Additional features

Author: aritchie

Directory.Packages.props

@@ -33,6 +33,21 @@
              released independently. -->
         <PackageVersion Include="Shiny.Mediator" Version="6.8.0"/>
         <PackageVersion Include="ModelContextProtocol" Version="2.1.0"/>
+
+        <!-- Same arrangement as the mediator: this repo ships the HTTP-server side of DocumentDb and
+             the engine is versioned and released on its own. 13.2.1 is the floor — it is the first
+             release carrying the public Shiny.DocumentDb.Hosting surface (DocumentPredicate /
+             DocumentFilter / DocumentStoreAccessor) that the endpoints evaluate a request scope with,
+             so an earlier one would not compile. The SQLite provider is test-only and must stay in
+             lockstep, because a provider compiled against a different engine build is a runtime
+             mismatch rather than a build error. -->
+        <PackageVersion Include="Shiny.DocumentDb" Version="13.2.1"/>
+        <PackageVersion Include="Shiny.DocumentDb.Sqlite" Version="13.2.1"/>
+
+        <!-- Test-only. The gRPC tests call the server with the real gRPC client rather than a
+             hand-rolled one, because "our framing agrees with itself" is not the claim being
+             tested. Nothing that ships depends on it. -->
+        <PackageVersion Include="Grpc.Net.Client" Version="2.83.0"/>
     </ItemGroup>
     <ItemGroup>
         <PackageVersion Include="xunit.v3" Version="3.2.2"/>

Shiny.Net.HttpServer.slnx

@@ -23,10 +23,15 @@
     </Folder>
 
     <Project Path="src/Shiny.Net.HttpServer.AzureRelay/Shiny.Net.HttpServer.AzureRelay.csproj" />
+    <Project Path="src/Shiny.Net.HttpServer.DocumentDb/Shiny.Net.HttpServer.DocumentDb.csproj" />
+    <Project Path="src/Shiny.Net.HttpServer.Grpc/Shiny.Net.HttpServer.Grpc.csproj" />
     <Project Path="src/Shiny.Net.HttpServer.Jwt/Shiny.Net.HttpServer.Jwt.csproj" />
     <Project Path="src/Shiny.Net.HttpServer.Mcp/Shiny.Net.HttpServer.Mcp.csproj" />
+    <Project Path="src/Shiny.Net.HttpServer.Mediator/Shiny.Net.HttpServer.Mediator.csproj" />
+    <Project Path="src/Shiny.Net.HttpServer.Mediator.SourceGenerators/Shiny.Net.HttpServer.Mediator.SourceGenerators.csproj" />
     <Project Path="src/Shiny.Net.HttpServer.SourceGenerators/Shiny.Net.HttpServer.SourceGenerators.csproj" />
     <Project Path="src/Shiny.Net.HttpServer.Ssh/Shiny.Net.HttpServer.Ssh.csproj" />
+    <Project Path="src/Shiny.Net.HttpServer.WebDav/Shiny.Net.HttpServer.WebDav.csproj" />
     <Project Path="src/Shiny.Net.HttpServer/Shiny.Net.HttpServer.csproj" />
     <Project Path="tests/Shiny.Net.HttpServer.Tests/Shiny.Net.HttpServer.Tests.csproj" />
 

build.slnf

@@ -5,9 +5,14 @@
             "src\\Shiny.Net.HttpServer\\Shiny.Net.HttpServer.csproj",
             "src\\Shiny.Net.HttpServer.SourceGenerators\\Shiny.Net.HttpServer.SourceGenerators.csproj",
             "src\\Shiny.Net.HttpServer.Jwt\\Shiny.Net.HttpServer.Jwt.csproj",
+            "src\\Shiny.Net.HttpServer.Grpc\\Shiny.Net.HttpServer.Grpc.csproj",
             "src\\Shiny.Net.HttpServer.AzureRelay\\Shiny.Net.HttpServer.AzureRelay.csproj",
             "src\\Shiny.Net.HttpServer.Mcp\\Shiny.Net.HttpServer.Mcp.csproj",
-            "src\\Shiny.Net.HttpServer.Ssh\\Shiny.Net.HttpServer.Ssh.csproj"
+            "src\\Shiny.Net.HttpServer.Ssh\\Shiny.Net.HttpServer.Ssh.csproj",
+            "src\\Shiny.Net.HttpServer.WebDav\\Shiny.Net.HttpServer.WebDav.csproj",
+            "src\\Shiny.Net.HttpServer.DocumentDb\\Shiny.Net.HttpServer.DocumentDb.csproj",
+            "src\\Shiny.Net.HttpServer.Mediator\\Shiny.Net.HttpServer.Mediator.csproj",
+            "src\\Shiny.Net.HttpServer.Mediator.SourceGenerators\\Shiny.Net.HttpServer.Mediator.SourceGenerators.csproj"
         ]
     }
 }

readme.md

@@ -21,6 +21,9 @@ JWT, OpenAPI, HPACK, QPACK — is built on what is in the box.
 | [Shiny.Net.HttpServer.Ssh](https://www.nuget.org/packages/Shiny.Net.HttpServer.Ssh) | SSH remote-forwarding tunnel provider, including zero-account quick tunnels |
 | [Shiny.Net.HttpServer.Mcp](https://www.nuget.org/packages/Shiny.Net.HttpServer.Mcp) | Model Context Protocol (Streamable HTTP) transport — host an MCP server without ASP.NET Core, including inside a MAUI app |
 | [Shiny.Net.HttpServer.Mediator](https://www.nuget.org/packages/Shiny.Net.HttpServer.Mediator) | Publishes Shiny.Mediator requests, commands and streams as endpoints generated at compile time. Generator included |
+| [Shiny.Net.HttpServer.DocumentDb](https://www.nuget.org/packages/Shiny.Net.HttpServer.DocumentDb) | Publishes a Shiny.DocumentDb type as a REST resource — list, by-id, count, CRUD, merge-patch and a live SSE tail |
+| [Shiny.Net.HttpServer.WebDav](https://www.nuget.org/packages/Shiny.Net.HttpServer.WebDav) | A WebDAV (RFC 4918) class 1 & 2 server over a directory — mount an app's storage in Finder, Windows Explorer or any WebDAV client |
+| [Shiny.Net.HttpServer.Grpc](https://www.nuget.org/packages/Shiny.Net.HttpServer.Grpc) | gRPC and gRPC-Web — unary, streaming and bidirectional methods over the same HTTP/2 stack, with serialization you supply |
 
 ## Getting Started
 
@@ -76,14 +79,18 @@ is built on the one below and they compose in the same app.
 
 | | |
 | --- | --- |
-| **Core** | Routing with constraints and runtime-mutable routes, ASP.NET-shaped middleware, a real `IServiceScope` per request, results in both `Results.*` and `IActionResult` spellings, content negotiation, RFC 9457 problem details and an exception-handler chain |
-| **Protocols** | HTTP/1.1, HTTP/2 (own HPACK), HTTP/3 (own QPACK), WebSockets, Server-Sent Events. Never guessed — ALPN over TLS, connection preface over cleartext |
+| **Core** | Routing with constraints and runtime-mutable routes, ASP.NET-shaped middleware, a real `IServiceScope` per request, results in both `Results.*` and `IActionResult` spellings, RFC 9457 problem details and an exception-handler chain |
+| **Formats** | Content negotiation in both directions — responses chosen from `Accept`, request bodies from `Content-Type`. JSON out of the box; XML, MessagePack and protobuf are one line each, and a format of your own is an `IOutputFormatter`/`IInputFormatter` pair. XML and MessagePack need no dependency and no attributes on your DTOs: they read the same `JsonTypeInfo` the JSON path reads, which is what keeps them AOT-clean where `XmlSerializer` cannot be |
+| **Protocols** | HTTP/1.1, HTTP/2 (own HPACK), HTTP/3 (own QPACK), WebSockets, Server-Sent Events, trailing headers on all three versions. Never guessed — ALPN over TLS, connection preface over cleartext |
 | **Content** | Static files from disk *or* embedded resources, a published Blazor WebAssembly app, streaming multipart uploads, downloads with byte ranges and conditional GETs, a file browser over a directory, and brotli/gzip/deflate compression |
 | **Security** | Authentication and authorization split ASP.NET-style, with Basic, API key, cookie and JWT schemes; policies, roles and claims; CORS, rate limiting and IP filtering, all with per-endpoint policies |
 | **TLS** | Several endpoints with per-endpoint TLS, self-signed certificates generated in managed code (iOS and Android included), client certificates, and SPKI pinning for the app's own `HttpClient` |
 | **OpenAPI** | An OpenAPI 3.0.3 document built entirely from compile-time metadata and your `JsonSerializerContext` — no reflection, no document object model |
 | **Tunnelling** | A pluggable `ITunnelProvider`, the reference relay (both ends), SSH remote forwarding, zero-account quick tunnels, and Azure Relay |
 | **Mediator** | Shiny.Mediator handlers published as endpoints — requests as JSON, commands as a status code, stream requests as Server-Sent Events, all bound at compile time |
+| **DocumentDb** | A document type as a complete HTTP resource, with filtering, cursor paging, sparse fieldsets, ETag/If-Match, RFC 7396 merge-patch, a live SSE tail, and server-side scopes enforced on both sides of a write |
+| **gRPC** | Unary, client-streaming, server-streaming and bidirectional methods, deadlines, per-message compression and status in trailers — plus gRPC-Web for browsers and anything on HTTP/1.1. Marshalling is yours, so nothing reflects over your messages |
+| **WebDAV** | RFC 4918 classes 1 and 2 over a directory — `PROPFIND`, `PROPPATCH`, `MKCOL`, `COPY`, `MOVE`, `LOCK`/`UNLOCK`, the `If` header and dead properties — so an app's storage mounts as a drive with no client to write |
 | **Lifecycle** | Start, stop and restart at runtime, serialized and idempotent, with an observable state — an embedded server gets toggled, not just booted |
 
 Everything shipping targets `net10.0` with the trim, AOT and single-file analyzers enabled, so

samples/Sample.Api/Program.cs

@@ -9,6 +9,7 @@
 using Shiny.Net.HttpServer.RateLimiting;
 using Shiny.Net.HttpServer.Security;
 using Shiny.Net.HttpServer.Tunneling;
+using Shiny.Net.HttpServer.WebDav;
 
 // ---------------------------------------------------------------------------
 // The whole ramp, in one app. Every tier below is optional and they all compose:
@@ -179,6 +180,33 @@
 
 app.OnGet("/boom", _ => throw new InvalidOperationException("deliberate failure"));
 
+// --- A directory, as a drive ---
+//
+// One call maps the twenty-two routes of an RFC 4918 class 1 & 2 WebDAV mount. Point Finder (Go →
+// Connect to Server) or Explorer (Map network drive) at http://localhost:8080/dav and the folder
+// below opens as a drive — no client to write, and no client to install.
+//
+// A browser GET of the same URL shows a plain HTML index, which is the quickest way to see it
+// working without mounting anything.
+var davRoot = Directory.CreateDirectory(Path.Combine(AppContext.BaseDirectory, "dav-root"));
+
+if (!File.Exists(Path.Combine(davRoot.FullName, "readme.txt")))
+    File.WriteAllText(Path.Combine(davRoot.FullName, "readme.txt"), "Edit me from your file manager.\n");
+
+app.MapWebDav("/dav", o =>
+{
+    o.RootPath = davRoot.FullName;
+    o.AllowWrite = true;
+    o.AllowDelete = true;
+    o.DisplayName = "Sample";
+});
+
+// Left open because this sample binds loopback and nothing else can reach it. A mount anyone else
+// can see needs both of these — a WebDAV client sends its password on every single request:
+//
+//   app.MapWebDav("/dav", …).RequireAuthorization();     // or .RequireAuthorizationForChanges()
+//   builder.Configure(o => o.Certificate = …);           // see /httpserver/tls/
+
 // --- Controlling the server from inside the app ---
 //
 // The server is an ordinary object: hold onto it and start, stop or restart it whenever. This

samples/Sample.Api/Sample.Api.csproj

@@ -14,6 +14,7 @@
     <ItemGroup>
         <ProjectReference Include="../../src/Shiny.Net.HttpServer/Shiny.Net.HttpServer.csproj"/>
         <ProjectReference Include="../../src/Shiny.Net.HttpServer.Jwt/Shiny.Net.HttpServer.Jwt.csproj"/>
+        <ProjectReference Include="../../src/Shiny.Net.HttpServer.WebDav/Shiny.Net.HttpServer.WebDav.csproj"/>
         <ProjectReference Include="../../src/Shiny.Net.HttpServer.SourceGenerators/Shiny.Net.HttpServer.SourceGenerators.csproj"
                           OutputItemType="Analyzer"
                           ReferenceOutputAssembly="false"/>

samples/Sample.Maui/MauiProgram.cs

@@ -8,6 +8,7 @@
 using Shiny.Net.HttpServer.Security;
 using Shiny.Net.HttpServer.Ssh;
 using Shiny.Net.HttpServer.StaticFiles;
+using Shiny.Net.HttpServer.WebDav;
 
 namespace Sample.Maui;
 
@@ -125,6 +126,23 @@ public static MauiApp CreateMauiApp()
                     o.AllowWrite = true;
                     o.AllowDelete = true;
                 });
+
+                // The same directory again, over WebDAV — and the difference is who the client is.
+                // /files is a JSON API for a script; this is the protocol a desktop already speaks,
+                // so the phone's storage opens as a drive in Finder or Windows Explorer with nothing
+                // installed on either end. Point them at http://<device>:<port>/dav and sign in with
+                // the same account as everything else.
+                //
+                // Locking is left on, and that is not a detail: Finder and the Windows redirector
+                // both check for DAV class 2 at mount time and mount read-only without it, however
+                // much AllowWrite allows.
+                server.MapWebDav("/dav", o =>
+                {
+                    o.RootPath = FileSystem.AppDataDirectory;
+                    o.AllowWrite = true;
+                    o.AllowDelete = true;
+                    o.DisplayName = DeviceInfo.Name;
+                });
             },
 
             // Started by the UI instead, so the app does not open a port before anyone asked it to.

samples/Sample.Maui/Pages/ServerPage.xaml

@@ -51,6 +51,12 @@
                     <Label Text="{Binding McpUrl, TargetNullValue='Server not started'}"
                            LineBreakMode="CharacterWrap" />
 
+                    <!-- The WebDAV mount. Finder: Go → Connect to Server. Explorer: Map network
+                         drive. Same server, same password — the app's storage as a drive. -->
+                    <Label Text="WebDAV mount" TextColor="Gray" Margin="0,6,0,0" />
+                    <Label Text="{Binding WebDavUrl, TargetNullValue='Server not started'}"
+                           LineBreakMode="CharacterWrap" />
+
                     <HorizontalStackLayout Spacing="8" Margin="0,6,0,0">
                         <Label Text="Requests served:" />
                         <Label Text="{Binding RequestCount}" FontAttributes="Bold" />

samples/Sample.Maui/Sample.Maui.csproj

@@ -102,6 +102,7 @@
 		<ProjectReference Include="../../src/Shiny.Net.HttpServer/Shiny.Net.HttpServer.csproj" />
 		<ProjectReference Include="../../src/Shiny.Net.HttpServer.Ssh/Shiny.Net.HttpServer.Ssh.csproj" />
 		<ProjectReference Include="../../src/Shiny.Net.HttpServer.Mcp/Shiny.Net.HttpServer.Mcp.csproj" />
+		<ProjectReference Include="../../src/Shiny.Net.HttpServer.WebDav/Shiny.Net.HttpServer.WebDav.csproj" />
 	</ItemGroup>
 
 	<!-- The shared page is embedded rather than shipped as a MauiAsset, so one file serves from

samples/Sample.Maui/ViewModels/ServerViewModel.cs

@@ -42,11 +42,13 @@ IMainThread mainThread
     [NotifyPropertyChangedFor(nameof(HasPublicUrl))]
     [NotifyPropertyChangedFor(nameof(CanStopSharing))]
     [NotifyPropertyChangedFor(nameof(McpUrl))]
+    [NotifyPropertyChangedFor(nameof(WebDavUrl))]
     string? publicUrl;
 
     /// <summary>The address on this Wi-Fi network. Works with no internet at all.</summary>
     [ObservableProperty]
     [NotifyPropertyChangedFor(nameof(McpUrl))]
+    [NotifyPropertyChangedFor(nameof(WebDavUrl))]
     string? localUrl;
 
     [ObservableProperty]
@@ -74,6 +76,18 @@ IMainThread mainThread
         ? $"{url.TrimEnd('/')}/mcp"
         : null;
 
+    /// <summary>
+    /// What to type into Finder's "Connect to Server" or Explorer's "Map network drive".
+    /// <para>
+    /// The LAN address first, the opposite way round from <see cref="McpUrl"/>. A mounted drive is
+    /// a long-lived connection that sends the password on every request, so the one that stays on
+    /// the Wi-Fi is the one to offer — the tunnel is cleartext HTTP to a shared host.
+    /// </para>
+    /// </summary>
+    public string? WebDavUrl => (this.LocalUrl ?? this.PublicUrl) is { Length: > 0 } url
+        ? $"{url.TrimEnd('/')}/dav"
+        : null;
+
     /// <summary>
     /// Whether there is anything to stop — which includes a share still being opened.
     /// <para>