@toa.io/extensions.exposition 1.0.0-alpha.4 → 1.0.0-alpha.41

package/transpiled/directives/auth/Role.js

@@ -1,13 +1,19 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Role = void 0;
+const node_assert_1 = __importDefault(require("node:assert"));
 class Role {
     static remote = null;
     roles;
     discovery;
+    dynamic;
     constructor(roles, discovery) {
         this.roles = typeof roles === 'string' ? [roles] : roles;
         this.discovery = discovery;
+        this.dynamic = this.roles.some((role) => role.includes('{'));
     }
     static async set(identity, discovery) {
         this.remote ??= await discovery;
@@ -17,30 +23,30 @@ class Role {
         };
         identity.roles = await this.remote.invoke('list', { query });
     }
-    async authorize(identity) {
+    async authorize(identity, _, parameters) {
         if (identity === null)
             return false;
         await Role.set(identity, this.discovery);
-        if (identity.roles === undefined)
+        if (identity.roles.length === 0) // Role.set()
             return false;
-        return this.match(identity.roles);
+        return this.match(identity.roles, parameters);
     }
-    match(roles) {
+    match(roles, parameters) {
+        const required = this.dynamic ? this.substitute(parameters) : this.roles;
         for (const role of roles) {
-            const index = this.roles.findIndex((expected) => compare(expected, role));
-            if (index !== -1)
+            const ok = required.some((expected) => expected === role || expected.startsWith(role + ':'));
+            if (ok)
                 return true;
         }
         return false;
     }
+    substitute(parameters) {
+        return this.roles.map((role) => role.replaceAll(/{(\w+)}/g, (_, key) => {
+            const value = parameters.find((parameter) => parameter.name === key)?.value;
+            node_assert_1.default.ok(value !== undefined, `Role '${role}' requires '${key}' route parameter.`);
+            return value;
+        }));
+    }
 }
 exports.Role = Role;
-function compare(expected, actual) {
-    const exp = expected.split(':');
-    const act = actual.split(':');
-    for (let i = 0; i < act.length; i++)
-        if (exp[i] !== act[i])
-            return false;
-    return true;
-}
 //# sourceMappingURL=Role.js.map

package/transpiled/directives/auth/Role.js.map

@@ -1 +1 @@
-{"version":3,"file":"Role.js","sourceRoot":"","sources":["../../../source/directives/auth/Role.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACR,MAAM,CAAC,MAAM,GAAqB,IAAI,CAAA;IAC5B,KAAK,CAAU;IACf,SAAS,CAAoB;IAE9C,YAAoB,KAAwB,EAAE,SAA6B;QACzE,IAAI,CAAC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;IAC5B,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAE,QAAkB,EAAE,SAA6B;QACxE,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAA;QAE/B,MAAM,KAAK,GAAU;YACnB,QAAQ,EAAE,aAAa,QAAQ,CAAC,EAAE,EAAE;YACpC,KAAK,EAAE,IAAI;SACZ,CAAA;QAED,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,SAAS,CAAE,QAAyB;QAC/C,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAO,KAAK,CAAA;QAEd,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAExC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAC9B,OAAO,KAAK,CAAA;QAEd,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAEO,KAAK,CAAE,KAAe;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAA;YAEzE,IAAI,KAAK,KAAK,CAAC,CAAC;gBACd,OAAO,IAAI,CAAA;QACf,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;;AA1CH,oBA2CC;AAED,SAAS,OAAO,CAAE,QAAgB,EAAE,MAAc;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QACjC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACnB,OAAO,KAAK,CAAA;IAEhB,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"Role.js","sourceRoot":"","sources":["../../../source/directives/auth/Role.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAgC;AAKhC,MAAa,IAAI;IACR,MAAM,CAAC,MAAM,GAAqB,IAAI,CAAA;IAC5B,KAAK,CAAU;IACf,SAAS,CAAoB;IAC7B,OAAO,CAAS;IAEjC,YAAoB,KAAwB,EAAE,SAA6B;QACzE,IAAI,CAAC,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAE,QAAkB,EAAE,SAA6B;QACxE,IAAI,CAAC,MAAM,KAAK,MAAM,SAAS,CAAA;QAE/B,MAAM,KAAK,GAAU;YACnB,QAAQ,EAAE,aAAa,QAAQ,CAAC,EAAE,EAAE;YACpC,KAAK,EAAE,IAAI;SACZ,CAAA;QAED,QAAQ,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9D,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,QAAyB,EAAE,CAAU,EAAE,UAAuB;QAC7D,IAAI,QAAQ,KAAK,IAAI;YACnB,OAAO,KAAK,CAAA;QAEd,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAExC,IAAI,QAAQ,CAAC,KAAM,CAAC,MAAM,KAAK,CAAC,EAAE,aAAa;YAE7C,OAAO,KAAK,CAAA;QAEd,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAM,EAAE,UAAU,CAAC,CAAA;IAChD,CAAC;IAEO,KAAK,CAAE,KAAe,EAAE,UAAuB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA;QAExE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAA;YAE5F,IAAI,EAAE;gBACJ,OAAO,IAAI,CAAA;QACf,CAAC;QAED,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,UAAU,CAAE,UAAuB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YACrE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,CAAA;YAE3E,qBAAM,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,EAC3B,SAAS,IAAI,eAAe,GAAG,oBAAoB,CAAC,CAAA;YAEtD,OAAO,KAAK,CAAA;QACd,CAAC,CAAC,CAAC,CAAA;IACL,CAAC;;AA3DH,oBA4DC"}

package/transpiled/directives/cache/Cache.d.ts

@@ -1,11 +1,11 @@
-import type { Input, Output } from '../../io';
-import type { Directive } from './types';
-import type { Family } from '../../Directive';
+import type { Output } from '../../io';
+import type { AuthenticatedContext, Directive } from './types';
+import type { DirectiveFamily } from '../../RTD';
 import type * as http from '../../HTTP';
-export declare class Cache implements Family<Directive> {
+export declare class Cache implements DirectiveFamily<Directive> {
     readonly name: string;
     readonly mandatory: boolean;
     create(name: string, value: any): Directive;
     preflight(): Output;
-    settle(directives: Directive[], input: Input, response: http.OutgoingMessage): Promise<void>;
+    settle(directives: Directive[], context: AuthenticatedContext, response: http.OutgoingMessage): Promise<void>;
 }

package/transpiled/directives/cache/Cache.js

@@ -5,19 +5,25 @@ const Control_1 = require("./Control");
 const Exact_1 = require("./Exact");
 class Cache {
     name = 'cache';
-    mandatory = false;
+    mandatory = true;
     create(name, value) {
         const Class = constructors[name];
         if (Class === undefined)
-            throw new Error(`Directive '${name}' is not provided by the '${this.name}' family.`);
+            throw new Error(`Directive 'cache:${name}' is not implemented.`);
         return new Class(value);
     }
     preflight() {
         return null;
     }
-    async settle(directives, input, response) {
+    async settle(directives, context, response) {
+        const directive = directives[0];
         response.headers ??= new Headers();
-        directives[0]?.set(input, response.headers);
+        if (directive === undefined) {
+            if (context.identity !== null && !Control_1.Control.disabled(response.headers))
+                response.headers.set('cache-control', 'private');
+        }
+        else
+            directive.set(context, response.headers);
     }
 }
 exports.Cache = Cache;

package/transpiled/directives/cache/Cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"Cache.js","sourceRoot":"","sources":["../../../source/directives/cache/Cache.ts"],"names":[],"mappings":";;;AAAA,uCAAmC;AACnC,mCAA+B;AAM/B,MAAa,KAAK;IACA,IAAI,GAAW,OAAO,CAAA;IACtB,SAAS,GAAY,KAAK,CAAA;IAEnC,MAAM,CAAE,IAAY,EAAE,KAAU;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,6BAA6B,IAAI,CAAC,IAAI,WAAW,CAAC,CAAA;QAEtF,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,SAAS;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,MAAM,CAClB,UAAuB,EAAE,KAAY,EAAE,QAA8B;QACpE,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;QAClC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC7C,CAAC;CACF;AAtBD,sBAsBC;AAED,MAAM,YAAY,GAAkD;IAClE,OAAO,EAAE,iBAAO;IAChB,KAAK,EAAE,aAAK;CACb,CAAA"}
+{"version":3,"file":"Cache.js","sourceRoot":"","sources":["../../../source/directives/cache/Cache.ts"],"names":[],"mappings":";;;AAAA,uCAAmC;AACnC,mCAA+B;AAM/B,MAAa,KAAK;IACA,IAAI,GAAW,OAAO,CAAA;IACtB,SAAS,GAAY,IAAI,CAAA;IAElC,MAAM,CAAE,IAAY,EAAE,KAAU;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,uBAAuB,CAAC,CAAA;QAElE,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,SAAS;QACd,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,MAAM,CAClB,UAAuB,EAAE,OAA6B,EAAE,QAA8B;QACrF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;QAE/B,QAAQ,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;QAElC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,iBAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAClE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAA;QACpD,CAAC;;YACC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC;CACF;AA7BD,sBA6BC;AAED,MAAM,YAAY,GAAkD;IAClE,OAAO,EAAE,iBAAO;IAChB,KAAK,EAAE,aAAK;CACb,CAAA"}

package/transpiled/directives/cache/Control.d.ts

@@ -2,8 +2,9 @@ import type { AuthenticatedContext, Directive } from './types';
 export declare class Control implements Directive {
     protected readonly value: string;
     private cache;
+    private vary;
     constructor(value: string);
+    static disabled(headers: Headers): boolean;
     set(context: AuthenticatedContext, headers: Headers): void;
     protected resolve(request: AuthenticatedContext): string;
-    private mask;
 }

package/transpiled/directives/cache/Control.js

@@ -5,38 +5,55 @@ const matchacho_1 = require("matchacho");
 class Control {
     value;
     cache = null;
+    vary = false;
     constructor(value) {
         this.value = value;
     }
+    static disabled(headers) {
+        const value = headers.get('cache-control');
+        if (value === null)
+            return false;
+        const directives = mask(value);
+        return (directives & NO_STORE) === NO_STORE;
+    }
     set(context, headers) {
         if (!['GET', 'HEAD', 'OPTIONS'].includes(context.request.method))
             return;
         this.cache ??= this.resolve(context);
+        if (Control.disabled(headers))
+            return;
         headers.set('cache-control', this.cache);
+        if (this.vary !== null)
+            headers.append('vary', 'authorization');
     }
     resolve(request) {
         if (request.identity === null)
             return this.value;
-        const directives = this.mask();
+        const directives = mask(this.value);
+        if ((directives & PRIVATE) === PRIVATE)
+            this.vary = true;
         if ((directives & (PUBLIC | NO_CACHE)) === PUBLIC)
             return 'no-cache, ' + this.value;
-        if ((directives & (PUBLIC | PRIVATE)) === 0)
+        if ((directives & (PUBLIC | PRIVATE)) === 0) {
+            this.vary = true;
             return 'private, ' + this.value;
+        }
         return this.value;
     }
-    mask() {
-        const directives = this.value.match(DIRECTIVES_RX);
-        if (directives === null)
-            return 0;
-        let mask = 0;
-        for (const directive of directives)
-            mask |= (0, matchacho_1.match)(directive, 'private', PRIVATE, 'public', PUBLIC, 'no-cache', NO_CACHE, 0);
-        return mask;
-    }
 }
 exports.Control = Control;
-const DIRECTIVES_RX = /\b(private|public|no-cache)\b/ig;
+function mask(value) {
+    const directives = value.match(DIRECTIVES_RX);
+    if (directives === null)
+        return 0;
+    let mask = 0;
+    for (const directive of directives)
+        mask |= (0, matchacho_1.match)(directive, 'private', PRIVATE, 'public', PUBLIC, 'no-cache', NO_CACHE, 'no-store', NO_STORE, 0);
+    return mask;
+}
+const DIRECTIVES_RX = /\b(private|public|no-cache|no-store)\b/ig;
 const PUBLIC = 1;
 const PRIVATE = 2;
 const NO_CACHE = 4;
+const NO_STORE = 8;
 //# sourceMappingURL=Control.js.map

package/transpiled/directives/cache/Control.js.map

@@ -1 +1 @@
-{"version":3,"file":"Control.js","sourceRoot":"","sources":["../../../source/directives/cache/Control.ts"],"names":[],"mappings":";;;AAAA,yCAAiC;AAGjC,MAAa,OAAO;IACC,KAAK,CAAQ;IACxB,KAAK,GAAkB,IAAI,CAAA;IAEnC,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,GAAG,CAAE,OAA6B,EAAE,OAAgB;QACzD,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9D,OAAM;QAER,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAEpC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC;IAES,OAAO,CAAE,OAA6B;QAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAA;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAE9B,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,KAAK,MAAM;YAC/C,OAAO,YAAY,GAAG,IAAI,CAAC,KAAK,CAAA;QAElC,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC;YACzC,OAAO,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;QAEjC,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAEO,IAAI;QACV,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAElD,IAAI,UAAU,KAAK,IAAI;YACrB,OAAO,CAAC,CAAA;QAEV,IAAI,IAAI,GAAG,CAAC,CAAA;QAEZ,KAAK,MAAM,SAAS,IAAI,UAAU;YAChC,IAAI,IAAI,IAAA,iBAAK,EAAS,SAAS,EAC7B,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,QAAQ,EACpB,CAAC,CAAC,CAAA;QAEN,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAjDD,0BAiDC;AAED,MAAM,aAAa,GAAG,iCAAiC,CAAA;AAEvD,MAAM,MAAM,GAAG,CAAC,CAAA;AAChB,MAAM,OAAO,GAAG,CAAC,CAAA;AACjB,MAAM,QAAQ,GAAG,CAAC,CAAA"}
+{"version":3,"file":"Control.js","sourceRoot":"","sources":["../../../source/directives/cache/Control.ts"],"names":[],"mappings":";;;AAAA,yCAAiC;AAGjC,MAAa,OAAO;IACC,KAAK,CAAQ;IACxB,KAAK,GAAkB,IAAI,CAAA;IAC3B,IAAI,GAAY,KAAK,CAAA;IAE7B,YAAoB,KAAa;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAE,OAAgB;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAE1C,IAAI,KAAK,KAAK,IAAI;YAChB,OAAO,KAAK,CAAA;QAEd,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAE9B,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,KAAK,QAAQ,CAAA;IAC7C,CAAC;IAEM,GAAG,CAAE,OAA6B,EAAE,OAAgB;QACzD,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9D,OAAM;QAER,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAEpC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC3B,OAAM;QAER,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QAExC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC3C,CAAC;IAES,OAAO,CAAE,OAA6B;QAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAC3B,OAAO,IAAI,CAAC,KAAK,CAAA;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,OAAO;YACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAElB,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,KAAK,MAAM;YAC/C,OAAO,YAAY,GAAG,IAAI,CAAC,KAAK,CAAA;QAElC,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;YAEhB,OAAO,WAAW,GAAG,IAAI,CAAC,KAAK,CAAA;QACjC,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;CACF;AAvDD,0BAuDC;AAED,SAAS,IAAI,CAAE,KAAa;IAC1B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAE7C,IAAI,UAAU,KAAK,IAAI;QACrB,OAAO,CAAC,CAAA;IAEV,IAAI,IAAI,GAAG,CAAC,CAAA;IAEZ,KAAK,MAAM,SAAS,IAAI,UAAU;QAChC,IAAI,IAAI,IAAA,iBAAK,EAAS,SAAS,EAC7B,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,QAAQ,EACpB,UAAU,EAAE,QAAQ,EACpB,CAAC,CAAC,CAAA;IAEN,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,aAAa,GAAG,0CAA0C,CAAA;AAEhE,MAAM,MAAM,GAAG,CAAC,CAAA;AAChB,MAAM,OAAO,GAAG,CAAC,CAAA;AACjB,MAAM,QAAQ,GAAG,CAAC,CAAA;AAClB,MAAM,QAAQ,GAAG,CAAC,CAAA"}

package/transpiled/directives/cors/CORS.d.ts

@@ -2,10 +2,9 @@ import type { Input, Output } from '../../io';
 import type { Interceptor } from '../../Interception';
 export declare class CORS implements Interceptor {
     readonly name = "cors";
-    readonly mandatory = true;
-    private readonly allowedHeaders;
+    private readonly requestHeaders;
     private readonly headers;
     intercept(input: Input): Output;
-    allowHeader(header: string): void;
+    allow(header: string): void;
     private preflightResponse;
 }

package/transpiled/directives/cors/CORS.js

@@ -3,14 +3,20 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CORS = void 0;
 class CORS {
     name = 'cors';
-    mandatory = true;
-    allowedHeaders = new Set(['accept', 'authorization', 'content-type']);
+    requestHeaders = new Set([
+        'accept',
+        'authorization',
+        'content-type',
+        'etag',
+        'if-match',
+        'if-none-match'
+    ]);
     headers = new Headers({
         'access-control-allow-methods': 'GET, POST, PUT, PATCH, DELETE',
         'access-control-allow-credentials': 'true',
-        'access-control-allow-headers': Array.from(this.allowedHeaders).join(', '),
+        'access-control-allow-headers': Array.from(this.requestHeaders).join(', '),
         'access-control-max-age': '3600',
-        'cache-control': 'public, max-age=3600',
+        'cache-control': 'max-age=3600',
         vary: 'origin'
     });
     intercept(input) {
@@ -29,9 +35,9 @@ class CORS {
         });
         return null;
     }
-    allowHeader(header) {
-        this.allowedHeaders.add(header.toLowerCase());
-        this.headers.set('access-control-allow-headers', Array.from(this.allowedHeaders).join(', '));
+    allow(header) {
+        this.requestHeaders.add(header.toLowerCase());
+        this.headers.set('access-control-allow-headers', Array.from(this.requestHeaders).join(', '));
     }
     preflightResponse(origin) {
         this.headers.set('access-control-allow-origin', origin);

package/transpiled/directives/cors/CORS.js.map

@@ -1 +1 @@
-{"version":3,"file":"CORS.js","sourceRoot":"","sources":["../../../source/directives/cors/CORS.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACC,IAAI,GAAG,MAAM,CAAA;IACb,SAAS,GAAG,IAAI,CAAA;IAEf,cAAc,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAA;IAE7E,OAAO,GAAG,IAAI,OAAO,CAAC;QACrC,8BAA8B,EAAE,+BAA+B;QAC/D,kCAAkC,EAAE,MAAM;QAC1C,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1E,wBAAwB,EAAE,MAAM;QAChC,eAAe,EAAE,sBAAsB;QACvC,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEK,SAAS,CAAE,KAAY;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE3C,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,IAAI,CAAA;QAEb,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAEvC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAChD,mDAAmD,CAAC,CAAA;YAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;YAEnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;gBAC/D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,WAAW,CAAE,MAAc;QAChC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9F,CAAC;IAEO,iBAAiB,CAAE,MAAc;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QAEvD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF;AApDD,oBAoDC"}
+{"version":3,"file":"CORS.js","sourceRoot":"","sources":["../../../source/directives/cors/CORS.ts"],"names":[],"mappings":";;;AAGA,MAAa,IAAI;IACC,IAAI,GAAG,MAAM,CAAA;IAEZ,cAAc,GAAG,IAAI,GAAG,CAAS;QAChD,QAAQ;QACR,eAAe;QACf,cAAc;QACd,MAAM;QACN,UAAU;QACV,eAAe;KAChB,CAAC,CAAA;IAEe,OAAO,GAAG,IAAI,OAAO,CAAC;QACrC,8BAA8B,EAAE,+BAA+B;QAC/D,kCAAkC,EAAE,MAAM;QAC1C,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1E,wBAAwB,EAAE,MAAM;QAChC,eAAe,EAAE,cAAc;QAC/B,IAAI,EAAE,QAAQ;KACf,CAAC,CAAA;IAEK,SAAS,CAAE,KAAY;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE3C,IAAI,MAAM,KAAK,SAAS;YACtB,OAAO,IAAI,CAAA;QAEb,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;QAEvC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACvC,MAAM,CAAC,OAAO,KAAK,IAAI,OAAO,EAAE,CAAA;YAChC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAChD,mDAAmD,CAAC,CAAA;YAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;YAEnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;gBAC/D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAE,MAAc;QAC1B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9F,CAAC;IAEO,iBAAiB,CAAE,MAAc;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QAEvD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;CACF;AA1DD,oBA0DC"}

package/transpiled/directives/dev/Development.d.ts

@@ -1,9 +1,9 @@
 import { type Directive } from './types';
 import type { Input, Output } from '../../io';
-import type { Family } from '../../Directive';
-export declare class Development implements Family<Directive> {
+import type { DirectiveFamily } from '../../RTD';
+export declare class Development implements DirectiveFamily<Directive> {
     readonly name: string;
     readonly mandatory: boolean;
-    create(name: string, value: any): Directive;
+    create(name: string, value: unknown): Directive;
     preflight(directives: Directive[], input: Input): Output;
 }

package/transpiled/directives/dev/Development.js

@@ -9,7 +9,7 @@ class Development {
     create(name, value) {
         const Class = constructors[name];
         if (Class === undefined)
-            throw new Error(`Directive '${name}' is not provided by the '${this.name}' family.`);
+            throw new Error(`Directive 'dev:${name}' is not implemented.`);
         return new Class(value);
     }
     preflight(directives, input) {

package/transpiled/directives/dev/Development.js.map

@@ -1 +1 @@
-{"version":3,"file":"Development.js","sourceRoot":"","sources":["../../../source/directives/dev/Development.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAC7B,mCAA+B;AAK/B,MAAa,WAAW;IACN,IAAI,GAAW,KAAK,CAAA;IACpB,SAAS,GAAY,KAAK,CAAA;IAEnC,MAAM,CAAE,IAAY,EAAE,KAAU;QACrC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,6BAA6B,IAAI,CAAC,IAAI,WAAW,CAAC,CAAA;QAEtF,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,SAAS,CAAE,UAAuB,EAAE,KAAY;QACrD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAErC,IAAI,MAAM,KAAK,IAAI;gBACjB,OAAO,MAAM,CAAA;QACjB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAvBD,kCAuBC;AAED,MAAM,YAAY,GAAkD;IAClE,IAAI,EAAE,WAAI;IACV,KAAK,EAAE,aAAK;CACb,CAAA"}
+{"version":3,"file":"Development.js","sourceRoot":"","sources":["../../../source/directives/dev/Development.ts"],"names":[],"mappings":";;;AAAA,iCAA6B;AAC7B,mCAA+B;AAK/B,MAAa,WAAW;IACN,IAAI,GAAW,KAAK,CAAA;IACpB,SAAS,GAAY,KAAK,CAAA;IAEnC,MAAM,CAAE,IAAY,EAAE,KAAc;QACzC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,KAAK,KAAK,SAAS;YACrB,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,uBAAuB,CAAC,CAAA;QAEhE,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEM,SAAS,CAAE,UAAuB,EAAE,KAAY;QACrD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAErC,IAAI,MAAM,KAAK,IAAI;gBACjB,OAAO,MAAM,CAAA;QACjB,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAvBD,kCAuBC;AAED,MAAM,YAAY,GAAkD;IAClE,IAAI,EAAE,WAAI;IACV,KAAK,EAAE,aAAK;CACb,CAAA"}

package/transpiled/directives/index.d.ts

@@ -1,4 +1,4 @@
-import type { Family } from '../Directive';
+import type { DirectiveFamily } from '../RTD';
 import type { Interceptor } from '../Interception';
-export declare const families: Family[];
+export declare const families: DirectiveFamily[];
 export declare const interceptors: Interceptor[];

package/transpiled/directives/index.js

@@ -1,12 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.interceptors = exports.families = void 0;
-const dev_1 = require("./dev");
 const auth_1 = require("./auth");
 const cache_1 = require("./cache");
-const octets_1 = require("./octets");
 const cors_1 = require("./cors");
+const dev_1 = require("./dev");
+const octets_1 = require("./octets");
+const io_1 = require("./io");
 const vary_1 = require("./vary");
-exports.families = [auth_1.authorization, cache_1.cache, octets_1.octets, vary_1.vary, dev_1.dev];
+const require_1 = require("./require");
+exports.families = [auth_1.authorization, io_1.io, cache_1.cache, vary_1.vary, require_1.req, octets_1.octets, dev_1.dev];
 exports.interceptors = [cors_1.cors];
 //# sourceMappingURL=index.js.map

package/transpiled/directives/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/directives/index.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAC3B,iCAAsC;AACtC,mCAA+B;AAC/B,qCAAiC;AACjC,iCAA6B;AAC7B,iCAA6B;AAIhB,QAAA,QAAQ,GAAa,CAAC,oBAAa,EAAE,aAAK,EAAE,eAAM,EAAE,WAAI,EAAE,SAAG,CAAC,CAAA;AAC9D,QAAA,YAAY,GAAkB,CAAC,WAAI,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/directives/index.ts"],"names":[],"mappings":";;;AAAA,iCAAsC;AACtC,mCAA+B;AAC/B,iCAA6B;AAC7B,+BAA2B;AAC3B,qCAAiC;AACjC,6BAAyB;AACzB,iCAA6B;AAC7B,uCAA+B;AAIlB,QAAA,QAAQ,GAAsB,CAAC,oBAAa,EAAE,OAAE,EAAE,aAAK,EAAE,WAAI,EAAE,aAAG,EAAE,eAAM,EAAE,SAAG,CAAC,CAAA;AAChF,QAAA,YAAY,GAAkB,CAAC,WAAI,CAAC,CAAA"}

package/transpiled/directives/io/Directive.d.ts

@@ -0,0 +1,8 @@
+import type { Input } from '../../io';
+export interface Directive {
+    attach: (context: Input) => void;
+}
+export interface Constructor {
+    validate: (value: unknown) => void;
+    new (value: any): Directive;
+}

package/transpiled/directives/io/Directive.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=Directive.js.map

package/transpiled/directives/io/Directive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Directive.js","sourceRoot":"","sources":["../../../source/directives/io/Directive.ts"],"names":[],"mappings":""}

package/transpiled/directives/io/IO.d.ts

@@ -0,0 +1,9 @@
+import type { Directive } from './Directive';
+import type { Input as Context } from '../../io';
+import type { DirectiveFamily } from '../../RTD';
+export declare class IO implements DirectiveFamily<Directive> {
+    readonly name = "io";
+    readonly mandatory = true;
+    create(name: string, value: unknown): Directive;
+    preflight(directives: Directive[], context: Context): null;
+}

package/transpiled/directives/io/IO.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IO = void 0;
+const Output_1 = require("./Output");
+const Input_1 = require("./Input");
+class IO {
+    name = 'io';
+    mandatory = true;
+    create(name, value) {
+        if (!(name in constructors))
+            throw new Error(`Directive 'io:${name}' is not implemented.`);
+        const Directive = constructors[name];
+        Directive.validate(value);
+        return new Directive(value);
+    }
+    preflight(directives, context) {
+        let restricted = false;
+        for (const directive of directives) {
+            restricted ||= directive instanceof Output_1.Output;
+            directive.attach(context);
+        }
+        if (!restricted)
+            DENIAL.attach(context);
+        return null;
+    }
+}
+exports.IO = IO;
+const constructors = {
+    output: Output_1.Output,
+    input: Input_1.Input
+};
+const DENIAL = new Output_1.Output([]);
+//# sourceMappingURL=IO.js.map

package/transpiled/directives/io/IO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IO.js","sourceRoot":"","sources":["../../../source/directives/io/IO.ts"],"names":[],"mappings":";;;AAAA,qCAAiC;AACjC,mCAA+B;AAK/B,MAAa,EAAE;IACG,IAAI,GAAG,IAAI,CAAA;IACX,SAAS,GAAG,IAAI,CAAA;IAEzB,MAAM,CAAE,IAAY,EAAE,KAAc;QACzC,IAAI,CAAC,CAAC,IAAI,IAAI,YAAY,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,CAAA;QAE/D,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QAEpC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEzB,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAEM,SAAS,CAAE,UAAuB,EAAE,OAAgB;QACzD,IAAI,UAAU,GAAG,KAAK,CAAA;QAEtB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,UAAU,KAAK,SAAS,YAAY,eAAM,CAAA;YAE1C,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC3B,CAAC;QAED,IAAI,CAAC,UAAU;YACb,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAExB,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA7BD,gBA6BC;AAED,MAAM,YAAY,GAAgC;IAChD,MAAM,EAAE,eAAM;IACd,KAAK,EAAE,aAAK;CACb,CAAA;AAED,MAAM,MAAM,GAAW,IAAI,eAAM,CAAC,EAAE,CAAC,CAAA"}

package/transpiled/directives/io/Input.d.ts

@@ -0,0 +1,11 @@
+import type { Directive } from './Directive';
+import type { Input as Context } from '../../io';
+export declare class Input implements Directive {
+    private readonly permissions;
+    constructor(permissions: Permissions);
+    static validate(permissions: unknown): asserts permissions is Permissions;
+    attach(context: Context): void;
+    private check;
+    private violation;
+}
+export type Permissions = string[];

package/transpiled/directives/{octets/Permute.js → io/Input.js}

@@ -23,34 +23,41 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Permute = void 0;
+exports.Input = void 0;
 const HTTP_1 = require("../../HTTP");
 const schemas = __importStar(require("./schemas"));
-class Permute {
-    targeted = false;
-    discovery;
-    storage = null;
-    constructor(value, discovery) {
-        schemas.permute.validate(value);
-        this.discovery = discovery;
+class Input {
+    permissions;
+    constructor(permissions) {
+        this.permissions = permissions;
     }
-    async apply(storage, input) {
-        this.storage ??= await this.discovery;
-        if (input.encoder === null)
-            throw new HTTP_1.NotAcceptable();
-        const path = input.request.url;
-        const list = await input.body();
-        const error = await this.storage.invoke('permute', {
-            input: {
-                storage,
-                path,
-                list
-            }
-        });
-        if (error instanceof Error)
-            throw new HTTP_1.NotFound();
-        return {};
+    static validate(permissions) {
+        schemas.input.validate(permissions, 'Incorrect \'io:input\' format');
+    }
+    attach(context) {
+        context.pipelines.body.push((body) => this.check(body));
+    }
+    check(body) {
+        try {
+            schemas.message.validate(body);
+        }
+        catch {
+            throw new HTTP_1.BadRequest('Invalid request body.');
+        }
+        const property = this.violation(body);
+        if (property !== undefined)
+            throw new HTTP_1.BadRequest(`Unexpected input: ${property}.`);
+        return body;
+    }
+    violation(value) {
+        if (!Array.isArray(value))
+            return Object.keys(value).find((key) => !this.permissions.includes(key));
+        for (const item of value) {
+            const property = this.violation(item);
+            if (property !== undefined)
+                return property;
+        }
     }
 }
-exports.Permute = Permute;
-//# sourceMappingURL=Permute.js.map
+exports.Input = Input;
+//# sourceMappingURL=Input.js.map

package/transpiled/directives/io/Input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Input.js","sourceRoot":"","sources":["../../../source/directives/io/Input.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,qCAAuC;AACvC,mDAAoC;AAKpC,MAAa,KAAK;IACC,WAAW,CAAa;IAEzC,YAAoB,WAAwB;QAC1C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAE,WAAoB;QAC1C,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,+BAA+B,CAAC,CAAA;IACtE,CAAC;IAEM,MAAM,CAAE,OAAgB;QAC7B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACzD,CAAC;IAEO,KAAK,CAAE,IAAa;QAC1B,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAU,CAAC,uBAAuB,CAAC,CAAA;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAErC,IAAI,QAAQ,KAAK,SAAS;YACxB,MAAM,IAAI,iBAAU,CAAC,qBAAqB,QAAQ,GAAG,CAAC,CAAA;QAExD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,SAAS,CAAE,KAA0B;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACvB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QAE1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YAErC,IAAI,QAAQ,KAAK,SAAS;gBACxB,OAAO,QAAQ,CAAA;QACnB,CAAC;IACH,CAAC;CACF;AAzCD,sBAyCC"}

package/transpiled/directives/io/Message.d.ts

@@ -0,0 +1 @@
+export type Message = Record<string, unknown>;

package/transpiled/directives/io/Message.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=Message.js.map

package/transpiled/directives/io/Message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Message.js","sourceRoot":"","sources":["../../../source/directives/io/Message.ts"],"names":[],"mappings":""}

package/transpiled/directives/io/Output.d.ts

@@ -0,0 +1,13 @@
+import type { Directive } from './Directive';
+import type { Input as Context } from '../../io';
+export declare class Output implements Directive {
+    private readonly disabled;
+    private readonly omitted;
+    private readonly permissions;
+    constructor(permissions: Permissions);
+    static validate(permissions: unknown): asserts permissions is Permissions;
+    attach(context: Context): void;
+    private restriction;
+    private fit;
+}
+export type Permissions = string[] | boolean;

package/transpiled/directives/io/Output.js

@@ -0,0 +1,76 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Output = void 0;
+const node_stream_1 = require("node:stream");
+const schemas = __importStar(require("./schemas"));
+class Output {
+    disabled = false;
+    omitted = true;
+    permissions = [];
+    constructor(permissions) {
+        if (typeof permissions === 'boolean')
+            if (permissions)
+                this.disabled = true;
+            else
+                this.omitted = false;
+        else
+            this.permissions = permissions;
+    }
+    static validate(permissions) {
+        schemas.output.validate(permissions, 'Incorrect \'io:output\' format');
+    }
+    attach(context) {
+        context.pipelines.response.push(this.restriction(context));
+    }
+    restriction(context) {
+        return (message) => {
+            const error = message.status !== undefined && message.status >= 300;
+            const stream = message.body instanceof node_stream_1.Stream;
+            const none = message.body === undefined || message.body === null;
+            if (this.disabled || error || stream || none)
+                return;
+            if (typeof message.body !== 'object' || this.permissions.length === 0) {
+                if (this.omitted)
+                    console.warn('Permissions for \'io:output\' are not specified properly ' +
+                        `(${context.request.url}). Response omitted.`);
+                delete message.body;
+                return;
+            }
+            schemas.message.validate(message.body, '\'io:output\' expects response to be an object or array of objects');
+            if (Array.isArray(message.body))
+                message.body = message.body.map((entity) => this.fit(entity));
+            else
+                message.body = this.fit(message.body);
+        };
+    }
+    fit(message) {
+        const entries = Object.entries(message)
+            .filter(([key]) => this.permissions.includes(key));
+        return Object.fromEntries(entries);
+    }
+}
+exports.Output = Output;
+//# sourceMappingURL=Output.js.map

package/transpiled/directives/io/Output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Output.js","sourceRoot":"","sources":["../../../source/directives/io/Output.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAAoC;AACpC,mDAAoC;AAMpC,MAAa,MAAM;IACA,QAAQ,GAAY,KAAK,CAAA;IACzB,OAAO,GAAY,IAAI,CAAA;IACvB,WAAW,GAAa,EAAE,CAAA;IAE3C,YAAoB,WAAwB;QAC1C,IAAI,OAAO,WAAW,KAAK,SAAS;YAClC,IAAI,WAAW;gBACb,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;;gBAEpB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;;YAGtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAClC,CAAC;IAEM,MAAM,CAAC,QAAQ,CAAE,WAAoB;QAC1C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAA;IACxE,CAAC;IAEM,MAAM,CAAE,OAAgB;QAC7B,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5D,CAAC;IAEO,WAAW,CAAE,OAAgB;QACnC,OAAO,CAAC,OAAwB,EAAQ,EAAE;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,CAAA;YACnE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,YAAY,oBAAM,CAAA;YAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAA;YAEhE,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,MAAM,IAAI,IAAI;gBAC1C,OAAM;YAER,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,IAAI,IAAI,CAAC,OAAO;oBACd,OAAO,CAAC,IAAI,CAAC,2DAA2D;wBACtE,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,sBAAsB,CAAC,CAAA;gBAElD,OAAO,OAAO,CAAC,IAAI,CAAA;gBAEnB,OAAM;YACR,CAAC;YAED,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EACnC,oEAAoE,CAAC,CAAA;YAEvE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC7B,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;;gBAE7D,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC,CAAA;IACH,CAAC;IAEO,GAAG,CAAE,OAAgB;QAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QAEpD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;CACF;AA3DD,wBA2DC"}

package/transpiled/directives/io/index.d.ts

@@ -0,0 +1,2 @@
+import { IO } from './IO';
+export declare const io: IO;

package/transpiled/directives/io/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.io = void 0;
+const IO_1 = require("./IO");
+exports.io = new IO_1.IO();
+//# sourceMappingURL=index.js.map