@toa.io/extensions.exposition 1.0.0-alpha.31 → 1.0.0-alpha.310

package/transpiled/directives/mcp/MCP.d.ts

@@ -0,0 +1,17 @@
+import { Tool } from './Tool.ts';
+import type { DirectiveFamily } from '../../RTD/index.ts';
+import type { Introspection } from '../../Introspection.ts';
+/** The name the family is declared under, and what `MCP` asks a method for. */
+export declare const FAMILY = "mcp";
+export declare class MCP implements DirectiveFamily<Tool> {
+    readonly name = "mcp";
+    readonly mandatory = false;
+    /** Whether this method is published, which is what the nearest declaration says. */
+    static published(directives: Tool[] | undefined): boolean;
+    /**
+     * Whether this method is published to a model, which is what the route declares. Whether
+     * one is served at all is the annotation's, and a route says nothing of that.
+     */
+    explain(directives: Tool[], introspection: Introspection): Introspection;
+    create(name: string, value: unknown, _: unknown, route: string): Tool;
+}

package/transpiled/directives/mcp/MCP.js

@@ -0,0 +1,25 @@
+import { Tool } from './Tool.js';
+/** The name the family is declared under, and what `MCP` asks a method for. */
+export const FAMILY = 'mcp';
+export class MCP {
+    name = FAMILY;
+    mandatory = false;
+    /** Whether this method is published, which is what the nearest declaration says. */
+    static published(directives) {
+        return directives?.[0]?.published ?? false;
+    }
+    /**
+     * Whether this method is published to a model, which is what the route declares. Whether
+     * one is served at all is the annotation's, and a route says nothing of that.
+     */
+    explain(directives, introspection) {
+        return MCP.published(directives) ? { ...introspection, mcp: true } : introspection;
+    }
+    // eslint-disable-next-line max-params
+    create(name, value, _, route) {
+        if (name !== 'tool')
+            throw new Error(`Unknown directive: mcp:${name}`);
+        return new Tool(value, route);
+    }
+}
+//# sourceMappingURL=MCP.js.map

package/transpiled/directives/mcp/MCP.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCP.js","sourceRoot":"","sources":["../../../source/directives/mcp/MCP.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,CAAA;AAE3B,MAAM,OAAO,GAAG;IACE,IAAI,GAAG,MAAM,CAAA;IACb,SAAS,GAAG,KAAK,CAAA;IAEjC,oFAAoF;IAC7E,MAAM,CAAC,SAAS,CAAC,UAA8B;QACpD,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,KAAK,CAAA;IAC5C,CAAC;IAED;;;OAGG;IACI,OAAO,CAAC,UAAkB,EAAE,aAA4B;QAC7D,OAAO,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAA;IACpF,CAAC;IAED,sCAAsC;IAC/B,MAAM,CAAC,IAAY,EAAE,KAAc,EAAE,CAAU,EAAE,KAAa;QACnE,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAA;QAEtE,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAC/B,CAAC;CACF"}

package/transpiled/directives/mcp/Tool.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Whether one method is published to a model. Declaring it is what publishes it, and it
+ * says nothing else — what a tool is, is [`help:method`](../help/Help.ts), which is what
+ * describes the method to everything else as well.
+ *
+ * `false` withdraws one: the declaration is inherited, as every directive is, and a node
+ * publishing what is under it is how a subtree is published at all.
+ */
+export declare class Tool {
+    readonly published: boolean;
+    constructor(value: unknown, route: string);
+}

package/transpiled/directives/mcp/Tool.js

@@ -0,0 +1,24 @@
+import { refusal } from '../../RPC/names.js';
+import { segment } from '../../RTD/segment.js';
+/**
+ * Whether one method is published to a model. Declaring it is what publishes it, and it
+ * says nothing else — what a tool is, is [`help:method`](../help/Help.ts), which is what
+ * describes the method to everything else as well.
+ *
+ * `false` withdraws one: the declaration is inherited, as every directive is, and a node
+ * publishing what is under it is how a subtree is published at all.
+ */
+export class Tool {
+    published;
+    constructor(value, route) {
+        if (typeof value !== 'boolean')
+            throw new Error('Directive mcp:tool: the value is whether the method is published; what it is, is `help:method`');
+        // a tool is called by name, so a route that cannot be named cannot be one — said where
+        // the mistake is, rather than as a tool that is quietly never listed
+        if (value)
+            if (refusal(segment(route)) !== null)
+                throw new Error(`Directive mcp:tool: '${route}' holds a segment no tool name can spell`);
+        this.published = value;
+    }
+}
+//# sourceMappingURL=Tool.js.map

package/transpiled/directives/mcp/Tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Tool.js","sourceRoot":"","sources":["../../../source/directives/mcp/Tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C;;;;;;;GAOG;AACH,MAAM,OAAO,IAAI;IACC,SAAS,CAAS;IAElC,YAAmB,KAAc,EAAE,KAAa;QAC9C,IAAI,OAAO,KAAK,KAAK,SAAS;YAC5B,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAA;QAEH,uFAAuF;QACvF,qEAAqE;QACrE,IAAI,KAAK;YACP,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI;gBAClC,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,0CAA0C,CACxE,CAAA;QAEL,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;IACxB,CAAC;CACF"}

package/transpiled/directives/mcp/index.d.ts

@@ -0,0 +1,4 @@
+import { MCP } from './MCP.ts';
+export declare const mcp: MCP;
+export { FAMILY, MCP } from './MCP.ts';
+export type { Tool } from './Tool.ts';

package/transpiled/directives/mcp/index.js

@@ -0,0 +1,4 @@
+import { MCP } from './MCP.js';
+export const mcp = new MCP();
+export { FAMILY, MCP } from './MCP.js';
+//# sourceMappingURL=index.js.map

package/transpiled/directives/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../source/directives/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAE9B,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;AAE5B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA"}

package/transpiled/directives/oauth/Discovery.d.ts

@@ -0,0 +1,23 @@
+import type * as http from '../../HTTP/index.ts';
+import type { Input, Output } from '../../io.ts';
+import type { Interceptor } from '../../Interception.ts';
+/**
+ * What a client reads before it can authenticate: where the authorization server is, and
+ * what this resource expects. Both are fixed paths a specification names, both must be
+ * answered to anyone, and both are a function of the annotation alone — nothing is read to
+ * build them, so they are built once per authority and served as they are.
+ *
+ * An interceptor rather than a route because `auth` runs before any directive: a client
+ * re-reading discovery while holding a stale token would have it verified, and then be
+ * refused a document that has to be public.
+ */
+export declare class Discovery implements Interceptor {
+    /**
+     * A map, because the key is the request's authority and an unconfigured host is passed
+     * through as itself: `Host: constructor` names something a plain object answers on its own.
+     */
+    private readonly authorities;
+    mount(options: http.Options): void;
+    reset(): void;
+    intercept(input: Input): Output;
+}

package/transpiled/directives/oauth/Discovery.js

@@ -0,0 +1,55 @@
+import { documents } from './documents.js';
+/**
+ * What a client reads before it can authenticate: where the authorization server is, and
+ * what this resource expects. Both are fixed paths a specification names, both must be
+ * answered to anyone, and both are a function of the annotation alone — nothing is read to
+ * build them, so they are built once per authority and served as they are.
+ *
+ * An interceptor rather than a route because `auth` runs before any directive: a client
+ * re-reading discovery while holding a stale token would have it verified, and then be
+ * refused a document that has to be public.
+ */
+export class Discovery {
+    /**
+     * A map, because the key is the request's authority and an unconfigured host is passed
+     * through as itself: `Host: constructor` names something a plain object answers on its own.
+     */
+    authorities = new Map();
+    mount(options) {
+        this.authorities.clear();
+        if (options.oauth === undefined)
+            return;
+        /*
+         * `https` always: RFC 8414 has an issuer be one, and OAuth 2.1 has every endpoint of an
+         * authorization server be one — the loopback exception is a client's redirect URI, not
+         * a server's address. A gateway served without TLS has no authorization server a client
+         * may use, and naming it `http` would hide that behind documents none should accept.
+         *
+         * The host is the configured one, not the request's, which is the client's to write: a
+         * forged one would have these documents name someone else's token endpoint.
+         */
+        for (const [authority, host] of Object.entries(options.authorities))
+            this.authorities.set(authority, documents(`https://${host}`, options.oauth));
+    }
+    reset() {
+        this.authorities.clear();
+    }
+    intercept(input) {
+        const known = this.authorities.get(input.authority);
+        if (known === undefined)
+            return null;
+        // every reply, not just a document's: the challenge is what points a client here
+        input.pipelines.response.push((response) => {
+            if (response.status !== UNAUTHORIZED)
+                return;
+            response.headers ??= new Headers();
+            response.headers.set('www-authenticate', known.challenge(input.url.pathname));
+        });
+        const body = known.read(input.url.pathname);
+        if (body === undefined)
+            return null;
+        return { body, headers: new Headers({ 'cache-control': 'public, max-age=3600' }) };
+    }
+}
+const UNAUTHORIZED = 401;
+//# sourceMappingURL=Discovery.js.map

package/transpiled/directives/oauth/Discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Discovery.js","sourceRoot":"","sources":["../../../source/directives/oauth/Discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAA;AAK1D;;;;;;;;;GASG;AACH,MAAM,OAAO,SAAS;IACpB;;;OAGG;IACc,WAAW,GAAG,IAAI,GAAG,EAAqB,CAAA;IAEpD,KAAK,CAAC,OAAqB;QAChC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;QAExB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAM;QAEvC;;;;;;;;WAQG;QACH,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IAChF,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAA;IAC1B,CAAC;IAEM,SAAS,CAAC,KAAY;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAEnD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAEpC,iFAAiF;QACjF,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY;gBAAE,OAAM;YAE5C,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/E,CAAC,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAE3C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QAEnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,eAAe,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAA;IACpF,CAAC;CACF;AAED,MAAM,YAAY,GAAG,GAAG,CAAA"}

package/transpiled/directives/oauth/documents.d.ts

@@ -0,0 +1,9 @@
+import type { OAuth } from '@toa.io/definitions/extensions.exposition';
+/** The discovery documents of one authority, and the challenge that points at them. */
+export interface Documents {
+    /** The document a path names, or nothing when it names none. */
+    read: (pathname: string) => object | undefined;
+    /** `WWW-Authenticate` for a request to this path, which names the resource it failed at. */
+    challenge: (pathname: string) => string;
+}
+export declare function documents(issuer: string, oauth: OAuth): Documents;

package/transpiled/directives/oauth/documents.js

@@ -0,0 +1,82 @@
+export function documents(issuer, oauth) {
+    const server = authorizationServer(issuer, oauth);
+    const resources = protectedResources(issuer, oauth);
+    const scope = oauth.scopes === undefined ? '' : `, scope="${oauth.scopes.join(' ')}"`;
+    function read(pathname) {
+        if (pathname === AUTHORIZATION_SERVER || pathname === OPENID_CONFIGURATION)
+            return server;
+        if (pathname.startsWith(PROTECTED_RESOURCE))
+            return resources.get(pathname.slice(PROTECTED_RESOURCE.length));
+        return undefined;
+    }
+    function challenge(pathname) {
+        return `Bearer resource_metadata="${issuer}${PROTECTED_RESOURCE}${suffix(oauth, pathname)}"${scope}`;
+    }
+    return { read, challenge };
+}
+/**
+ * RFC 8414. `authorization_endpoint` is the application's own page and may be anywhere;
+ * everything else this extension serves. Both flags are load-bearing for a client that
+ * prefers Client ID Metadata Documents: without either it falls back to registration.
+ */
+function authorizationServer(issuer, oauth) {
+    const metadata = {
+        issuer,
+        authorization_endpoint: oauth.authorize,
+        token_endpoint: `${issuer}${TOKEN}`,
+        response_types_supported: ['code'],
+        grant_types_supported: ['authorization_code'],
+        code_challenge_methods_supported: ['S256'],
+        token_endpoint_auth_methods_supported: ['none'],
+        client_id_metadata_document_supported: true,
+        authorization_response_iss_parameter_supported: true
+    };
+    if (oauth.registration === 'open')
+        metadata.registration_endpoint = `${issuer}${REGISTRATION}`;
+    if (oauth.scopes !== undefined)
+        metadata.scopes_supported = oauth.scopes;
+    return metadata;
+}
+/**
+ * RFC 9728, keyed by the path the well-known segment is followed by: a client resolving
+ * `https://host/mcp` reads `/.well-known/oauth-protected-resource/mcp`, and one that names
+ * no path reads the document at the origin.
+ */
+function protectedResources(issuer, oauth) {
+    const map = new Map();
+    for (const path of oauth.resources ?? [])
+        map.set(canonical(path), resource(issuer, canonical(path), oauth));
+    map.set('', resource(issuer, '', oauth));
+    return map;
+}
+function resource(issuer, path, oauth) {
+    const metadata = {
+        resource: issuer + path,
+        authorization_servers: [issuer],
+        bearer_methods_supported: ['header']
+    };
+    if (oauth.scopes !== undefined)
+        metadata.scopes_supported = oauth.scopes;
+    return metadata;
+}
+/** The document a request to this path was refused against: the longest resource holding it. */
+function suffix(oauth, pathname) {
+    let longest = '';
+    for (const path of oauth.resources ?? [])
+        if (pathname.startsWith(path) && path.length > longest.length)
+            longest = path;
+    return canonical(longest);
+}
+/**
+ * A resource is identified without its trailing slash — the form MCP asks for — while a
+ * route is declared with one, so `/mcp/` identifies `…/mcp`.
+ */
+function canonical(path) {
+    return path.endsWith('/') ? path.slice(0, -1) : path;
+}
+const AUTHORIZATION_SERVER = '/.well-known/oauth-authorization-server';
+const PROTECTED_RESOURCE = '/.well-known/oauth-protected-resource';
+const OPENID_CONFIGURATION = '/.well-known/openid-configuration';
+const TOKEN = '/identity/grants/';
+const REGISTRATION = '/identity/clients/';
+//# sourceMappingURL=documents.js.map

package/transpiled/directives/oauth/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../../source/directives/oauth/documents.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAY;IACpD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAErF,SAAS,IAAI,CAAC,QAAgB;QAC5B,IAAI,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,oBAAoB;YACxE,OAAO,MAAM,CAAA;QAEf,IAAI,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC;YACzC,OAAO,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAA;QAEjE,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,SAAS,SAAS,CAAC,QAAgB;QACjC,OAAO,6BAA6B,MAAM,GAAG,kBAAkB,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAA;IACtG,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,MAAc,EAAE,KAAY;IACvD,MAAM,QAAQ,GAA4B;QACxC,MAAM;QACN,sBAAsB,EAAE,KAAK,CAAC,SAAS;QACvC,cAAc,EAAE,GAAG,MAAM,GAAG,KAAK,EAAE;QACnC,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,qCAAqC,EAAE,CAAC,MAAM,CAAC;QAC/C,qCAAqC,EAAE,IAAI;QAC3C,8CAA8C,EAAE,IAAI;KACrD,CAAA;IAED,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM;QAC/B,QAAQ,CAAC,qBAAqB,GAAG,GAAG,MAAM,GAAG,YAAY,EAAE,CAAA;IAE7D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAA;IAExE,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,MAAc,EAAE,KAAY;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;QACtC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;IAEpE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;IAExC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY,EAAE,KAAY;IAC1D,MAAM,QAAQ,GAA4B;QACxC,QAAQ,EAAE,MAAM,GAAG,IAAI;QACvB,qBAAqB,EAAE,CAAC,MAAM,CAAC;QAC/B,wBAAwB,EAAE,CAAC,QAAQ,CAAC;KACrC,CAAA;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAA;IAExE,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,gGAAgG;AAChG,SAAS,MAAM,CAAC,KAAY,EAAE,QAAgB;IAC5C,IAAI,OAAO,GAAG,EAAE,CAAA;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,EAAE;QACtC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,OAAO,GAAG,IAAI,CAAA;IAE/E,OAAO,SAAS,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtD,CAAC;AAED,MAAM,oBAAoB,GAAG,yCAAyC,CAAA;AACtE,MAAM,kBAAkB,GAAG,uCAAuC,CAAA;AAClE,MAAM,oBAAoB,GAAG,mCAAmC,CAAA;AAChE,MAAM,KAAK,GAAG,mBAAmB,CAAA;AACjC,MAAM,YAAY,GAAG,oBAAoB,CAAA"}

package/transpiled/directives/oauth/index.d.ts

@@ -0,0 +1,2 @@
+import { Discovery } from './Discovery.ts';
+export declare const discovery: Discovery;

package/transpiled/directives/oauth/index.js

@@ -0,0 +1,3 @@
+import { Discovery } from './Discovery.js';
+export const discovery = new Discovery();
+//# sourceMappingURL=index.js.map

package/transpiled/directives/oauth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../source/directives/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAA"}

package/transpiled/directives/octets/Context.d.ts

@@ -1,5 +1,5 @@
-import { Directive } from './Directive';
-import type { Output } from '../../io';
+import { Directive } from './Directive.ts';
+import type { Output } from '../../io.ts';
 export declare class Context extends Directive {
     readonly targeted = false;
     readonly storage: string;

package/transpiled/directives/octets/Context.js

@@ -1,42 +1,15 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Context = void 0;
-const schemas = __importStar(require("./schemas"));
-const Directive_1 = require("./Directive");
-class Context extends Directive_1.Directive {
+import { Directive } from './Directive.js';
+export class Context extends Directive {
     targeted = false;
     storage;
     constructor(value) {
         super();
-        schemas.context.validate(value);
+        if (typeof value !== 'string')
+            throw new Error("Directive 'octets:context' must must be a string");
         this.storage = value;
     }
     async apply() {
         return null;
     }
 }
-exports.Context = Context;
 //# sourceMappingURL=Context.js.map

package/transpiled/directives/octets/Context.js.map

@@ -1 +1 @@
-{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../../source/directives/octets/Context.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mDAAoC;AACpC,2CAAuC;AAGvC,MAAa,OAAQ,SAAQ,qBAAS;IACpB,QAAQ,GAAG,KAAK,CAAA;IAChB,OAAO,CAAQ;IAE/B,YAAoB,KAAc;QAChC,KAAK,EAAE,CAAA;QACP,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAE/B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAdD,0BAcC"}
+{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../../source/directives/octets/Context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAG1C,MAAM,OAAO,OAAQ,SAAQ,SAAS;IACpB,QAAQ,GAAG,KAAK,CAAA;IAChB,OAAO,CAAQ;IAE/B,YAAmB,KAAc;QAC/B,KAAK,EAAE,CAAA;QAEP,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QAErE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}

package/transpiled/directives/octets/Delete.d.ts

@@ -1,10 +1,10 @@
-import { Directive } from './Directive';
-import type { Parameter } from '../../RTD';
-import type { Unit } from './workflows';
+import { Directive } from './Directive.ts';
+import type { Parameter } from '../../RTD/index.ts';
+import type { Unit } from './workflows/index.ts';
 import type { Component } from '@toa.io/core';
-import type { Output } from '../../io';
-import type { Input } from './types';
-import type { Remotes } from '../../Remotes';
+import type { Output } from '../../io.ts';
+import type { Input } from './types.ts';
+import type { Remotes } from '../../Remotes.ts';
 export declare class Delete extends Directive {
     readonly targeted = true;
     private readonly workflow?;
@@ -13,6 +13,11 @@ export declare class Delete extends Directive {
     constructor(options: Options | null, discovery: Promise<Component>, remotes: Remotes);
     apply(storage: string, input: Input, parameters: Parameter[]): Promise<Output>;
     private delete;
+    /**
+     * The reports, then the deletion once every step has completed. A reply destroyed before
+     * that — the client gone, the gateway stopping — destroys the execution with it, and the
+     * entry stays.
+     */
     private execute;
 }
 export interface Options {

package/transpiled/directives/octets/Delete.js

@@ -1,67 +1,40 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Delete = void 0;
-const stream_1 = require("stream");
-const HTTP_1 = require("../../HTTP");
-const schemas = __importStar(require("./schemas"));
-const workflows_1 = require("./workflows");
-const Directive_1 = require("./Directive");
-class Delete extends Directive_1.Directive {
+import { Transform, pipeline } from 'node:stream';
+import { NotFound } from '../../HTTP/index.js';
+import * as schemas from './schemas.js';
+import { Workflow } from './workflows/index.js';
+import { Directive } from './Directive.js';
+export class Delete extends Directive {
     targeted = true;
     workflow;
     discovery;
-    storage = null;
+    storage;
     constructor(options, discovery, remotes) {
         super();
         schemas.remove.validate(options);
         if (options?.workflow !== undefined)
-            this.workflow = new workflows_1.Workflow(options.workflow, remotes);
+            this.workflow = new Workflow(options.workflow, remotes);
         this.discovery = discovery;
     }
     async apply(storage, input, parameters) {
         this.storage ??= await this.discovery;
-        const entry = await this.storage.invoke('get', {
-            input: {
-                storage,
-                path: input.request.url
-            }
-        });
-        if (entry instanceof Error)
-            throw new HTTP_1.NotFound();
         const output = {};
         if (this.workflow !== undefined) {
+            const entry = await this.storage.invoke('head', {
+                input: {
+                    storage,
+                    path: input.request.url
+                }
+            });
+            if (entry instanceof Error)
+                throw new NotFound();
             output.status = 202;
-            output.body = stream_1.Readable.from(this.execute(input, storage, entry, parameters));
+            output.body = this.execute(input, storage, entry, parameters);
         }
         else
             await this.delete(storage, input);
         return output;
     }
     async delete(storage, input) {
-        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
         await this.storage.invoke('delete', {
             input: {
                 storage,
@@ -69,16 +42,36 @@ class Delete extends Directive_1.Directive {
             }
         });
     }
+    /**
+     * The reports, then the deletion once every step has completed. A reply destroyed before
+     * that — the client gone, the gateway stopping — destroys the execution with it, and the
+     * entry stays.
+     */
     // eslint-disable-next-line max-params
-    async *execute(input, storage, entry, parameters) {
-        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-        for await (const chunk of this.workflow.execute(input, storage, entry, parameters)) {
-            yield chunk;
-            if (typeof chunk === 'object' && chunk !== null && 'error' in chunk)
-                return;
-        }
-        await this.delete(storage, input);
+    execute(input, storage, entry, parameters) {
+        const location = {
+            storage,
+            authority: input.authority,
+            path: input.request.url
+        };
+        let failed = false;
+        const reports = new Transform({
+            objectMode: true,
+            transform: (report, _, callback) => {
+                if (report.error !== undefined || report.status === 'exception')
+                    failed = true;
+                callback(null, report);
+            },
+            flush: (callback) => {
+                if (failed)
+                    callback();
+                else
+                    this.delete(storage, input).then(() => callback(), callback);
+            }
+        });
+        // the error is the reply's, and the pipeline that writes the reply reports it
+        pipeline(this.workflow.execute(location, entry, parameters), reports, () => { });
+        return reports;
     }
 }
-exports.Delete = Delete;
 //# sourceMappingURL=Delete.js.map

package/transpiled/directives/octets/Delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"Delete.js","sourceRoot":"","sources":["../../../source/directives/octets/Delete.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAiC;AACjC,qCAAqC;AACrC,mDAAoC;AACpC,2CAAsC;AACtC,2CAAuC;AAUvC,MAAa,MAAO,SAAQ,qBAAS;IACnB,QAAQ,GAAG,IAAI,CAAA;IAEd,QAAQ,CAAW;IACnB,SAAS,CAAoB;IACtC,OAAO,GAAqB,IAAI,CAAA;IAExC,YAAoB,OAAuB,EAAE,SAA6B,EAAE,OAAgB;QAC1F,KAAK,EAAE,CAAA;QACP,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAEhC,IAAI,OAAO,EAAE,QAAQ,KAAK,SAAS;YACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAEzD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,KAAK,CAAC,KAAK,CAAE,OAAe,EAAE,KAAY,EAAE,UAAuB;QACxE,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,SAAS,CAAA;QAErC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAe,KAAK,EACzD;YACE,KAAK,EAAE;gBACL,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;aACxB;SACF,CAAC,CAAA;QAEJ,IAAI,KAAK,YAAY,KAAK;YACxB,MAAM,IAAI,eAAQ,EAAE,CAAA;QAEtB,MAAM,MAAM,GAAW,EAAE,CAAA;QAEzB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAA;YACnB,MAAM,CAAC,IAAI,GAAG,iBAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;QAC9E,CAAC;;YACC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAEnC,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,KAAK,CAAC,MAAM,CAAE,OAAe,EAAE,KAAY;QACjD,oEAAoE;QACpE,MAAM,IAAI,CAAC,OAAQ,CAAC,MAAM,CAAC,QAAQ,EACjC;YACE,KAAK,EAAE;gBACL,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;aACxB;SACF,CAAC,CAAA;IACN,CAAC;IAED,sCAAsC;IAC9B,KAAK,CAAC,CAAE,OAAO,CACtB,KAAY,EAAE,OAAe,EAAE,KAAY,EAAE,UAAuB;QACnE,oEAAoE;QACpE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YACpF,MAAM,KAAK,CAAA;YAEX,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK;gBACjE,OAAM;QACV,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACnC,CAAC;CACF;AAlED,wBAkEC"}
+{"version":3,"file":"Delete.js","sourceRoot":"","sources":["../../../source/directives/octets/Delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAC9C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAU1C,MAAM,OAAO,MAAO,SAAQ,SAAS;IACnB,QAAQ,GAAG,IAAI,CAAA;IAEd,QAAQ,CAAW;IACnB,SAAS,CAAoB;IACtC,OAAO,CAAY;IAE3B,YACE,OAAuB,EACvB,SAA6B,EAC7B,OAAgB;QAEhB,KAAK,EAAE,CAAA;QACP,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAEhC,IAAI,OAAO,EAAE,QAAQ,KAAK,SAAS;YACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAEzD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,KAAK,CAAC,KAAK,CAChB,OAAe,EACf,KAAY,EACZ,UAAuB;QAEvB,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,SAAS,CAAA;QAErC,MAAM,MAAM,GAAW,EAAE,CAAA;QAEzB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAe,MAAM,EAAE;gBAC5D,KAAK,EAAE;oBACL,OAAO;oBACP,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;iBACxB;aACF,CAAC,CAAA;YAEF,IAAI,KAAK,YAAY,KAAK;gBAAE,MAAM,IAAI,QAAQ,EAAE,CAAA;YAEhD,MAAM,CAAC,MAAM,GAAG,GAAG,CAAA;YACnB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAC/D,CAAC;;YAAM,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAExC,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,KAAY;QAChD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;YAClC,KAAK,EAAE;gBACL,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;aACxB;SACF,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACH,sCAAsC;IAC9B,OAAO,CACb,KAAY,EACZ,OAAe,EACf,KAAY,EACZ,UAAuB;QAEvB,MAAM,QAAQ,GAAa;YACzB,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;SACxB,CAAA;QAED,IAAI,MAAM,GAAG,KAAK,CAAA;QAElB,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC;YAC5B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,CAAC,MAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE;gBACzC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;oBAAE,MAAM,GAAG,IAAI,CAAA;gBAE9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACxB,CAAC;YACD,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAClB,IAAI,MAAM;oBAAE,QAAQ,EAAE,CAAA;;oBACjB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAA;YACnE,CAAC;SACF,CAAC,CAAA;QAEF,8EAA8E;QAC9E,QAAQ,CAAC,IAAI,CAAC,QAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAEhF,OAAO,OAAO,CAAA;IAChB,CAAC;CACF"}

package/transpiled/directives/octets/Directive.d.ts

@@ -1,8 +1,14 @@
-import type { Input } from './types';
-import type { Parameter } from '../../RTD';
-import type * as io from '../../io';
+import type { Input } from './types.ts';
+import type { Parameter } from '../../RTD/index.ts';
+import type { Introspection } from '../../Introspection.ts';
+import type * as io from '../../io.ts';
 export declare abstract class Directive {
     readonly name: string;
     abstract readonly targeted: boolean;
     abstract apply(storage: string, input: Input, parameters: Parameter[]): Promise<io.Output>;
+    /**
+     * What a caller has to know to make the request. Only sending a file takes anything a
+     * schema does not already say; reading one and deleting one take nothing.
+     */
+    describe?(introspection: Introspection): void;
 }

package/transpiled/directives/octets/Directive.js

@@ -1,8 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Directive = void 0;
-class Directive {
+export class Directive {
     name = 'octets.' + this.constructor.name.toLowerCase();
 }
-exports.Directive = Directive;
 //# sourceMappingURL=Directive.js.map

package/transpiled/directives/octets/Directive.js.map

@@ -1 +1 @@
-{"version":3,"file":"Directive.js","sourceRoot":"","sources":["../../../source/directives/octets/Directive.ts"],"names":[],"mappings":";;;AAIA,MAAsB,SAAS;IACb,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;CAIvE;AALD,8BAKC"}
+{"version":3,"file":"Directive.js","sourceRoot":"","sources":["../../../source/directives/octets/Directive.ts"],"names":[],"mappings":"AAKA,MAAM,OAAgB,SAAS;IACb,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;CAcvE"}

package/transpiled/directives/octets/Get.d.ts

@@ -0,0 +1,17 @@
+import { Directive } from './Directive.ts';
+import type { Component } from '@toa.io/core';
+import type { Output } from '../../io.ts';
+import type { Input } from './types.ts';
+export declare class Get extends Directive {
+    readonly targeted = true;
+    private readonly options;
+    private readonly discovery;
+    private storage;
+    constructor(options: Options | null, discovery: Promise<Component>);
+    apply(storage: string, input: Input): Promise<Output>;
+    private get;
+    private head;
+}
+export interface Options {
+    meta?: boolean;
+}