@toa.io/extensions.exposition 1.0.0-alpha.33 → 1.0.0-alpha.330

package/transpiled/Composition.js.map

@@ -1 +1 @@
-{"version":3,"file":"Composition.js","sourceRoot":"","sources":["../source/Composition.ts"],"names":[],"mappings":";;;AAAA,qCAAkD;AAClD,yCAAmC;AACnC,uCAAwC;AAGxC,MAAa,WAAY,SAAQ,gBAAS;IACvB,IAAI,CAAY;IAEjC,YAAoB,IAAgB;QAClC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEkB,KAAK,CAAC,IAAI;QAC3B,MAAM,KAAK,GAAG,IAAI,EAAE,CAAA;QACpB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAEtD,MAAM,WAAW,CAAC,OAAO,EAAE,CAAA;QAE3B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAEzB,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAA;IACvC,CAAC;IAEkB,OAAO;QACxB,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAChD,CAAC;CACF;AAtBD,kCAsBC;AAED,SAAS,IAAI;IACX,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mBAAO,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,OAAO;IACd,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACzC,KAAK,CAAC,IAAI,CAAC,IAAA,mBAAO,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAVD,gCAUC;AAOD,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,SAAS,EAAE,gBAAgB,CAAC,CAAA"}
+{"version":3,"file":"Composition.js","sourceRoot":"","sources":["../source/Composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAe,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAInC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAU;IAC1C,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,IAAI;IACX,OAAO,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5D,CAAC;AAED,SAAS,OAAO;IACd,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1D,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAOD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA"}

package/transpiled/Context.d.ts

@@ -1,7 +1,10 @@
-import type * as RTD from './RTD';
-export type Context = RTD.Context<Extension>;
+import type { Contract } from '@toa.io/core';
+import type * as RTD from './RTD/index.ts';
+export type Context = RTD.Context<Extension | undefined>;
 interface Extension {
     namespace: string;
     component: string;
+    version: string;
+    contract: Contract;
 }
 export {};

package/transpiled/Context.js

@@ -1,3 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};
 //# sourceMappingURL=Context.js.map

package/transpiled/Directive.d.ts

@@ -1,18 +1,50 @@
-import type { Context, OutgoingMessage } from './HTTP';
-import type { Remotes } from './Remotes';
-import type { Output } from './io';
-import type * as RTD from './RTD';
+import type { Context, OutgoingMessage, Options } from './HTTP/index.ts';
+import type { Remotes } from './Remotes.ts';
+import type { Host } from './Factory.ts';
+import type { Output } from './io.ts';
+import type { Introspection } from './Introspection.ts';
+import type * as RTD from './RTD/index.ts';
 export declare class Directives implements RTD.Directives {
     private readonly sets;
+    /** the span of a stage depends only on the set, so it is built once per route */
+    private readonly spans;
     constructor(sets: RTD.DirectiveSet[]);
-    preflight(context: Context, parameters: RTD.Parameter[]): Promise<Output>;
+    declared<T>(family: string): T[] | undefined;
+    precall(context: Context, parameters: RTD.Parameter[]): Promise<Output>;
+    /**
+     * Whether this caller is told of the method at all. A family that says nothing admits
+     * everyone, and the first to refuse ends it.
+     */
+    admits(context: Context): Promise<boolean>;
+    /**
+     * What the method says about itself, as its directives leave it. Each family is given what
+     * the one before it returned, and the first to answer nothing ends it: a method hidden is
+     * hidden from every answer, whoever asks.
+     *
+     * Synchronous, and without the caller: this is what a method is, and it is built once.
+     */
+    describe(introspection: Introspection): Introspection | null;
     settle(context: Context, response: OutgoingMessage): Promise<void>;
+    dispose(): void;
 }
 export declare class DirectivesFactory implements RTD.DirectiveFactory {
     private readonly remotes;
     private readonly families;
     private readonly mandatory;
-    constructor(families: RTD.DirectiveFamily[], remotes: Remotes);
-    create(declarations: RTD.syntax.Directive[]): Directives;
+    private readonly instances;
+    /** The request-scoped stages, in registration order, with the spans they run in. */
+    private readonly stages;
+    constructor(families: RTD.DirectiveFamily[], remotes: Remotes, host: Host, options: Options);
+    /**
+     * Request-scoped, before anything is routed, so no directives are passed: a family
+     * answers here only for what it does on its own behalf.
+     */
+    preflight(context: Context): Promise<void>;
+    /** Request-scoped, on the message going back. */
+    depart(context: Context, response: OutgoingMessage): Promise<void>;
+    create(declarations: RTD.syntax.Directive[], route?: string): Directives;
+    inheritable(directive: RTD.syntax.Directive): boolean;
+    dispose(): void;
+    /** Mandatory families first, in their own order; everything else keeps its own. */
+    private rank;
 }
-export declare const shortcuts: RTD.syntax.Shortcuts;

package/transpiled/Directive.js

@@ -1,75 +1,212 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.shortcuts = exports.DirectivesFactory = exports.Directives = void 0;
-class Directives {
+import { console, sampled } from 'openspan';
+export class Directives {
     sets;
+    /** the span of a stage depends only on the set, so it is built once per route */
+    spans;
     constructor(sets) {
         this.sets = sets;
+        this.spans = sets.map((set) => ({
+            precall: options(set, 'precall'),
+            settle: options(set, 'settle'),
+            admits: options(set, 'admits')
+        }));
     }
-    async preflight(context, parameters) {
-        for (const set of this.sets) {
-            if (set.family.preflight === undefined)
+    declared(family) {
+        return this.sets.find((set) => set.family.name === family)?.directives;
+    }
+    async precall(context, parameters) {
+        let output = null;
+        for (let i = 0; i < this.sets.length; i++) {
+            const set = this.sets[i];
+            if (set.family.precall === undefined)
+                continue;
+            // the span's closure and frames are all an unsampled trace would pay for; see `sampled`
+            let out = sampled()
+                ? await console.span(this.spans[i].precall, async () => await set.family.precall(set.directives, context, parameters))
+                : set.family.precall(set.directives, context, parameters);
+            // a family that answers at once is not awaited: see `Interception`
+            if (out instanceof Promise)
+                out = await out;
+            if (out === null)
                 continue;
-            const output = await set.family.preflight(set.directives, context, parameters);
             if (output !== null)
-                return output;
+                throw new Error('Multiple precall directives responded');
+            else
+                output = out;
+        }
+        return output;
+    }
+    /**
+     * Whether this caller is told of the method at all. A family that says nothing admits
+     * everyone, and the first to refuse ends it.
+     */
+    async admits(context) {
+        for (let i = 0; i < this.sets.length; i++) {
+            const set = this.sets[i];
+            if (set.family.admits === undefined)
+                continue;
+            // the span's closure and frames are all an unsampled trace would pay for; see `sampled`
+            const admitted = sampled()
+                ? await console.span(this.spans[i].admits, async () => await set.family.admits(set.directives, context))
+                : await set.family.admits(set.directives, context);
+            if (!admitted)
+                return false;
         }
-        return null;
+        return true;
+    }
+    /**
+     * What the method says about itself, as its directives leave it. Each family is given what
+     * the one before it returned, and the first to answer nothing ends it: a method hidden is
+     * hidden from every answer, whoever asks.
+     *
+     * Synchronous, and without the caller: this is what a method is, and it is built once.
+     */
+    describe(introspection) {
+        let described = introspection;
+        for (const set of this.sets) {
+            if (set.family.explain === undefined)
+                continue;
+            const next = set.family.explain(set.directives, described);
+            if (next === null)
+                return null;
+            described = next;
+        }
+        return described;
     }
     async settle(context, response) {
+        for (let i = 0; i < this.sets.length; i++) {
+            const set = this.sets[i];
+            if (set.family.settle === undefined)
+                continue;
+            if (sampled())
+                await console.span(this.spans[i].settle, async () => await set.family.settle(set.directives, context, response));
+            else {
+                const pending = set.family.settle(set.directives, context, response);
+                // a family that answers at once is not awaited: see `Interception`
+                if (pending instanceof Promise)
+                    await pending;
+            }
+        }
+    }
+    dispose() {
         for (const set of this.sets)
-            if (set.family.settle !== undefined)
-                await set.family.settle(set.directives, context, response);
+            set.family.dispose?.(set.directives);
     }
 }
-exports.Directives = Directives;
-class DirectivesFactory {
+export class DirectivesFactory {
     remotes;
     families = {};
     mandatory = [];
-    constructor(families, remotes) {
+    instances = [];
+    /** The request-scoped stages, in registration order, with the spans they run in. */
+    stages = [];
+    // eslint-disable-next-line max-params
+    constructor(families, remotes, host, options) {
         for (const family of families) {
+            family.mount?.(host, options);
             this.families[family.name] = family;
             if (family.mandatory)
                 this.mandatory.push(family.name);
+            this.stages.push({
+                family,
+                preflight: { name: `${family.name} preflight` },
+                depart: { name: `${family.name} depart` }
+            });
         }
         this.remotes = remotes;
     }
-    create(declarations) {
+    /**
+     * Request-scoped, before anything is routed, so no directives are passed: a family
+     * answers here only for what it does on its own behalf.
+     */
+    async preflight(context) {
+        for (const stage of this.stages) {
+            if (stage.family.preflight === undefined)
+                continue;
+            if (sampled())
+                await console.span(stage.preflight, async () => {
+                    await stage.family.preflight(context);
+                });
+            else {
+                const pending = stage.family.preflight(context);
+                if (pending instanceof Promise)
+                    await pending;
+            }
+        }
+    }
+    /** Request-scoped, on the message going back. */
+    async depart(context, response) {
+        for (const stage of this.stages) {
+            if (stage.family.depart === undefined)
+                continue;
+            if (sampled())
+                await console.span(stage.depart, async () => {
+                    await stage.family.depart(context, response);
+                });
+            else {
+                const pending = stage.family.depart(context, response);
+                if (pending instanceof Promise)
+                    await pending;
+            }
+        }
+    }
+    create(declarations, route = '') {
         const groups = {};
         const mandatory = new Set(this.mandatory);
-        declarations.sort((a, b) => (mandatory.has(b.family) ? 1 : 0) - (mandatory.has(a.family) ? 1 : 0));
+        const names = {};
         for (const declaration of declarations) {
             const family = this.families[declaration.family];
             if (family === undefined)
-                throw new Error(`Directive family '${declaration.family}' is not found.`);
-            const directive = family.create(declaration.name, declaration.value, this.remotes);
+                throw new Error(`Directive family '${declaration.family}' is not found`);
+            const directive = family.create(declaration.name, declaration.value, this.remotes, route);
             groups[family.name] ??= [];
             groups[family.name].push(directive);
+            names[family.name] ??= [];
+            names[family.name].push(`${declaration.family}:${declaration.name}`);
             mandatory.delete(family.name);
         }
         const sets = [];
         for (const family of mandatory)
             sets.push({
                 family: this.families[family],
-                directives: []
+                directives: [],
+                names: []
             });
         for (const [family, directives] of Object.entries(groups))
             sets.push({
                 family: this.families[family],
-                directives
+                directives,
+                names: names[family]
             });
-        return new Directives(sets);
+        // Mandatory families run in the order they are registered in, not in the order a
+        // manifest happens to mention them: `auth` must resolve the identity before `io`
+        // can key a quota on it, and a request it denies should not reach `io` at all.
+        // The rest keep the order they were declared in, the sort being stable.
+        sets.sort((a, b) => this.rank(a.family.name) - this.rank(b.family.name));
+        // whatever order a family needs among its own directives is fixed here, not per request
+        for (const set of sets)
+            set.family.arrange?.(set.directives);
+        const directives = new Directives(sets);
+        this.instances.push(directives);
+        return directives;
+    }
+    inheritable(directive) {
+        return this.families[directive.family]?.inherited !== false;
     }
+    dispose() {
+        for (const directives of this.instances)
+            directives.dispose();
+    }
+    /** Mandatory families first, in their own order; everything else keeps its own. */
+    rank(family) {
+        const index = this.mandatory.indexOf(family);
+        return index === -1 ? this.mandatory.length : index;
+    }
+}
+function options(set, stage) {
+    const options = { name: `${set.family.name} ${stage}` };
+    if (set.names !== undefined && set.names.length > 0)
+        options.attributes = { directives: Array.from(new Set(set.names)).join(' ') };
+    return options;
 }
-exports.DirectivesFactory = DirectivesFactory;
-exports.shortcuts = new Map([
-    ['anonymous', 'auth:anonymous'],
-    ['id', 'auth:id'],
-    ['role', 'auth:role'],
-    ['rule', 'auth:rule'],
-    ['incept', 'auth:incept'],
-    ['input', 'io:input'],
-    ['output', 'io:output']
-]);
 //# sourceMappingURL=Directive.js.map

package/transpiled/Directive.js.map

@@ -1 +1 @@
-{"version":3,"file":"Directive.js","sourceRoot":"","sources":["../source/Directive.ts"],"names":[],"mappings":";;;AAKA,MAAa,UAAU;IACJ,IAAI,CAAoB;IAEzC,YAAoB,IAAwB;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,OAAgB,EAAE,UAA2B;QACnE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;gBACpC,SAAQ;YAEV,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE9E,IAAI,MAAM,KAAK,IAAI;gBACjB,OAAO,MAAM,CAAA;QACjB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,MAAM,CAAE,OAAgB,EAAE,QAAyB;QAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YACzB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBACjC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAChE,CAAC;CACF;AA1BD,gCA0BC;AAED,MAAa,iBAAiB;IACX,OAAO,CAAS;IAChB,QAAQ,GAAwC,EAAE,CAAA;IAClD,SAAS,GAAa,EAAE,CAAA;IAEzC,YAAoB,QAA+B,EAAE,OAAgB;QACnE,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;YAEnC,IAAI,MAAM,CAAC,SAAS;gBAClB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACpC,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAEM,MAAM,CAAE,YAAoC;QACjD,MAAM,MAAM,GAAwB,EAAE,CAAA;QACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAEzC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAExE,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YAEhD,IAAI,MAAM,KAAK,SAAS;gBACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,WAAW,CAAC,MAAM,iBAAiB,CAAC,CAAA;YAE3E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;YAElF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;YAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACnC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC/B,CAAC;QAED,MAAM,IAAI,GAAuB,EAAE,CAAA;QAEnC,KAAK,MAAM,MAAM,IAAI,SAAS;YAC5B,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC7B,UAAU,EAAE,EAAE;aACf,CAAC,CAAA;QAEJ,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC7B,UAAU;aACX,CAAC,CAAA;QAEJ,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;CACF;AApDD,8CAoDC;AAEY,QAAA,SAAS,GAAyB,IAAI,GAAG,CAAC;IACrD,CAAC,WAAW,EAAE,gBAAgB,CAAC;IAC/B,CAAC,IAAI,EAAE,SAAS,CAAC;IACjB,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,QAAQ,EAAE,aAAa,CAAC;IACzB,CAAC,OAAO,EAAE,UAAU,CAAC;IACrB,CAAC,QAAQ,EAAE,WAAW,CAAC;CACxB,CAAC,CAAA"}
+{"version":3,"file":"Directive.js","sourceRoot":"","sources":["../source/Directive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAoB,MAAM,UAAU,CAAA;AAQ7D,MAAM,OAAO,UAAU;IACJ,IAAI,CAAoB;IAEzC,iFAAiF;IAChE,KAAK,CAAS;IAE/B,YAAmB,IAAwB;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;YAC9B,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;SAC/B,CAAC,CAAC,CAAA;IACL,CAAC;IAEM,QAAQ,CAAI,MAAc;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,UAE/C,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,UAA2B;QAChE,IAAI,MAAM,GAAG,IAAI,CAAA;QAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAExB,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAQ;YAE9C,wFAAwF;YACxF,IAAI,GAAG,GAAG,OAAO,EAAE;gBACjB,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EACrB,KAAK,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAC3E;gBACH,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;YAE3D,mEAAmE;YACnE,IAAI,GAAG,YAAY,OAAO;gBAAE,GAAG,GAAG,MAAM,GAAG,CAAA;YAE3C,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAQ;YAE1B,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;;gBACxE,MAAM,GAAG,GAAG,CAAA;QACnB,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,MAAM,CAAC,OAAgB;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAExB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAQ;YAE7C,wFAAwF;YACxF,MAAM,QAAQ,GAAG,OAAO,EAAE;gBACxB,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EACpB,KAAK,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAC9D;gBACH,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YAEpD,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAA;QAC7B,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACI,QAAQ,CAAC,aAA4B;QAC1C,IAAI,SAAS,GAAkB,aAAa,CAAA;QAE5C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAQ;YAE9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;YAE1D,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAA;YAE9B,SAAS,GAAG,IAAI,CAAA;QAClB,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,QAAyB;QAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAExB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAQ;YAE7C,IAAI,OAAO,EAAE;gBACX,MAAM,OAAO,CAAC,IAAI,CAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EACpB,KAAK,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CACxE,CAAA;iBACE,CAAC;gBACJ,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;gBAEpE,mEAAmE;gBACnE,IAAI,OAAO,YAAY,OAAO;oBAAE,MAAM,OAAO,CAAA;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACnE,CAAC;CACF;AAED,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAS;IAChB,QAAQ,GAAwC,EAAE,CAAA;IAClD,SAAS,GAAa,EAAE,CAAA;IACxB,SAAS,GAAiB,EAAE,CAAA;IAE7C,oFAAoF;IACnE,MAAM,GAAY,EAAE,CAAA;IAErC,sCAAsC;IACtC,YACE,QAA+B,EAC/B,OAAgB,EAChB,IAAU,EACV,OAAgB;QAEhB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;YAEnC,IAAI,MAAM,CAAC,SAAS;gBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAEtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACf,MAAM;gBACN,SAAS,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,YAAY,EAAE;gBAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,SAAS,EAAE;aAC1C,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,SAAS,CAAC,OAAgB;QACrC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAQ;YAElD,IAAI,OAAO,EAAE;gBACX,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;oBAC7C,MAAM,KAAK,CAAC,MAAM,CAAC,SAAU,CAAC,OAAO,CAAC,CAAA;gBACxC,CAAC,CAAC,CAAA;iBACC,CAAC;gBACJ,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;gBAE/C,IAAI,OAAO,YAAY,OAAO;oBAAE,MAAM,OAAO,CAAA;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IAC1C,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,QAAyB;QAC7D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAQ;YAE/C,IAAI,OAAO,EAAE;gBACX,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;oBAC1C,MAAM,KAAK,CAAC,MAAM,CAAC,MAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBAC/C,CAAC,CAAC,CAAA;iBACC,CAAC;gBACJ,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBAEtD,IAAI,OAAO,YAAY,OAAO;oBAAE,MAAM,OAAO,CAAA;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,YAAoC,EAAE,KAAK,GAAW,EAAE;QACpE,MAAM,MAAM,GAAwB,EAAE,CAAA;QACtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAEzC,MAAM,KAAK,GAA6B,EAAE,CAAA;QAE1C,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YAEhD,IAAI,MAAM,KAAK,SAAS;gBACtB,MAAM,IAAI,KAAK,CAAC,qBAAqB,WAAW,CAAC,MAAM,gBAAgB,CAAC,CAAA;YAE1E,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC7B,WAAW,CAAC,IAAI,EAChB,WAAW,CAAC,KAAK,EACjB,IAAI,CAAC,OAAO,EACZ,KAAK,CACN,CAAA;YAED,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;YAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACnC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;YACzB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAA;YACpE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC/B,CAAC;QAED,MAAM,IAAI,GAAuB,EAAE,CAAA;QAEnC,KAAK,MAAM,MAAM,IAAI,SAAS;YAC5B,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC7B,UAAU,EAAE,EAAE;gBACd,KAAK,EAAE,EAAE;aACV,CAAC,CAAA;QAEJ,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC7B,UAAU;gBACV,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;aACrB,CAAC,CAAA;QAEJ,iFAAiF;QACjF,iFAAiF;QACjF,+EAA+E;QAC/E,wEAAwE;QACxE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QAExE,wFAAwF;QACxF,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAE5D,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;QAEvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAE/B,OAAO,UAAU,CAAA;IACnB,CAAC;IAEM,WAAW,CAAC,SAA+B;QAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,KAAK,KAAK,CAAA;IAC7D,CAAC;IAEM,OAAO;QACZ,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,SAAS;YAAE,UAAU,CAAC,OAAO,EAAE,CAAA;IAC/D,CAAC;IAED,mFAAmF;IAC3E,IAAI,CAAC,MAAc;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAE5C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IACrD,CAAC;CACF;AAED,SAAS,OAAO,CACd,GAAqB,EACrB,KAAsC;IAEtC,MAAM,OAAO,GAAgB,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAA;IAEpE,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QACjD,OAAO,CAAC,UAAU,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAE/E,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/transpiled/Discovery/Explorer.d.ts

@@ -0,0 +1,14 @@
+import * as http from '../HTTP/index.ts';
+import type { Tree } from '../RTD/index.ts';
+import type { Server as MCP } from '../MCP/index.ts';
+/**
+ * What an application serves, for every route at once. Each entry is what `OPTIONS` on that
+ * path answers, so a key taken from here is a request that can be made.
+ */
+export declare class Explorer {
+    private readonly tree;
+    /** Where a model is pointed, which is the tree's to say when it is not `/.mcp` beside it. */
+    private readonly mcp;
+    constructor(tree: Tree, mcp: MCP | null);
+    process(context: http.Context): Promise<http.OutgoingMessage>;
+}

package/transpiled/Discovery/Explorer.js

@@ -0,0 +1,36 @@
+import * as http from '../HTTP/index.js';
+import { BRANCH_TTL } from '@toa.io/definitions/extensions.exposition';
+import { describe } from './tree.js';
+/**
+ * What an application serves, for every route at once. Each entry is what `OPTIONS` on that
+ * path answers, so a key taken from here is a request that can be made.
+ */
+export class Explorer {
+    tree;
+    /** Where a model is pointed, which is the tree's to say when it is not `/.mcp` beside it. */
+    mcp;
+    constructor(tree, mcp) {
+        this.tree = tree;
+        this.mcp = mcp;
+    }
+    async process(context) {
+        if (context.request.method !== 'OPTIONS')
+            throw new http.MethodNotAllowed(new Headers({ allow: ALLOW }));
+        const discovered = await describe(this.tree, context);
+        const address = this.mcp?.address(context.authority) ?? null;
+        if (address !== null)
+            discovered.mcp = address;
+        return {
+            body: discovered,
+            headers: new Headers({
+                allow: ALLOW,
+                // it stands until a branch expires, and it is filtered by who asked
+                'cache-control': `private, max-age=${BRANCH_TTL / 1000}`,
+                vary: 'authorization'
+            })
+        };
+    }
+}
+/** The verbs of this path, which are not the verbs of the tree it answers with. */
+const ALLOW = 'GET, HEAD, OPTIONS';
+//# sourceMappingURL=Explorer.js.map

package/transpiled/Discovery/Explorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Explorer.js","sourceRoot":"","sources":["../../source/Discovery/Explorer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAA;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAIpC;;;GAGG;AACH,MAAM,OAAO,QAAQ;IACF,IAAI,CAAM;IAE3B,6FAA6F;IAC5E,GAAG,CAAY;IAEhC,YAAmB,IAAU,EAAE,GAAe;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;IAChB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,OAAqB;QACxC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACtC,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QAEhE,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAA;QAE5D,IAAI,OAAO,KAAK,IAAI;YAAE,UAAU,CAAC,GAAG,GAAG,OAAO,CAAA;QAE9C,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,IAAI,OAAO,CAAC;gBACnB,KAAK,EAAE,KAAK;gBACZ,oEAAoE;gBACpE,eAAe,EAAE,oBAAoB,UAAU,GAAG,IAAI,EAAE;gBACxD,IAAI,EAAE,eAAe;aACtB,CAAC;SACH,CAAA;IACH,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,KAAK,GAAG,oBAAoB,CAAA"}

package/transpiled/Discovery/Site.d.ts

@@ -0,0 +1,46 @@
+import * as http from '../HTTP/index.ts';
+import type { Input, Output } from '../io.ts';
+import type { Interceptor } from '../Interception.ts';
+/**
+ * The page that reads the tree: the directory `ui` builds, and nothing else.
+ *
+ * An interceptor rather than an endpoint, for the reason the OAuth documents are one — it
+ * runs before a credential is resolved. A page is public, and one served after `auth` would
+ * refuse the client holding a stale token, who is the client most likely to have opened it.
+ * It is also what keeps `depart` off these replies: a re-issued credential sets `no-store`,
+ * which would take the build hash off every asset that carries one.
+ *
+ * It claims the whole prefix, so that nothing under it reaches the router — a crawler
+ * asking for assets that are not there would otherwise have every one of them counted as a
+ * route that has gone missing, and ping discovery about it.
+ *
+ * `OPTIONS` on the prefix itself is the exception it lets through: the tree is what answers
+ * there, and that needs the identity this stage does not have yet.
+ */
+export declare class Site implements Interceptor {
+    readonly name = "discovery";
+    /** What a test points at a fixture; the build otherwise. */
+    private readonly override;
+    private root;
+    /** Hosts MCP is served at the root of, where this page is not served. */
+    private roots;
+    constructor(root?: string);
+    /**
+     * Resolved here rather than at construction because this is a module singleton, built
+     * when the module loads and before anything has said where the page is. Said once, too,
+     * because a page that is not built is otherwise a `503` per request and nothing else.
+     */
+    mount(options: http.Options): void;
+    intercept(input: Input): Output;
+    /**
+     * The file a request lands on, or `null` when nothing does. A path that exists is served
+     * as it is; anything else that could be a route falls back to the page, because the
+     * client router — not this server — knows what routes there are.
+     */
+    private resolve;
+    /**
+     * Always with a `content-type` of its own: a stream without one is framed as
+     * `multipart/*` and the page arrives as an envelope of JSON-encoded buffers.
+     */
+    private send;
+}

package/transpiled/Discovery/Site.js

@@ -0,0 +1,177 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { Readable } from 'node:stream';
+import { console } from 'openspan';
+import * as http from '../HTTP/index.js';
+import { DISCOVERY } from '@toa.io/definitions/extensions.exposition';
+/**
+ * The page that reads the tree: the directory `ui` builds, and nothing else.
+ *
+ * An interceptor rather than an endpoint, for the reason the OAuth documents are one — it
+ * runs before a credential is resolved. A page is public, and one served after `auth` would
+ * refuse the client holding a stale token, who is the client most likely to have opened it.
+ * It is also what keeps `depart` off these replies: a re-issued credential sets `no-store`,
+ * which would take the build hash off every asset that carries one.
+ *
+ * It claims the whole prefix, so that nothing under it reaches the router — a crawler
+ * asking for assets that are not there would otherwise have every one of them counted as a
+ * route that has gone missing, and ping discovery about it.
+ *
+ * `OPTIONS` on the prefix itself is the exception it lets through: the tree is what answers
+ * there, and that needs the identity this stage does not have yet.
+ */
+export class Site {
+    name = 'discovery';
+    /** What a test points at a fixture; the build otherwise. */
+    override;
+    root;
+    /** Hosts MCP is served at the root of, where this page is not served. */
+    roots = new Set();
+    constructor(root) {
+        this.override = root;
+        this.root = root ?? site();
+    }
+    /**
+     * Resolved here rather than at construction because this is a module singleton, built
+     * when the module loads and before anything has said where the page is. Said once, too,
+     * because a page that is not built is otherwise a `503` per request and nothing else.
+     */
+    mount(options) {
+        this.root = this.override ?? site();
+        this.roots = new Set(Object.values(options.mcp?.hosts ?? {}).map((host) => host.toLowerCase()));
+        if (!isFile(path.join(this.root, 'index.html')))
+            console.warn('Discovery UI is not built', { root: this.root });
+    }
+    intercept(input) {
+        const { pathname } = input.url;
+        if (pathname !== DISCOVERY && !pathname.startsWith(DISCOVERY + '/'))
+            return null;
+        // the gateway answers for such a host, and what it answers there is `404`
+        if (this.roots.has(input.url.host))
+            return null;
+        // the prefix itself, as opposed to something under it
+        const bare = pathname === DISCOVERY || pathname === DISCOVERY + '/';
+        const method = input.request.method;
+        if (method !== 'GET' && method !== 'HEAD') {
+            // the tree answers here, and it needs the identity this stage does not have yet
+            if (bare && method === 'OPTIONS')
+                return null;
+            throw new http.MethodNotAllowed(new Headers({ allow: bare ? 'GET, HEAD, OPTIONS' : 'GET, HEAD' }));
+        }
+        // the page is a directory, and every asset it names is relative to it
+        if (pathname === DISCOVERY)
+            return {
+                status: 302,
+                headers: new Headers({ location: DISCOVERY + '/' + input.url.search })
+            };
+        const file = this.resolve(pathname);
+        if (file === null)
+            throw new http.NotFound();
+        return this.send(file, method);
+    }
+    /**
+     * The file a request lands on, or `null` when nothing does. A path that exists is served
+     * as it is; anything else that could be a route falls back to the page, because the
+     * client router — not this server — knows what routes there are.
+     */
+    resolve(pathname) {
+        /*
+         * Decoded after the prefix is off, so that an encoded separator cannot smuggle a
+         * segment past the test that put us here. A dot segment never arrives — `..` and
+         * `%2e%2e` alike are collapsed while the URL is parsed — but `%2f` survives that and
+         * decodes to a separator here, which is what the guard below is for.
+         */
+        const relative = decode(pathname.slice(DISCOVERY.length));
+        if (relative === null || relative.includes('\0'))
+            return null;
+        const file = path.join(this.root, relative);
+        if (file !== this.root && !file.startsWith(this.root + path.sep))
+            return null;
+        if (isFile(file))
+            return file;
+        /*
+         * A missing asset is missing, but a route can look like one. What this server would
+         * have served is what it knows how to serve, so anything else is a route and falls
+         * back to the page — as does anything ending in a slash, which is no name for a file.
+         */
+        const asset = !relative.endsWith('/') && path.extname(relative) in TYPES;
+        return asset ? null : path.join(this.root, 'index.html');
+    }
+    /**
+     * Always with a `content-type` of its own: a stream without one is framed as
+     * `multipart/*` and the page arrives as an envelope of JSON-encoded buffers.
+     */
+    send(file, method) {
+        const stats = fs.statSync(file, { throwIfNoEntry: false });
+        if (stats === undefined)
+            return {
+                status: 503,
+                headers: new Headers({ 'content-type': 'text/plain; charset=utf-8' }),
+                body: Readable.from([Buffer.from(NOT_BUILT)])
+            };
+        const headers = new Headers({
+            'content-type': TYPES[path.extname(file)] ?? 'application/octet-stream',
+            'content-length': String(stats.size),
+            'cache-control': caching(path.relative(this.root, file))
+        });
+        // a HEAD reply carries no body but reports the length a GET would have returned; the
+        // HTTP/2 layer does not drop one written to it, so none is opened
+        if (method === 'HEAD')
+            return { status: 200, headers };
+        return { status: 200, headers, body: fs.createReadStream(file) };
+    }
+}
+const NOT_BUILT = 'The discovery UI is not built. Run `npm run build:ui`.\n';
+function decode(pathname) {
+    try {
+        return decodeURIComponent(pathname);
+    }
+    catch {
+        return null;
+    }
+}
+function isFile(file) {
+    return fs.statSync(file, { throwIfNoEntry: false })?.isFile() === true;
+}
+/**
+ * Where `npm run build:ui` puts the page. Two levels up because this module is a directory
+ * deeper than `source` itself, and `transpiled` mirrors that — so it resolves the same from
+ * either. The variable is the features', which run against a fixture rather than a build.
+ */
+function site() {
+    return (process.env.__TESTING_EXPOSITION_DISCOVERY_ROOT ??
+        path.resolve(import.meta.dirname, '..', '..', 'ui', 'dist'));
+}
+/** Assets under this prefix carry their build hash in the name. */
+const IMMUTABLE = path.join('_app', 'immutable');
+const FOREVER = 'public, max-age=31536000, immutable';
+/** The icons: named without a hash, so they are re-read, but rarely. */
+const ICONS = new Set(['favicon.ico', 'favicon-96x96.png', 'apple-touch-icon.png']);
+const DAY = 'public, max-age=86400';
+/**
+ * How long what is served may be held. The page is never cached — it names the assets, and
+ * their names carry the build. An icon is named for what it is rather than for its content,
+ * so it is asked about again, but not on every page load.
+ */
+function caching(relative) {
+    if (relative.startsWith(IMMUTABLE))
+        return FOREVER;
+    return ICONS.has(relative) ? DAY : 'no-cache';
+}
+const TYPES = {
+    '.css': 'text/css; charset=utf-8',
+    '.html': 'text/html; charset=utf-8',
+    '.ico': 'image/x-icon',
+    '.jpg': 'image/jpeg',
+    '.js': 'text/javascript; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.map': 'application/json; charset=utf-8',
+    '.png': 'image/png',
+    '.svg': 'image/svg+xml',
+    '.txt': 'text/plain; charset=utf-8',
+    '.webmanifest': 'application/manifest+json',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2'
+};
+//# sourceMappingURL=Site.js.map