labels: string[];

package/transpiled/Composition.js

@@ -1,43 +1,27 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.components = exports.Composition = void 0;
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const core_1 = require("@toa.io/core");
-class Composition extends core_1.Connector {
-    boot;
-    constructor(boot) {
-        super();
-        this.boot = boot;
-    }
-    async open() {
-        const paths = find();
-        const composition = await this.boot.composition(paths);
-        await composition.connect();
-        this.depends(composition);
-        console.info('Composition complete.');
-    }
-    dispose() {
-        console.info('Composition shutdown complete.');
-    }
+import { readdirSync } from 'node:fs';
+import { resolve } from 'node:path';
+/**
+ * The components the gateway runs itself, composed before its tree is built: what they provide
+ * is what the process composing them states, and a directive made with the tree is given it.
+ */
+export async function composition(host) {
+    return await host.composition(find());
 }
-exports.Composition = Composition;
 function find() {
-    return entries().map((entry) => (0, node_path_1.resolve)(ROOT, entry.name));
+    return entries().map((entry) => resolve(ROOT, entry.name));
 }
 function entries() {
-    const entries = (0, node_fs_1.readdirSync)(ROOT, { withFileTypes: true });
+    const entries = readdirSync(ROOT, { withFileTypes: true });
     return entries.filter((entry) => entry.isDirectory());
 }
-function components() {
+export function components() {
     const labels = [];
     const paths = [];
     for (const entry of entries()) {
         labels.push(entry.name.replace('.', '-'));
-        paths.push((0, node_path_1.resolve)(ROOT, entry.name));
+        paths.push(resolve(ROOT, entry.name));
     }
     return { labels, paths };
 }
-exports.components = components;
-const ROOT = (0, node_path_1.resolve)(__dirname, '../components/');
+const ROOT = resolve(import.meta.dirname, '../components/');
 //# sourceMappingURL=Composition.js.map

package/transpiled/Composition.js.map

@@ -1 +1 @@
-{"version":3,"file":"Composition.js","sourceRoot":"","sources":["../source/Composition.ts"],"names":[],"mappings":";;;AAAA,qCAAkD;AAClD,yCAAmC;AACnC,uCAAwC;AAGxC,MAAa,WAAY,SAAQ,gBAAS;IACvB,IAAI,CAAY;IAEjC,YAAoB,IAAgB;QAClC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEkB,KAAK,CAAC,IAAI;QAC3B,MAAM,KAAK,GAAG,IAAI,EAAE,CAAA;QACpB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAEtD,MAAM,WAAW,CAAC,OAAO,EAAE,CAAA;QAE3B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAEzB,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACvC,CAAC;IAEkB,OAAO;QACxB,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAChD,CAAC;CACF;AAtBD,kCAsBC;AAED,SAAS,IAAI;IACX,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mBAAO,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,OAAO;IACd,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACzC,KAAK,CAAC,IAAI,CAAC,IAAA,mBAAO,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAVD,gCAUC;AAOD,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA"}
+{"version":3,"file":"Composition.js","sourceRoot":"","sources":["../source/Composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAe,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAInC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAU;IAC1C,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,IAAI;IACX,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,OAAO;IACd,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAOD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA"}