@toa.io/extensions.exposition 1.0.0-alpha.33 → 1.0.0-alpha.331

package/transpiled/realtime/Destination.d.ts

@@ -0,0 +1,44 @@
+import { Connector, type Locator } from '@toa.io/core';
+import { type Route } from '@toa.io/definitions/extensions.exposition/realtime';
+import type { outbox } from '@toa.io/core/types';
+/**
+ * Where a component's routed events go: the stream of each of their keys, and its channel. Each
+ * event of a row is rendered by the component's own condition and payload, fitted to what its
+ * route exposes, and written in one call per Redis its keys are kept on — to the streams of them
+ * that exist, which are the ones that are consumed.
+ *
+ * At least once: a row written again by the pump is written to the streams again.
+ */
+export declare class Destination extends Connector implements outbox.Destination {
+    readonly name = "realtime";
+    readonly renders: string[];
+    rendering?: outbox.Rendering;
+    private readonly locator;
+    private readonly routes;
+    private shards;
+    constructor(locator: Locator, routes: Route[]);
+    emit(row: outbox.Row): Promise<void>;
+    /**
+     * What the row is written to the streams as: each routed event with its keys and what its
+     * route exposes of it. Another region writes it to its own streams as it stands, rendering
+     * nothing, so a reader there is given what a reader here is.
+     */
+    export(row: outbox.Row): Promise<Routed[] | undefined>;
+    /**
+     * What another region's component exported, written to the streams of this one. What is not
+     * the shape an export has would be refused however often it came again, so it is not written.
+     */
+    import(portable: unknown): Promise<void>;
+    protected open(): Promise<void>;
+    protected close(): Promise<void>;
+    private route;
+    private write;
+    private append;
+}
+/** A routed event as it is written: to the streams of its keys, under its name. */
+interface Routed {
+    event: string;
+    keys: string[];
+    data: unknown;
+}
+export {};

package/transpiled/realtime/Destination.js

@@ -0,0 +1,128 @@
+import { console } from 'openspan';
+import { Connector } from '@toa.io/core';
+import { APPEND, MAXLEN, Shards, shard } from './redis.js';
+import * as measure from './measurements.js';
+import { literal } from '@toa.io/definitions/extensions.exposition/realtime';
+/**
+ * Where a component's routed events go: the stream of each of their keys, and its channel. Each
+ * event of a row is rendered by the component's own condition and payload, fitted to what its
+ * route exposes, and written in one call per Redis its keys are kept on — to the streams of them
+ * that exist, which are the ones that are consumed.
+ *
+ * At least once: a row written again by the pump is written to the streams again.
+ */
+export class Destination extends Connector {
+    name = 'realtime';
+    renders;
+    rendering;
+    locator;
+    routes;
+    shards = null;
+    constructor(locator, routes) {
+        super();
+        this.locator = locator;
+        this.routes = routes;
+        this.renders = [...new Set(routes.map(({ event }) => event))];
+    }
+    async emit(row) {
+        const routed = await this.export(row);
+        if (routed !== undefined)
+            await this.write(routed);
+    }
+    /**
+     * What the row is written to the streams as: each routed event with its keys and what its
+     * route exposes of it. Another region writes it to its own streams as it stands, rendering
+     * nothing, so a reader there is given what a reader here is.
+     */
+    async export(row) {
+        const routed = await Promise.all(this.routes.map(async (route) => await this.route(route, row)));
+        const events = routed.filter((one) => one !== null);
+        return events.length === 0 ? undefined : events;
+    }
+    /**
+     * What another region's component exported, written to the streams of this one. What is not
+     * the shape an export has would be refused however often it came again, so it is not written.
+     */
+    async import(portable) {
+        if (!Array.isArray(portable) || !portable.every(routed)) {
+            console.error('Realtime import is not what an export is', {
+                component: this.locator.id
+            });
+            return;
+        }
+        await this.write(portable);
+    }
+    async open() {
+        const shards = new Shards();
+        for (const redis of shards.connections) {
+            // it reconnects on its own; a write while it is away fails, and the outbox writes it again
+            redis.on('error', (error) => console.debug('Realtime streams unreachable', {
+                error: error.code ?? error.message
+            }));
+            redis.defineCommand('append', { lua: APPEND });
+        }
+        this.shards = shards;
+        await shards.connect();
+    }
+    async close() {
+        this.shards?.disconnect();
+        this.shards = null;
+    }
+    async route(route, row) {
+        const raised = await this.rendering.render(route.event, row);
+        if (raised === null)
+            return null;
+        const payload = raised.payload;
+        const keys = keysOf(payload, route);
+        if (keys.length === 0)
+            return null;
+        return {
+            event: `${this.locator.id}.${route.event}`,
+            keys,
+            data: fit(payload, route.expose)
+        };
+    }
+    async write(routed) {
+        await Promise.all(routed.map(async (one) => await this.append(one)));
+    }
+    async append({ event, keys, data }) {
+        const serialized = JSON.stringify(data);
+        const connections = this.shards.connections;
+        const byShard = new Map();
+        for (const key of keys) {
+            const i = shard(key, connections.length);
+            byShard.set(i, [...(byShard.get(i) ?? []), key]);
+        }
+        const writes = [...byShard].map(async ([i, keys]) => await connections[i].append(keys.length, ...keys, event, serialized, MAXLEN));
+        await Promise.all(writes);
+        measure.route(event);
+    }
+}
+function routed(value) {
+    const { event, keys } = (value ?? {});
+    return (typeof event === 'string' &&
+        Array.isArray(keys) &&
+        keys.every((key) => typeof key === 'string'));
+}
+/**
+ * The values of the key properties, each a key or a list of them, and the literals. A value that
+ * reads as a literal is not a key: whoever writes it does not reach a literal's stream.
+ */
+function keysOf(payload, route) {
+    const keys = new Set();
+    for (const property of route.properties) {
+        const value = payload?.[property];
+        const values = Array.isArray(value) ? value : [value];
+        for (const key of values)
+            if (typeof key === 'string' && !literal(key))
+                keys.add(key);
+    }
+    for (const key of route.literals)
+        keys.add(key);
+    return [...keys];
+}
+/** What the route names of the payload, and nothing else. */
+function fit(payload, expose) {
+    return Object.fromEntries(Object.entries(payload).filter(([key]) => expose.includes(key)));
+}
+//# sourceMappingURL=Destination.js.map

package/transpiled/realtime/Destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Destination.js","sourceRoot":"","sources":["../../source/realtime/Destination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,SAAS,EAAgB,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAC1D,OAAO,KAAK,OAAO,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,OAAO,EAAc,MAAM,oDAAoD,CAAA;AAGxF;;;;;;;GAOG;AACH,MAAM,OAAO,WAAY,SAAQ,SAAS;IACxB,IAAI,GAAG,UAAU,CAAA;IACjB,OAAO,CAAU;IAC1B,SAAS,CAAmB;IAElB,OAAO,CAAS;IAChB,MAAM,CAAS;IACxB,MAAM,GAAkB,IAAI,CAAA;IAEpC,YAAmB,OAAgB,EAAE,MAAe;QAClD,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC/D,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,GAAe;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAErC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACpD,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,MAAM,CAAC,GAAe;QACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC/D,CAAA;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAA;QAEnD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;IACjD,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,MAAM,CAAC,QAAiB;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACxD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;aAC3B,CAAC,CAAA;YAEF,OAAM;QACR,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC5B,CAAC;IAEkB,KAAK,CAAC,IAAI;QAC3B,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAA;QAE3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvC,2FAA2F;YAC3F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE,CACjD,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC5C,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO;aACnC,CAAC,CACH,CAAA;YAED,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QAEpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACxB,CAAC;IAEkB,KAAK,CAAC,KAAK;QAC5B,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAA;QACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACpB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,KAAY,EAAE,GAAe;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAE7D,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAEhC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAkC,CAAA;QACzD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAEnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAElC,OAAO;YACL,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK,EAAE;YAC1C,IAAI;YACJ,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;SACjC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAgB;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACtE,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAU;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAO,CAAC,WAAW,CAAA;QAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAA;QAE3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;YAExC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAC7B,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAClB,MAAO,WAAW,CAAC,CAAC,CAAuB,CAAC,MAAM,CAChD,IAAI,CAAC,MAAM,EACX,GAAG,IAAI,EACP,KAAK,EACL,UAAU,EACV,MAAM,CACP,CACJ,CAAA;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAEzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;CACF;AASD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAoB,CAAA;IAExD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAC7C,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,OAAgC,EAAE,KAAY;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9B,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAErD,KAAK,MAAM,GAAG,IAAI,MAAM;YAAE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACvF,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAE/C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;AAClB,CAAC;AAED,6DAA6D;AAC7D,SAAS,GAAG,CAAC,OAAgC,EAAE,MAAgB;IAC7D,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAChE,CAAA;AACH,CAAC"}

package/transpiled/realtime/Factory.d.ts

@@ -0,0 +1,11 @@
+import { type Declaration } from '@toa.io/definitions/extensions.exposition/realtime';
+import { Destination } from './Destination.ts';
+import type { Locator } from '@toa.io/core';
+import type { extensions } from '@toa.io/core/types';
+/**
+ * What `@toa.io/extensions.exposition#realtime` is to a component that declares routes: the
+ * destination its routed events are written by.
+ */
+export declare class Realtime implements extensions.Factory {
+    destination(locator: Locator, declaration: Declaration | null): Destination | undefined;
+}

package/transpiled/realtime/Factory.js

@@ -0,0 +1,15 @@
+import { parse } from '@toa.io/definitions/extensions.exposition/realtime';
+import { Destination } from './Destination.js';
+/**
+ * What `@toa.io/extensions.exposition#realtime` is to a component that declares routes: the
+ * destination its routed events are written by.
+ */
+export class Realtime {
+    destination(locator, declaration) {
+        const routes = declaration === null || declaration === undefined ? [] : parse(declaration);
+        if (routes.length === 0)
+            return undefined;
+        return new Destination(locator, routes);
+    }
+}
+//# sourceMappingURL=Factory.js.map

package/transpiled/realtime/Factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Factory.js","sourceRoot":"","sources":["../../source/realtime/Factory.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EAEN,MAAM,oDAAoD,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAI9C;;;GAGG;AACH,MAAM,OAAO,QAAQ;IACZ,WAAW,CAChB,OAAgB,EAChB,WAA+B;QAE/B,MAAM,MAAM,GACV,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAEzC,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACzC,CAAC;CACF"}

package/transpiled/realtime/measurements.d.ts

@@ -0,0 +1 @@
+export declare function route(event: string): void;

package/transpiled/realtime/measurements.js

@@ -0,0 +1,11 @@
+import { registry } from 'openspan';
+/**
+ * Counted where a component writes an event to the streams of its keys, whether or not any of
+ * them is read. Against `toa.realtime.delivered`, which the gateway counts, it says what arrived.
+ */
+const meters = registry();
+const routed = meters.counter('toa.realtime.routed', { event: null });
+export function route(event) {
+    routed.add(1, { event });
+}
+//# sourceMappingURL=measurements.js.map

package/transpiled/realtime/measurements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"measurements.js","sourceRoot":"","sources":["../../source/realtime/measurements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAEnC;;;GAGG;AACH,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAA;AAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAErE,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;AAC1B,CAAC"}

package/transpiled/realtime/redis.d.ts

@@ -0,0 +1,36 @@
+import { Redis } from 'ioredis';
+/**
+ * The Redis the streams are kept in, as the components that write them and the gateway that reads
+ * them both reach it: the addresses the `realtime` annotation names, one connection to each. A
+ * key is kept by the one its hash falls to, so every process finds it on the same one.
+ */
+export declare class Shards {
+    readonly connections: Redis[];
+    constructor();
+    /** The connection a key is kept on. */
+    of(key: string): Redis;
+    connect(): Promise<void>;
+    disconnect(): void;
+}
+/** Whether the streams have anywhere to be kept: the `realtime` annotation names it. */
+export declare function configured(): boolean;
+/** What a key is stored and published under: the scope, so contexts sharing a Redis do not meet. */
+export declare function prefix(): string;
+/** Seconds a stream outlives its last reader: the window a reader reconnects in. */
+export declare function expire(): number;
+/**
+ * FNV-1a over the key's UTF-16 code units: the same number in every process, and cheap enough to
+ * take for every event.
+ */
+export declare function shard(key: string, n: number): number;
+/**
+ * Appends an event to the streams of its keys, and publishes it on their channels — only to a
+ * stream that exists, which is one that is consumed. One call per Redis, whatever the keys it
+ * keeps: they are all on it.
+ *
+ * `KEYS` are the streams; `ARGV` is the event, its payload as JSON, and the length a stream is
+ * trimmed to. What is published is `[id, event, data]`, `data` the JSON it was given.
+ */
+export declare const APPEND = "\nfor _, key in ipairs(KEYS) do\n  if redis.call('EXISTS', key) == 1 then\n    local id = redis.call('XADD', key, 'MAXLEN', '~', ARGV[3], '*', 'type', ARGV[1], 'data', ARGV[2])\n    redis.call('SPUBLISH', key, cjson.encode({ id, ARGV[1], ARGV[2] }))\n  end\nend\n";
+/** How many entries a stream keeps: what a reader that reconnects can be given at most. */
+export declare const MAXLEN = 1000;

package/transpiled/realtime/redis.js

@@ -0,0 +1,83 @@
+import { Redis } from 'ioredis';
+import { environment } from '@toa.io/generic';
+import { EXPIRE, STREAMS } from '@toa.io/definitions/extensions.exposition/realtime';
+/**
+ * The Redis the streams are kept in, as the components that write them and the gateway that reads
+ * them both reach it: the addresses the `realtime` annotation names, one connection to each. A
+ * key is kept by the one its hash falls to, so every process finds it on the same one.
+ */
+export class Shards {
+    connections;
+    constructor() {
+        // a key's, and its channel's: the prefix applies to a sharded channel as to a key
+        const keyPrefix = prefix();
+        this.connections = addresses().map((address) => new Redis(address, { keyPrefix, lazyConnect: true }));
+    }
+    /** The connection a key is kept on. */
+    of(key) {
+        return this.connections[shard(key, this.connections.length)];
+    }
+    async connect() {
+        await Promise.all(this.connections.map(async (connection) => await connection.connect()));
+    }
+    disconnect() {
+        for (const connection of this.connections)
+            connection.disconnect();
+    }
+}
+/** Whether the streams have anywhere to be kept: the `realtime` annotation names it. */
+export function configured() {
+    return environment.get('TOA_DEV') === '1' || environment.has(STREAMS);
+}
+/** What a key is stored and published under: the scope, so contexts sharing a Redis do not meet. */
+export function prefix() {
+    return `${environment.scope()}:realtime:`;
+}
+/** Seconds a stream outlives its last reader: the window a reader reconnects in. */
+export function expire() {
+    const value = Number(environment.get(EXPIRE));
+    return Number.isNaN(value) || value <= 0 ? DEFAULT_EXPIRE : value;
+}
+/**
+ * FNV-1a over the key's UTF-16 code units: the same number in every process, and cheap enough to
+ * take for every event.
+ */
+export function shard(key, n) {
+    if (n === 1)
+        return 0;
+    let hash = 0x811c9dc5;
+    for (let i = 0; i < key.length; i++) {
+        hash ^= key.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return (hash >>> 0) % n;
+}
+function addresses() {
+    const value = environment.get(STREAMS);
+    // Toa's own development stack is not on the conventional ports. See CONTRIBUTING.md.
+    if (value === undefined && environment.get('TOA_DEV') === '1')
+        return ['redis://localhost:31040'];
+    if (value === undefined)
+        throw new Error(`${STREAMS} is not set: the context has no realtime`);
+    return value.split(' ').filter(Boolean);
+}
+/**
+ * Appends an event to the streams of its keys, and publishes it on their channels — only to a
+ * stream that exists, which is one that is consumed. One call per Redis, whatever the keys it
+ * keeps: they are all on it.
+ *
+ * `KEYS` are the streams; `ARGV` is the event, its payload as JSON, and the length a stream is
+ * trimmed to. What is published is `[id, event, data]`, `data` the JSON it was given.
+ */
+export const APPEND = `
+for _, key in ipairs(KEYS) do
+  if redis.call('EXISTS', key) == 1 then
+    local id = redis.call('XADD', key, 'MAXLEN', '~', ARGV[3], '*', 'type', ARGV[1], 'data', ARGV[2])
+    redis.call('SPUBLISH', key, cjson.encode({ id, ARGV[1], ARGV[2] }))
+  end
+end
+`;
+/** How many entries a stream keeps: what a reader that reconnects can be given at most. */
+export const MAXLEN = 1000;
+const DEFAULT_EXPIRE = 300;
+//# sourceMappingURL=redis.js.map

package/transpiled/realtime/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../source/realtime/redis.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oDAAoD,CAAA;AAEpF;;;;GAIG;AACH,MAAM,OAAO,MAAM;IACD,WAAW,CAAS;IAEpC;QACE,kFAAkF;QAClF,MAAM,SAAS,GAAG,MAAM,EAAE,CAAA;QAE1B,IAAI,CAAC,WAAW,GAAG,SAAS,EAAE,CAAC,GAAG,CAChC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAClE,CAAA;IACH,CAAC;IAED,uCAAuC;IAChC,EAAE,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,CACvE,CAAA;IACH,CAAC;IAEM,UAAU;QACf,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW;YAAE,UAAU,CAAC,UAAU,EAAE,CAAA;IACpE,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU;IACxB,OAAO,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AACvE,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,MAAM;IACpB,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,YAAY,CAAA;AAC3C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,MAAM;IACpB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAE7C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAA;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,GAAW,EAAE,CAAS;IAC1C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAErB,IAAI,IAAI,GAAG,UAAU,CAAA;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACpC,CAAC;IAED,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAEtC,qFAAqF;IACrF,IAAI,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG;QAC3D,OAAO,CAAC,yBAAyB,CAAC,CAAA;IAEpC,IAAI,KAAK,KAAK,SAAS;QACrB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,0CAA0C,CAAC,CAAA;IAEvE,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;;;;;;;CAOrB,CAAA;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAA;AAE1B,MAAM,cAAc,GAAG,GAAG,CAAA"}

package/transpiled/root.d.ts

@@ -1,2 +1,2 @@
-import { syntax } from './RTD';
+import { syntax } from './RTD/index.ts';
 export declare function resolve(): syntax.Node;

package/transpiled/root.js

@@ -1,15 +1,11 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolve = void 0;
-const generic_1 = require("@toa.io/generic");
-const RTD_1 = require("./RTD");
-function resolve() {
-    const value = process.env.TOA_EXPOSITION;
-    const root = value !== undefined ? (0, generic_1.decode)(value) : RTD_1.syntax.createNode();
-    (0, generic_1.merge)(root, PREDEFINED);
+import { environment, merge } from '@toa.io/generic';
+import { syntax } from './RTD/index.js';
+export function resolve() {
+    const value = environment.get('TOA_EXPOSITION');
+    const root = value !== undefined ? JSON.parse(value) : syntax.createNode();
+    merge(root, PREDEFINED);
     return root;
 }
-exports.resolve = resolve;
 const PREDEFINED = {
     routes: [
         {
@@ -21,21 +17,51 @@ const PREDEFINED = {
                     {
                         verb: 'GET',
                         directives: [
+                            {
+                                family: 'io',
+                                name: 'output',
+                                value: ['id', 'roles']
+                            },
                             {
                                 family: 'auth',
                                 name: 'echo',
                                 value: null
-                            },
+                            }
+                        ]
+                    },
+                    {
+                        verb: 'POST',
+                        directives: [
                             {
                                 family: 'io',
                                 name: 'output',
                                 value: ['id', 'roles']
+                            },
+                            {
+                                family: 'auth',
+                                name: 'incept',
+                                value: null
                             }
                         ]
                     }
                 ],
                 directives: []
             }
+        },
+        {
+            // an identity's own stream, which it reads whatever the application declares
+            path: '/realtime/:id',
+            node: {
+                isolated: true,
+                routes: [],
+                methods: [
+                    {
+                        verb: 'GET',
+                        directives: [{ family: 'realtime', name: 'stream', value: 'id' }]
+                    }
+                ],
+                directives: [{ family: 'auth', name: 'id', value: 'id' }]
+            }
         }
     ],
     methods: [],

package/transpiled/root.js.map

@@ -1 +1 @@
-{"version":3,"file":"root.js","sourceRoot":"","sources":["../source/root.ts"],"names":[],"mappings":";;;AAAA,6CAA+C;AAC/C,+BAA8B;AAE9B,SAAgB,OAAO;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IACxC,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,gBAAM,EAAc,KAAK,CAAC,CAAC,CAAC,CAAC,YAAM,CAAC,UAAU,EAAE,CAAA;IAEnF,IAAA,eAAK,EAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAEvB,OAAO,IAAI,CAAA;AACb,CAAC;AAPD,0BAOC;AAED,MAAM,UAAU,GAAgB;IAC9B,MAAM,EAAE;QACN;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,KAAK;wBACX,UAAU,EAAE;4BACV;gCACE,MAAM,EAAE,MAAM;gCACd,IAAI,EAAE,MAAM;gCACZ,KAAK,EAAE,IAAI;6BACZ;4BACD;gCACE,MAAM,EAAE,IAAI;gCACZ,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;6BACvB;yBACF;qBACF;iBACF;gBACD,UAAU,EAAE,EAAE;aACf;SACF;KACF;IACD,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;CACf,CAAA"}
+{"version":3,"file":"root.js","sourceRoot":"","sources":["../source/root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAEvC,MAAM,UAAU,OAAO;IACrB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC/C,MAAM,IAAI,GACR,KAAK,KAAK,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAA;IAEhF,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAEvB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,GAAgB;IAC9B,MAAM,EAAE;QACN;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,KAAK;wBACX,UAAU,EAAE;4BACV;gCACE,MAAM,EAAE,IAAI;gCACZ,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;6BACvB;4BACD;gCACE,MAAM,EAAE,MAAM;gCACd,IAAI,EAAE,MAAM;gCACZ,KAAK,EAAE,IAAI;6BACZ;yBACF;qBACF;oBACD;wBACE,IAAI,EAAE,MAAM;wBACZ,UAAU,EAAE;4BACV;gCACE,MAAM,EAAE,IAAI;gCACZ,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;6BACvB;4BACD;gCACE,MAAM,EAAE,MAAM;gCACd,IAAI,EAAE,QAAQ;gCACd,KAAK,EAAE,IAAI;6BACZ;yBACF;qBACF;iBACF;gBACD,UAAU,EAAE,EAAE;aACf;SACF;QACD;YACE,6EAA6E;YAC7E,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,KAAK;wBACX,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;qBAClE;iBACF;gBACD,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aAC1D;SACF;KACF;IACD,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,EAAE;CACf,CAAA"}

package/transpiled/service.d.ts

@@ -0,0 +1,7 @@
+import type { Connector } from '@toa.io/core';
+import type { Host } from './Factory.ts';
+/**
+ * The gateway. A composition loads this extension for its tenants alone, so what the
+ * gateway is made of is reached from here and nowhere the factory imports.
+ */
+export declare function service(host: Host): Promise<Connector | null>;

package/transpiled/service.js

@@ -0,0 +1,122 @@
+import { console, logs, metrics, traces } from 'openspan';
+import { Gateway } from './Gateway.js';
+import { Remotes } from './Remotes.js';
+import { Tree } from './RTD/index.js';
+import { EndpointsFactory } from './Endpoint.js';
+import { families, interceptors } from './directives/index.js';
+import { DirectivesFactory } from './Directive.js';
+import { composition as compose } from './Composition.js';
+import * as root from './root.js';
+import { ATOM_GROUP, CHANNEL } from '@toa.io/definitions/extensions.exposition';
+import { Interception } from './Interception.js';
+import { Dispatcher } from './RPC/index.js';
+import { Server as Model } from './MCP/index.js';
+import * as http from './HTTP/index.js';
+import { environment } from '@toa.io/generic';
+/**
+ * The gateway. A composition loads this extension for its tenants alone, so what the
+ * gateway is made of is reached from here and nowhere the factory imports.
+ */
+export async function service(host) {
+    const properties = environment.get('TOA_EXPOSITION_PROPERTIES');
+    if (properties === undefined)
+        throw new Error('TOA_EXPOSITION_PROPERTIES is undefined');
+    configureLogs();
+    const options = JSON.parse(properties);
+    const server = http.Server.create({ ...options });
+    /*
+     * The server keeps its port through a halt and answers `503` on it; everything it serves
+     * with is behind the gate, taken down and built again. A refused connection is not an
+     * answer, and the answer has to be the application's.
+     */
+    const gate = host.gate(async () => {
+        const broadcast = await host.broadcast(CHANNEL);
+        const composition = await compose(host);
+        const remotes = new Remotes(host);
+        const node = root.resolve();
+        const methods = new EndpointsFactory(remotes);
+        const directives = new DirectivesFactory(families, remotes, host, options);
+        const interception = new Interception(interceptors, options);
+        const tree = new Tree(node, methods, directives);
+        const dispatcher = options.rpc === undefined ? null : new Dispatcher(options.rpc);
+        const mcp = options.mcp === undefined ? null : new Model(options.mcp, tree);
+        const gateway = new Gateway(broadcast, tree, interception, directives, dispatcher, mcp);
+        gateway.depends(remotes);
+        gateway.depends(composition);
+        // read in the background, and stopped with the gateway
+        if (mcp?.manifest != null)
+            gateway.depends(mcp.manifest);
+        // what the directives meter through; one atom per process, connected once
+        gateway.depends(host.atom(ATOM_GROUP));
+        server.attach(gateway.process.bind(gateway));
+        return gateway;
+    });
+    server.gated(gate);
+    server.depends(gate);
+    return server;
+}
+const LOGS_PREFIX = 'TOA_TELEMETRY_LOGS';
+const TRACES_ENV = 'TOA_TELEMETRY_TRACES';
+const METRICS_ENV = 'TOA_TELEMETRY_METRICS';
+function configureLogs() {
+    const globEnv = environment.get(LOGS_PREFIX);
+    const level = environment.get('TOA_DEV') === '1' ? 'trace' : 'info';
+    const options = globEnv === undefined
+        ? { level }
+        : JSON.parse(globEnv);
+    console.configure({ level: options.level ?? level });
+    logs({ exporters: records(options.exporters) });
+    const tracesEnv = environment.get(TRACES_ENV);
+    const tracing = tracesEnv === undefined ? development() : JSON.parse(tracesEnv);
+    // `openspan` is not Toa's and reads the environment, which no longer holds the context by
+    // the time the exporter is made — so the service is named here
+    if (tracing.exporters?.otlp !== undefined)
+        tracing.exporters.otlp.service ??= environment.get('TOA_CONTEXT');
+    traces(tracing);
+    metrics(measurements());
+}
+/**
+ * What the records say they came from. The gateway serves several components and is none of
+ * them, so it names itself, as it does for the series.
+ */
+function records(exporters) {
+    if (exporters?.otlp !== undefined) {
+        const resource = (exporters.otlp.resource ??= {});
+        resource['service.name'] ??= 'exposition';
+        resource['service.namespace'] ??= environment.get('TOA_CONTEXT');
+        resource['deployment.environment.name'] ??= environment.get('TOA_ENV');
+    }
+    return exporters;
+}
+/**
+ * The gateway measures what it serves, and what tells two products apart in one backend is the
+ * resource rather than the metric name.
+ */
+function measurements() {
+    const env = environment.get(METRICS_ENV);
+    if (env === undefined)
+        return undefined;
+    const options = JSON.parse(env);
+    options.prefix ??= 'toa';
+    if (options.exporters?.otlp !== undefined) {
+        const resource = (options.exporters.otlp.resource ??= {});
+        resource['service.name'] ??= 'exposition';
+        resource['service.namespace'] ??= environment.get('TOA_CONTEXT');
+        resource['deployment.environment.name'] ??= environment.get('TOA_ENV');
+    }
+    return options;
+}
+/**
+ * Tracing and metrics are off unless configured. The console exporter is a local development
+ * mechanism, so it is turned on for `toa dev` and for a boot trace the CLI has already
+ * asked for (`runtime/boot/src/span.js`), and nowhere else — a deployment that wants
+ * traces annotates `telemetry.traces.exporters`.
+ *
+ * The gateway boots without the telemetry extension, hence the copy of
+ * `extensions/telemetry/source/extension.ts`.
+ */
+function development() {
+    const local = environment.get('TOA_DEV') === '1' || environment.get('TOA_BOOT_TRACE') === '1';
+    return local ? { exporters: { console: {} } } : {};
+}
+//# sourceMappingURL=service.js.map

package/transpiled/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../source/service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,IAAI,EACJ,OAAO,EACP,MAAM,EAKP,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,WAAW,IAAI,OAAO,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAA;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,MAAM,IAAI,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAK7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAU;IACtC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;IAE/D,IAAI,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAEvF,aAAa,EAAE,CAAA;IAEf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAiB,CAAA;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IAEjD;;;;OAIG;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,SAAS,GAAc,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC1D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAA;QAC3B,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1E,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;QAEhD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACjF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,SAAS,EACT,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,UAAU,EACV,GAAG,CACJ,CAAA;QAED,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACxB,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAE5B,uDAAuD;QACvD,IAAI,GAAG,EAAE,QAAQ,IAAI,IAAI;YAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACxD,0EAA0E;QAC1E,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;QAEtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QAE5C,OAAO,OAAO,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEpB,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,WAAW,GAAG,oBAAoB,CAAA;AACxC,MAAM,UAAU,GAAG,sBAAsB,CAAA;AACzC,MAAM,WAAW,GAAG,uBAAuB,CAAA;AAE3C,SAAS,aAAa;IACpB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAc,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IAC9E,MAAM,OAAO,GACX,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,EAAE,KAAK,EAAE;QACX,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2D,CAAA;IAEpF,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAA;IAEpD,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAE/C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC7C,MAAM,OAAO,GACX,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAmB,CAAA;IAEpF,0FAA0F;IAC1F,+DAA+D;IAC/D,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,KAAK,SAAS;QACvC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAEnE,MAAM,CAAC,OAAO,CAAC,CAAA;IACf,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CAAC,SAA8B;IAC7C,IAAI,SAAS,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAA;QAEjD,QAAQ,CAAC,cAAc,CAAC,KAAK,YAAY,CAAA;QACzC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAChE,QAAQ,CAAC,6BAA6B,CAAC,KAAK,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACxE,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAExC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAA;IAEjD,OAAO,CAAC,MAAM,KAAK,KAAK,CAAA;IAExB,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAA;QAEzD,QAAQ,CAAC,cAAc,CAAC,KAAK,YAAY,CAAA;QACzC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAChE,QAAQ,CAAC,6BAA6B,CAAC,KAAK,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACxE,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW;IAClB,MAAM,KAAK,GACT,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,CAAA;IAEjF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACpD,CAAC"}

package/transpiled/userland.d.ts

@@ -0,0 +1,39 @@
+/**
+ * What Exposition puts into an operation's input, for the operation to be written against.
+ *
+ * The gateway's own types are its business; these are the application's.
+ */
+/**
+ * The identity behind the call, as `auth:delegate` embeds it:
+ *
+ * ```yaml
+ * /echo:
+ *   GET:
+ *     auth:assert: true
+ *     auth:delegate: identity
+ *     endpoint: echo
+ * ```
+ *
+ * ```javascript
+ * export async function computation ({ identity }, context) { }
+ * ```
+ */
+export interface Identity {
+    readonly id: string;
+    /** What the identity holds. Delegation resolves them, so they are always here. */
+    roles: string[];
+    permissions?: Record<string, string[]>;
+    /** How the identity was authenticated; `null` for a transient one. */
+    scheme: string | null;
+    /** Whether the credentials presented are due to be exchanged. */
+    refresh: boolean;
+    /** The token's claims, where the identity was federated. */
+    claims?: Claims;
+}
+/** A federated token's payload: what it must carry, and whatever else the issuer put there. */
+export interface Claims {
+    iss: string;
+    sub: string;
+    aud?: string | string[];
+    [claim: string]: unknown;
+}

package/transpiled/userland.js

@@ -0,0 +1,7 @@
+/**
+ * What Exposition puts into an operation's input, for the operation to be written against.
+ *
+ * The gateway's own types are its business; these are the application's.
+ */
+export {};
+//# sourceMappingURL=userland.js.map

package/transpiled/userland.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userland.js","sourceRoot":"","sources":["../source/userland.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/ui/dist/_app/env.js

@@ -0,0 +1 @@
+export const env={}