@toa.io/extensions.exposition 1.0.0-alpha.31 → 1.0.0-alpha.310

package/transpiled/HTTP/Context.js

@@ -1,60 +1,132 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Context = void 0;
-const negotiator_1 = __importDefault(require("negotiator"));
-const Timing_1 = require("./Timing");
-const formats_1 = require("./formats");
-const messages_1 = require("./messages");
-class Context {
+import { buffer } from 'node:stream/consumers';
+import Negotiator from 'negotiator';
+import { console } from 'openspan';
+import { Timing } from './Timing.js';
+import { formats, types } from './formats/index.js';
+import { read } from './messages.js';
+import { address } from './address.js';
+import { NONE as UNMATCHED } from '../measurements.js';
+export class Context {
     authority;
     request;
+    /** the client address, read as the deployment says; none otherwise, see `documentation/ip.md` */
+    ip;
     url;
     subtype = null;
     encoder = null;
     timing;
-    debug;
+    /**
+     * The labels the request is measured under. `route` is `none` until the tree matches one, and
+     * the object is the very one the span carries — so setting it here is what the metric records.
+     */
+    labels = { method: 'GET', route: UNMATCHED };
+    /**
+     * Aborted when the reply is finished, when the connection is gone, or when the gateway is
+     * stopping. What is still waiting on something else when it fires abandons it.
+     */
+    signal;
+    /**
+     * Whether this is a procedure a request made, rather than the request. What forks one
+     * says so, and a directive that answers differently to a procedure than to a request
+     * reads it here.
+     */
+    procedural = false;
+    /**
+     * Whether this describes a resource rather than calling one. What builds a describing
+     * context says so, and a directive that answers differently to a description than to a
+     * call reads it here.
+     */
+    exploratory = false;
+    /**
+     * The process a stateful operation is called on, as the route carries it. What `map:instance`
+     * takes out of the route is left here for the endpoint to call with.
+     */
+    instance;
+    /**
+     * What this request receives of the operation's output, as `io:output` states it: the
+     * properties of each object it answers, and none of it where the list is empty. Absent where
+     * the reply passes whole.
+     */
+    output;
+    /**
+     * Whether the call this request makes may only read, as `io:readonly` states it. Absent where
+     * no route states one, and the method the request was made with is then what answers.
+     */
+    readonly;
+    /**
+     * Whether anything on the way out reads the body: a directive that takes a property of it, or
+     * builds an answer around it. What does says so, and a reply is then values rather than bytes.
+     */
+    reads;
     pipelines = {
         body: [],
         response: []
     };
-    constructor(authority, request, properties) {
+    consumed = false;
+    // eslint-disable-next-line max-params
+    constructor(authority, request, properties, url, signal) {
         this.authority = authority;
         this.request = request;
-        this.url = new URL(request.url, `https://${request.headers.host}`);
-        this.timing = new Timing_1.Timing(properties.trace);
-        this.debug = properties.debug;
-        if (this.debug)
-            this.log(request);
-        if (this.request.headers.accept !== undefined) {
-            const match = SUBTYPE.exec(this.request.headers.accept);
+        this.signal = signal;
+        this.ip = address(request, properties.ip);
+        // parsed by the server, which had to parse it anyway to know the request is valid
+        this.url = url;
+        this.timing = new Timing();
+        this.log(request);
+        const accept = this.request.headers.accept;
+        if (accept !== undefined) {
+            const match = SUBTYPE.exec(accept);
             if (match !== null) {
                 const { type, subtype, suffix } = match.groups;
                 this.request.headers.accept = `${type}/${suffix}`;
                 this.subtype = subtype;
             }
         }
-        const negotiator = new negotiator_1.default(this.request);
-        const mediaType = negotiator.mediaType(formats_1.types);
-        if (mediaType !== undefined)
-            this.encoder = formats_1.formats[mediaType];
+        const encoder = negotiate(this.request);
+        if (encoder !== undefined)
+            this.encoder = encoder;
+    }
+    async buffer() {
+        this.consumed = true;
+        return await buffer(this.request);
     }
     async body() {
-        const value = await (0, messages_1.read)(this);
-        return this.pipelines.body.length === 0
-            ? value
-            : this.pipelines.body.reduce((value, transform) => transform(value), value);
+        let value = this.consumed ? null : await read(this);
+        for (const transform of this.pipelines.body)
+            value = await transform(value);
+        return value;
     }
     log(request) {
-        const message = `${request.method} ${request.url}`;
-        const { authorization, ...headers } = request.headers;
-        if (authorization !== undefined)
-            headers.authorization = authorization.slice(0, authorization.indexOf(' '));
-        console.debug(message, headers);
+        // built only when the line is written, which at `info` it is not
+        console.debug('Received request', () => {
+            const headers = { ...request.headers };
+            if (headers.authorization !== undefined)
+                headers.authorization = SCHEME.exec(headers.authorization)?.[1] ?? '[malformed]';
+            return { method: request.method, url: request.url, headers };
+        });
     }
 }
-exports.Context = Context;
+/** The scheme of an `authorization` header; the value after it is a credential. */
+const SCHEME = /^(\w{1,32})(?: |$)/;
+/**
+ * Negotiation parses the header and sorts the candidates, and the value repeats:
+ * clients send one of a handful of `accept` strings. Bounded, the header is theirs.
+ */
+function negotiate(request) {
+    const accept = request.headers.accept ?? '';
+    const known = NEGOTIATED.get(accept);
+    if (known !== undefined)
+        return known === NONE ? undefined : known;
+    const mediaType = new Negotiator(request).mediaType(types);
+    const encoder = mediaType === undefined ? undefined : formats[mediaType];
+    if (NEGOTIATED.size >= NEGOTIATED_LIMIT)
+        NEGOTIATED.clear();
+    NEGOTIATED.set(accept, encoder ?? NONE);
+    return encoder;
+}
+/** distinguishes "negotiated to nothing" from "not negotiated yet" */
+const NONE = Symbol('not acceptable');
+const NEGOTIATED = new Map();
+const NEGOTIATED_LIMIT = 1024;
 const SUBTYPE = /^(?<type>\w{1,32})\/(vnd\.toa\.(?<subtype>\S{1,32})\+)(?<suffix>\S{1,32})$/;
 //# sourceMappingURL=Context.js.map

package/transpiled/HTTP/Context.js.map

@@ -1 +1 @@
-{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../source/HTTP/Context.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AACnC,qCAAiC;AACjC,uCAAuD;AACvD,yCAAiC;AAIjC,MAAa,OAAO;IACF,SAAS,CAAQ;IACjB,OAAO,CAAiB;IACxB,GAAG,CAAK;IACR,OAAO,GAAkB,IAAI,CAAA;IAC7B,OAAO,GAAkB,IAAI,CAAA;IAC7B,MAAM,CAAQ;IACd,KAAK,CAAS;IAEd,SAAS,GAAc;QACrC,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,EAAE;KACb,CAAA;IAED,YAAoB,SAAiB,EAAE,OAAwB,EAAE,UAAsB;QACrF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QAEtB,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM,GAAG,IAAI,eAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;QAE7B,IAAI,IAAI,CAAC,KAAK;YACZ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEnB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAEvD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,EACJ,IAAI,EACJ,OAAO,EACP,MAAM,EACP,GAAG,KAAK,CAAC,MAAO,CAAA;gBAEjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAA;gBACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACxB,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,eAAK,CAAC,CAAA;QAE7C,IAAI,SAAS,KAAK,SAAS;YACzB,IAAI,CAAC,OAAO,GAAG,iBAAO,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,KAAK,GAAG,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAA;QAE9B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACrC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;IAC/E,CAAC;IAEO,GAAG,CAAE,OAAwB;QACnC,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;QAClD,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAA;QAErD,IAAI,aAAa,KAAK,SAAS;YAC7B,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAE5E,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACjC,CAAC;CACF;AAhED,0BAgEC;AAiBD,MAAM,OAAO,GAAG,4EAA4E,CAAA"}
+{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../source/HTTP/Context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,UAAU,MAAM,YAAY,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAe,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,OAAO,EAAE,IAAI,IAAI,SAAS,EAAe,MAAM,oBAAoB,CAAA;AAGnE,MAAM,OAAO,OAAO;IACF,SAAS,CAAQ;IACjB,OAAO,CAAiB;IAExC,iGAAiG;IACjF,EAAE,CAAoB;IACtB,GAAG,CAAK;IACR,OAAO,GAAkB,IAAI,CAAA;IAC7B,OAAO,GAAkB,IAAI,CAAA;IAC7B,MAAM,CAAQ;IAE9B;;;OAGG;IACI,MAAM,GAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IAE3D;;;OAGG;IACa,MAAM,CAAa;IAEnC;;;;OAIG;IACa,UAAU,GAAY,KAAK,CAAA;IAE3C;;;;OAIG;IACa,WAAW,GAAY,KAAK,CAAA;IAE5C;;;OAGG;IACI,QAAQ,CAAS;IAExB;;;;OAIG;IACI,MAAM,CAAW;IAExB;;;OAGG;IACI,QAAQ,CAAU;IAEzB;;;OAGG;IACI,KAAK,CAAU;IAEN,SAAS,GAAc;QACrC,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,EAAE;KACb,CAAA;IAEO,QAAQ,GAAG,KAAK,CAAA;IAExB,sCAAsC;IACtC,YACE,SAAiB,EACjB,OAAwB,EACxB,UAAsB,EACtB,GAAQ,EACR,MAAmB;QAEnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,CAAA;QAEzC,kFAAkF;QAClF,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QAC1B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAElC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,MAAO,CAAA;gBAE/C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,EAAE,CAAA;gBACjD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;YACxB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAEvC,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACnD,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QAEpB,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;QAEnD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI;YAAE,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;QAE3E,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,GAAG,CAAC,OAAwB;QAClC,iEAAiE;QACjE,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,EAAE;YACrC,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;YAEtC,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS;gBACrC,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,CAAA;YAElF,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,MAAM,GAAG,oBAAoB,CAAA;AAYnC;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAwB;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAEpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;IAElE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAExE,IAAI,UAAU,CAAC,IAAI,IAAI,gBAAgB;QAAE,UAAU,CAAC,KAAK,EAAE,CAAA;IAE3D,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,CAAA;IAEvC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,CAAsB,CAAA;AAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;AAC5C,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAE7B,MAAM,OAAO,GACX,4EAA4E,CAAA"}

package/transpiled/HTTP/Probe.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The readiness probe, on a port of its own.
+ *
+ * It cannot share the port the gateway serves traffic on: kubelet speaks HTTP/1.1 only, and a
+ * cleartext HTTP/2 server answers nothing else on its port — there is no ALPN to negotiate with.
+ *
+ * It is the gateway's own readiness, not the process's. The identity composition nested in this
+ * process connects before route discovery has settled, so a probe tied to that composition would
+ * report ready while the gateway still had no routes and no open port.
+ */
+export declare class Probe {
+    private readonly server;
+    private readonly port;
+    private readonly path;
+    private ready;
+    private startedAt;
+    private listening;
+    private skipped;
+    constructor(port: number, path?: string);
+    listen(): Promise<void>;
+    /** The gateway is listening and has routes: answer `200`. */
+    complete(): void;
+    close(): Promise<void>;
+    private listener;
+}
+export declare const PATH = "/.ready";

package/transpiled/HTTP/Probe.js

@@ -0,0 +1,80 @@
+import * as http from 'node:http';
+import { console } from 'openspan';
+/**
+ * The readiness probe, on a port of its own.
+ *
+ * It cannot share the port the gateway serves traffic on: kubelet speaks HTTP/1.1 only, and a
+ * cleartext HTTP/2 server answers nothing else on its port — there is no ALPN to negotiate with.
+ *
+ * It is the gateway's own readiness, not the process's. The identity composition nested in this
+ * process connects before route discovery has settled, so a probe tied to that composition would
+ * report ready while the gateway still had no routes and no open port.
+ */
+export class Probe {
+    server = http.createServer();
+    port;
+    path;
+    ready = false;
+    startedAt = 0;
+    listening = false;
+    skipped = false;
+    constructor(port, path = PATH) {
+        this.port = port;
+        this.path = path;
+        this.server.on('request', (request, response) => this.listener(request, response));
+    }
+    async listen() {
+        this.startedAt = Date.now();
+        try {
+            await new Promise((resolve, reject) => {
+                this.server.once('error', reject);
+                this.server.listen(this.port, () => {
+                    this.server.removeListener('error', reject);
+                    resolve();
+                });
+            });
+        }
+        catch (error) {
+            // processes sharing a host share the port; in a pod nothing else claims it
+            if (error?.code === 'EADDRINUSE') {
+                this.skipped = true;
+                console.warn('Ready probe port already in use, skipping', { port: this.port });
+                return;
+            }
+            throw error;
+        }
+        this.listening = true;
+        // a probe answers while the process runs; it must never be the reason it keeps running
+        this.server.unref();
+    }
+    /** The gateway is listening and has routes: answer `200`. */
+    complete() {
+        this.ready = true;
+        // the IPC signal is not tied to the probe: a process that gave up the shared port is
+        // still ready, and pm2 `wait_ready` would otherwise block until `listen_timeout`
+        process.send?.('ready');
+    }
+    async close() {
+        this.ready = false;
+        if (!this.listening || this.skipped)
+            return;
+        this.listening = false;
+        // keep-alive connections would otherwise hold the server handle, delaying the exit
+        this.server.closeAllConnections();
+        await new Promise((resolve) => this.server.close(() => resolve()));
+    }
+    listener(request, response) {
+        if (request.url !== this.path) {
+            response.writeHead(404).end();
+            return;
+        }
+        if (this.ready)
+            response.writeHead(200, { 'cache-control': 'no-store' }).end();
+        else {
+            const remaining = Math.ceil((Date.now() - this.startedAt) / 1000).toString();
+            response.writeHead(503, { 'retry-after': remaining }).end();
+        }
+    }
+}
+export const PATH = '/.ready';
+//# sourceMappingURL=Probe.js.map

package/transpiled/HTTP/Probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Probe.js","sourceRoot":"","sources":["../../source/HTTP/Probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAElC;;;;;;;;;GASG;AACH,MAAM,OAAO,KAAK;IACC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;IAC5B,IAAI,CAAQ;IACZ,IAAI,CAAQ;IAErB,KAAK,GAAG,KAAK,CAAA;IACb,SAAS,GAAG,CAAC,CAAA;IACb,SAAS,GAAG,KAAK,CAAA;IACjB,OAAO,GAAG,KAAK,CAAA;IAEvB,YAAmB,IAAY,EAAE,IAAI,GAAW,IAAI;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAEhB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;IACpF,CAAC;IAEM,KAAK,CAAC,MAAM;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAE3B,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;gBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;oBACjC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;oBAC3C,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,2EAA2E;YAC3E,IAAI,KAAK,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;gBAEnB,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBAE9E,OAAM;YACR,CAAC;YAED,MAAM,KAAK,CAAA;QACb,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QAErB,uFAAuF;QACvF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;IAED,6DAA6D;IACtD,QAAQ;QACb,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QAEjB,qFAAqF;QACrF,iFAAiF;QACjF,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAA;IACzB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAElB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QAE3C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;QAEtB,mFAAmF;QACnF,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAA;QAEjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAC1E,CAAC;IAEO,QAAQ,CAAC,OAA6B,EAAE,QAA6B;QAC3E,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;YAE7B,OAAM;QACR,CAAC;QAED,IAAI,IAAI,CAAC,KAAK;YAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;aACzE,CAAC;YACJ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;YAE5E,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAA;QAC7D,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,CAAA"}

package/transpiled/HTTP/Server.d.ts

@@ -1,36 +1,85 @@
 import { Connector } from '@toa.io/core';
-import { type OutgoingMessage } from './messages';
-import { Context } from './Context';
+import { type OutgoingMessage } from './messages.ts';
+import { Context } from './Context.ts';
+import type { Gate } from '@toa.io/core';
+import type { Protocol } from './types.ts';
+import type { Bouncer, Censor, MCPAnnotation as MCP, OAuth, RPCAnnotation as RPC } from '@toa.io/definitions/extensions.exposition';
 export declare class Server extends Connector {
     private readonly server;
     private readonly properties;
+    /** Host to authority. A map: a `Host` of `constructor` names what a plain object answers. */
     private readonly authorities;
+    /** Tracked for the drain: `Http2Server` has no `closeIdleConnections`. */
+    private readonly sessions;
+    /** Every request not yet answered in full, by what it is answered on. */
+    private readonly inflight;
+    /** Whether the process has been told to go quiet, see `stop`. */
+    private quiesced;
+    /**
+     * The gate that holds the gateway, where there is one. While it is down the port stays bound
+     * and every request is answered `503`: a client is owed an answer, and a closed port is not
+     * one — nor is one that whatever fronts the deployment invents on its behalf.
+     */
+    private gate?;
+    /** What a halt takes the gateway down by, so that this can say when it is back. */
+    gated(gate: Gate): void;
+    /** Resolves the wait for the last of them, while the stop is waiting. */
+    private drained;
+    private readonly probe;
     private process?;
-    private ready;
-    private startedAt;
     private constructor();
     static create(options: Options): Server;
-    attach(process: Processing): void;
+    attach(process: Processor): void;
     protected open(): Promise<void>;
     protected close(): Promise<void>;
+    private settled;
+    /**
+     * Tracks a request until its reply is finished or its connection is gone: a response
+     * emits `close` on either, under both protocols.
+     */
+    private track;
+    /** A malformed HTTP/1.1 request has no framing to answer in, so the status line is written by hand. */
+    private h1;
+    /** HTTP/2 has no `clientError`: failures surface per session, per stream, or per frame. */
+    private h2;
+    /**
+     * While the process is quiesced the port stays bound and every request is answered `503`: a
+     * refused connection is not an answer, and the answer has to be the application's.
+     */
+    protected pause(): void;
+    protected unpause(): void;
     private listener;
+    private serve;
     private success;
     private fail;
 }
-export declare const PORT = 8000;
-export declare const DELAY = 3;
+export declare const DRAIN = 10;
 interface Properties {
     authorities: Record<string, string>;
     methods: Set<string>;
     debug: boolean;
-    trace: boolean;
     port: number;
-    delay: number;
+    drain: number;
+    protocol: Protocol;
+    /** Port of the readiness probe, which is HTTP/1.1 whatever the gateway serves. */
+    probe: number;
+    /** The header the client address is read from; the connection's address without one. */
+    ip?: string;
+    /** Failed authentications an address may make; none are metered unless set. */
+    bouncer?: Bouncer;
+    /** Header values a request is answered 451 for; none is refused without it. */
+    censor?: Censor;
+    /** The authorization server this context exposes; none is exposed without it. */
+    oauth?: OAuth;
+    /** JSON-RPC at `/.rpc`; none is served without it. */
+    rpc?: RPC;
+    /** MCP at `/.mcp`; none is served without it. */
+    mcp?: MCP;
 }
 export type Options = {
     authorities: Properties['authorities'];
 } & {
     [K in Exclude<keyof Properties, 'authorities'>]?: Properties[K];
 };
-export type Processing = (input: Context) => Promise<OutgoingMessage>;
+export type Processor = (input: Context) => Promise<OutgoingMessage>;
 export {};