npm - @toa.io/extensions.introspection - Versions diffs - 1.0.0-alpha.262 - Mend

@toa.io/extensions.introspection 1.0.0-alpha.262

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (150) hide show

package/CHANGELOG.md +61 -0
package/components/introspection.edges/manifest.toa.yaml +48 -0
package/components/introspection.edges/operations/lib/types.d.ts +28 -0
package/components/introspection.edges/operations/lib/types.js +3 -0
package/components/introspection.edges/operations/lib/types.js.map +1 -0
package/components/introspection.edges/operations/merge.d.ts +9 -0
package/components/introspection.edges/operations/merge.js +25 -0
package/components/introspection.edges/operations/merge.js.map +1 -0
package/components/introspection.edges/source/lib/types.ts +33 -0
package/components/introspection.edges/source/merge.ts +26 -0
package/components/introspection.edges/tsconfig.json +9 -0
package/components/introspection.nodes/manifest.toa.yaml +49 -0
package/components/introspection.nodes/operations/lib/types.d.ts +16 -0
package/components/introspection.nodes/operations/lib/types.js +3 -0
package/components/introspection.nodes/operations/lib/types.js.map +1 -0
package/components/introspection.nodes/operations/merge.d.ts +9 -0
package/components/introspection.nodes/operations/merge.js +21 -0
package/components/introspection.nodes/operations/merge.js.map +1 -0
package/components/introspection.nodes/source/lib/types.ts +18 -0
package/components/introspection.nodes/source/merge.ts +21 -0
package/components/introspection.nodes/tsconfig.json +9 -0
package/cucumber.js +8 -0
package/features/calls.feature +123 -0
package/features/nodes.feature +70 -0
package/features/samples.feature +75 -0
package/features/shutdown.feature +37 -0
package/features/site/_app/immutable/asset.js +1 -0
package/features/site/index.html +6 -0
package/features/steps/Map.ts +151 -0
package/features/steps/UI.ts +88 -0
package/features/steps/components/probe.discreet/manifest.toa.yaml +12 -0
package/features/steps/components/probe.discreet/operations/ping.js +7 -0
package/features/steps/components/probe.quiet/manifest.toa.yaml +11 -0
package/features/steps/components/probe.quiet/operations/ping.js +7 -0
package/features/steps/components/probe.source/manifest.toa.yaml +27 -0
package/features/steps/components/probe.source/operations/crash.js +7 -0
package/features/steps/components/probe.source/operations/fail.js +12 -0
package/features/steps/components/probe.source/operations/relay.js +7 -0
package/features/steps/components/probe.target/manifest.toa.yaml +24 -0
package/features/steps/components/probe.target/operations/compute.js +7 -0
package/features/steps/components/probe.target/operations/count.js +9 -0
package/features/steps/config.ts +20 -0
package/features/steps/tsconfig.json +9 -0
package/features/ui.feature +85 -0
package/package.json +31 -0
package/readme.md +141 -0
package/schemas/annotation.cos.yaml +16 -0
package/schemas/declaration.cos.yaml +2 -0
package/source/Composition.ts +61 -0
package/source/Explorer.ts +16 -0
package/source/Factory.ts +119 -0
package/source/Reporter.ts +210 -0
package/source/Tenant.ts +47 -0
package/source/UI.ts +197 -0
package/source/annotation.ts +83 -0
package/source/const.ts +32 -0
package/source/describe.ts +68 -0
package/source/extension.ts +45 -0
package/source/index.ts +7 -0
package/source/keys.ts +0 -0
package/source/manifest.ts +19 -0
package/source/model.ts +82 -0
package/source/sample.ts +49 -0
package/source/schemas.ts +10 -0
package/transpiled/Composition.d.ts +21 -0
package/transpiled/Composition.js +48 -0
package/transpiled/Composition.js.map +1 -0
package/transpiled/Explorer.d.ts +9 -0
package/transpiled/Explorer.js +19 -0
package/transpiled/Explorer.js.map +1 -0
package/transpiled/Factory.d.ts +22 -0
package/transpiled/Factory.js +93 -0
package/transpiled/Factory.js.map +1 -0
package/transpiled/Reporter.d.ts +44 -0
package/transpiled/Reporter.js +187 -0
package/transpiled/Reporter.js.map +1 -0
package/transpiled/Tenant.d.ts +18 -0
package/transpiled/Tenant.js +40 -0
package/transpiled/Tenant.js.map +1 -0
package/transpiled/UI.d.ts +25 -0
package/transpiled/UI.js +186 -0
package/transpiled/UI.js.map +1 -0
package/transpiled/annotation.d.ts +40 -0
package/transpiled/annotation.js +46 -0
package/transpiled/annotation.js.map +1 -0
package/transpiled/const.d.ts +23 -0
package/transpiled/const.js +27 -0
package/transpiled/const.js.map +1 -0
package/transpiled/contracts.d.ts +51 -0
package/transpiled/contracts.js +53 -0
package/transpiled/contracts.js.map +1 -0
package/transpiled/describe.d.ts +9 -0
package/transpiled/describe.js +64 -0
package/transpiled/describe.js.map +1 -0
package/transpiled/extension.d.ts +11 -0
package/transpiled/extension.js +64 -0
package/transpiled/extension.js.map +1 -0
package/transpiled/index.d.ts +6 -0
package/transpiled/index.js +25 -0
package/transpiled/index.js.map +1 -0
package/transpiled/keys.d.ts +9 -0
package/transpiled/keys.js +0 -0
package/transpiled/keys.js.map +1 -0
package/transpiled/manifest.d.ts +9 -0
package/transpiled/manifest.js +43 -0
package/transpiled/manifest.js.map +1 -0
package/transpiled/model.d.ts +71 -0
package/transpiled/model.js +3 -0
package/transpiled/model.js.map +1 -0
package/transpiled/sample.d.ts +7 -0
package/transpiled/sample.js +44 -0
package/transpiled/sample.js.map +1 -0
package/transpiled/schemas.d.ts +4 -0
package/transpiled/schemas.js +13 -0
package/transpiled/schemas.js.map +1 -0
package/tsconfig.json +12 -0
package/ui/dist/_app/env.js +1 -0
package/ui/dist/_app/immutable/assets/0.fg2cP6bO.css +2 -0
package/ui/dist/_app/immutable/assets/2.BghF56l_.css +1 -0
package/ui/dist/_app/immutable/assets/inter-cyrillic-ext-wght-normal.BOeWTOD4.woff2 +0 -0
package/ui/dist/_app/immutable/assets/inter-cyrillic-wght-normal.DqGufNeO.woff2 +0 -0
package/ui/dist/_app/immutable/assets/inter-greek-ext-wght-normal.DlzME5K_.woff2 +0 -0
package/ui/dist/_app/immutable/assets/inter-greek-wght-normal.CkhJZR-_.woff2 +0 -0
package/ui/dist/_app/immutable/assets/inter-latin-ext-wght-normal.DO1Apj_S.woff2 +0 -0
package/ui/dist/_app/immutable/assets/inter-latin-wght-normal.Dx4kXJAl.woff2 +0 -0
package/ui/dist/_app/immutable/assets/inter-vietnamese-wght-normal.CBcvBZtf.woff2 +0 -0
package/ui/dist/_app/immutable/chunks/Bjy-W4x2.js +81 -0
package/ui/dist/_app/immutable/chunks/CIvRtvVA.js +1 -0
package/ui/dist/_app/immutable/chunks/D1jNriZ8.js +1 -0
package/ui/dist/_app/immutable/chunks/DINmginf.js +1 -0
package/ui/dist/_app/immutable/chunks/DKZCAkrF.js +1 -0
package/ui/dist/_app/immutable/chunks/DLG2JvyF.js +6 -0
package/ui/dist/_app/immutable/chunks/DSi-FjwI.js +2 -0
package/ui/dist/_app/immutable/chunks/DdoZuyU1.js +1 -0
package/ui/dist/_app/immutable/chunks/O9IjE_TH.js +1 -0
package/ui/dist/_app/immutable/chunks/PUjOYRcs.js +3 -0
package/ui/dist/_app/immutable/chunks/QKD4Mgck.js +5 -0
package/ui/dist/_app/immutable/chunks/Ux-r8C9U.js +1 -0
package/ui/dist/_app/immutable/chunks/xihTtKlq.js +1 -0
package/ui/dist/_app/immutable/entry/app.CTY34L35.js +2 -0
package/ui/dist/_app/immutable/entry/start.Bq2Gn1Ax.js +1 -0
package/ui/dist/_app/immutable/nodes/0.lOXtBRjQ.js +1 -0
package/ui/dist/_app/immutable/nodes/1.r8ESZdgM.js +1 -0
package/ui/dist/_app/immutable/nodes/2.DuVj0loz.js +8 -0
package/ui/dist/_app/immutable/nodes/3.DhdkQ2Q1.js +1 -0
package/ui/dist/_app/immutable/nodes/4.DUAEZdRr.js +1 -0
package/ui/dist/_app/immutable/nodes/5.CIVn_xgq.js +1 -0
package/ui/dist/_app/version.json +1 -0
package/ui/dist/index.html +48 -0
package/ui/dist/robots.txt +3 -0

package/features/samples.feature ADDED Viewed

@@ -0,0 +1,75 @@
+Feature: Payload samples
+  Samples are real user data, so they are captured only when the context and the
+  component both allow it. Either level can veto.
+  Scenario: Nothing is captured by default
+    When the `probe.target.compute` is called with:
+      """yaml
+      input:
+        a: 4
+        b: 5
+      """
+    Then the map contains an edge:
+      """yaml
+      dst:
+        namespace: probe
+        component: target
+        operation: compute
+      """
+    And the map contains no edge:
+      """yaml
+      dst:
+        namespace: probe
+        component: target
+        operation: compute
+      sample:
+        input:
+          a: 4
+      """
+  @samples
+  Scenario: The context enables capturing
+    When the `probe.target.compute` is called with:
+      """yaml
+      input:
+        a: 4
+        b: 5
+      """
+    Then the map contains an edge:
+      """yaml
+      dst:
+        namespace: probe
+        component: target
+        operation: compute
+      sample:
+        outcome: ok
+        input:
+          a: 4
+          b: 5
+      """
+  @samples
+  Scenario: A component vetoes capturing for itself
+    When the `probe.discreet.ping` is called with:
+      """yaml
+      input:
+        a: 7
+      """
+    Then the map contains an edge:
+      """yaml
+      dst:
+        namespace: probe
+        component: discreet
+        operation: ping
+      """
+    And the map contains no edge:
+      """yaml
+      dst:
+        namespace: probe
+        component: discreet
+        operation: ping
+      sample:
+        input:
+          a: 7
+      """

package/features/shutdown.feature ADDED Viewed

@@ -0,0 +1,37 @@
+@shutdown
+Feature: Graceful shutdown
+  A component reports on a timer, so whatever it observed since the last report
+  would be lost on a deploy. Stopping flushes it instead: the collector drains
+  its buffer while its remotes are still connected.
+  This suite runs with a flush period long enough that the timer cannot fire,
+  so nothing here reaches the map unless the shutdown does it.
+  Scenario: Observations are flushed on shutdown
+    When the `probe.source.relay` is called with:
+      """yaml
+      input:
+        a: 2
+        b: 3
+      """
+    And the components are stopped
+    Then the map contains an edge:
+      """yaml
+      src:
+        namespace: probe
+        component: source
+        operation: relay
+      dst:
+        namespace: probe
+        component: target
+        operation: compute
+      """
+  Scenario: Component descriptions are flushed on shutdown
+    When the components are stopped
+    Then the map contains a node:
+      """yaml
+      namespace: probe
+      component: target
+      """

package/features/site/_app/immutable/asset.js ADDED Viewed

	@@ -0,0 +1 @@
1	+ export const hashed = true

package/features/site/index.html ADDED Viewed

@@ -0,0 +1,6 @@
+<!doctype html>
+<!-- stands in for what `ui` builds; the scenarios are about the server, not the page -->
+<html lang="en">
+  <head><title>fixture</title></head>
+  <body>the page</body>
+</html>

package/features/steps/Map.ts ADDED Viewed

@@ -0,0 +1,151 @@
+import assert from 'node:assert'
+import { resolve } from 'node:path'
+import { readdirSync } from 'node:fs'
+import { setTimeout } from 'node:timers/promises'
+import { MongoClient } from 'mongodb'
+import { after, before, binding, then, when } from 'cucumber-tsflow'
+import { parse } from '@toa.io/yaml'
+import { match } from '@toa.io/generic'
+import * as boot from '@toa.io/boot'
+import * as stage from '@toa.io/userland/stage'
+import { Factory } from '../../source'
+import type { Component, Connector, Request } from '@toa.io/core'
+@binding()
+export class Map {
+  private service: Connector | null = null
+  private composition: Connector | null = null
+  private remotes: Record<string, Component> = {}
+  @when('the `{word}` is called with:')
+  public async call (endpoint: string, yaml: string): Promise<void> {
+    const request = parse<Request>(yaml)
+    const [operation, component, namespace = 'default'] = endpoint.split('.').reverse()
+    // an operation may throw, and that is exactly what one of the scenarios is about
+    await this.invoke(`${namespace}.${component}`, operation, request).catch(() => undefined)
+  }
+  @then('the map contains a node:')
+  public async node (yaml: string): Promise<void> {
+    await this.eventually('introspection.nodes', parse(yaml))
+  }
+  @then('the map contains an edge:')
+  public async edge (yaml: string): Promise<void> {
+    await this.eventually('introspection.edges', parse(yaml))
+  }
+  @then('the map contains no node:')
+  public async noNode (yaml: string): Promise<void> {
+    await this.never('introspection.nodes', parse(yaml))
+  }
+  @then('the map contains no edge:')
+  public async noEdge (yaml: string): Promise<void> {
+    await this.never('introspection.edges', parse(yaml))
+  }
+  @when('the components are stopped')
+  public async stop (): Promise<void> {
+    await this.composition?.disconnect()
+    this.composition = null
+  }
+  @before('not @ui')
+  public async run (): Promise<void> {
+    await clean()
+    this.service = new Factory(boot).service()!
+    await this.service.connect()
+    // booted here rather than through the stage, so that a scenario can stop it on its own
+    this.composition = await boot.composition(components())
+    await this.composition.connect()
+  }
+  @after('not @ui')
+  public async shutdown (): Promise<void> {
+    this.remotes = {}
+    await this.composition?.disconnect()
+    await stage.shutdown()
+    await this.service?.disconnect()
+    this.composition = null
+    this.service = null
+  }
+  private async invoke (id: string, operation: string, request: Request): Promise<unknown> {
+    this.remotes[id] ??= await stage.remote(id)
+    return await this.remotes[id].invoke(operation, request)
+  }
+  /** The map is eventually consistent: the collector buffers, flushes, and the task is queued. */
+  private async eventually (id: string, expected: object): Promise<void> {
+    const deadline = Date.now() + DEADLINE
+    let records: any[] = []
+    while (Date.now() < deadline) {
+      records = await this.list(id)
+      if (records.some((record) => match(record, expected)))
+        return
+      await setTimeout(POLL)
+    }
+    assert.fail(`No record in '${id}' matches\n${JSON.stringify(expected, null, 2)}\n\n` +
+      `Present:\n${JSON.stringify(records, null, 2)}`)
+  }
+  /** Absence has to outlive a flush, otherwise it only proves the map is slow. */
+  private async never (id: string, expected: object): Promise<void> {
+    await setTimeout(SETTLE)
+    const records = await this.list(id)
+    const found = records.find((record) => match(record, expected))
+    assert.equal(found, undefined,
+      `Unexpected record in '${id}':\n${JSON.stringify(found, null, 2)}`)
+  }
+  private async list (id: string): Promise<any[]> {
+    return await this.invoke(id, 'enumerate', { query: { limit: 100 } }) as any[]
+  }
+}
+async function clean (): Promise<void> {
+  const client = new MongoClient(URL)
+  await client.connect()
+  const db = client.db(DB)
+  await Promise.all([
+    db.collection('introspection_nodes').deleteMany({}),
+    db.collection('introspection_edges').deleteMany({})
+  ])
+  await client.close()
+}
+function components (): string[] {
+  const entries = readdirSync(ROOT, { withFileTypes: true })
+  return entries
+    .filter((entry) => entry.isDirectory())
+    .map((entry) => resolve(ROOT, entry.name))
+}
+const ROOT = resolve(__dirname, 'components')
+const URL = 'mongodb://developer:secret@localhost:27017'
+const DB = 'toa-dev'
+const DEADLINE = 20_000
+const POLL = 250
+const SETTLE = 4_000

package/features/steps/UI.ts ADDED Viewed

@@ -0,0 +1,88 @@
+import assert from 'node:assert'
+import * as http from 'node:http'
+import { resolve } from 'node:path'
+import { after, binding, given, then, when } from 'cucumber-tsflow'
+import { UI } from '../../source/UI'
+import { UI_PORT } from '../../source/const'
+/**
+ * The scenarios are about the server, not about the page: it is pointed at a fixture
+ * directory, so that running them never needs a UI build.
+ */
+@binding()
+export class Site {
+  private server: UI | null = null
+  private response: Response | null = null
+  @given('the UI is published')
+  public async publish (): Promise<void> {
+    this.server = new UI(UI_PORT, resolve(__dirname, '..', 'site'))
+    await this.server.connect()
+  }
+  @when('{string} is requested')
+  public async request (path: string): Promise<void> {
+    this.response = await get(path)
+  }
+  @then('the status is {int}')
+  public statusIs (status: number): void {
+    assert.equal(this.response?.status, status)
+  }
+  @then('the body contains {string}')
+  public bodyContains (text: string): void {
+    assert.ok(this.response?.body.includes(text),
+      `Expected the body to contain '${text}', got '${this.response?.body}'`)
+  }
+  @then('the body is empty')
+  public bodyIsEmpty (): void {
+    assert.equal(this.response?.body, '')
+  }
+  @then('the {string} header is {string}')
+  public headerIs (name: string, value: string): void {
+    assert.equal(this.response?.headers[name], value)
+  }
+  @after()
+  public async shutdown (): Promise<void> {
+    await this.server?.disconnect()
+    this.server = null
+    this.response = null
+  }
+}
+/**
+ * Raw `http`, not `fetch`: the URL parser normalizes `%2e%2e` away, and one of the
+ * scenarios is about exactly that segment reaching the server.
+ */
+async function get (path: string): Promise<Response> {
+  return await new Promise((resolve, reject) => {
+    // `agent: false` — a keep-alive socket outlives the scenario that opened it
+    const request = http.get({ port: UI_PORT, path, agent: false }, (response) => {
+      let body = ''
+      response.setEncoding('utf8')
+      response.on('data', (chunk: string) => (body += chunk))
+      response.on('end', () => {
+        resolve({
+          status: response.statusCode!,
+          headers: response.headers as Record<string, string>,
+          body
+        })
+      })
+    })
+    request.on('error', reject)
+  })
+}
+interface Response {
+  status: number
+  headers: Record<string, string>
+  body: string
+}

package/features/steps/components/probe.discreet/manifest.toa.yaml ADDED Viewed

@@ -0,0 +1,12 @@
+namespace: probe
+name: discreet
+# on the map, but its payloads are never captured
+introspection:
+  samples: false
+operations:
+  ping:
+    input:
+      a: number
+    output: number

package/features/steps/components/probe.discreet/operations/ping.js ADDED Viewed

@@ -0,0 +1,7 @@
+'use strict'
+async function computation (input) {
+  return input.a
+}
+exports.computation = computation

package/features/steps/components/probe.quiet/manifest.toa.yaml ADDED Viewed

@@ -0,0 +1,11 @@
+namespace: probe
+name: quiet
+# opted out entirely: neither described nor instrumented
+introspection: false
+operations:
+  ping:
+    input:
+      a: number
+    output: number

package/features/steps/components/probe.quiet/operations/ping.js ADDED Viewed

@@ -0,0 +1,7 @@
+'use strict'
+async function computation (input) {
+  return input.a
+}
+exports.computation = computation

package/features/steps/components/probe.source/manifest.toa.yaml ADDED Viewed

@@ -0,0 +1,27 @@
+namespace: probe
+name: source
+entity:
+  associated: true
+  storage: null
+  schema:
+    value:
+      type: integer
+      default: 0
+    secret: string
+operations:
+  transit:
+    concurrency: retry
+    input:
+      value: .
+      secret: .
+  relay:
+    input:
+      a: number
+      b: number
+    output: number
+  crash: {}
+  fail:
+    errors:
+      - NOPE

package/features/steps/components/probe.source/operations/crash.js ADDED Viewed

@@ -0,0 +1,7 @@
+'use strict'
+function computation (input) {
+  throw new Error('crashed on purpose')
+}
+exports.computation = computation

package/features/steps/components/probe.source/operations/fail.js ADDED Viewed

@@ -0,0 +1,12 @@
+'use strict'
+function computation (input) {
+  return NOPE
+}
+const NOPE = Object.create(Error.prototype, {
+  code: { value: 'NOPE' },
+  message: { value: 'declined on purpose', enumerable: true }
+})
+exports.computation = computation

package/features/steps/components/probe.source/operations/relay.js ADDED Viewed

@@ -0,0 +1,7 @@
+'use strict'
+async function computation (input, context) {
+  return context.remote.probe.target.compute({ input })
+}
+exports.computation = computation

package/features/steps/components/probe.target/manifest.toa.yaml ADDED Viewed

@@ -0,0 +1,24 @@
+namespace: probe
+name: target
+entity:
+  storage: null
+  schema:
+    counted:
+      type: integer
+      default: 0
+operations:
+  compute:
+    input:
+      a: number
+      b: number
+    output: number
+  count:
+    concurrency: retry
+    input:
+      type: object
+      additionalProperties: true
+receivers:
+  probe.source.created: count

package/features/steps/components/probe.target/operations/compute.js ADDED Viewed

@@ -0,0 +1,7 @@
+'use strict'
+async function computation (input) {
+  return input.a + input.b
+}
+exports.computation = computation

package/features/steps/components/probe.target/operations/count.js ADDED Viewed

@@ -0,0 +1,9 @@
+'use strict'
+function transition (input, object) {
+  object.counted++
+  return object
+}
+exports.transition = transition

package/features/steps/config.ts ADDED Viewed

@@ -0,0 +1,20 @@
+import { setDefaultTimeout } from '@cucumber/cucumber'
+import { encode } from '@toa.io/generic'
+process.env.TOA_DEV = '1'
+/*
+ * The extension factory reads the environment once, and the bootloader caches
+ * factories per process — so the context level of the annotation is fixed for
+ * a whole run. `npm run features` therefore makes a pass per configuration.
+ */
+process.env.TOA_INTROSPECTION = encode({
+  samples: process.env.TOA_INTROSPECTION_SAMPLES === '1',
+  interval: Number(process.env.TOA_INTROSPECTION_INTERVAL ?? 1),
+  threshold: 64,
+  // `ui.feature` starts its own server; the explorer must not take the port first
+  ui: false
+})
+setDefaultTimeout(60 * 1000)

package/features/steps/tsconfig.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "compilerOptions": {
+    "target": "ESNext",
+    "noEmit": true,
+    "moduleResolution": "node",
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true
+  }
+}

package/features/ui.feature ADDED Viewed

@@ -0,0 +1,85 @@
+@ui
+Feature: Publishing the UI
+  The explorer serves the UI on its own port, out of the directory `ui` builds. The
+  mount path is baked into the bundle and forwarded by the ingress, so the server
+  routes relative to it.
+  Scenario: The root is the way in
+    Given the UI is published
+    When "/" is requested
+    Then the status is 302
+    And the "location" header is "/.introspection/"
+  Scenario: The UI answers at its mount path
+    Given the UI is published
+    When "/.introspection" is requested
+    Then the status is 200
+    And the body contains "the page"
+  Scenario: A trailing slash is the same resource
+    Given the UI is published
+    When "/.introspection/" is requested
+    Then the status is 200
+    And the body contains "the page"
+  Scenario: A query string does not change the resource
+    Given the UI is published
+    When "/.introspection?tab=edges" is requested
+    Then the status is 200
+    And the body contains "the page"
+  Scenario: An unknown route is the page
+    The client router knows what routes there are; this server does not.
+    Given the UI is published
+    When "/.introspection/whatever" is requested
+    Then the status is 200
+    And the body contains "the page"
+  Scenario: A route that looks like a file is still a route
+    A component is named `namespace.component`, so the address of one carries a dot and
+    an extension is no way to tell an asset from a route.
+    Given the UI is published
+    When "/.introspection/identity.passkeys/" is requested
+    Then the status is 200
+    And the body contains "the page"
+  Scenario: And with no trailing slash to give it away
+    Given the UI is published
+    When "/.introspection/identity.passkeys" is requested
+    Then the status is 200
+    And the body contains "the page"
+  Scenario: A hashed asset is served forever
+    Given the UI is published
+    When "/.introspection/_app/immutable/asset.js" is requested
+    Then the status is 200
+    And the "content-type" header is "text/javascript; charset=utf-8"
+    And the "cache-control" header is "public, max-age=31536000, immutable"
+  Scenario: The page itself is never cached
+    Given the UI is published
+    When "/.introspection/" is requested
+    Then the "cache-control" header is "no-cache"
+  Scenario: A missing asset is missing
+    Given the UI is published
+    When "/.introspection/_app/immutable/absent.js" is requested
+    Then the status is 404
+  Scenario: The path of the map API is not served by the UI
+    Given the UI is published
+    When "/introspection/nodes/" is requested
+    Then the status is 404
+  Scenario: A path that only looks like the mount path is absent
+    Given the UI is published
+    When "/.introspectionable" is requested
+    Then the status is 404
+  Scenario: Nothing outside the site is reachable
+    Given the UI is published
+    When "/.introspection/%2e%2e/%2e%2e/package.json" is requested
+    Then the status is 404

package/package.json ADDED Viewed

@@ -0,0 +1,31 @@
+{
+  "name": "@toa.io/extensions.introspection",
+  "version": "1.0.0-alpha.262",
+  "description": "Toa Introspection",
+  "author": "temich <tema.gurtovoy@gmail.com>",
+  "homepage": "https://github.com/toa-io/toa#readme",
+  "main": "transpiled/index.js",
+  "types": "transpiled/index.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/toa-io/toa.git"
+  },
+  "bugs": {
+    "url": "https://github.com/toa-io/toa/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@toa.io/core": "1.0.0-alpha.262",
+    "@toa.io/generic": "1.0.0-alpha.254",
+    "@toa.io/schemas": "1.0.0-alpha.254",
+    "openspan": "1.0.0-alpha.254"
+  },
+  "scripts": {
+    "transpile": "npx tsc && npx tsc -p ./components/introspection.nodes && npx tsc -p ./components/introspection.edges",
+    "build:ui": "npm --prefix ui ci && npm --prefix ui run build",
+    "prepack": "npm run build:ui",
+    "features": "npx cucumber-js --tags 'not @samples and not @shutdown' && TOA_INTROSPECTION_SAMPLES=1 npx cucumber-js --tags @samples && TOA_INTROSPECTION_INTERVAL=3600 npx cucumber-js --tags @shutdown"
+  }
+}